$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/9FAF6F8A29DB11F1BFD4871E9B833773.roa File: 9FAF6F8A29DB11F1BFD4871E9B833773.roa (raw, json) Hash identifier: zdZwScXVAMNHJf/1wI64pbUMCQPblQfek4+QW6DA8h4= Subject key identifier: 64:27:B9:C8:29:CC:1D:CF:98:D3:D3:5B:C6:C7:CE:3C:F6:24:20:28 Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Certificate serial: 014F Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/9FAF6F8A29DB11F1BFD4871E9B833773.roa Signing time: Tue 28 Jul 2026 19:40:22 +0000 ROA not before: Tue 28 Jul 2026 19:40:22 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 30967 IP address blocks: 205.252.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Validity Not Before: Jul 28 19:40:22 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a6905a6-98a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:29:26:ac:05:e2:d1:3d:2a:ab:cc:78:78:99: 2a:35:7b:a7:fe:6a:a0:7e:2a:b7:57:71:f3:c8:c6: 43:58:b7:04:ef:73:ce:73:80:2c:f3:af:1b:30:bb: c5:df:b8:b2:8b:9b:74:83:2a:63:9d:b4:b9:f9:7a: bb:88:db:66:2f:61:e2:e1:f8:c7:be:45:11:7d:82: 68:72:46:20:69:24:0b:2a:8e:bb:a7:30:45:1b:9f: f5:98:6d:e1:aa:08:d7:71:45:c7:39:53:55:1b:26: 4e:3e:0e:a0:86:8a:d6:97:3f:48:d8:4d:5d:2e:a1: 4d:ec:c6:fa:ee:8d:ea:e9:8a:3c:10:a7:aa:4a:36: a4:99:0b:d8:71:26:87:d2:e2:2f:db:74:16:ec:71: 6d:92:b7:12:2c:09:ff:e2:0e:c2:56:b9:ba:35:8c: bf:52:f4:b6:25:af:45:4f:ce:5c:5e:01:83:c1:50: ff:0c:4a:4b:5d:28:66:25:99:e4:51:54:65:19:f7: 9f:c9:51:b1:7e:d3:3d:3a:ac:7c:e3:bf:45:d3:8a: ed:db:ed:cb:14:fb:58:21:23:59:a3:84:47:e1:c1: 37:3c:e4:0a:b0:fd:8c:9f:54:42:11:5c:98:a7:08: 27:a3:61:80:34:96:40:59:0e:a5:97:9d:b0:ca:16: 69:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:27:B9:C8:29:CC:1D:CF:98:D3:D3:5B:C6:C7:CE:3C:F6:24:20:28 X509v3 Authority Key Identifier: keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/9FAF6F8A29DB11F1BFD4871E9B833773.roa sbgp-ipAddrBlock: critical IPv4: 205.252.233.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:a5:80:36:e0:3f:4a:a7:79:76:22:09:db:fd:01:c0:49:5f: 35:59:47:62:e9:73:f3:f7:26:4b:66:d3:ef:19:08:0b:ee:ef: d8:c2:38:90:37:bf:e3:14:bf:46:a7:07:4f:ea:e8:43:b0:74: 59:98:fb:18:5d:da:4c:0c:8f:17:34:73:b8:c6:da:bd:d8:cb: 12:ff:07:41:e0:f6:aa:08:68:1b:e6:58:14:d6:de:de:2f:f6: 8c:01:a4:b3:4a:9b:24:3c:a3:b7:c1:ba:4d:6e:48:4f:8c:b7: 6c:50:60:4c:a1:8b:46:9b:44:a8:71:19:e6:ec:fa:cb:fb:24: 4e:f6:fe:ee:41:70:30:ec:4b:05:b1:31:da:11:b9:e7:93:95: 5a:d1:d8:df:48:9f:fe:ac:a5:83:36:25:d8:95:9d:33:92:f6: fa:bf:e6:fe:ed:68:10:21:b6:4b:fb:46:cb:33:b6:45:29:9d: 2c:18:af:77:4d:14:47:49:1f:c5:4f:5d:1d:d1:1e:80:d2:d4: 5a:a9:6a:46:da:9c:22:e1:de:f2:a6:d5:60:3f:74:ce:df:df: ef:53:93:e3:79:c7:32:9b:57:5c:b7:93:77:cb:c3:71:e0:62: ee:d9:8f:29:77:b7:a0:fa:0a:7b:4a:7a:79:15:24:4c:57:d7: 64:f7:1f:bf -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0QTkxMTAvBgNVBAUTKDNEN0IxNUJENzdEOUI5NzRFMzczNThEQTc1NERGRUE5 MjkxRTY4M0EwHhcNMjYwNzI4MTk0MDIyWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY5MDVhNi05OGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlikmrAXi0T0qq8x4eJkqNXun/mqgfiq3V3HzyMZDWLcE73POc4As868bMLvF 37iyi5t0gypjnbS5+Xq7iNtmL2Hi4fjHvkURfYJockYgaSQLKo67pzBFG5/1mG3h qgjXcUXHOVNVGyZOPg6ghorWlz9I2E1dLqFN7Mb67o3q6Yo8EKeqSjakmQvYcSaH 0uIv23QW7HFtkrcSLAn/4g7CVrm6NYy/UvS2Ja9FT85cXgGDwVD/DEpLXShmJZnk UVRlGfefyVGxftM9Oqx8479F04rt2+3LFPtYISNZo4RH4cE3POQKsP2Mn1RCEVyY pwgno2GANJZAWQ6ll52wyhZp9QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGQnucgp zB3PmNPTW8bHzjz2JCAoMB8GA1UdIwQYMBaAFD17Fb132bl043NY2nVN/qkpHmg6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9GRDM3MkU0QTI5 NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS9QWHNWdlhmWnVYVGpjMWphZFUzLXFTa2Vh RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzA0QTkvRkQzNzJFNEEyOTQ1MTFGMUE3QUEzRUJEODRFRTUyOEUvOUZBRjZGOEEy OURCMTFGMUJGRDQ4NzFFOUI4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAzfzpMA0GCSqGSIb3DQEBCwUAA4IBAQA6pYA24D9Kp3l2Ignb/QHA SV81WUdi6XPz9yZLZtPvGQgL7u/YwjiQN7/jFL9GpwdP6uhDsHRZmPsYXdpMDI8X NHO4xtq92MsS/wdB4PaqCGgb5lgU1t7eL/aMAaSzSpskPKO3wbpNbkhPjLdsUGBM oYtGm0SocRnm7PrL+yRO9v7uQXAw7EsFsTHaEbnnk5Va0djfSJ/+rKWDNiXYlZ0z kvb6v+b+7WgQIbZL+0bLM7ZFKZ0sGK93TRRHSR/FT10d0R6A0tRaqWpG2pwi4d7y ptVgP3TO39/vU5Pjeccym1dct5N3y8Nx4GLu2Y8pd7eg+gp7Snp5FSRMV9dk9x+/ -----END CERTIFICATE-----Generated at Wed Jul 29 00:51:50 2026 by rpki-client