$ rpki-client -vvvf rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/0D3A7A803B7311EA80E1F877C4F9AE02.roa File: 0D3A7A803B7311EA80E1F877C4F9AE02.roa (raw, json) Hash identifier: MCISxnfnNlB/wFJ//N3jml3NUfgJKmd1tRtdTSF+Xts= Subject key identifier: C9:DE:82:E5:2F:46:E2:EE:8A:52:43:28:75:A2:12:F5:8B:67:00:07 Certificate issuer: /CN=A91555EA/serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Certificate serial: 0C36 Authority key identifier: 97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/0D3A7A803B7311EA80E1F877C4F9AE02.roa Signing time: Mon 24 Aug 2026 19:37:59 +0000 ROA not before: Mon 24 Aug 2026 19:37:59 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 45273 IP address blocks: 117.104.184.0/24 maxlen: 24 117.104.185.0/24 maxlen: 24 202.52.138.0/24 maxlen: 24 202.52.139.0/24 maxlen: 24 202.90.200.0/24 maxlen: 24 202.90.201.0/24 maxlen: 24 202.90.202.0/24 maxlen: 24 202.90.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 18:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3126 (0xc36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91555EA, serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Validity Not Before: Aug 24 19:37:59 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a8c9d97-237f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:18:a4:ab:d4:08:09:83:61:88:de:82:61:58: cc:1f:3c:5f:e6:74:e3:27:62:9c:3a:12:b8:16:72: 09:e1:9b:81:b7:d9:6e:6d:3f:fd:b0:94:e2:22:eb: 1d:6f:b8:84:61:77:2e:e7:f8:d0:02:96:63:fa:c4: 76:a4:d3:ee:59:65:b3:29:73:4c:76:d1:1c:82:aa: ae:78:d7:0c:e5:0b:e9:26:40:a3:f8:f6:55:71:47: 99:7d:ea:aa:34:1e:cd:a2:dd:50:7f:f5:52:20:6d: d9:ad:c9:59:e7:98:94:c0:ff:cf:55:5a:68:3e:42: e2:00:31:ff:12:fa:7c:49:bb:dc:23:bd:74:02:38: e9:15:99:e7:f5:6c:85:0d:5b:7e:75:d1:f5:0f:c1: 16:cd:7e:1c:b8:d6:10:6d:6e:7f:d7:fb:4c:9c:b7: 39:f8:da:76:e0:5d:d7:d2:b8:5d:26:e8:c5:86:87: 7d:54:7e:e3:b8:bb:a8:7f:e7:97:23:ee:bb:07:be: b2:34:5d:a0:f2:a2:1d:57:99:98:b5:2b:4b:d9:ce: 05:1f:03:03:cb:46:43:1a:dd:4b:e5:9d:5d:08:e4: cf:48:68:64:b4:e3:b7:03:d9:90:2c:ca:57:36:e8: 01:95:87:ae:7c:55:1a:0c:f4:24:68:65:b0:9f:ec: 8b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:DE:82:E5:2F:46:E2:EE:8A:52:43:28:75:A2:12:F5:8B:67:00:07 X509v3 Authority Key Identifier: keyid:97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/0D3A7A803B7311EA80E1F877C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 117.104.184.0/23 202.52.138.0/23 202.90.200.0/22 Signature Algorithm: sha256WithRSAEncryption cc:8e:cc:22:01:5c:98:46:f2:6f:44:a8:5e:57:71:d1:4f:37: 40:58:5f:01:f9:30:c6:5a:3d:7e:1d:64:74:50:e9:3d:c2:9c: 50:8d:50:c0:c3:68:84:8a:d5:1b:ac:53:ae:39:2d:8a:a6:0e: 6f:10:48:8f:cd:94:23:20:f7:34:06:9a:6d:2f:07:f4:c9:72: de:19:61:07:42:f5:62:af:9c:a1:71:19:79:12:f2:c2:9f:31: 8c:58:be:6d:b6:ed:07:44:6b:84:cd:71:95:61:4b:1d:30:56: 27:b5:ea:58:ae:68:b5:05:68:49:1a:87:03:f0:eb:0f:22:40: 03:f5:13:4a:e3:76:0a:53:cd:d1:c3:69:7a:54:68:b9:10:5c: 33:a3:22:d1:eb:57:88:71:d9:37:5f:33:4a:8c:89:bb:d7:70: 4c:f6:7a:a5:47:ff:2f:4f:c8:19:88:d9:9f:0a:ff:a4:95:ff: 91:ba:d1:a8:03:42:56:88:cc:ac:3b:70:ac:c5:e3:bf:5a:cd: 69:61:ba:13:b5:ef:6b:7e:fe:2d:11:e4:31:95:39:42:58:18: b9:1a:76:63:2f:16:7e:e2:01:0e:91:d0:56:dc:8b:19:10:09: ef:e1:27:e1:26:b6:c8:8f:c7:c3:ab:fa:46:60:0c:59:61:29: 80:e6:00:ea -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICDDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU1RUExMTAvBgNVBAUTKDk3OERBRTJDMTBBNzJFRDA0Rjk0MTI4RkZDNUU4Q0I3 RDEwMkVBQ0EwHhcNMjYwODI0MTkzNzU5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YThjOWQ5Ny0yMzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRikq9QICYNhiN6CYVjMHzxf5nTjJ2KcOhK4FnIJ4ZuBt9lubT/9sJTiIusd b7iEYXcu5/jQApZj+sR2pNPuWWWzKXNMdtEcgqqueNcM5QvpJkCj+PZVcUeZfeqq NB7Not1Qf/VSIG3ZrclZ55iUwP/PVVpoPkLiADH/Evp8SbvcI710AjjpFZnn9WyF DVt+ddH1D8EWzX4cuNYQbW5/1/tMnLc5+Np24F3X0rhdJujFhod9VH7juLuof+eX I+67B76yNF2g8qIdV5mYtStL2c4FHwMDy0ZDGt1L5Z1dCOTPSGhktOO3A9mQLMpX NugBlYeufFUaDPQkaGWwn+yLyQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFMneguUv RuLuilJDKHWiEvWLZwAHMB8GA1UdIwQYMBaAFJeNriwQpy7QT5QSj/xejLfRAurK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTVFQS83QzYwQjlGNjNC NkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0QlBsQktQX0Y2TXQ5RUM2 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w0MnVMQkNuTHRCUGxCS1BfRjZNdDlFQzZzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTU1RUEvN0M2MEI5RjYzQjZFMTFFQUFFNUYxNjZCQzRGOUFFMDIvMEQzQTdBODAz QjczMTFFQTgwRTFGODc3QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQBdWi4AwQByjSKAwQCylrIMA0GCSqGSIb3DQEBCwUAA4IBAQDMjswi AVyYRvJvRKheV3HRTzdAWF8B+TDGWj1+HWR0UOk9wpxQjVDAw2iEitUbrFOuOS2K pg5vEEiPzZQjIPc0BpptLwf0yXLeGWEHQvVir5yhcRl5EvLCnzGMWL5ttu0HRGuE zXGVYUsdMFYntepYrmi1BWhJGocD8OsPIkAD9RNK43YKU83Rw2l6VGi5EFwzoyLR 61eIcdk3XzNKjIm713BM9nqlR/8vT8gZiNmfCv+klf+RutGoA0JWiMysO3CsxeO/ Ws1pYboTte9rfv4tEeQxlTlCWBi5GnZjLxZ+4gEOkdBW3IsZEAnv4SfhJrbIj8fD q/pGYAxZYSmA5gDq -----END CERTIFICATE-----Generated at Tue Sep 29 02:37:19 2026 by rpki-client