$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/28140BB0B0E111F19AD90CA83211F970.roa File: 28140BB0B0E111F19AD90CA83211F970.roa (raw, json) Hash identifier: fjC18ilBLVBqO47F+D+SM6LDqi09QTp22sC4WXLz5ik= Subject key identifier: 39:95:00:F4:DB:07:FE:F1:5E:4D:B5:85:58:F4:F4:65:3A:EE:74:CF Certificate issuer: /CN=A91EA23A/serialNumber=0A25D1F321E50A0BCAC7C1D07F319397A391013F Certificate serial: 47 Authority key identifier: 0A:25:D1:F3:21:E5:0A:0B:CA:C7:C1:D0:7F:31:93:97:A3:91:01:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiXR8yHlCgvKx8HQfzGTl6ORAT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/28140BB0B0E111F19AD90CA83211F970.roa Signing time: Tue 15 Sep 2026 08:40:51 +0000 ROA not before: Tue 15 Sep 2026 08:40:51 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 399138 IP address blocks: 203.55.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.crl rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiXR8yHlCgvKx8HQfzGTl6ORAT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA23A, serialNumber=0A25D1F321E50A0BCAC7C1D07F319397A391013F Validity Not Before: Sep 15 08:40:51 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6aa90493-4144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c2:e0:a4:9c:8f:5d:dc:ed:36:3e:51:f9:92: bb:ad:dc:1b:17:79:17:ad:d3:7a:06:b5:ae:2b:ee: e8:bb:68:f6:9e:d7:67:00:33:49:9e:be:8c:5a:bd: d2:18:03:b9:79:0c:f5:69:40:62:5a:5a:0e:99:39: 40:ab:53:86:08:b8:02:6a:53:3b:3a:46:6a:77:bc: 9c:6a:33:ca:96:de:3e:50:5a:c6:26:11:17:4c:6b: 9f:63:55:63:b2:5c:4d:96:06:74:da:6e:2d:c6:56: 51:72:fd:f9:ee:20:ad:57:0e:60:aa:60:db:5e:0b: 0d:76:65:dc:88:65:6e:10:61:30:a0:bd:8b:ed:ac: b3:8a:47:73:40:aa:8c:dc:61:92:99:f1:24:06:cf: b4:19:be:ee:6a:95:3e:07:f1:25:97:15:68:62:c3: 0b:55:c8:88:b9:a5:78:3f:43:35:de:c8:fa:8a:a4: 75:11:02:63:c5:e3:74:a5:f5:3e:7f:15:d9:c2:fe: 39:90:9b:22:f6:94:60:97:c0:09:06:49:6f:6c:94: 9e:cc:d9:76:ee:16:a1:1e:e5:97:07:a2:b9:31:2d: 75:33:0e:f5:40:f9:8e:0b:94:e7:f6:b0:45:ef:f3: fa:4a:a4:e2:6e:d1:b4:0c:d6:ff:a2:59:0a:e3:aa: b0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:95:00:F4:DB:07:FE:F1:5E:4D:B5:85:58:F4:F4:65:3A:EE:74:CF X509v3 Authority Key Identifier: keyid:0A:25:D1:F3:21:E5:0A:0B:CA:C7:C1:D0:7F:31:93:97:A3:91:01:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiXR8yHlCgvKx8HQfzGTl6ORAT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/28140BB0B0E111F19AD90CA83211F970.roa sbgp-ipAddrBlock: critical IPv4: 203.55.124.0/22 Signature