$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/1A0B540E3AA711EA83682876C4F9AE02.roa File: 1A0B540E3AA711EA83682876C4F9AE02.roa (raw, json) Hash identifier: dxEGaAO8JBy9GnUoBfPgPXQ8oe1hURdfryAzDRhp00Y= Subject key identifier: 63:5E:16:54:4E:1D:3A:C7:5D:7E:1E:08:87:50:73:07:6D:FD:26:61 Certificate issuer: /CN=A91BD9C2/serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE Certificate serial: 0C30 Authority key identifier: 6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/1A0B540E3AA711EA83682876C4F9AE02.roa Signing time: Wed 02 Sep 2026 19:38:20 +0000 ROA not before: Wed 02 Sep 2026 19:38:20 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 38210 IP address blocks: 202.72.232.0/22 maxlen: 22 202.72.232.0/24 maxlen: 24 202.72.233.0/24 maxlen: 24 202.72.234.0/24 maxlen: 24 202.72.235.0/24 maxlen: 24 202.72.236.0/22 maxlen: 22 202.72.236.0/24 maxlen: 24 202.72.237.0/24 maxlen: 24 202.72.238.0/24 maxlen: 24 202.72.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 18:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3120 (0xc30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD9C2, serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE Validity Not Before: Sep 2 19:38:20 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a987b2c-665f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2f:db:8a:8f:c1:bf:7f:ca:67:51:ce:07:59: d8:ce:14:41:8b:cc:ea:f9:ff:40:63:4d:a5:1e:40: f6:42:74:7a:b4:1f:f7:05:13:44:06:c0:2b:1f:b9: 21:5b:b7:5b:cf:9d:f5:54:21:54:50:97:99:d4:d2: 19:08:00:81:b3:66:6c:b7:12:c6:23:69:51:ac:8f: 72:41:66:41:21:23:88:8a:5a:ee:01:db:53:d1:b7: 99:d5:8b:b9:e1:37:90:8a:4b:3c:d1:c5:aa:66:7c: e2:70:ef:db:bc:93:e6:f2:fb:82:a4:dc:a9:36:9a: 44:ae:cb:a2:3d:b2:1a:e8:76:7f:e3:96:d2:7a:0c: 15:36:14:c6:8c:a2:75:4d:3f:c4:dc:6c:8b:38:ab: 5a:d2:55:8f:12:7e:9a:38:04:4e:b1:ce:d4:37:f7: c2:96:9d:fe:52:59:72:ad:02:52:99:f1:c1:5f:1c: 24:3f:75:51:bf:8d:b3:91:c4:a0:0f:4d:73:18:e2: 83:ca:30:ee:7a:75:e0:00:e9:8d:78:72:7b:07:72: 2a:d6:57:62:38:b7:03:70:9f:ba:9f:30:7d:9d:ef: aa:40:f9:59:ed:98:73:37:bc:de:db:42:bd:28:19: 9d:b8:83:f5:37:df:50:46:14:17:22:a4:aa:69:61: 8e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:5E:16:54:4E:1D:3A:C7:5D:7E:1E:08:87:50:73:07:6D:FD:26:61 X509v3 Authority Key Identifier: keyid:6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/1A0B540E3AA711EA83682876C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.72.232.0/21 Signature