$ rpki-client -vvvf rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/F594A6063FA511F1B714D040BE833773.roa File: F594A6063FA511F1B714D040BE833773.roa (raw, json) Hash identifier: PJXKD/lz4vo98t8D5ft0aEy9ZerUNxD870bJIgzENBU= Subject key identifier: 6D:EA:C1:E5:BA:8E:41:E6:B8:8E:48:39:B3:EB:60:AF:B1:C5:F2:38 Certificate issuer: /CN=A91795C3/serialNumber=9546FFDA30E84E6FE8F35E68EC25541839E9AD0F Certificate serial: 72 Authority key identifier: 95:46:FF:DA:30:E8:4E:6F:E8:F3:5E:68:EC:25:54:18:39:E9:AD:0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUb_2jDoTm_o815o7CVUGDnprQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/F594A6063FA511F1B714D040BE833773.roa Signing time: Tue 15 Sep 2026 08:57:39 +0000 ROA not before: Tue 15 Sep 2026 08:57:39 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 4776 IP address blocks: 203.148.160.0/24 maxlen: 24 203.148.162.0/24 maxlen: 24 203.148.174.0/23 maxlen: 24 203.148.200.0/23 maxlen: 24 203.148.206.0/23 maxlen: 24 203.148.210.0/23 maxlen: 24 203.148.236.0/23 maxlen: 24 203.148.250.0/23 maxlen: 24 203.148.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.crl rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUb_2jDoTm_o815o7CVUGDnprQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 08:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91795C3, serialNumber=9546FFDA30E84E6FE8F35E68EC25541839E9AD0F Validity Not Before: Sep 15 08:57:39 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6aa90883-66bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3a:b5:38:1d:10:2c:6f:d4:fc:a8:9d:00:cf: bf:45:ec:ef:da:33:2b:78:33:87:31:a5:20:f2:e6: 3f:9d:3b:b5:eb:e9:06:54:4f:b8:da:61:3d:96:d3: 2a:4d:1d:89:6c:bd:83:58:f4:3e:26:05:66:31:3b: db:c3:cb:ae:88:9d:67:a1:31:1d:02:d6:29:f7:8a: 8b:cf:9d:42:a0:aa:52:71:16:7d:4b:df:e4:65:9d: 55:e4:4f:aa:7d:3d:64:b6:bf:23:49:27:75:e0:a1: 95:a9:8e:25:66:6a:eb:f4:ed:02:70:cd:2d:ee:bf: 8e:41:c4:7f:20:51:50:d7:32:9a:e6:76:86:9b:82: da:29:e2:0d:a8:85:2a:f2:cc:2f:3e:dd:a1:32:c6: 12:3a:db:f3:62:80:8c:83:52:ca:06:e4:dc:70:01: c7:7f:cb:37:67:74:66:68:96:12:41:c1:e0:10:86: 82:ef:61:d5:b6:6a:8e:13:51:a2:0a:e4:b2:98:9e: 4b:fd:8e:02:2c:78:41:8a:04:fb:54:d5:d6:2a:f3: 4d:c8:83:c2:f3:ad:af:f6:f8:28:45:1e:63:57:2a: 04:de:f5:ed:7a:06:a8:93:41:68:74:42:1b:0c:86: 77:01:58:c0:26:b7:b0:8d:5f:fb:94:b0:75:1a:db: 27:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:EA:C1:E5:BA:8E:41:E6:B8:8E:48:39:B3:EB:60:AF:B1:C5:F2:38 X509v3 Authority Key Identifier: keyid:95:46:FF:DA:30:E8:4E:6F:E8:F3:5E:68:EC:25:54:18:39:E9:AD:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUb_2jDoTm_o815o7CVUGDnprQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/F594A6063FA511F1B714D040BE833773.roa sbgp-ipAddrBlock: critical IPv4: 203.148.160.0/24 203.148.162.0/24 203.148.174.0/23 203.148.200.0/23 203.148.206.0/23 203.148.210.0/23 203.148.236.0/23 203.148.250.0/23 203.148.254.