$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/A95180F2D7DA11ECB3D1AF67C4F9AE02.roa File: A95180F2D7DA11ECB3D1AF67C4F9AE02.roa (raw, json) Hash identifier: x3Bxd199NyMBzZt+S2sLMvE4AnW2cXpkE7Eo7KPejFc= Subject key identifier: A0:16:42:0A:18:AA:71:70:F7:E1:F4:54:7B:FA:56:98:C3:09:AE:C0 Certificate issuer: /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3 Certificate serial: 08D2 Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/A95180F2D7DA11ECB3D1AF67C4F9AE02.roa Signing time: Tue 28 Jul 2026 22:44:01 +0000 ROA not before: Tue 28 Jul 2026 22:44:01 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 63593 IP address blocks: 129.227.17.0/24 maxlen: 24 129.227.18.0/24 maxlen: 24 129.227.19.0/24 maxlen: 24 129.227.29.0/24 maxlen: 24 129.227.30.0/24 maxlen: 24 129.227.31.0/24 maxlen: 24 129.227.192.0/24 maxlen: 24 129.227.193.0/24 maxlen: 24 129.227.194.0/23 maxlen: 24 156.59.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2258 (0x8d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3 Validity Not Before: Jul 28 22:44:01 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a6930b0-0f7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6e:1c:5d:01:2a:4e:9f:52:76:d1:18:8a:8a: 13:e0:68:65:4d:96:b2:07:05:5a:94:3c:53:9d:80: 4c:0c:08:21:9a:18:60:70:02:2e:bb:4b:74:e5:16: ca:63:f7:f5:56:52:7a:85:1f:b5:84:a2:93:47:d2: 2e:6e:80:8b:38:e0:a4:92:f3:91:8e:df:b1:3c:d3: 83:c3:56:5b:d0:48:e1:ef:f8:a5:e9:0c:fa:99:00: 01:0a:74:ee:ed:e7:48:3c:6f:73:c9:6c:dc:12:db: 05:b7:5b:41:4d:28:0e:47:67:f7:e4:b4:f3:7f:78: 2a:4d:67:38:69:8b:79:aa:90:3c:d3:79:aa:9b:f7: 8b:54:b2:d9:9f:32:58:e5:e4:21:ef:bc:93:37:94: fe:1b:ac:0a:21:78:76:3c:64:e6:73:15:93:41:d1: be:d3:a2:7f:de:dd:d5:88:d8:3e:d2:6a:e5:16:de: 1e:6c:e4:0c:d6:31:5a:25:ba:6a:38:fc:54:c6:29: 53:a7:f3:92:41:10:9d:52:f3:c9:66:ef:dc:51:73: 0f:bb:8a:86:f0:fe:1b:da:1e:5b:21:d4:00:be:91: fe:7c:c8:f2:b7:c0:2c:e9:7f:b2:10:9a:ef:14:2c: 27:ed:5c:9d:55:1c:72:b9:55:2e:d8:37:14:46:b0: 3e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:16:42:0A:18:AA:71:70:F7:E1:F4:54:7B:FA:56:98:C3:09:AE:C0 X509v3 Authority Key Identifier: keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/A95180F2D7DA11ECB3D1AF67C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 129.227.17.0-129.227.19.255 129.227.29.0-129.227.31.255 129.227.192.0/22 156.59.216.