$ rpki-client -vvvf rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/2EF9180CCBD211F0B173C128C4F9AE02.roa File: 2EF9180CCBD211F0B173C128C4F9AE02.roa (raw, json) Hash identifier: m293MzTEWZiAF5PWcB1uJIBFUz6Ip96TCnY4Lfwrt54= Subject key identifier: 6E:B4:CE:26:D2:3C:E0:0C:34:AD:6C:F7:BC:49:BE:C9:61:DB:89:95 Certificate issuer: /CN=A91300DF/serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F Certificate serial: A1 Authority key identifier: FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/2EF9180CCBD211F0B173C128C4F9AE02.roa Signing time: Tue 25 Aug 2026 07:57:49 +0000 ROA not before: Tue 25 Aug 2026 07:57:49 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 10131 IP address blocks: 202.65.32.0/19 maxlen: 19 202.65.32.0/20 maxlen: 20 202.65.32.0/21 maxlen: 21 202.65.32.0/24 maxlen: 24 202.65.33.0/24 maxlen: 24 202.65.34.0/24 maxlen: 24 202.65.40.0/21 maxlen: 21 202.65.40.0/24 maxlen: 24 202.65.41.0/24 maxlen: 24 202.65.42.0/24 maxlen: 24 202.65.43.0/24 maxlen: 24 202.65.46.0/24 maxlen: 24 202.65.48.0/20 maxlen: 20 202.65.48.0/21 maxlen: 21 202.65.48.0/24 maxlen: 24 202.65.52.0/24 maxlen: 24 202.65.56.0/21 maxlen: 21 202.65.57.0/24 maxlen: 24 202.65.58.0/24 maxlen: 24 202.65.59.0/24 maxlen: 24 202.65.60.0/24 maxlen: 24 202.65.61.0/24 maxlen: 24 202.65.62.0/24 maxlen: 24 202.65.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.crl rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91300DF, serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F Validity Not Before: Aug 25 07:57:49 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a8d4afd-d2e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ef:30:97:72:d8:56:24:02:5c:8d:41:60:24: 0a:f3:e4:e9:f8:17:4c:94:bc:6c:fe:23:96:4e:e5: 53:f1:e8:05:01:2a:78:f6:5c:9f:40:31:e9:80:26: 2d:13:1f:8c:92:6d:ce:3c:ee:0c:a5:18:ca:95:da: 03:34:8d:29:ed:ee:cc:43:23:65:f6:63:1c:cf:26: 1d:59:01:c6:d7:91:dc:46:d6:a1:ee:cd:a8:43:2a: 79:07:77:ab:3b:d9:eb:02:ee:b2:bd:3e:a5:66:4f: 97:f4:14:5e:97:17:c4:f2:ce:dd:08:d8:02:4d:56: 27:15:33:d3:87:c4:17:59:ce:e0:93:88:8a:aa:5a: 61:c1:a5:86:9d:4b:e1:1b:2f:ff:25:28:83:9f:39: 40:0b:74:91:64:c8:eb:d8:c0:bf:f2:80:cd:10:32: a2:f1:30:68:d7:e5:72:d7:e9:da:c8:9b:0c:ee:67: 87:ac:2f:04:12:3d:f1:14:83:21:4a:a6:77:f5:6c: b5:93:c8:0e:c7:8f:2c:51:70:aa:68:41:54:01:a4: 93:ce:d9:ae:fc:f6:07:60:2e:0a:31:a0:f7:e8:51: 62:af:12:e9:0f:21:ae:97:48:ce:2c:2b:7c:fc:7b: 84:c9:cc:d5:a6:67:e6:7f:6e:55:6f:dd:f2:e0:7e: d3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B4:CE:26:D2:3C:E0:0C:34:AD:6C:F7:BC:49:BE:C9:61:DB:89:95 X509v3 Authority Key Identifier: