$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/C1B9CC1239DE11F0B191D94AC4F9AE02.roa File: C1B9CC1239DE11F0B191D94AC4F9AE02.roa (raw, json) Hash identifier: BaXfu3VAqveeBtOVHAJi2Rn06Z7uHP5S/VkaBKttsjU= Subject key identifier: 19:BB:7D:2A:C6:85:C2:F4:B9:1F:16:24:B4:7F:05:29:54:48:EC:77 Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Certificate serial: 2840 Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/C1B9CC1239DE11F0B191D94AC4F9AE02.roa Signing time: Tue 26 May 2026 16:22:28 +0000 ROA not before: Tue 26 May 2026 16:22:28 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 9386 IP address blocks: 202.128.48.0/22 maxlen: 22 202.128.52.0/22 maxlen: 22 202.128.56.0/22 maxlen: 22 202.128.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 15:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10304 (0x2840) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Validity Not Before: May 26 16:22:28 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a15c8c4-3d11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:78:84:50:6f:d7:d0:2b:ea:06:a8:68:1b:28: cb:25:4f:1b:15:99:40:f5:8f:0e:37:06:bd:d4:c8: d3:e1:b7:49:c7:71:fa:8a:96:ba:fe:66:8d:6a:c5: 5c:5c:e1:f4:96:40:f6:41:e4:a8:47:bd:32:d2:44: 41:a7:6a:1b:14:5d:4e:f4:30:a1:bd:20:1a:5d:26: 1f:78:f4:4b:b7:35:f2:fd:4b:05:20:3c:b9:85:78: 6f:01:56:b1:9f:16:15:f0:dd:84:4f:76:75:4c:42: ca:7e:ac:bc:b2:7d:69:e6:57:ff:5f:bc:5f:e8:e1: f6:f6:ae:7c:d2:7f:7d:c6:67:4c:42:91:fd:13:b4: 5c:7a:37:9c:c1:71:40:24:4c:82:36:23:db:ca:14: 33:89:8d:4b:32:71:ad:f8:46:9c:d5:d9:c8:43:e3: 78:a1:79:53:c9:c5:1d:b6:3d:cb:36:ce:ce:43:31: 90:16:33:7f:18:2a:cb:e3:8b:61:e3:ed:fd:9d:33: 59:7c:31:27:bc:74:7a:0c:9c:17:ff:6a:71:9d:c6: d3:b3:98:b8:80:a9:61:69:b8:c7:91:d1:fa:96:2d: fe:e9:b3:da:93:89:a7:0b:fa:12:96:a8:bd:32:b1: ef:ba:73:2a:b1:7e:f5:e6:96:c5:1d:54:38:bb:99: 2e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:BB:7D:2A:C6:85:C2:F4:B9:1F:16:24:B4:7F:05:29:54:48:EC:77 X509v3 Authority Key Identifier: keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/C1B9CC1239DE11F0B191D94AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.128.48.0/20 Signature Algorithm: sha256WithRSAEncryption 0c:8e:07:70:6e:f0:0e:7f:e2:33:03:0d:20:92:e8:82:b0:8d: a4:62:28:b9:8e:eb:5c:42:bc:d9:64:d3:04:c1:1b:da:19:8f: 3b:57:6f:00:69:23:df:d4:94:fd:88:8b:c0:2a:d7:bc:13:9f: c3:b4:8b:13:fd:74:db:58:b6:3e:a8:a6:80:3d:14:c2:25:ed: ed:94:90:a2:88:a9:3c:f7:69:d5:48:e0:ab:b8:2c:6c:6a:eb: dc:8b:bb:79:da:aa:8b:5a:3a:31:a0:92:7f:eb:4f:95:ef:da: f7:0c:32:0a:d4:8c:a5:1b:6c:7c:2a:85:f9:71:a6:d3:95:72: e8:f9:e6:84:18:2b:c8:23:27:71:ca:37:a8:4d:98:c1:1e:7d: f0:7e:9f:f4:53:b0:2e:9d:4e:17:2e:cf:b6:17:9b:a1:17:70: 95:c9:ab:61:eb:a8:25:b1:df:b7:df:5f:09:c3:dd:e2:2b:fc: 17:0c:d8:64:17:cf:66:22:fa:fc:dc:64:77:20:66:79:59:24: e3:4a:ba:38:cc:01:2f:ba:f1:b9:6a:cf:90:6d:41:00:8f:96: b1:61:66:8d:20:90:1e:74:d0:f4:27:8f:9a:f3:a2:e4:c6:59: 9c:63:c5:d2:ac:9d:7a:47:78:82:bb:86:4b:85:4c:07:c9:43: 58:da:4d:10 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICKEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkQxMTAvBgNVBAUTKDRFMTBGMTNGMjk1RkJGMkIzNTlDODREREQxNjUxQkM4 NTFBQThBRjUwHhcNMjYwNTI2MTYyMjI4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTE1YzhjNC0zZDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7XiEUG/X0CvqBqhoGyjLJU8bFZlA9Y8ONwa91MjT4bdJx3H6ipa6/maNasVc XOH0lkD2QeSoR70y0kRBp2obFF1O9DChvSAaXSYfePRLtzXy/UsFIDy5hXhvAVax nxYV8N2ET3Z1TELKfqy8sn1p5lf/X7xf6OH29q580n99xmdMQpH9E7RcejecwXFA JEyCNiPbyhQziY1LMnGt+Eac1dnIQ+N4oXlTycUdtj3LNs7OQzGQFjN/GCrL44th 4+39nTNZfDEnvHR6DJwX/2pxncbTs5i4gKlhabjHkdH6li3+6bPak4mnC/oSlqi9 MrHvunMqsX715pbFHVQ4u5kugwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBm7fSrG hcL0uR8WJLR/BSlUSOx3MB8GA1UdIwQYMBaAFE4Q8T8pX78rNZyE3dFlG8hRqor1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9FMUVGRDlCNkRF Q0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5czFuSVRkMFdVYnlGR3Fp dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRHhQeWxmdnlzMW5JVGQwV1VieUZHcWl2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjc1RkQvRTFFRkQ5QjZERUNFMTFFNEExNEYwMDY4QzRGOUFFMDIvQzFCOUNDMTIz OURFMTFGMEIxOTFEOTRBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEyoAwMA0GCSqGSIb3DQEBCwUAA4IBAQAMjgdwbvAOf+IzAw0gkuiC sI2kYii5jutcQrzZZNMEwRvaGY87V28AaSPf1JT9iIvAKte8E5/DtIsT/XTbWLY+ qKaAPRTCJe3tlJCiiKk892nVSOCruCxsauvci7t52qqLWjoxoJJ/60+V79r3DDIK 1IylG2x8KoX5cabTlXLo+eaEGCvIIydxyjeoTZjBHn3wfp/0U7AunU4XLs+2F5uh F3CVyath66glsd+3318Jw93iK/wXDNhkF89mIvr83GR3IGZ5WSTjSro4zAEvuvG5 as+QbUEAj5axYWaNIJAedND0J4+a86LkxlmcY8XSrJ16R3iCu4ZLhUwHyUNY2k0Q -----END CERTIFICATE-----Generated at Sat Jun 13 21:26:59 2026 by rpki-client