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:b8:60:fe:71:e5:29:72:eb:ec:9f:f2:b6:0b:45:c0:d3:1c: 84:15:14:26:91:3c:fb:91:26:e1:95:71:ae:8d:2b:a5:ce:69: b3:6b:80:f6:c1:c5:c7:21:cb:74:2e:14:4e:4c:4b:5a:08:dd: 0e:a7:1a:a7:11:61:6d:db:56:e4:cc:d7:ed:3b:7e:91:af:77: 74:dd:e5:4a:0d:08:f5:36:74:85:00:cb:ee:44:9c:1b:3d:c4: ab:13:40:6c:95:12:fd:99:47:96:a1:3d:5c:ab:6a:7c:e8:d2: 01:dc:d5:97:0b:a3:40:15:57:5e:ac:7a:ea:00:77:81:93:5b: 3c:25:57:44:e4:50:d7:98:ad:cf:37:c0:26:ae:0e:ae:24:7c: 30:37:9b:61:55:34:59:12:dc:5b:53:08:d3:bb:52:8e:37:8e: ce:78:77:f2:3c:50:b0:92:19:08:b8:36:79:20:44:82:50:30: 8c:84:89:36:80:d1:49:c8:56:50:61:f8:e6:2f:4f:5e:5a:5d: 41:48:7a:dc:eb:fc:ea:d9:42:80:31:3f:9a:63:46:d7:a3:54: e7:e7:bc:87:ef:ec:6d:25:9e:08:97:e1:84:d2:61:d4:56:ec: d2:ca:b0:6d:0a:cb:d3:fb:08:e7:ce:e5:ca:4d:69:26:13:d1: fc:ad:04:e8 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OTVDMzExMC8GA1UEBRMoOTU0NkZGREEzMEU4NEU2RkU4RjM1RTY4RUMyNTU0MTgz OUU5QUQwRjAeFw0yNjA5MTUwODU3MzlaFw0yNzEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYTkwODgzLTY2YmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhOrU4HRAsb9T8qJ0Az79F7O/aMyt4M4cxpSDy5j+dO7Xr6QZUT7jaYT2W0ypN HYlsvYNY9D4mBWYxO9vDy66InWehMR0C1in3iovPnUKgqlJxFn1L3+RlnVXkT6p9 PWS2vyNJJ3XgoZWpjiVmauv07QJwzS3uv45BxH8gUVDXMprmdoabgtop4g2ohSry zC8+3aEyxhI62/NigIyDUsoG5NxwAcd/yzdndGZolhJBweAQhoLvYdW2ao4TUaIK 5LKYnkv9jgIseEGKBPtU1dYq803Ig8Lzra/2+ChFHmNXKgTe9e16BqiTQWh0QhsM hncBWMAmt7CNX/uUsHUa2yc7AgMBAAGjggKQMIICjDAdBgNVHQ4EFgQUberB5bqO Qea4jkg5s+tgr7HF8jgwHwYDVR0jBBgwFoAUlUb/2jDoTm/o815o7CVUGDnprQ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5NUMzLzJCQjJCQjI2MkNE QTExRjFBNzYyN0RDRjlCODMzNzczL2xVYl8yakRvVG1fbzgxNW83Q1ZVR0RucHJR OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbFViXzJqRG9UbV9vODE1bzdDVlVHRG5wclE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTVDMy8yQkIyQkIyNjJDREExMUYxQTc2MjdEQ0Y5QjgzMzc3My9GNTk0QTYwNjNG QTUxMUYxQjcxNEQwNDBCRTgzMzc3My5yb2EwTwYIKwYBBQUHAQcBAf8EQDA+MDwE AgABMDYDBADLlKADBADLlKIDBAHLlK4DBAHLlMgDBAHLlM4DBAHLlNIDBAHLlOwD BAHLlPoDBAHLlP4wDQYJKoZIhvcNAQELBQADggEBACu4YP5x5Sly6+yf8rYLRcDT HIQVFCaRPPuRJuGVca6NK6XOabNrgPbBxcchy3QuFE5MS1oI3Q6nGqcRYW3bVuTM 1+07fpGvd3Td5UoNCPU2dIUAy+5EnBs9xKsTQGyVEv2ZR5ahPVyranzo0gHc1ZcL o0AVV16seuoAd4GTWzwlV0TkUNeYrc83wCauDq4kfDA3m2FVNFkS3FtTCNO7Uo43 js54d/I8ULCSGQi4NnkgRIJQMIyEiTaA0UnIVlBh+OYvT15aXUFIetzr/OrZQoAx P5pjRtejVOfnvIfv7G0lngiX4YTSYdRW7NLKsG0Ky9P7COfO5cpNaSYT0fytBOg= -----END CERTIFICATE-----Generated at Tue Oct 13 04:32:43 2026 by rpki-client