keyid:FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/2EF9180CCBD211F0B173C128C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.65.32.0/19 Signature Algorithm: sha256WithRSAEncryption bf:62:f8:35:9a:ad:d4:b3:a1:24:59:eb:f9:5f:bd:e0:08:1e: 2d:b7:cf:71:f9:50:25:cc:6c:ff:c1:9c:cb:a3:c8:28:e7:80: 78:42:e8:43:0b:80:bd:37:47:bd:8e:fc:9e:c1:0b:78:c2:a8: 2f:18:29:68:2a:cf:a3:4f:1a:32:cf:8d:59:9b:e6:80:bf:7b: e3:4b:3c:a5:16:d5:48:d7:88:59:78:ff:02:d4:c4:d9:09:1f: 1e:a5:b0:b5:a4:d3:e5:a9:0b:9f:0b:73:b4:de:e6:e3:90:dc: 8f:7e:61:4c:03:82:9a:e0:07:21:9d:3b:ee:b6:d5:a1:83:07: ef:19:2d:61:80:c1:80:8e:41:0e:47:09:82:0a:9b:9e:38:75: 04:b2:16:d4:02:90:2c:6d:fa:97:49:10:85:6b:41:08:17:b1: 9a:35:ea:43:41:a7:35:e8:d2:a7:68:34:d3:53:84:9a:3a:0a: ac:39:06:e1:19:fe:ce:b3:e4:0f:b5:f2:73:19:4d:9c:ef:61: 7e:16:ac:7a:34:a1:f0:26:16:47:d1:9b:4a:20:52:b0:51:26: 1c:dd:18:08:47:30:44:8d:54:66:7e:2b:24:ee:f5:1d:f1:09: a7:68:3e:7c:d0:e1:9c:32:00:c0:6f:90:b7:9d:d1:52:e1:41: e7:9f:ac:e7 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAwREYxMTAvBgNVBAUTKEZCNDcxRjg0MTMwODlFRDcwMUJEQUI0MEFFNjNDNzg4 RjUyNkFCNkYwHhcNMjYwODI1MDc1NzQ5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YThkNGFmZC1kMmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAku8wl3LYViQCXI1BYCQK8+Tp+BdMlLxs/iOWTuVT8egFASp49lyfQDHpgCYt Ex+Mkm3OPO4MpRjKldoDNI0p7e7MQyNl9mMczyYdWQHG15HcRtah7s2oQyp5B3er O9nrAu6yvT6lZk+X9BRelxfE8s7dCNgCTVYnFTPTh8QXWc7gk4iKqlphwaWGnUvh Gy//JSiDnzlAC3SRZMjr2MC/8oDNEDKi8TBo1+Vy1+nayJsM7meHrC8EEj3xFIMh SqZ39Wy1k8gOx48sUXCqaEFUAaSTztmu/PYHYC4KMaD36FFirxLpDyGul0jOLCt8 /HuEyczVpmfmf25Vb93y4H7TkwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFG60zibS POAMNK1s97xJvslh24mVMB8GA1UdIwQYMBaAFPtHH4QTCJ7XAb2rQK5jx4j1Jqtv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDBERi8yNzc3OEYzOENC RDExMUYwQTc2RkZEMjZDNEY5QUUwMi8tMGNmaEJNSW50Y0J2YXRBcm1QSGlQVW1x MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0wY2ZoQk1JbnRjQnZhdEFybVBIaVBVbXEyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzAwREYvMjc3NzhGMzhDQkQxMTFGMEE3NkZGRDI2QzRGOUFFMDIvMkVGOTE4MEND QkQyMTFGMEIxNzNDMTI4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQFykEgMA0GCSqGSIb3DQEBCwUAA4IBAQC/Yvg1mq3Us6EkWev5X73g CB4tt89x+VAlzGz/wZzLo8go54B4QuhDC4C9N0e9jvyewQt4wqgvGCloKs+jTxoy z41Zm+aAv3vjSzylFtVI14hZeP8C1MTZCR8epbC1pNPlqQufC3O03ubjkNyPfmFM A4Ka4AchnTvuttWhgwfvGS1hgMGAjkEORwmCCpueOHUEshbUApAsbfqXSRCFa0EI F7GaNepDQac16NKnaDTTU4SaOgqsOQbhGf7Os+QPtfJzGU2c72F+Fqx6NKHwJhZH 0ZtKIFKwUSYc3RgIRzBEjVRmfisk7vUd8QmnaD580OGcMgDAb5C3ndFS4UHnn6zn -----END CERTIFICATE-----Generated at Wed Sep 23 08:05:32 2026 by rpki-client