$ rpki-client -vvvf rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/7DFD24A0A69D11ED970A2E1EC4F9AE02.roa File: 7DFD24A0A69D11ED970A2E1EC4F9AE02.roa (raw, json) Hash identifier: cLqF+FYKgySilfFTaVNQOA0caLM+dLKLkkEq/OktR3Y= Subject key identifier: 48:E0:65:52:7A:25:A6:3D:AE:E4:69:E2:D6:C2:D6:E6:85:9F:85:46 Certificate issuer: /CN=A91406AA/serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101 Certificate serial: 07CF Authority key identifier: 21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/7DFD24A0A69D11ED970A2E1EC4F9AE02.roa Signing time: Wed 30 Sep 2026 22:42:53 +0000 ROA not before: Wed 30 Sep 2026 22:42:53 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 16625 IP address blocks: 131.203.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 21:36:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1999 (0x7cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406AA, serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101 Validity Not Before: Sep 30 22:42:53 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abd906d-fb23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f1:24:a7:55:f2:3b:73:49:4f:26:8f:51:c8: 10:dc:83:df:3f:98:80:60:af:bb:16:d1:31:67:cf: 5d:43:4b:90:a8:33:8d:88:da:45:f8:b3:84:9c:ca: ab:9c:50:81:cb:12:39:07:14:6a:88:2b:3c:cd:de: 8f:3a:14:47:64:6a:5c:8a:26:b9:32:98:01:33:1b: 75:6f:33:b1:4f:a2:dc:98:67:97:d1:61:d4:a1:b2: 26:f7:24:68:b6:31:88:f2:24:f7:bf:eb:3c:df:f1: ec:2b:26:74:a9:09:a1:b0:61:45:cc:23:8e:57:fb: 8d:29:2c:3d:1e:46:4d:ce:cb:77:c7:7f:13:e5:24: ea:af:55:9a:a6:e7:62:57:c1:db:3e:24:43:d0:00: 23:6a:b1:49:68:34:c4:58:4b:1e:54:28:f7:86:03: ec:39:9e:ab:c8:80:3b:1b:2c:ce:92:e1:fc:44:04: be:8d:a8:2f:cc:1f:ce:49:0e:f9:61:6a:8c:75:d7: 9d:8c:71:1d:f7:0c:e6:38:80:e2:e2:ed:57:f1:20: db:ec:43:9e:4a:c1:08:cf:35:39:44:0e:60:f4:8a: 72:3b:71:22:90:74:e0:9e:56:3b:49:d0:e9:ed:b0: b8:0f:33:eb:09:23:09:53:05:28:39:a7:46:80:a2: 41:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E0:65:52:7A:25:A6:3D:AE:E4:69:E2:D6:C2:D6:E6:85:9F:85:46 X509v3 Authority Key Identifier: keyid:21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/7DFD24A0A69D11ED970A2E1EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 131.203.4.0/22 Signature Algorithm: sha256WithRSAEncryption 98:ea:d3:c0:db:13:03:7c:d7:cb:fe:e9:5d:2e:c1:22:f9:02: 6e:c7:1e:f9:db:13:dd:cd:86:2b:35:ef:5e:74:37:44:ae:86: e8:61:b2:5a:82:93:11:6f:cf:3e:58:8f:77:3c:ad:9c:7c:dc: f7:de:b6:5c:0f:98:29:93:e0:96:a6:78:bc:00:8e:cb:69:95: 44:aa:f4:70:b8:d1:59:a7:3f:dc:c6:85:e9:0f:de:86:d2:03: c0:40:83:6b:c6:7c:c7:59:c8:bf:11:c6:29:12:ff:a6:46:9c: e5:dc:31:e0:a9:ed:d1:2e:9c:1c:ca:8c:6a:11:bb:9e:c5:d4: 6e:98:fd:51:c2:c7:25:21:cc:a7:e5:ca:58:06:87:21:e8:0d: c2:8d:b5:dd:45:15:d7:05:15:3f:bf:39:c9:da:3a:ec:4f:e2: 0f:19:ce:cc:33:28:43:88:5d:08:37:c7:21:51:d6:b4:c7:a8: 94:e4:41:fc:92:f6:0a:f8:d5:e0:4b:43:7f:28:70:f0:82:f2: 0f:df:75:c1:9d:61:4f:c2:00:c7:b3:80:11:ec:75:c6:10:22: c4:a6:20:ed:52:3f:8c:48:78:16:a3:ac:86:c3:a6:95:af:63: e3:3c:cd:ee:a4:e9:93:01:72:85:90:42:c5:5e:a4:7d:d6:b1: 8c:7b:0d:2e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICB88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA2QUExMTAvBgNVBAUTKDIxOEE4QUEwNTAyNjdCMDgwNUUzRkRDOEE5MzlCRjhG QkNCMDAxMDEwHhcNMjYwOTMwMjI0MjUzWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkOTA2ZC1mYjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/Ekp1XyO3NJTyaPUcgQ3IPfP5iAYK+7FtExZ89dQ0uQqDONiNpF+LOEnMqr nFCByxI5BxRqiCs8zd6POhRHZGpciia5MpgBMxt1bzOxT6LcmGeX0WHUobIm9yRo tjGI8iT3v+s83/HsKyZ0qQmhsGFFzCOOV/uNKSw9HkZNzst3x38T5STqr1Wapudi V8HbPiRD0AAjarFJaDTEWEseVCj3hgPsOZ6ryIA7GyzOkuH8RAS+jagvzB/OSQ75 YWqMddedjHEd9wzmOIDi4u1X8SDb7EOeSsEIzzU5RA5g9IpyO3EikHTgnlY7SdDp 7bC4DzPrCSMJUwUoOadGgKJBbQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEjgZVJ6 JaY9ruRp4tbC1uaFn4VGMB8GA1UdIwQYMBaAFCGKiqBQJnsIBeP9yKk5v4+8sAEB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84NjU4RTQ2Njg2 QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9JWXFLb0ZBbWV3Z0Y0XzNJcVRtX2o3eXdB UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lZcUtvRkFtZXdnRjRfM0lxVG1fajd5d0FRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDA2QUEvODY1OEU0NjY4NkMxMTFFQkJBQjMxODRCQzRGOUFFMDIvN0RGRDI0QTBB NjlEMTFFRDk3MEEyRTFFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCg8sEMA0GCSqGSIb3DQEBCwUAA4IBAQCY6tPA2xMDfNfL/uldLsEi +QJuxx752xPdzYYrNe9edDdEroboYbJagpMRb88+WI93PK2cfNz33rZcD5gpk+CW pni8AI7LaZVEqvRwuNFZpz/cxoXpD96G0gPAQINrxnzHWci/EcYpEv+mRpzl3DHg qe3RLpwcyoxqEbuexdRumP1RwsclIcyn5cpYBoch6A3CjbXdRRXXBRU/vznJ2jrs T+IPGc7MMyhDiF0IN8chUda0x6iU5EH8kvYK+NXgS0N/KHDwgvIP33XBnWFPwgDH s4AR7HXGECLEpiDtUj+MSHgWo6yGw6aVr2PjPM3upOmTAXKFkELFXqR91rGMew0u -----END CERTIFICATE-----Generated at Sun Nov 15 12:18:25 2026 by rpki-client