$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/2D9AAA0629CF11F1ADED11F996833773.roa File: 2D9AAA0629CF11F1ADED11F996833773.roa (raw, json) Hash identifier: EYgOLSFFeoawzbZSo+omPv5lcZ4eiI6uUiQ5dR5O4Iw= Subject key identifier: D5:5C:CB:24:A6:B9:7C:F5:D6:9D:3E:D7:53:AB:61:EF:BE:02:41:A3 Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Certificate serial: 0155 Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/2D9AAA0629CF11F1ADED11F996833773.roa Signing time: Tue 28 Jul 2026 19:40:41 +0000 ROA not before: Tue 28 Jul 2026 19:40:41 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 36734 IP address blocks: 63.216.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Validity Not Before: Jul 28 19:40:41 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a6905b9-a657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a2:92:6b:44:3d:e5:92:6c:d7:f5:dd:34:06: c5:56:20:d8:4c:92:e3:38:c8:83:6f:20:a8:2d:6d: ea:88:b1:7d:ef:fa:18:72:40:0a:f9:5f:a8:e3:d9: 94:0d:f5:9d:e8:5e:03:a6:d1:eb:07:e7:de:b1:23: 17:86:20:18:da:2c:30:61:b0:ae:82:14:e7:cb:b1: ce:42:d0:84:15:e3:37:93:ce:dd:a9:e3:a8:bc:9e: ca:42:26:4a:4d:ee:3f:fc:c1:d8:39:5e:58:1c:b5: f5:4d:b9:85:e2:90:24:81:53:99:28:1b:d0:1d:15: 0d:75:e9:b7:31:3d:9c:02:85:5f:36:33:d8:2e:15: 1b:24:32:45:e3:b9:24:1a:b9:24:95:a1:f2:cb:37: 47:a3:9c:3a:5c:27:6d:92:e3:d6:28:77:18:4a:47: bd:2f:b0:be:6e:68:f8:f5:e1:f0:ad:65:47:12:dd: 95:3f:6a:05:b8:25:22:da:44:02:70:1e:4a:26:75: 50:09:85:fb:56:d6:c1:ec:f3:49:83:a3:cf:32:0d: 9d:59:05:8f:d6:3a:16:0a:71:34:45:58:5f:44:e7: 85:0b:70:b8:4f:06:a5:d0:98:c6:f4:2b:2d:93:1e: dc:d3:7b:14:7b:9e:3a:9b:83:62:8a:04:b4:7a:9e: 43:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:5C:CB:24:A6:B9:7C:F5:D6:9D:3E:D7:53:AB:61:EF:BE:02:41:A3 X509v3 Authority Key Identifier: keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/2D9AAA0629CF11F1ADED11F996833773.roa sbgp-ipAddrBlock: critical IPv4: 63.216.64.0/21 Signature Algorithm: sha256WithRSAEncryption 51:27:b9:13:f8:a4:40:1d:87:50:6d:91:97:a5:dc:6f:dd:ac: 18:fa:8a:72:57:c4:fc:49:02:e9:56:8c:ec:3c:48:2d:97:df: bf:ff:b5:93:f1:2d:48:9f:75:7b:c9:06:70:0f:36:46:2e:ff: be:83:48:84:1c:e3:f5:28:65:86:3c:cd:92:28:4c:37:a4:92: 96:f3:53:da:6c:61:f7:01:70:8a:6a:42:83:f9:11:31:f8:2f: f0:42:51:b2:52:95:da:6d:2a:ac:f4:51:ea:0d:7f:2a:7d:38: 4d:a2:a6:34:bd:6e:6e:d2:a2:78:57:6a:24:7c:a8:8a:5d:59: 01:49:b2:bb:01:85:d2:be:99:5b:b9:fc:9b:b8:e5:69:8d:79: 7e:dc:ac:a1:83:71:ed:5d:1d:39:cd:e8:9f:65:b0:b4:2e:48: 25:d0:57:06:53:8a:7b:33:fd:70:1e:cb:70:86:c6:ce:3b:88: 16:58:2c:33:b0:f1:b2:be:35:dd:5b:51:c6:a6:f2:12:51:85: d0:43:c5:9c:65:fb:33:b5:6d:ec:e4:af:f5:38:2d:4d:42:f0: cd:bb:64:46:90:9a:11:4a:d7:d1:0c:30:59:0a:4c:77:42:56: 0e:9e:0d:d6:73:d2:c2:d7:71:c9:49:f6:9c:82:d7:9d:c2:3f: 16:c9:9e:56 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0QTkxMTAvBgNVBAUTKDNEN0IxNUJENzdEOUI5NzRFMzczNThEQTc1NERGRUE5 MjkxRTY4M0EwHhcNMjYwNzI4MTk0MDQxWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY5MDViOS1hNjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6KSa0Q95ZJs1/XdNAbFViDYTJLjOMiDbyCoLW3qiLF97/oYckAK+V+o49mU DfWd6F4DptHrB+fesSMXhiAY2iwwYbCughTny7HOQtCEFeM3k87dqeOovJ7KQiZK Te4//MHYOV5YHLX1TbmF4pAkgVOZKBvQHRUNdem3MT2cAoVfNjPYLhUbJDJF47kk GrkklaHyyzdHo5w6XCdtkuPWKHcYSke9L7C+bmj49eHwrWVHEt2VP2oFuCUi2kQC cB5KJnVQCYX7VtbB7PNJg6PPMg2dWQWP1joWCnE0RVhfROeFC3C4Twal0JjG9Cst kx7c03sUe546m4NiigS0ep5D4QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNVcyySm uXz11p0+11OrYe++AkGjMB8GA1UdIwQYMBaAFD17Fb132bl043NY2nVN/qkpHmg6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9GRDM3MkU0QTI5 NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS9QWHNWdlhmWnVYVGpjMWphZFUzLXFTa2Vh RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzA0QTkvRkQzNzJFNEEyOTQ1MTFGMUE3QUEzRUJEODRFRTUyOEUvMkQ5QUFBMDYy OUNGMTFGMUFERUQxMUY5OTY4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDP9hAMA0GCSqGSIb3DQEBCwUAA4IBAQBRJ7kT+KRAHYdQbZGXpdxv 3awY+opyV8T8SQLpVozsPEgtl9+//7WT8S1In3V7yQZwDzZGLv++g0iEHOP1KGWG PM2SKEw3pJKW81PabGH3AXCKakKD+REx+C/wQlGyUpXabSqs9FHqDX8qfThNoqY0 vW5u0qJ4V2okfKiKXVkBSbK7AYXSvplbufybuOVpjXl+3Kyhg3HtXR05zeifZbC0 Lkgl0FcGU4p7M/1wHstwhsbOO4gWWCwzsPGyvjXdW1HGpvISUYXQQ8WcZfsztW3s 5K/1OC1NQvDNu2RGkJoRStfRDDBZCkx3QlYOng3Wc9LC13HJSfacgtedwj8WyZ5W -----END CERTIFICATE-----Generated at Wed Jul 29 00:45:40 2026 by rpki-client