$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/0DEF13D4FC1711EC919B6757C4F9AE02.roa File: 0DEF13D4FC1711EC919B6757C4F9AE02.roa (raw, json) Hash identifier: oZ6+TXbsKzCb1H31cqRGHknA2NY+Q5lG0k3cYCJhmRg= Subject key identifier: D7:EC:73:08:DB:62:1A:9A:4F:E4:D9:BE:A5:C1:FC:C2:8E:53:0F:03 Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Certificate serial: 35B8 Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/0DEF13D4FC1711EC919B6757C4F9AE02.roa Signing time: Tue 28 Jul 2026 15:17:58 +0000 ROA not before: Tue 28 Jul 2026 15:17:58 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 9304 IP address blocks: 116.214.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13752 (0x35b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAA2, serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Validity Not Before: Jul 28 15:17:58 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a68c825-8ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:32:90:c3:2b:1a:d6:ee:fa:bd:7b:8b:43:cd: ac:d8:89:f5:f6:43:88:bc:e4:8f:94:6c:b1:99:a6: 9f:58:3f:d2:79:7b:f6:15:f3:50:28:c5:97:e1:85: 50:cb:99:d3:f9:ec:5f:f5:9b:ea:b5:2a:95:b9:df: b3:c5:6b:92:59:a4:fc:d2:8e:ec:3d:36:2f:e7:01: 8d:95:27:09:26:56:57:2b:ef:dc:93:0a:56:0e:e2: 0b:5f:16:e1:52:53:5a:36:42:53:24:2f:99:72:42: 5a:26:d8:fe:25:4d:98:c8:9a:76:a4:d1:f9:07:d2: 13:1f:0c:56:cc:1a:95:b0:9d:2f:1b:ce:fb:1c:a5: 08:6a:e3:0e:c1:b0:1e:65:c0:22:43:6f:20:30:f1: 0e:0b:95:6c:ef:a1:02:a7:e5:b0:ae:fc:57:d7:92: 99:30:10:39:48:d1:2e:56:56:58:7c:49:2d:c2:9d: c7:af:81:b9:12:1e:cd:03:c5:60:57:46:83:cd:2d: b6:5e:5b:2a:1a:e9:d7:4f:3d:49:40:4a:e0:e4:e8: 4c:e4:5f:a1:97:bc:20:68:67:a6:4c:59:01:e0:92: 02:e4:98:20:fa:8b:b0:64:f2:e7:29:03:ae:77:85: af:6f:88:ec:4e:05:70:8d:74:11:1d:c8:b3:3a:57: a3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:EC:73:08:DB:62:1A:9A:4F:E4:D9:BE:A5:C1:FC:C2:8E:53:0F:03 X509v3 Authority Key Identifier: keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/0DEF13D4FC1711EC919B6757C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 116.214.110.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:8f:c9:98:4d:f6:9c:3f:70:91:db:64:2b:25:07:58:df:48: cd:f1:30:07:db:56:32:b4:0b:ff:72:6a:57:73:11:32:c1:d8: b1:58:95:3a:9f:9e:3e:65:62:a0:50:88:26:b3:18:d5:3b:7e: a5:d5:21:72:83:58:ff:30:ee:66:9f:ff:f8:db:ea:6f:82:9e: 73:8c:bb:d4:c2:0b:e8:f8:a5:c6:7e:a7:e1:38:4b:e0:2b:c1: 6e:1d:64:f7:e8:72:c1:ca:5f:54:61:74:92:da:79:26:0a:36: 3f:9a:1e:9d:4d:63:3d:4e:85:29:35:56:d9:60:cc:40:e3:72: 4e:af:b0:7d:5e:15:dc:dc:71:da:de:6d:cc:48:9a:a9:2c:78: 82:5d:3d:63:1d:26:1b:76:50:c1:10:fb:e6:87:ba:c9:c1:69: 2f:21:56:ff:18:81:7e:dd:80:3c:e9:94:1d:9e:d5:b2:d1:0c: e0:ca:17:da:4f:e8:22:96:d0:a7:e4:bb:79:d5:cf:50:af:47: c3:a0:84:dd:14:c4:87:98:4c:be:76:f0:d1:ff:e3:56:9b:8a: 63:ad:30:8c:7e:aa:62:1a:fa:99:0b:28:a6:2b:2e:a0:e3:cb: b3:38:58:f8:8c:c5:04:f6:16:d8:4d:47:e1:23:a9:b1:5e:f4: 0f:c5:be:62 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICNbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBQTIxMTAvBgNVBAUTKEZGNDk1MjkzQ0I1RjE1RTVEMTRCQUNDMkRCMTA1MkIy RTJDODI1QzgwHhcNMjYwNzI4MTUxNzU4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY4YzgyNS04ZWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoDKQwysa1u76vXuLQ82s2In19kOIvOSPlGyxmaafWD/SeXv2FfNQKMWX4YVQ y5nT+exf9ZvqtSqVud+zxWuSWaT80o7sPTYv5wGNlScJJlZXK+/ckwpWDuILXxbh UlNaNkJTJC+ZckJaJtj+JU2YyJp2pNH5B9ITHwxWzBqVsJ0vG877HKUIauMOwbAe ZcAiQ28gMPEOC5Vs76ECp+WwrvxX15KZMBA5SNEuVlZYfEktwp3Hr4G5Eh7NA8Vg V0aDzS22XlsqGunXTz1JQErg5OhM5F+hl7wgaGemTFkB4JIC5Jgg+ouwZPLnKQOu d4Wvb4jsTgVwjXQRHcizOlej/wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNfscwjb YhqaT+TZvqXB/MKOUw8DMB8GA1UdIwQYMBaAFP9JUpPLXxXl0UuswtsQUrLiyCXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFBMi9EMkFCMjkyQzFE OTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZlWFJTNnpDMnhCU3N1TElK Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wbFNrOHRmRmVYUlM2ekMyeEJTc3VMSUpjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0VBQTIvRDJBQjI5MkMxRDk5MTFFMkJBNTI5QTg2MDhCMDJDRDIvMERFRjEzRDRG QzE3MTFFQzkxOUI2NzU3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBdNZuMA0GCSqGSIb3DQEBCwUAA4IBAQBNj8mYTfacP3CR22QrJQdY 30jN8TAH21YytAv/cmpXcxEywdixWJU6n54+ZWKgUIgmsxjVO36l1SFyg1j/MO5m n//42+pvgp5zjLvUwgvo+KXGfqfhOEvgK8FuHWT36HLByl9UYXSS2nkmCjY/mh6d TWM9ToUpNVbZYMxA43JOr7B9XhXc3HHa3m3MSJqpLHiCXT1jHSYbdlDBEPvmh7rJ wWkvIVb/GIF+3YA86ZQdntWy0QzgyhfaT+giltCn5Lt51c9Qr0fDoITdFMSHmEy+ dvDR/+NWm4pjrTCMfqpiGvqZCyimKy6g48uzOFj4jMUE9hbYTUfhI6mxXvQPxb5i -----END CERTIFICATE-----Generated at Tue Jul 28 21:47:55 2026 by rpki-client