$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95C/272647A25D3811EBA202DF1EC4F9AE02/2428B7AE5D3A11EBA0F5C625C4F9AE02.roa File: 2428B7AE5D3A11EBA0F5C625C4F9AE02.roa (raw, json) Hash identifier: gB6pOW/pXvpXWm6KNRn4E5D9q8qoljtWnXjPul3l7uY= Subject key identifier: B0:91:55:40:F8:52:28:C0:88:C2:72:FB:CC:A6:DB:21:F9:40:93:FF Certificate issuer: /CN=A916B95C/serialNumber=5BADFED330D65CA0BAB3F73901CB95305A207DC3 Certificate serial: 07A4 Authority key identifier: 5B:AD:FE:D3:30:D6:5C:A0:BA:B3:F7:39:01:CB:95:30:5A:20:7D:C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W63-0zDWXKC6s_c5AcuVMFogfcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B95C/272647A25D3811EBA202DF1EC4F9AE02/2428B7AE5D3A11EBA0F5C625C4F9AE02.roa Signing time: Tue 28 Jul 2026 22:43:03 +0000 ROA not before: Tue 28 Jul 2026 22:43:03 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 4825 IP address blocks: 202.61.4.0/24 maxlen: 24 202.61.5.0/24 maxlen: 24 202.61.6.0/24 maxlen: 24 202.61.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B95C/272647A25D3811EBA202DF1EC4F9AE02/W63-0zDWXKC6s_c5AcuVMFogfcM.crl rsync://rpki.apnic.net/member_repository/A916B95C/272647A25D3811EBA202DF1EC4F9AE02/W63-0zDWXKC6s_c5AcuVMFogfcM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W63-0zDWXKC6s_c5AcuVMFogfcM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 22:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1956 (0x7a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B95C, serialNumber=5BADFED330D65CA0BAB3F73901CB95305A207DC3 Validity Not Before: Jul 28 22:43:03 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a693077-77cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d0:31:64:de:02:9e:60:ab:b4:02:a4:4f:f3: 17:d9:83:5d:d1:29:ce:b5:6d:af:c4:2a:59:4e:3c: 4f:ae:cd:7c:c2:d7:da:69:4c:75:02:b7:02:df:91: aa:7f:46:41:da:b9:46:de:5d:af:e2:11:5b:a1:d3: b7:10:f0:af:f1:c1:8c:8d:33:5f:a4:dd:af:1e:a2: 91:9b:f8:4a:79:36:be:c1:89:40:3f:55:df:37:31: a0:8b:a2:de:2f:4e:41:cb:ec:a8:ae:4d:24:c2:24: de:46:7d:18:51:b2:12:30:31:a4:77:4d:8a:e5:59: fe:89:26:b0:d4:c0:c3:af:84:3d:22:38:20:8f:c8: db:35:75:c7:0b:e2:bc:22:1e:c0:67:63:71:5e:d3: da:b9:1a:ee:64:7a:82:9c:63:3a:88:fe:cd:57:d3: cb:6d:05:52:91:dd:18:4f:03:17:df:db:3d:3a:33: 69:15:e9:77:32:49:c1:7e:65:9d:61:9f:02:0d:b2: b7:56:11:6b:4b:01:59:55:3c:a4:35:41:44:13:7d: 82:6a:a6:2c:cd:35:eb:d1:1f:b2:e1:af:ac:20:96: 05:88:07:fd:c4:bc:de:68:de:9d:7b:7b:2f:19:91: 29:a4:27:76:d3:ad:13:3a:54:7e:03:30:66:71:8a: 84:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:91:55:40:F8:52:28:C0:88:C2:72:FB:CC:A6:DB:21:F9:40:93:FF X509v3 Authority Key Identifier: