$ rpki-client -vvf rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/398B3186FE5111E6BCEC6E72C4F9AE02.roa File: 398B3186FE5111E6BCEC6E72C4F9AE02.roa (raw, json) Hash identifier: XTPwHAE+RSrJ2wVavnzJET8Caph7nR447oVW7w8/WgU= Subject key identifier: 54:1A:BB:E7:56:5D:64:FC:D5:67:78:73:82:8D:14:67:4A:7A:63:3B Certificate issuer: /CN=A91798AD/serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B Certificate serial: 1CF9 Authority key identifier: 7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/398B3186FE5111E6BCEC6E72C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:54:50 +0000 ROA not before: Tue 02 Sep 2025 16:34:39 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 17922 IP address blocks: 114.4.64.0/24 maxlen: 24 114.4.65.0/24 maxlen: 24 114.4.66.0/24 maxlen: 24 114.4.67.0/24 maxlen: 24 114.4.68.0/24 maxlen: 24 114.4.69.0/24 maxlen: 24 114.4.70.0/24 maxlen: 24 114.4.71.0/24 maxlen: 24 124.195.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7417 (0x1cf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91798AD, serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B Validity Not Before: Sep 2 16:34:39 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a4614a-6486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:67:e0:90:b1:7a:1b:38:21:c3:10:40:fc:bb: 1d:39:6a:72:5e:44:3f:d1:e4:2f:16:63:e1:df:f2: e7:a8:8d:43:50:d8:48:38:41:d8:31:b5:77:f7:33: 85:29:a0:85:e2:86:a8:f8:51:d0:ac:49:79:1f:ea: 69:24:78:f7:aa:58:46:64:2c:ff:1f:ca:0a:0b:28: bb:26:12:5b:6b:32:87:b6:95:71:96:77:7f:bd:62: 77:29:8b:4d:3d:4f:0b:3e:d9:29:92:89:39:14:e0: 17:91:41:a2:9e:ae:f5:12:0a:08:88:e7:0f:85:34: f6:fd:e5:6a:bd:10:c7:ab:cf:af:e1:47:f9:cf:b2: 2a:74:9e:12:e2:64:72:7d:19:36:1c:88:d2:86:3a: 32:ed:4f:97:e3:e6:10:9c:62:44:8e:87:d3:62:b8: 7c:d3:ad:c7:49:7a:98:c7:9c:77:2e:e7:85:b9:7c: 55:83:b4:c2:0b:f0:51:c8:f2:d5:7a:58:9b:6e:a9: 95:3d:bc:4e:bd:9b:fb:c6:91:61:57:30:e5:8a:90: d4:5d:8d:8a:01:0f:2f:03:6a:7a:24:83:42:26:6a: 07:49:2b:30:5e:3e:fa:42:49:ea:a4:54:fb:6a:92: 7a:97:7d:8e:66:d1:c2:01:1a:f0:8b:be:98:b9:a8: de:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:1A:BB:E7:56:5D:64:FC:D5:67:78:73:82:8D:14:67:4A:7A:63:3B X509v3 Authority Key Identifier: keyid:7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/398B3186FE5111E6BCEC6E72C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 114.4.64.0/21 124.195.38.0/23 Signature Algorithm: sha256WithRSAEncryption b0:66:6a:e7:bc:8e:60:41:0b:6d:f0:c1:06:1a:8d:fe:ec:34: