$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/053416126DB211F0962DC55BC4F9AE02.roa File: 053416126DB211F0962DC55BC4F9AE02.roa (raw, json) Hash identifier: x2PuVPfM9opRCGhS75prbzNf+RUMoFINYisW+YfHaDY= Subject key identifier: 22:A6:14:51:9A:8E:1A:31:BB:F8:A0:E4:62:BA:E1:D9:82:6D:39:BE Certificate issuer: /CN=A91FD6A0/serialNumber=D18D445D2657EAFDD4A66E75B0FBD60303F025FC Certificate serial: 02 Authority key identifier: D1:8D:44:5D:26:57:EA:FD:D4:A6:6E:75:B0:FB:D6:03:03:F0:25:FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/053416126DB211F0962DC55BC4F9AE02.roa Signing time: Thu 31 Jul 2025 01:59:41 +0000 ROA not before: Thu 31 Jul 2025 01:59:41 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 151330 IP address blocks: 202.1.26.0/24 maxlen: 24 202.1.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 08:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD6A0, serialNumber=D18D445D2657EAFDD4A66E75B0FBD60303F025FC Validity Not Before: Jul 31 01:59:41 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=688ace0c-3c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fd:ca:81:fe:e2:14:41:00:55:53:46:47:a8: 77:4b:72:a5:56:15:f8:80:4b:7e:64:77:8c:97:5d: 70:c3:20:a4:c2:3c:de:e0:a2:65:3b:25:e5:d9:37: 29:4d:8b:b2:85:c5:46:b3:41:77:69:f4:f6:04:8b: f7:df:50:bc:06:34:39:19:0e:a0:65:81:ca:30:38: ca:95:05:2b:94:ba:b8:2c:53:f2:79:90:33:39:5c: 0a:c7:b2:47:4d:c9:1b:94:5f:e4:a9:cb:cf:0c:29: e6:49:ea:4b:1e:83:73:ab:90:b2:e0:ff:97:c9:46: 57:95:4a:22:24:ab:27:18:0d:f0:e6:1e:2f:5e:21: 38:83:90:58:19:39:48:e0:90:37:24:39:1f:85:af: 5b:94:a2:94:1e:8f:93:70:dc:b0:31:a4:74:6e:84: 35:fd:2f:d3:f1:3f:6e:b3:5f:dc:26:e6:55:51:0b: 6b:17:f3:20:63:d7:cf:cd:31:b0:91:98:48:31:5c: f7:94:32:55:39:21:62:d5:44:28:d7:9d:da:74:ce: 51:61:5e:5a:49:43:2b:05:a9:36:9d:c7:ab:86:8d: 3b:0e:e6:54:c4:55:f0:84:53:c1:67:20:0f:38:7b: 2d:eb:de:13:c9:40:3a:f2:0b:ce:a5:ec:8c:45:91: 15:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A6:14:51:9A:8E:1A:31:BB:F8:A0:E4:62:BA:E1:D9:82:6D:39:BE X509v3 Authority Key Identifier: keyid:D1:8D:44:5D:26:57:EA:FD:D4:A6:6E:75:B0:FB:D6:03:03:F0:25:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/053416126DB211F0962DC55BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.1.26.0/23 Signature Algorithm: sha256WithRSAEncryption 38:e9:01:3d:fe:f5:36:76:0e:3b:c8:25:6e:e6:a7:03:03:ce: fa:e1:d4:29:71:97:71:ee:e0:f9:78:5e:a4:03:da:3a:44:dd: 53:9c:80:5e:c8:8d:a6:fd:2d:c2:c3:6e:39:d1:71:8c:c6:2a: be:bb:89:2c:f1:3d:4f:1f:c6:b5:6e:7c:48:a3:6e:8e:a6:35: bb:f4:02:38:ca:50:3a:9a:4e:45:d8:9c:b8:01:ba:fe:1a:a4: b2:ac:df:b8:23:2d:94:06:97:dc:9d:ad:1d:7a:46:60:55:9a: 48:20:a8:8a:f1:45:36:9b:4e:e3:3c:c3:c9:d8:2a:20:86:83: e1:6e:68:79:e6:aa:33:f4:2b:f9:d2:f6:e0:70:5e:e2:4d:e2: 22:d6:4b:df:e0:2b:61:68:70:f3:89:f7:8d:06:b1:b5:1b:74: c0:11:14:51:8d:cf:5e:be:dc:18:09:e2:15:a1:a0:be:b1:6c: c1:b6:f5:f7:7f:37:66:27:97:cc:ff:f8:89:d5:ae:79:32:dc: 39:d7:37:f1:76:94:d3:54:2b:10:92:5c:9f:1e:63:38:47:08: f2:82:c2:9a:76:37:5f:09:3b:10:94:47:0b:76:6a:9f:13:ff: 34:3e:85:38:b8:54:61:eb:1c:63:88:21:3b:a1:4d:14:d5:22: 94:20:1c:3d -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDZBMDExMC8GA1UEBRMoRDE4RDQ0NUQyNjU3RUFGREQ0QTY2RTc1QjBGQkQ2MDMw M0YwMjVGQzAeFw0yNTA3MzEwMTU5NDFaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4OGFjZTBjLTNjMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCk/cqB/uIUQQBVU0ZHqHdLcqVWFfiAS35kd4yXXXDDIKTCPN7gomU7JeXZNylN i7KFxUazQXdp9PYEi/ffULwGNDkZDqBlgcowOMqVBSuUurgsU/J5kDM5XArHskdN yRuUX+Spy88MKeZJ6kseg3OrkLLg/5fJRleVSiIkqycYDfDmHi9eITiDkFgZOUjg kDckOR+Fr1uUopQej5Nw3LAxpHRuhDX9L9PxP26zX9wm5lVRC2sX8yBj18/NMbCR mEgxXPeUMlU5IWLVRCjXndp0zlFhXlpJQysFqTadx6uGjTsO5lTEVfCEU8FnIA84 ey3r3hPJQDryC86l7IxFkRV9AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUIqYUUZqO GjG7+KDkYrrh2YJtOb4wHwYDVR0jBBgwFoAU0Y1EXSZX6v3Upm51sPvWAwPwJfww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZENkEwLzc4REY2MDdDNkRC MTExRjBBRDRCNUU1QUM0RjlBRTAyLzBZMUVYU1pYNnYzVXBtNTFzUHZXQXdQd0pm dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMFkxRVhTWlg2djNVcG01MXNQdldBd1B3SmZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDZBMC83OERGNjA3QzZEQjExMUYwQUQ0QjVFNUFDNEY5QUUwMi8wNTM0MTYxMjZE QjIxMUYwOTYyREM1NUJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAcoBGjANBgkqhkiG9w0BAQsFAAOCAQEAOOkBPf71NnYOO8gl buanAwPO+uHUKXGXce7g+XhepAPaOkTdU5yAXsiNpv0twsNuOdFxjMYqvruJLPE9 Tx/GtW58SKNujqY1u/QCOMpQOppORdicuAG6/hqksqzfuCMtlAaX3J2tHXpGYFWa SCCoivFFNptO4zzDydgqIIaD4W5oeeaqM/Qr+dL24HBe4k3iItZL3+ArYWhw84n3 jQaxtRt0wBEUUY3PXr7cGAniFaGgvrFswbb19383ZieXzP/4idWueTLcOdc38XaU 01QrEJJcnx5jOEcI8oLCmnY3Xwk7EJRHC3ZqnxP/ND6FOLhUYescY4ghO6FNFNUi lCAcPQ== -----END CERTIFICATE-----Generated at Mon Aug 4 13:58:34 2025 by rpki-client