keyid:5B:AD:FE:D3:30:D6:5C:A0:BA:B3:F7:39:01:CB:95:30:5A:20:7D:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B95C/272647A25D3811EBA202DF1EC4F9AE02/W63-0zDWXKC6s_c5AcuVMFogfcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W63-0zDWXKC6s_c5AcuVMFogfcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95C/272647A25D3811EBA202DF1EC4F9AE02/2428B7AE5D3A11EBA0F5C625C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.61.4.0/22 Signature Algorithm: sha256WithRSAEncryption 33:4f:6b:0f:05:3a:e6:65:fc:48:d9:ff:f1:29:9b:1c:92:c5: 1e:20:6a:7c:16:d2:c2:87:3e:f0:41:61:9e:eb:da:e3:58:a2: 31:34:f7:08:74:f2:bd:77:1d:c6:5c:55:42:26:02:85:3f:34: aa:c1:e5:ac:ac:27:23:b4:95:96:25:4b:e3:17:a3:2f:6c:8a: 74:72:cb:f5:bc:e1:e3:d5:69:54:25:ae:f3:a1:05:35:d0:65: 54:96:da:b6:25:da:8f:a2:e9:30:3d:b6:c0:df:c4:da:50:43: 88:4c:02:01:9d:04:17:0c:ca:1c:4a:ff:54:23:fa:14:b7:9e: 31:9e:a6:08:97:18:d1:9a:6c:8d:4b:58:db:63:11:98:d2:e2: e1:9c:93:26:21:73:9c:07:ee:9d:e1:6b:80:50:5e:4e:fa:01: 80:95:2c:9a:a3:cf:b5:a7:0e:99:ff:2a:6e:a4:a8:00:aa:6d: 89:a5:27:11:9b:2c:0c:d6:78:10:bb:01:48:d4:e2:54:41:cc: e9:c6:11:11:05:65:fa:79:29:88:4e:ba:4e:6f:2f:96:fc:b5: f6:c6:48:d1:2c:2f:23:51:fa:8a:d9:5c:b9:5d:4f:19:f7:c1: d9:b6:9f:45:86:0f:b7:84:97:d7:80:bb:76:18:39:89:5a:39: 8e:1b:e3:57 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICB6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI5NUMxMTAvBgNVBAUTKDVCQURGRUQzMzBENjVDQTBCQUIzRjczOTAxQ0I5NTMw NUEyMDdEQzMwHhcNMjYwNzI4MjI0MzAzWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY5MzA3Ny03N2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjNAxZN4CnmCrtAKkT/MX2YNd0SnOtW2vxCpZTjxPrs18wtfaaUx1ArcC35Gq f0ZB2rlG3l2v4hFbodO3EPCv8cGMjTNfpN2vHqKRm/hKeTa+wYlAP1XfNzGgi6Le L05By+york0kwiTeRn0YUbISMDGkd02K5Vn+iSaw1MDDr4Q9Ijggj8jbNXXHC+K8 Ih7AZ2NxXtPauRruZHqCnGM6iP7NV9PLbQVSkd0YTwMX39s9OjNpFel3MknBfmWd YZ8CDbK3VhFrSwFZVTykNUFEE32CaqYszTXr0R+y4a+sIJYFiAf9xLzeaN6de3sv GZEppCd2060TOlR+AzBmcYqEDwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLCRVUD4 UijAiMJy+8ym2yH5QJP/MB8GA1UdIwQYMBaAFFut/tMw1lygurP3OQHLlTBaIH3D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qjk1Qy8yNzI2NDdBMjVE MzgxMUVCQTIwMkRGMUVDNEY5QUUwMi9XNjMtMHpEV1hLQzZzX2M1QWN1Vk1Gb2dm Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1c2My0wekRXWEtDNnNfYzVBY3VWTUZvZ2ZjTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkI5NUMvMjcyNjQ3QTI1RDM4MTFFQkEyMDJERjFFQzRGOUFFMDIvMjQyOEI3QUU1 RDNBMTFFQkEwRjVDNjI1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCyj0EMA0GCSqGSIb3DQEBCwUAA4IBAQAzT2sPBTrmZfxI2f/xKZsc ksUeIGp8FtLChz7wQWGe69rjWKIxNPcIdPK9dx3GXFVCJgKFPzSqweWsrCcjtJWW JUvjF6MvbIp0csv1vOHj1WlUJa7zoQU10GVUltq2JdqPoukwPbbA38TaUEOITAIB nQQXDMocSv9UI/oUt54xnqYIlxjRmmyNS1jbYxGY0uLhnJMmIXOcB+6d4WuAUF5O +gGAlSyao8+1pw6Z/ypupKgAqm2JpScRmywM1ngQuwFI1OJUQczpxhERBWX6eSmI TrpOby+W/LX2xkjRLC8jUfqK2Vy5XU8Z98HZtp9Fhg+3hJfXgLt2GDmJWjmOG+NX -----END CERTIFICATE-----Generated at Wed Jul 29 05:25:22 2026 by rpki-client