$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/B2306182F3F911EAB9D11D26C4F9AE02.roa File: B2306182F3F911EAB9D11D26C4F9AE02.roa (raw, json) Hash identifier: EjjdhavOBifQ/TWD+ksl2xyIA2vVpvp6HiibsqNwUc4= Subject key identifier: 74:DD:A1:B5:5B:FA:C1:AE:C3:07:74:9C:90:E2:B6:23:E5:E5:F6:62 Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Certificate serial: 35B5 Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/B2306182F3F911EAB9D11D26C4F9AE02.roa Signing time: Tue 28 Jul 2026 15:17:51 +0000 ROA not before: Tue 28 Jul 2026 15:17:51 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 14618 IP address blocks: 116.214.100.0/24 maxlen: 24 116.214.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13749 (0x35b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAA2, serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Validity Not Before: Jul 28 15:17:51 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a68c81e-b205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:cb:24:53:f4:49:93:80:df:b9:5f:2f:32:e1: 61:ef:84:2f:ba:c9:44:21:56:33:0d:15:00:53:f0: a0:5f:d9:c1:4c:c5:4e:f1:2b:24:c4:18:8e:81:0b: f7:8b:1e:bc:cd:99:1f:9b:2a:34:ca:b4:7f:dd:1a: 84:80:0c:60:fe:ae:8a:24:d0:53:5c:ad:ec:24:24: af:02:5d:79:06:5a:73:9f:a6:19:ea:c0:b7:9e:2d: c2:31:5c:56:53:ff:2c:d6:97:89:bd:c3:6a:c3:86: dc:fe:51:70:fa:96:c6:ed:0b:9d:36:bc:15:53:95: d8:32:68:46:08:62:79:b5:fa:2e:42:4c:91:0a:de: ae:77:76:3d:ef:61:11:49:7d:02:2a:3a:c5:91:02: e4:b7:b4:12:71:27:a0:c2:59:0c:a8:6c:fa:34:21: ce:05:c6:f2:0f:01:7f:61:e2:47:20:f0:ad:49:8f: 7f:fb:ba:02:61:76:95:ec:b6:0e:09:3f:29:3c:9b: 59:09:55:a8:2c:9c:5a:ab:9b:f6:c2:b8:df:86:bc: 28:3c:be:87:30:67:81:45:04:70:8e:0e:29:ec:c3: 08:33:3f:78:81:09:f0:c7:0b:fb:88:03:3d:62:ba: 91:42:15:e8:53:b0:48:e6:0d:48:53:a6:56:65:d4: 5a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:DD:A1:B5:5B:FA:C1:AE:C3:07:74:9C:90:E2:B6:23:E5:E5:F6:62 X509v3 Authority Key Identifier: keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/B2306182F3F911EAB9D11D26C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 116.214.100.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:cf:51:dc:d7:5c:53:77:64:39:dc:05:ea:13:33:6e:d8:4c: da:65:4c:0b:53:f7:df:25:e7:d3:9a:b4:84:41:3a:8a:4b:9f: b9:32:7c:6b:ac:0e:a1:16:75:4e:85:80:2f:46:52:db:0c:4f: 11:29:26:90:89:3e:73:1f:4f:af:fe:a5:d5:de:b9:6c:27:9b: 5b:32:d0:94:8d:85:48:71:c7:41:a3:72:b3:83:31:16:5b:0c: 5e:ac:a9:5f:59:68:2d:72:dc:5f:66:05:ab:ca:8a:05:3c:0c: 6d:c7:95:7a:12:99:86:b8:02:8b:91:cf:c2:30:2d:d0:44:64: 04:9a:e3:9e:e0:ee:3a:af:a6:fd:59:33:b3:6e:7f:e7:82:14: ca:39:fc:6e:0f:af:1f:d5:ad:c1:ae:19:41:17:c1:79:3a:77: 43:3c:b7:90:bf:90:96:4a:85:94:16:0f:2a:2e:03:25:41:dd: 67:5d:2a:0c:e8:9d:27:2f:94:1f:22:75:e7:4e:a7:eb:b5:05: d9:96:43:9a:44:65:d1:df:3c:24:62:1a:23:2d:42:ad:91:fa: fe:50:c2:c7:77:fd:ce:b0:85:98:dc:7f:f6:06:1c:15:d0:25: 53:f3:89:9b:a1:0e:32:38:bd:4e:b7:58:70:9d:23:42:73:1e: a4:9b:95:71 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICNbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBQTIxMTAvBgNVBAUTKEZGNDk1MjkzQ0I1RjE1RTVEMTRCQUNDMkRCMTA1MkIy RTJDODI1QzgwHhcNMjYwNzI4MTUxNzUxWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY4YzgxZS1iMjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh8skU/RJk4DfuV8vMuFh74QvuslEIVYzDRUAU/CgX9nBTMVO8SskxBiOgQv3 ix68zZkfmyo0yrR/3RqEgAxg/q6KJNBTXK3sJCSvAl15Blpzn6YZ6sC3ni3CMVxW U/8s1peJvcNqw4bc/lFw+pbG7QudNrwVU5XYMmhGCGJ5tfouQkyRCt6ud3Y972ER SX0CKjrFkQLkt7QScSegwlkMqGz6NCHOBcbyDwF/YeJHIPCtSY9/+7oCYXaV7LYO CT8pPJtZCVWoLJxaq5v2wrjfhrwoPL6HMGeBRQRwjg4p7MMIMz94gQnwxwv7iAM9 YrqRQhXoU7BI5g1IU6ZWZdRa8wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHTdobVb +sGuwwd0nJDitiPl5fZiMB8GA1UdIwQYMBaAFP9JUpPLXxXl0UuswtsQUrLiyCXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFBMi9EMkFCMjkyQzFE OTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZlWFJTNnpDMnhCU3N1TElK Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wbFNrOHRmRmVYUlM2ekMyeEJTc3VMSUpjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0VBQTIvRDJBQjI5MkMxRDk5MTFFMkJBNTI5QTg2MDhCMDJDRDIvQjIzMDYxODJG M0Y5MTFFQUI5RDExRDI2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBdNZkMA0GCSqGSIb3DQEBCwUAA4IBAQA9z1Hc11xTd2Q53AXqEzNu 2EzaZUwLU/ffJefTmrSEQTqKS5+5MnxrrA6hFnVOhYAvRlLbDE8RKSaQiT5zH0+v /qXV3rlsJ5tbMtCUjYVIccdBo3KzgzEWWwxerKlfWWgtctxfZgWryooFPAxtx5V6 EpmGuAKLkc/CMC3QRGQEmuOe4O46r6b9WTOzbn/nghTKOfxuD68f1a3BrhlBF8F5 OndDPLeQv5CWSoWUFg8qLgMlQd1nXSoM6J0nL5QfInXnTqfrtQXZlkOaRGXR3zwk YhojLUKtkfr+UMLHd/3OsIWY3H/2BhwV0CVT84mboQ4yOL1Ot1hwnSNCcx6km5Vx -----END CERTIFICATE-----Generated at Tue Jul 28 20:14:29 2026 by rpki-client