$ rpki-client -vvf rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/9BC1C0762BD411EC81C16155C4F9AE02.roa File: 9BC1C0762BD411EC81C16155C4F9AE02.roa (raw, json) Hash identifier: AvgU/x0IyYviikbfwDijwjzZaLShsqOZi+8zbsvAZKA= Subject key identifier: D7:AF:6D:B1:F7:87:29:D6:C1:0E:2C:6F:CA:90:81:0C:1A:14:B7:3F Certificate issuer: /CN=A914E91C/serialNumber=1A6123075694B82218AA2FC76F615B4025596156 Certificate serial: 059A Authority key identifier: 1A:61:23:07:56:94:B8:22:18:AA:2F:C7:6F:61:5B:40:25:59:61:56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/9BC1C0762BD411EC81C16155C4F9AE02.roa Signing time: Mon 27 Jul 2026 00:45:18 +0000 ROA not before: Mon 27 Jul 2026 00:45:18 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 140724 IP address blocks: 203.20.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.crl rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 22:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1434 (0x59a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E91C, serialNumber=1A6123075694B82218AA2FC76F615B4025596156 Validity Not Before: Jul 27 00:45:18 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a66aa1e-4d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0b:68:0c:2d:45:67:0c:42:47:ae:e5:33:8a: 73:12:70:e1:be:c3:d9:eb:33:62:6f:b7:3f:fd:1f: af:be:8a:bd:96:bc:31:03:39:51:cf:72:e7:52:9c: b9:35:a2:c3:2a:7e:2a:c4:49:94:e8:f4:93:0b:13: 95:fa:5f:40:25:69:fe:99:56:c5:87:28:a3:9f:b7: d0:5c:b9:5b:52:f8:ed:69:14:6e:77:7b:8f:7f:7c: 88:a2:fd:11:92:7e:b7:47:44:5e:44:8e:b2:d5:f2: 7f:a2:87:3d:48:10:75:0a:01:3c:54:4a:ff:69:59: 50:d8:81:8e:38:ec:86:60:ab:eb:ef:1d:48:c4:4a: 6a:5c:c1:09:d0:4e:41:1d:2a:7c:87:64:40:6e:44: 9c:75:17:3e:9b:25:8b:21:43:ee:80:d4:ae:0b:68: 8d:a0:6a:2c:d4:10:d7:48:37:50:7c:80:b2:fc:90: 74:4a:ee:2e:4a:b8:98:97:45:a9:d2:ea:8f:9b:41: 8f:e4:11:86:6c:60:de:14:60:6a:92:53:b7:21:b4: aa:5d:cb:d3:da:a9:96:74:da:4c:f8:37:39:8a:6f: 54:35:a3:bc:1e:a7:ad:e7:de:fa:d9:02:56:36:93: d2:e2:cd:78:e1:d3:6b:5c:1b:f4:52:cd:2a:ba:83: 8d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AF:6D:B1:F7:87:29:D6:C1:0E:2C:6F:CA:90:81:0C:1A:14:B7:3F X509v3 Authority Key Identifier: keyid:1A:61:23:07:56:94:B8:22:18:AA:2F:C7:6F:61:5B:40:25:59:61:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/9BC1C0762BD411EC81C16155C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.20.20.0/22 Signature Algorithm: sha256WithRSAEncryption 