cc:6a:1f:ab:62:81:2c:9f:44:1b:a5:21:31:7b:ee:8d:c3:0d: bb:41:ba:dc:de:59:fe:26:15:38:42:5d:c8:ed:84:f7:a8:7e: 3b:17:c8:ce:e4:62:88:ad:d4:51:ec:a2:9b:91:99:f6:2d:4b: b9:7b:19:83:9a:8c:b3:e3:f6:c2:ed:cf:a2:c0:87:e7:d3:40: cf:77:16:bb:55:47:bb:33:cd:a1:35:68:e0:5a:cc:64:5e:e7: e3:c2:0e:76:17:b3:9e:b8:62:2f:2d:b9:fe:82:4f:76:4c:0b: b8:24:eb:5b:c4:19:12:96:c2:6e:a6:d0:2e:9a:f8:32:1f:fc: f5:d0:f8:a1:d9:18:ee:5d:cb:2b:4c:74:23:f6:39:8b:97:f2: 25:9f:11:71:63:0b:f6:3c:b8:ed:24:b5:4f:92:0b:0a:cc:4d: f1:9f:da:23:3c:d6:aa:83:59:39:d9:99:00:58:d0:b5:6c:5a: 27:b8:a1:84:74:e5:f6:35:b4:14:2b:27:34:20:57:ab:48:20: 54:c0:44:85:19:30:80:18:46:58:e0:fc:4e:99:af:ea:c6:00: b9:00:ca:fe:72:f2:ee:2b:2e:e8:ce:ad:bc:89:6b:22:11:93: 6f:73:fd:d2 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICHPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk4QUQxMTAvBgNVBAUTKDdDMUEwRjQ4RUE0MzIzMUZBMzM0M0Q1OTI4MjFFRjI5 RThEMkIzMUIwHhcNMjUwOTAyMTYzNDM5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjE0YS02NDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl2fgkLF6GzghwxBA/LsdOWpyXkQ/0eQvFmPh3/LnqI1DUNhIOEHYMbV39zOF KaCF4oao+FHQrEl5H+ppJHj3qlhGZCz/H8oKCyi7JhJbazKHtpVxlnd/vWJ3KYtN PU8LPtkpkok5FOAXkUGinq71EgoIiOcPhTT2/eVqvRDHq8+v4Uf5z7IqdJ4S4mRy fRk2HIjShjoy7U+X4+YQnGJEjofTYrh8063HSXqYx5x3LueFuXxVg7TCC/BRyPLV elibbqmVPbxOvZv7xpFhVzDlipDUXY2KAQ8vA2p6JINCJmoHSSswXj76QknqpFT7 apJ6l32OZtHCARrwi76YuajeywIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFFQau+dW XWT81Wd4c4KNFGdKemM7MB8GA1UdIwQYMBaAFHwaD0jqQyMfozQ9WSgh7yno0rMb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OThBRC83MEVGQjRBQ0ZF MkExMUU2OEYyQzVBMTNDNEY5QUUwMi9mQm9QU09wREl4LWpORDFaS0NIdktlalNz eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZCb1BTT3BESXgtak5EMVpLQ0h2S2VqU3N4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Nzk4QUQvNzBFRkI0QUNGRTJBMTFFNjhGMkM1QTEzQzRGOUFFMDIvMzk4QjMxODZG RTUxMTFFNkJDRUM2RTcyQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQDcgRAAwQBfMMmMA0GCSqGSIb3DQEBCwUAA4IBAQCwZmrnvI5gQQtt 8MEGGo3+7DTMah+rYoEsn0QbpSExe+6Nww27Qbrc3ln+JhU4Ql3I7YT3qH47F8jO 5GKIrdRR7KKbkZn2LUu5exmDmoyz4/bC7c+iwIfn00DPdxa7VUe7M82hNWjgWsxk Xufjwg52F7OeuGIvLbn+gk92TAu4JOtbxBkSlsJuptAumvgyH/z10Pih2RjuXcsr THQj9jmLl/IlnxFxYwv2PLjtJLVPkgsKzE3xn9ojPNaqg1k52ZkAWNC1bFonuKGE dOX2NbQUKyc0IFerSCBUwESFGTCAGEZY4PxOma/qxgC5AMr+cvLuKy7ozq28iWsi EZNvc/3S -----END CERTIFICATE-----Generated at Thu Mar 26 21:14:48 2026 by rpki-client