$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/D9BE56E2927D11EFB83ACB5CC4F9AE02.roa File: D9BE56E2927D11EFB83ACB5CC4F9AE02.roa (raw, json) Hash identifier: SUhQMhc4f0iIonT89sMRWBYG1AnMoqeXmV34+Ua8hnA= Subject key identifier: 6D:DE:87:B3:6B:89:BD:0A:E1:A7:28:37:93:70:48:DE:35:93:96:8D Certificate issuer: /CN=A91C8203/serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Certificate serial: 0171 Authority key identifier: 31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/D9BE56E2927D11EFB83ACB5CC4F9AE02.roa Signing time: Sat 05 Sep 2026 04:55:41 +0000 ROA not before: Sat 05 Sep 2026 04:55:41 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 14618 IP address blocks: 202.0.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 04:46:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8203, serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Validity Not Before: Sep 5 04:55:41 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a9ba0cd-a7e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:af:f1:16:a2:01:bd:18:a8:72:4c:63:05:62: e1:fd:ca:7a:e8:07:f7:6c:08:32:b5:4e:34:f0:db: ff:4d:a5:be:b0:b3:27:46:e6:87:89:bd:cb:2c:c2: 23:87:5b:f6:cc:28:d3:27:e4:25:04:11:a5:85:f9: c9:68:5b:66:77:a9:a4:67:ee:95:05:6f:f0:88:4d: 0c:f5:ed:c7:eb:37:7b:ec:8a:a8:1b:df:2a:9a:f0: d9:b1:4f:99:11:36:7b:69:7f:65:e2:96:4e:83:22: 85:4b:30:48:bf:a5:c2:2c:a2:58:17:80:7d:f6:9d: 5b:47:1d:cb:27:41:a2:3a:51:57:e1:b2:7a:49:e5: ad:21:26:cc:66:e8:b8:74:47:b1:9f:78:84:f5:be: fe:6e:52:c1:95:54:16:7c:4e:77:a5:60:e2:32:fc: 8e:22:14:05:96:d3:9b:10:c1:0e:81:ca:5d:49:b8: 3f:1c:9d:7c:a0:2b:10:81:77:e2:05:3c:63:ef:0c: 43:d4:38:e3:ee:2c:60:7c:5d:e0:fc:30:3f:96:ab: 05:19:a1:80:14:1b:df:a7:3d:a8:b2:d9:06:e3:20: d4:b9:95:ed:04:9f:03:17:66:35:b2:4b:df:54:50: 4c:1a:89:6e:32:ce:e5:48:ad:88:39:ad:b7:72:c3: ab:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:DE:87:B3:6B:89:BD:0A:E1:A7:28:37:93:70:48:DE:35:93:96:8D X509v3 Authority Key Identifier: keyid:31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/D9BE56E2927D11EFB83ACB5CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.0.70.0/24 Signature Algorithm: sha256WithRSAEncryption d2:03:18:48:6b:a6:51:53:21:9e:e8:aa:d1:d8:5f:88:57:9b: c6:03:50:c6:09:a3:7c:4f:eb:8e:e6:f2:bc:fe:91:aa:71:bd: 38:d3:35:01:e0:58:b6:05:19:e4:77:bd:a1:98:fb:12:be:fe: b9:35:de:5e:93:24:d2:27:b1:14:58:05:1b:8a:0c:e7:bd:79: 86:f1:3b:5c:89:5a:0d:43:47:7a:b7:e5:b1:b1:86:69:3c:3f: 75:ff:3d:15:e9:59:86:15:e1:10:1b:02:a9:10:ea:d2:24:ae: 6c:ed:8c:1f:e4:9b:d0:09:c9:84:2d:4a:57:34:c5:2e:34:55: 00:2d:4b:15:a1:53:06:19:7c:65:ff:e9:b7:71:28:ab:a5:97: e6:74:e8:c6:f3:89:41:4b:a3:65:de:89:93:71:63:2c:97:2c: 8d:18:42:fd:16:93:a2:49:d3:9f:3c:92:9b:27:c7:ad:c5:14: 9e:82:55:bb:93:6b:af:c9:c7:0e:31:0e:06:ef:95:61:c5:eb: f1:db:c3:68:3a:a4:fe:02:99:3e:3c:c6:f3:40:c3:04:15:a8: 5d:c3:2f:d1:87:71:61:4d:91:c4:9c:0e:1d:9d:fd:ee:c3:2b: e0:a9:df:59:e8:fd:b9:00:bd:c5:11:9a:c0:b3:a4:d4:ac:fc: 16:79:7a:b9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgyMDMxMTAvBgNVBAUTKDMxRDIxRDVDRUU1RkFDREVGM0M4QzFDODdEMEQ3Mzkx RjlGNzNBRkYwHhcNMjYwOTA1MDQ1NTQxWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTliYTBjZC1hN2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyK/xFqIBvRiockxjBWLh/cp66Af3bAgytU408Nv/TaW+sLMnRuaHib3LLMIj h1v2zCjTJ+QlBBGlhfnJaFtmd6mkZ+6VBW/wiE0M9e3H6zd77IqoG98qmvDZsU+Z ETZ7aX9l4pZOgyKFSzBIv6XCLKJYF4B99p1bRx3LJ0GiOlFX4bJ6SeWtISbMZui4 dEexn3iE9b7+blLBlVQWfE53pWDiMvyOIhQFltObEMEOgcpdSbg/HJ18oCsQgXfi BTxj7wxD1Djj7ixgfF3g/DA/lqsFGaGAFBvfpz2ostkG4yDUuZXtBJ8DF2Y1skvf VFBMGoluMs7lSK2IOa23csOr4wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFG3eh7Nr ib0K4acoN5NwSN41k5aNMB8GA1UdIwQYMBaAFDHSHVzuX6ze88jByH0Nc5H59zr/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODIwMy9CQzUxNURBQTky N0ExMUVGQjU2NDNDNEVDNEY5QUUwMi9NZElkWE81ZnJON3p5TUhJZlExemtmbjNP djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01kSWRYTzVmck43enlNSElmUTF6a2ZuM092OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzgyMDMvQkM1MTVEQUE5MjdBMTFFRkI1NjQzQzRFQzRGOUFFMDIvRDlCRTU2RTI5 MjdEMTFFRkI4M0FDQjVDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAygBGMA0GCSqGSIb3DQEBCwUAA4IBAQDSAxhIa6ZRUyGe6KrR2F+I V5vGA1DGCaN8T+uO5vK8/pGqcb040zUB4Fi2BRnkd72hmPsSvv65Nd5ekyTSJ7EU WAUbigznvXmG8TtciVoNQ0d6t+WxsYZpPD91/z0V6VmGFeEQGwKpEOrSJK5s7Ywf 5JvQCcmELUpXNMUuNFUALUsVoVMGGXxl/+m3cSirpZfmdOjG84lBS6Nl3omTcWMs lyyNGEL9FpOiSdOfPJKbJ8etxRSeglW7k2uvyccOMQ4G75Vhxevx28NoOqT+Apk+ PMbzQMMEFahdwy/Rh3FhTZHEnA4dnf3uwyvgqd9Z6P25AL3FEZrAs6TUrPwWeXq5 -----END CERTIFICATE-----Generated at Wed Sep 23 10:23:06 2026 by rpki-client