$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/8E90AA02EB0B11EBA0B6DD84C4F9AE02.roa File: 8E90AA02EB0B11EBA0B6DD84C4F9AE02.roa (raw, json) Hash identifier: Atm+YjJWu/U6U/w3n/CtX93wrO07yuhb/OEeKyPt76Y= Subject key identifier: 86:BF:DC:9A:EA:40:51:28:BA:F4:03:A4:8C:61:AD:1E:F3:5A:8B:F4 Certificate issuer: /CN=A91D28EB/serialNumber=5C365B1731CA7CE7DB81DD57130BD4D643019B5E Certificate serial: 0640 Authority key identifier: 5C:36:5B:17:31:CA:7C:E7:DB:81:DD:57:13:0B:D4:D6:43:01:9B:5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/8E90AA02EB0B11EBA0B6DD84C4F9AE02.roa Signing time: Fri 24 Jul 2026 23:44:40 +0000 ROA not before: Fri 24 Jul 2026 23:44:40 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 134550 IP address blocks: 45.123.200.0/22 maxlen: 22 45.123.200.0/24 maxlen: 24 45.123.201.0/24 maxlen: 24 45.123.202.0/24 maxlen: 24 45.123.203.0/24 maxlen: 24 103.192.44.0/22 maxlen: 22 103.192.44.0/24 maxlen: 24 103.192.45.0/24 maxlen: 24 103.192.46.0/24 maxlen: 24 103.192.47.0/24 maxlen: 24 2402:9280::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.crl rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 23:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1600 (0x640) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28EB, serialNumber=5C365B1731CA7CE7DB81DD57130BD4D643019B5E Validity Not Before: Jul 24 23:44:40 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a63f8e8-3bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:10:65:44:c9:2f:13:c9:11:b6:44:ee:66:90: 02:32:34:51:0a:46:05:2f:7b:02:c0:97:32:bc:8c: 93:10:4f:cb:75:da:d3:ba:5b:fe:01:84:60:f6:eb: 8c:1d:b6:3d:14:aa:15:ad:58:7b:4f:9b:d4:61:b8: eb:e7:e8:0e:e4:37:6c:f5:4a:0b:57:ea:08:27:77: c1:e0:2c:13:b5:a6:11:11:ea:44:42:82:69:a6:db: b8:32:53:77:ed:98:17:5f:e1:45:6d:71:1b:da:1b: 3c:16:3e:de:49:8b:04:58:0c:17:a2:c2:0f:eb:40: 61:24:26:07:f6:94:38:a8:04:2b:f9:de:0d:df:c0: 5c:06:b3:cb:c2:3c:ec:e4:c0:29:0e:29:96:16:64: 1b:fc:83:55:17:a6:f1:48:a7:c1:66:1a:07:26:a6: 99:41:fc:23:4c:ed:66:f3:39:ad:b4:0f:92:d3:fb: 1b:97:dd:20:96:eb:4c:8d:1a:da:c7:ff:97:75:f1: 56:d9:7e:42:65:d2:9e:5d:88:2f:7f:1b:89:97:6c: ba:80:38:82:be:2e:48:2c:5c:16:90:bb:31:ac:4f: f9:1e:39:5a:41:0c:90:03:98:58:90:77:bb:20:5a: 3f:03:d9:ca:d1:36:83:70:cd:98:d4:24:9c:3a:da: fc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:BF:DC:9A:EA:40:51:28:BA:F4:03:A4:8C:61:AD:1E:F3:5A:8B:F4 X509v3 Authority Key Identifier: keyid:5C:36:5B:17:31:CA:7C:E7:DB:81:DD:57:13:0B:D4:D6:43:01:9B:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/8E90AA02EB0B11EBA0B6DD84C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.123.200.0/22 