$ rpki-client -vvvf rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/DC8456B8B5B911F1B8B6BEBE3E11F970.roa File: DC8456B8B5B911F1B8B6BEBE3E11F970.roa (raw, json) Hash identifier: BCImpyKSjQUJbhaMwVoqKVNp3GpPs3DeNfjpc6WNC14= Subject key identifier: 3A:5F:8D:66:A6:F1:A4:4A:E4:A9:89:F0:64:C2:2E:62:A7:90:FA:0D Certificate issuer: /CN=A91599B5/serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Certificate serial: F9 Authority key identifier: B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/DC8456B8B5B911F1B8B6BEBE3E11F970.roa Signing time: Mon 21 Sep 2026 12:42:10 +0000 ROA not before: Mon 21 Sep 2026 12:42:10 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 137526 IP address blocks: 202.1.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 12:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91599B5, serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Validity Not Before: Sep 21 12:42:10 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6ab12622-87fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e7:f2:6e:e9:0d:c3:a0:a1:0e:85:95:22:f9: 6c:29:45:f6:66:b6:46:62:75:d3:d9:30:42:dd:58: 3b:3e:97:29:45:3c:64:2d:9e:94:59:b0:f0:d8:15: 2e:9b:51:7f:25:3a:4c:27:e9:81:16:0a:3a:87:41: 94:c0:8e:28:5f:30:36:4b:7c:dd:d7:76:2a:d0:75: 2d:3b:5d:f5:01:1a:c8:2c:d4:49:f1:50:c7:8b:80: 62:f9:00:7e:c7:9e:3b:29:b3:ac:35:e6:6c:ea:08: 90:c9:7f:b2:08:51:28:b2:33:cf:e1:70:80:19:ff: 9f:28:c8:57:9f:1e:96:72:57:fc:f7:8c:76:95:56: 8d:d8:e6:8c:8d:3e:c5:76:80:59:bb:12:34:c4:b3: da:2d:5b:56:7a:95:44:2b:7b:5f:8d:81:f2:23:c5: 60:52:f6:33:e3:ef:67:83:c5:65:3c:e4:dc:06:c3: 7f:ad:30:42:76:d5:5d:5f:3c:02:b9:bc:57:bc:63: 6b:2a:82:4b:9b:83:a7:48:b8:c4:ff:24:c4:43:12: 95:a5:72:a4:c6:ad:80:19:83:8d:b7:8d:64:16:58: 97:2d:1c:f8:b5:17:55:16:3e:d6:c3:b2:cd:18:4f: 4c:f4:9c:07:7b:cb:55:87:47:6f:95:22:f9:d9:c9: 08:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:5F:8D:66:A6:F1:A4:4A:E4:A9:89:F0:64:C2:2E:62:A7:90:FA:0D X509v3 Authority Key Identifier: keyid:B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/DC8456B8B5B911F1B8B6BEBE3E11F970.roa sbgp-ipAddrBlock: critical IPv4: 202.1.29.0/24 Signature Algorithm: sha256WithRSAEncryption 34:74:85:81:7a:85:1e:2e:1c:5b:a8:cf:1b:01:68:c6:e8:cc: ab:c3:a6:b2:07:86:55:c7:67:26:6f:87:55:4a:10:2a:50:ff: 0a:99:4c:90:e6:80:c4:d2:a1:10:46:75:2c:4b:89:6f:07:6c: a1:ff:e9:1c:e0:d8:d6:19:28:15:ad:67:cf:d0:b1:0a:40:d7: 84:f4:b5:d1:c1:22:aa:83:8a:66:c4:9e:0d:28:18:ce:5d:95: 07:78:46:2e:44:a4:bd:fd:f6:22:a2:cc:13:80:33:aa:63:79: b0:13:fc:71:2a:ef:02:e2:31:ff:2a:31:b3:5f:6a:05:bf:e2: 0c:2b:f0:75:82:d7:cd:70:c7:79:fb:a4:d9:42:41:b9:5a:69: c6:db:bf:bc:1c:76:95:f1:f4:0d:5f:a4:49:64:9b:6d:52:82: f7:6a:c6:41:eb:35:79:ac:a2:a4:66:dc:25:82:a6:d7:1b:e1: a7:a2:f8:09:0c:21:c6:59:00:d5:64:5d:08:0c:0f:5c:ec:5d: f2:61:b5:2e:9d:29:37:11:f3:83:3b:a3:9b:4c:ee:41:e1:00: a9:c6:d7:f0:e7:3e:31:0a:c3:30:60:7e:d4:e0:51:e8:7a:66: 07:90:22:b4:39:be:b3:e1:82:70:d9:6f:4d:a8:10:36:72:2c: 1b:f5:b9:95 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk5QjUxMTAvBgNVBAUTKEI1MkFFMTgzNkM2MTE5M0RFQThCQTVCRTlENzFCOENC QjM0MzAzOTgwHhcNMjYwOTIxMTI0MjEwWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWIxMjYyMi04N2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOfybukNw6ChDoWVIvlsKUX2ZrZGYnXT2TBC3Vg7PpcpRTxkLZ6UWbDw2BUu m1F/JTpMJ+mBFgo6h0GUwI4oXzA2S3zd13Yq0HUtO131ARrILNRJ8VDHi4Bi+QB+ x547KbOsNeZs6giQyX+yCFEosjPP4XCAGf+fKMhXnx6Wclf894x2lVaN2OaMjT7F doBZuxI0xLPaLVtWepVEK3tfjYHyI8VgUvYz4+9ng8VlPOTcBsN/rTBCdtVdXzwC ubxXvGNrKoJLm4OnSLjE/yTEQxKVpXKkxq2AGYONt41kFliXLRz4tRdVFj7Ww7LN GE9M9JwHe8tVh0dvlSL52ckIHQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDpfjWam 8aRK5KmJ8GTCLmKnkPoNMB8GA1UdIwQYMBaAFLUq4YNsYRk96oulvp1xuMuzQwOY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTlCNS9CMjI2NkZEMjZE RTQxMUYwQkUwMkY5NjFDNEY5QUUwMi90U3JoZzJ4aEdUM3FpNlctblhHNHk3TkRB NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RTcmhnMnhoR1QzcWk2Vy1uWEc0eTdOREE1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTk5QjUvQjIyNjZGRDI2REU0MTFGMEJFMDJGOTYxQzRGOUFFMDIvREM4NDU2QjhC NUI5MTFGMUI4QjZCRUJFM0UxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAygEdMA0GCSqGSIb3DQEBCwUAA4IBAQA0dIWBeoUeLhxbqM8bAWjG 6Myrw6ayB4ZVx2cmb4dVShAqUP8KmUyQ5oDE0qEQRnUsS4lvB2yh/+kc4NjWGSgV rWfP0LEKQNeE9LXRwSKqg4pmxJ4NKBjOXZUHeEYuRKS9/fYioswTgDOqY3mwE/xx Ku8C4jH/KjGzX2oFv+IMK/B1gtfNcMd5+6TZQkG5WmnG27+8HHaV8fQNX6RJZJtt UoL3asZB6zV5rKKkZtwlgqbXG+GnovgJDCHGWQDVZF0IDA9c7F3yYbUunSk3EfOD O6ObTO5B4QCpxtfw5z4xCsMwYH7U4FHoemYHkCK0Ob6z4YJw2W9NqBA2ciwb9bmV -----END CERTIFICATE-----Generated at Tue Sep 22 17:48:57 2026 by rpki-client