Algorithm: sha256WithRSAEncryption 17:6f:cb:72:1f:65:80:9c:0a:2c:21:c1:bf:da:00:29:e0:66: ed:20:93:7c:c9:e5:50:55:e5:f5:3b:c2:d6:e1:4b:d4:a1:20: 87:7b:9a:e3:4f:8f:ef:ae:f2:92:b1:da:97:80:15:93:9f:f6: 38:31:81:1b:9c:a2:4e:ee:df:19:91:50:2a:0e:69:87:6f:d9: 7b:7e:89:e1:df:e7:37:61:28:88:58:a2:f9:6f:82:09:d8:ad: 74:ce:7b:b8:45:14:26:c7:52:5f:7f:7a:72:14:25:c4:f8:44: 36:a2:77:64:0d:a2:1b:8e:42:94:5f:a8:11:09:82:d4:23:c7: 5a:dc:e6:1d:19:0b:15:1e:fd:6c:3f:5d:13:3a:a8:25:03:f8: 63:9c:8d:d8:4a:28:88:5e:b7:b8:4a:cf:ef:0c:27:2e:9f:75: e1:67:d4:22:69:eb:d6:28:a4:3f:fb:51:07:34:82:84:f4:6a: da:29:c3:a7:c3:14:7e:96:a2:18:7f:90:ad:2c:94:6b:90:e2: 57:35:9c:c8:b5:18:0d:63:8f:7d:3d:e3:4d:d9:96:44:a9:28: c4:8e:0a:fa:64:cb:61:7b:4c:cb:92:d4:17:0d:b7:5a:fb:4f: 7c:6e:7b:99:44:39:6f:d9:77:1d:f5:c9:66:6a:4c:ce:c0:ff: 61:16:ce:ce -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTIzQTExMC8GA1UEBRMoMEEyNUQxRjMyMUU1MEEwQkNBQzdDMUQwN0YzMTkzOTdB MzkxMDEzRjAeFw0yNjA5MTUwODQwNTFaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYTkwNDkzLTQxNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCywuCknI9d3O02PlH5krut3BsXeRet03oGta4r7ui7aPae12cAM0mevoxavdIY A7l5DPVpQGJaWg6ZOUCrU4YIuAJqUzs6Rmp3vJxqM8qW3j5QWsYmERdMa59jVWOy XE2WBnTabi3GVlFy/fnuIK1XDmCqYNteCw12ZdyIZW4QYTCgvYvtrLOKR3NAqozc YZKZ8SQGz7QZvu5qlT4H8SWXFWhiwwtVyIi5pXg/QzXeyPqKpHURAmPF43Sl9T5/ FdnC/jmQmyL2lGCXwAkGSW9slJ7M2XbuFqEe5ZcHorkxLXUzDvVA+Y4LlOf2sEXv 8/pKpOJu0bQM1v+iWQrjqrCRAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUOZUA9NsH /vFeTbWFWPT0ZTrudM8wHwYDVR0jBBgwFoAUCiXR8yHlCgvKx8HQfzGTl6ORAT8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBMjNBLzhENTlBMkU0NTgy MzExRjE4RDdGMkM5RUE3ODMzNzczL0NpWFI4eUhsQ2d2S3g4SFFmekdUbDZPUkFU OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2lYUjh5SGxDZ3ZLeDhIUWZ6R1RsNk9SQVQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTIzQS84RDU5QTJFNDU4MjMxMUYxOEQ3RjJDOUVBNzgzMzc3My8yODE0MEJCMEIw RTExMUYxOUFEOTBDQTgzMjExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBALLN3wwDQYJKoZIhvcNAQELBQADggEBABdvy3IfZYCcCiwhwb/aACng Zu0gk3zJ5VBV5fU7wtbhS9ShIId7muNPj++u8pKx2peAFZOf9jgxgRucok7u3xmR UCoOaYdv2Xt+ieHf5zdhKIhYovlvggnYrXTOe7hFFCbHUl9/enIUJcT4RDaid2QN ohuOQpRfqBEJgtQjx1rc5h0ZCxUe/Ww/XRM6qCUD+GOcjdhKKIhet7hKz+8MJy6f deFn1CJp69YopD/7UQc0goT0atopw6fDFH6Wohh/kK0slGuQ4lc1nMi1GA1jj309 403ZlkSpKMSOCvpky2F7TMuS1BcNt1r7T3xue5lEOW/Zdx31yWZqTM7A/2EWzs4= -----END CERTIFICATE-----Generated at Tue Sep 22 23:08:15 2026 by rpki-client