103.192.44.0/22 IPv6: 2402:9280::/32 Signature Algorithm: sha256WithRSAEncryption 92:7a:d7:46:b5:87:d4:e6:16:b9:74:d2:ab:f2:71:89:5f:26: e8:31:ef:49:ef:1e:73:d5:44:0a:31:ec:83:92:46:36:46:bb: c7:13:34:b3:80:19:9a:78:98:2a:78:13:03:e9:10:34:d6:c2: 7b:bd:aa:2a:48:9e:fa:15:d3:18:81:b7:c8:aa:b2:0c:9b:96: 9e:31:9d:eb:ad:e1:c8:9f:fe:3b:59:12:56:66:48:df:4d:ab: 36:24:4c:72:45:2c:27:12:7b:1b:df:6d:29:22:24:a2:49:e8: 20:f5:c7:cf:cb:73:35:89:21:3d:e9:a4:32:c5:8c:52:2e:f5: 54:06:61:17:40:79:eb:94:f3:b4:3b:ca:a6:51:9f:58:50:fd: 03:ff:53:fe:44:42:21:23:d2:6b:f5:ab:76:db:ba:24:6e:90: cc:8b:f3:c9:44:9d:b6:9e:53:b5:8c:97:ec:ee:88:0c:e5:14: e4:f3:70:dc:71:a3:71:8f:09:d1:76:22:a2:17:1c:cc:b4:1d: d9:2f:01:9f:f9:c2:ce:1e:c3:2a:3a:c4:89:c4:82:2d:c3:36: 38:e3:bb:e8:c4:92:bf:4e:d0:7e:35:ee:81:6d:92:91:90:9e: 24:dc:6a:35:fb:6e:cb:fe:c2:4e:10:2b:cf:e2:5a:17:07:a5: 28:10:2c:62 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICBkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4RUIxMTAvBgNVBAUTKDVDMzY1QjE3MzFDQTdDRTdEQjgxREQ1NzEzMEJENEQ2 NDMwMTlCNUUwHhcNMjYwNzI0MjM0NDQwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYzZjhlOC0zYmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnhBlRMkvE8kRtkTuZpACMjRRCkYFL3sCwJcyvIyTEE/LddrTulv+AYRg9uuM HbY9FKoVrVh7T5vUYbjr5+gO5Dds9UoLV+oIJ3fB4CwTtaYREepEQoJpptu4MlN3 7ZgXX+FFbXEb2hs8Fj7eSYsEWAwXosIP60BhJCYH9pQ4qAQr+d4N38BcBrPLwjzs 5MApDimWFmQb/INVF6bxSKfBZhoHJqaZQfwjTO1m8zmttA+S0/sbl90glutMjRra x/+XdfFW2X5CZdKeXYgvfxuJl2y6gDiCvi5ILFwWkLsxrE/5HjlaQQyQA5hYkHe7 IFo/A9nK0TaDcM2Y1CScOtr8YQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFIa/3Jrq QFEouvQDpIxhrR7zWov0MB8GA1UdIwQYMBaAFFw2Wxcxynzn24HdVxML1NZDAZte MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhFQi83NzE0OEFDNkVC MDkxMUVCOUM3NTkxODBDNEY5QUUwMi9YRFpiRnpIS2ZPZmJnZDFYRXd2VTFrTUJt MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEWmJGekhLZk9mYmdkMVhFd3ZVMWtNQm0xNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDI4RUIvNzcxNDhBQzZFQjA5MTFFQjlDNzU5MTgwQzRGOUFFMDIvOEU5MEFBMDJF QjBCMTFFQkEwQjZERDg0QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCLXvIAwQCZ8AsMA0EAgACMAcDBQAkApKAMA0GCSqGSIb3DQEBCwUA A4IBAQCSetdGtYfU5ha5dNKr8nGJXyboMe9J7x5z1UQKMeyDkkY2RrvHEzSzgBma eJgqeBMD6RA01sJ7vaoqSJ76FdMYgbfIqrIMm5aeMZ3rreHIn/47WRJWZkjfTas2 JExyRSwnEnsb320pIiSiSegg9cfPy3M1iSE96aQyxYxSLvVUBmEXQHnrlPO0O8qm UZ9YUP0D/1P+REIhI9Jr9at227okbpDMi/PJRJ22nlO1jJfs7ogM5RTk83DccaNx jwnRdiKiFxzMtB3ZLwGf+cLOHsMqOsSJxIItwzY447voxJK/TtB+Ne6BbZKRkJ4k 3Go1+27L/sJOECvP4loXB6UoECxi -----END CERTIFICATE-----Generated at Tue Jul 28 19:43:42 2026 by rpki-client