56:cd:62:07:dd:47:fe:f5:32:4a:8e:de:46:73:53:39:e8:bd: 1c:5e:7a:80:55:91:d1:22:95:c3:ea:81:8d:2e:d7:f0:fe:36: ea:96:14:78:93:cd:72:f8:95:0c:f6:6b:85:f1:09:7b:97:87: 7e:13:c9:10:ef:f0:53:38:59:23:88:a3:82:c4:06:05:ef:3d: b8:75:aa:dc:58:03:84:a8:29:4e:c6:2d:d0:f0:2d:71:d9:6f: 5e:b4:b1:57:b0:cd:6c:f8:b0:80:7f:42:b5:48:98:a9:77:8c: e5:f4:18:2f:17:82:74:8f:76:34:aa:37:91:a4:a7:47:94:ce: 72:57:7f:60:a6:08:d1:d4:b7:ce:7b:19:20:5a:63:ff:b5:c0: f4:27:04:57:9f:8f:0f:f4:a8:30:8c:f8:62:a6:90:0c:c8:28: 3d:14:4f:17:da:95:43:00:de:4c:ce:65:dc:c3:14:56:6b:a9: 52:9c:40:26:53:4a:f5:ff:00:91:40:ce:b9:79:79:0b:3f:2d: e2:77:2c:03:26:07:c5:f3:2f:7f:ec:d3:f9:16:50:07:c2:09: 34:4d:e9:79:9f:42:9f:de:68:d9:80:c3:d3:67:5e:fd:d5:b4: 89:0d:2a:5b:29:80:44:c3:56:84:56:5b:2c:f7:9b:24:5b:73: 31:a0:81:1b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU5MUMxMTAvBgNVBAUTKDFBNjEyMzA3NTY5NEI4MjIxOEFBMkZDNzZGNjE1QjQw MjU1OTYxNTYwHhcNMjYwNzI3MDA0NTE4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY2YWExZS00ZDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgtoDC1FZwxCR67lM4pzEnDhvsPZ6zNib7c//R+vvoq9lrwxAzlRz3LnUpy5 NaLDKn4qxEmU6PSTCxOV+l9AJWn+mVbFhyijn7fQXLlbUvjtaRRud3uPf3yIov0R kn63R0ReRI6y1fJ/ooc9SBB1CgE8VEr/aVlQ2IGOOOyGYKvr7x1IxEpqXMEJ0E5B HSp8h2RAbkScdRc+myWLIUPugNSuC2iNoGos1BDXSDdQfICy/JB0Su4uSriYl0Wp 0uqPm0GP5BGGbGDeFGBqklO3IbSqXcvT2qmWdNpM+Dc5im9UNaO8Hqet59762QJW NpPS4s144dNrXBv0Us0quoONSwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNevbbH3 hynWwQ4sb8qQgQwaFLc/MB8GA1UdIwQYMBaAFBphIwdWlLgiGKovx29hW0AlWWFW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTkxQy9CQzI2M0E4RTJC RDExMUVDQURERkEzMTFDNEY5QUUwMi9HbUVqQjFhVXVDSVlxaV9IYjJGYlFDVlpZ VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dtRWpCMWFVdUNJWXFpX0hiMkZiUUNWWllWWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEU5MUMvQkMyNjNBOEUyQkQxMTFFQ0FEREZBMzExQzRGOUFFMDIvOUJDMUMwNzYy QkQ0MTFFQzgxQzE2MTU1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCyxQUMA0GCSqGSIb3DQEBCwUAA4IBAQBWzWIH3Uf+9TJKjt5Gc1M5 6L0cXnqAVZHRIpXD6oGNLtfw/jbqlhR4k81y+JUM9muF8Ql7l4d+E8kQ7/BTOFkj iKOCxAYF7z24darcWAOEqClOxi3Q8C1x2W9etLFXsM1s+LCAf0K1SJipd4zl9Bgv F4J0j3Y0qjeRpKdHlM5yV39gpgjR1LfOexkgWmP/tcD0JwRXn48P9KgwjPhippAM yCg9FE8X2pVDAN5MzmXcwxRWa6lSnEAmU0r1/wCRQM65eXkLPy3idywDJgfF8y9/ 7NP5FlAHwgk0Tel5n0Kf3mjZgMPTZ1791bSJDSpbKYBEw1aEVlss95skW3MxoIEb -----END CERTIFICATE-----Generated at Wed Jul 29 00:55:44 2026 by rpki-client