Algorithm: sha256WithRSAEncryption 66:8b:56:dd:b9:21:d9:31:bc:94:7a:0d:6e:f6:1b:72:1e:de: 43:d7:c7:6a:7f:0b:b2:3f:79:31:31:c6:dd:e0:8a:47:9d:97: 0d:a1:9a:c2:c5:34:ba:dc:60:b3:3c:66:db:ae:d4:9e:48:e6: 9a:d2:99:63:f3:28:e5:20:f2:17:db:e5:cf:7a:63:42:fe:ac: bf:56:1d:71:76:a1:72:82:da:ff:d4:19:62:9b:0c:e8:cd:30: b7:d4:2d:6d:72:01:c5:3a:c4:d4:a4:10:32:7f:de:de:46:b6: fc:b0:70:0b:24:c9:d5:f2:4b:cb:34:f0:c4:89:ef:be:0d:87: b9:bb:21:9e:1e:9f:d7:95:9d:c9:aa:a6:bd:07:b7:74:a9:87: a5:fa:15:33:98:37:a0:cc:c0:fe:b4:25:81:51:00:07:e1:0f: dc:ee:40:e7:28:37:f9:96:b7:c4:75:90:0a:d2:12:a2:87:a8: fe:09:99:22:d5:8c:0c:33:0d:48:a0:1d:6e:af:fd:d6:8c:be: 6b:4d:bf:0e:e7:c6:16:30:7e:cf:cd:6c:36:a9:b2:88:ce:3e: 73:fe:2b:b2:d6:db:84:3b:d3:c0:69:52:4b:6d:96:e7:79:68: 2e:cd:ce:2d:39:47:0f:6b:21:cb:4e:69:4e:e7:96:b1:41:6b: df:22:ca:4f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ5QzIxMTAvBgNVBAUTKDZGOUFDMDRDRTVBQzcxQTdDMkI3QUZCMUE1NTcyN0Ex MEU1QjA2RUUwHhcNMjYwOTAyMTkzODIwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4N2IyYy02NjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqy/bio/Bv3/KZ1HOB1nYzhRBi8zq+f9AY02lHkD2QnR6tB/3BRNEBsArH7kh W7dbz531VCFUUJeZ1NIZCACBs2ZstxLGI2lRrI9yQWZBISOIilruAdtT0beZ1Yu5 4TeQiks80cWqZnzicO/bvJPm8vuCpNypNppErsuiPbIa6HZ/45bSegwVNhTGjKJ1 TT/E3GyLOKta0lWPEn6aOAROsc7UN/fClp3+UllyrQJSmfHBXxwkP3VRv42zkcSg D01zGOKDyjDuenXgAOmNeHJ7B3Iq1ldiOLcDcJ+6nzB9ne+qQPlZ7ZhzN7ze20K9 KBmduIP1N99QRhQXIqSqaWGOuwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGNeFlRO HTrHXX4eCIdQcwdt/SZhMB8GA1UdIwQYMBaAFG+awEzlrHGnwrevsaVXJ6EOWwbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDlDMi9BQjBERjRGMjNB QTIxMUVBQTc5RTZBNjlDNEY5QUUwMi9iNXJBVE9Xc2NhZkN0Ni14cFZjbm9RNWJC dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I1ckFUT1dzY2FmQ3Q2LXhwVmNub1E1YkJ1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkQ5QzIvQUIwREY0RjIzQUEyMTFFQUE3OUU2QTY5QzRGOUFFMDIvMUEwQjU0MEUz QUE3MTFFQTgzNjgyODc2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDykjoMA0GCSqGSIb3DQEBCwUAA4IBAQBmi1bduSHZMbyUeg1u9hty Ht5D18dqfwuyP3kxMcbd4IpHnZcNoZrCxTS63GCzPGbbrtSeSOaa0plj8yjlIPIX 2+XPemNC/qy/Vh1xdqFygtr/1BlimwzozTC31C1tcgHFOsTUpBAyf97eRrb8sHAL JMnV8kvLNPDEie++DYe5uyGeHp/XlZ3Jqqa9B7d0qYel+hUzmDegzMD+tCWBUQAH 4Q/c7kDnKDf5lrfEdZAK0hKih6j+CZki1YwMMw1IoB1ur/3WjL5rTb8O58YWMH7P zWw2qbKIzj5z/iuy1tuEO9PAaVJLbZbneWguzc4tOUcPayHLTmlO55axQWvfIspP -----END CERTIFICATE-----Generated at Sat Sep 26 03:09:59 2026 by rpki-client