$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/986F0854F7C611EA8B23C30CC4F9AE02.roa File: 986F0854F7C611EA8B23C30CC4F9AE02.roa (raw, json) Hash identifier: OHy7PjoUwtg9ijn6TAOuDE78jB76Q/RepCdCOVz9evY= Subject key identifier: 82:33:BE:BC:0C:21:98:A5:88:C6:33:63:74:EE:BC:9C:82:8B:AB:C8 Certificate issuer: /CN=A91D5590/serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D Certificate serial: 08C7 Authority key identifier: 71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/986F0854F7C611EA8B23C30CC4F9AE02.roa Signing time: Mon 14 Sep 2026 20:40:52 +0000 ROA not before: Mon 14 Sep 2026 20:40:52 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 7473 IP address blocks: 202.189.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2247 (0x8c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5590, serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D Validity Not Before: Sep 14 20:40:52 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aa85bd4-4671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d0:a4:ba:fe:f0:ad:76:12:6e:6a:30:7d:29: 9a:4d:13:ef:e3:35:61:a6:26:39:3b:d0:76:72:c8: 53:61:09:39:06:1a:66:69:cb:c5:33:34:f1:af:ce: 42:e5:6b:75:3e:41:fb:3d:b8:ad:a6:2e:d2:d4:51: 6a:45:27:93:1b:82:d5:de:1f:00:f4:1e:16:aa:bf: 37:8b:b5:84:88:19:de:f9:53:d5:25:32:1c:b7:db: 70:7c:e5:ae:e7:ae:96:03:a8:2c:a8:7e:71:b6:d9: f7:51:9e:20:f3:6f:c7:59:cc:77:67:2c:f7:2c:0b: 28:5b:88:fe:c2:5d:fc:16:a4:d1:a4:9a:a9:6d:44: a0:95:c9:51:23:91:c6:0d:1d:60:e5:85:41:2a:ed: 63:7d:de:8e:b9:c7:4f:84:08:9c:ea:d5:31:fd:e2: 4a:c4:17:88:43:c9:42:9d:68:47:9d:8e:a9:4c:9b: 29:f3:82:c5:9e:22:88:9b:a3:44:ef:77:3a:9e:64: 37:83:77:99:f2:74:8f:bb:74:86:46:45:66:24:db: a7:fb:ae:ea:d5:20:68:47:04:09:64:a8:80:ee:97: fc:cd:58:62:77:2c:3a:fc:2f:b2:8b:82:ed:46:9e: 80:8c:2b:3e:02:1c:5b:6f:2a:5c:3a:cd:06:71:1f: c5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:33:BE:BC:0C:21:98:A5:88:C6:33:63:74:EE:BC:9C:82:8B:AB:C8 X509v3 Authority Key Identifier: keyid:71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/986F0854F7C611EA8B23C30CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.189.128.0/24 Signature Algorithm: sha256WithRSAEncryption 81:e5:d2:e7:37:80:0f:12:98:b7:02:54:a4:f4:0f:56:2c:2e: c7:05:9b:4e:0d:64:7d:4e:bc:66:db:f0:4a:db:04:d0:ef:b8: 94:ee:ed:99:2f:4a:f7:d2:ec:f2:6f:97:35:37:c8:28:6d:e3: 7f:3a:61:4a:0d:f9:4a:a6:65:36:8e:9b:27:63:2a:37:5d:76: 68:15:58:43:5e:52:bf:c2:24:b8:c1:87:41:7c:66:6d:00:f0: 35:16:dd:5e:6e:09:26:e6:2d:80:b8:1f:48:59:af:8b:f0:33: 24:12:ac:a6:ac:a8:d5:ba:ec:79:11:8d:b9:7d:1c:10:7d:7e: cf:f6:23:4c:6b:12:ee:cc:a7:a7:59:e6:44:97:a1:09:6b:48: ce:00:58:be:54:4c:93:39:dd:c7:c2:92:c9:f1:d6:a0:64:9d: 03:73:49:f7:32:16:90:ae:18:85:b6:c1:0c:d0:c1:ac:8f:36: 1b:63:ad:b6:4e:d5:a7:71:ea:4e:5f:45:08:e2:c8:8c:14:fc: e0:cf:e0:37:fb:3a:8b:9c:e8:ca:7e:39:89:ad:be:7a:af:47: c9:31:7d:01:93:d5:80:d3:49:7d:21:27:1f:f0:e2:95:0b:68: 76:98:0e:c8:5e:3a:c1:41:df:9c:4f:a7:f1:68:3d:36:71:7a: 7d:8c:ed:b5 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU1OTAxMTAvBgNVBAUTKDcxOTYxMzhGRDlGQzhDNzhGRTg0M0EyNTNDQjA0ODBB RENDNTdGMEQwHhcNMjYwOTE0MjA0MDUyWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE4NWJkNC00NjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9Ckuv7wrXYSbmowfSmaTRPv4zVhpiY5O9B2cshTYQk5BhpmacvFMzTxr85C 5Wt1PkH7Pbitpi7S1FFqRSeTG4LV3h8A9B4Wqr83i7WEiBne+VPVJTIct9twfOWu 566WA6gsqH5xttn3UZ4g82/HWcx3Zyz3LAsoW4j+wl38FqTRpJqpbUSglclRI5HG DR1g5YVBKu1jfd6OucdPhAic6tUx/eJKxBeIQ8lCnWhHnY6pTJsp84LFniKIm6NE 73c6nmQ3g3eZ8nSPu3SGRkVmJNun+67q1SBoRwQJZKiA7pf8zVhidyw6/C+yi4Lt Rp6AjCs+AhxbbypcOs0GcR/FRwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIIzvrwM IZiliMYzY3TuvJyCi6vIMB8GA1UdIwQYMBaAFHGWE4/Z/Ix4/oQ6JTywSArcxX8N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTU5MC9BODk1MjQ5RUY3 QzUxMUVBODcxQzAwMENDNEY5QUUwMi9jWllUajluOGpIai1oRG9sUExCSUN0ekZm dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NaWVRqOW44akhqLWhEb2xQTEJJQ3R6RmZ3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDU1OTAvQTg5NTI0OUVGN0M1MTFFQTg3MUMwMDBDQzRGOUFFMDIvOTg2RjA4NTRG N0M2MTFFQThCMjNDMzBDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyr2AMA0GCSqGSIb3DQEBCwUAA4IBAQCB5dLnN4APEpi3AlSk9A9W LC7HBZtODWR9Trxm2/BK2wTQ77iU7u2ZL0r30uzyb5c1N8gobeN/OmFKDflKpmU2 jpsnYyo3XXZoFVhDXlK/wiS4wYdBfGZtAPA1Ft1ebgkm5i2AuB9IWa+L8DMkEqym rKjVuux5EY25fRwQfX7P9iNMaxLuzKenWeZEl6EJa0jOAFi+VEyTOd3HwpLJ8dag ZJ0Dc0n3MhaQrhiFtsEM0MGsjzYbY622TtWncepOX0UI4siMFPzgz+A3+zqLnOjK fjmJrb56r0fJMX0Bk9WA00l9IScf8OKVC2h2mA7IXjrBQd+cT6fxaD02cXp9jO21 -----END CERTIFICATE-----Generated at Thu Sep 24 20:19:24 2026 by rpki-client