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:53:3f:35:fc:d2:7f:f1:c1:6b:3c:6f:43:c1:d7:80:ee:8c: a3:20:48:78:91:ef:6c:1e:11:e1:e1:3c:d9:b7:be:79:4e:e8: ab:2a:8d:b7:14:62:46:7a:a9:f5:fe:7d:54:cd:35:2a:13:de: 66:8b:32:29:bd:44:b7:51:d3:15:e2:cf:a9:dc:63:39:11:b7: 59:79:7a:41:4e:5b:9c:2a:39:37:2f:56:81:42:be:72:c7:30: a9:7a:9b:c4:34:07:33:47:ae:eb:4e:6c:e8:f2:04:31:b6:dc: 88:0a:8f:63:9b:4a:43:18:1b:3a:fb:c0:3d:b8:47:b8:26:5a: 3b:5c:ed:e1:75:09:38:0a:9c:d9:4b:c4:d5:1d:9f:8c:e1:5b: c6:15:a5:41:4c:21:57:86:50:42:c0:08:2c:2e:52:fa:b9:55: 78:f4:c9:0e:66:45:72:19:f4:e7:0e:61:04:b3:07:f0:10:f9: a5:5f:b8:f3:45:dd:a7:7d:31:64:f9:55:8c:be:16:75:ec:f3: e6:e7:b1:86:9d:bd:30:e2:ba:8d:1e:4e:c7:b8:cf:44:bb:c9: 1f:d8:e1:76:c8:99:f3:d5:a4:e3:20:85:a9:77:02:c2:62:f5: d5:24:0e:44:6a:de:1b:8f:88:6c:9f:e0:97:58:f2:f0:85:cf: cc:cd:9d:b2 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgICCNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURCMzcxMTAvBgNVBAUTKDk1RkVCRTkzQTMzQTMzOTRCRDFGNjBEQ0JCRERCOUZE RTA3MkI3RjMwHhcNMjYwNzI4MjI0NDAxWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY5MzBiMC0wZjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiW4cXQEqTp9SdtEYiooT4GhlTZayBwValDxTnYBMDAghmhhgcAIuu0t05RbK Y/f1VlJ6hR+1hKKTR9IuboCLOOCkkvORjt+xPNODw1Zb0Ejh7/il6Qz6mQABCnTu 7edIPG9zyWzcEtsFt1tBTSgOR2f35LTzf3gqTWc4aYt5qpA803mqm/eLVLLZnzJY 5eQh77yTN5T+G6wKIXh2PGTmcxWTQdG+06J/3t3ViNg+0mrlFt4ebOQM1jFaJbpq OPxUxilTp/OSQRCdUvPJZu/cUXMPu4qG8P4b2h5bIdQAvpH+fMjyt8As6X+yEJrv FCwn7VydVRxyuVUu2DcURrA+qwIDAQABo4ICgjCCAn4wHQYDVR0OBBYEFKAWQgoY qnFw9+H0VHv6VpjDCa7AMB8GA1UdIwQYMBaAFJX+vpOjOjOUvR9g3Lvduf3gcrfz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREIzNy80REU2MzVFMDc4 QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi9sZjYtazZNNk01UzlIMkRjdTkyNV9lQnl0 X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xmNi1rNk02TTVTOUgyRGN1OTI1X2VCeXRfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RURCMzcvNERFNjM1RTA3OEEwMTFFQjk1MEQzMTc1QzRGOUFFMDIvQTk1MTgwRjJE N0RBMTFFQ0IzRDFBRjY3QzRGOUFFMDIucm9hMEEGCCsGAQUFBwEHAQH/BDIwMDAu BAIAATAoMAwDBACB4xEDBAKB4xAwDAMEAIHjHQMEBYHjAAMEAoHjwAMEAJw72DAN BgkqhkiG9w0BAQsFAAOCAQEAj1M/NfzSf/HBazxvQ8HXgO6MoyBIeJHvbB4R4eE8 2be+eU7oqyqNtxRiRnqp9f59VM01KhPeZosyKb1Et1HTFeLPqdxjORG3WXl6QU5b nCo5Ny9WgUK+cscwqXqbxDQHM0eu605s6PIEMbbciAqPY5tKQxgbOvvAPbhHuCZa O1zt4XUJOAqc2UvE1R2fjOFbxhWlQUwhV4ZQQsAILC5S+rlVePTJDmZFchn05w5h BLMH8BD5pV+480Xdp30xZPlVjL4Wdezz5uexhp29MOK6jR5Ox7jPRLvJH9jhdsiZ 89Wk4yCFqXcCwmL11SQORGreG4+IbJ/gl1jy8IXPzM2dsg== -----END CERTIFICATE-----Generated at Wed Jul 29 00:26:08 2026 by rpki-client