$ rpki-client -vvvf rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/24D4F9F0E61B11EBBAE35771C4F9AE02.roa File: 24D4F9F0E61B11EBBAE35771C4F9AE02.roa (raw, json) Hash identifier: G5SzAklJN+N001SQP5ABH8Wh9nSIb3dMdpozX7p0KVY= Subject key identifier: 09:D0:31:A4:AE:ED:88:C1:A9:2A:B4:E6:3E:3C:A4:65:60:03:80:A2 Certificate issuer: /CN=A91814E9/serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186 Certificate serial: 08C8 Authority key identifier: C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/24D4F9F0E61B11EBBAE35771C4F9AE02.roa Signing time: Tue 10 Nov 2026 20:38:43 +0000 ROA not before: Tue 10 Nov 2026 20:38:43 +0000 ROA not after: Mon 31 Jan 2028 00:00:00 +0000 asID: 7545 IP address blocks: 203.4.197.0/24 maxlen: 24 203.4.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 20:30:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2248 (0x8c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91814E9, serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186 Validity Not Before: Nov 10 20:38:43 2026 GMT Not After : Jan 31 00:00:00 2028 GMT Subject: CN=6af380d3-8de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fc:3d:46:38:ba:5a:41:98:15:3f:4a:0b:12: e0:27:97:ab:e7:45:be:b1:1d:67:75:62:1f:6e:e6: 6b:87:79:5f:1f:1c:b3:59:4f:14:bd:7e:31:f6:98: 0e:39:4b:f7:d1:b4:40:9a:e5:8c:da:bd:a0:21:67: 9b:66:a0:0f:7c:d7:40:12:69:83:9d:10:6b:0d:6d: 7a:dd:e1:75:dc:63:78:1d:28:43:7a:be:b5:5c:c4: 96:c8:75:5c:af:26:2e:9a:02:af:f7:9c:47:55:f5: ba:64:83:0f:dd:68:f1:5f:bd:cb:c0:98:44:37:ac: c0:b1:9c:9e:1a:c1:fa:e3:08:13:ae:47:8d:b3:20: f2:a7:28:2c:0c:ba:20:68:21:86:57:61:b7:99:cc: 26:e4:94:cd:48:d5:b4:32:ee:c9:6c:32:95:c8:53: d2:29:6a:66:73:c9:b8:7e:f2:94:cf:ff:a4:0a:4b: de:d6:60:aa:1d:e5:9c:d1:99:f7:bb:10:0a:d8:41: 71:e3:0e:4c:2e:68:1e:05:42:99:82:cc:30:81:d6: cf:f4:49:99:65:92:2b:03:38:e8:50:35:c5:00:64: 19:7a:43:08:22:04:75:0a:b1:95:ed:6e:93:db:a2: e1:5b:26:7a:81:a4:1c:22:2f:23:62:03:d1:ef:d4: 0f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D0:31:A4:AE:ED:88:C1:A9:2A:B4:E6:3E:3C:A4:65:60:03:80:A2 X509v3 Authority Key Identifier: keyid:C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/24D4F9F0E61B11EBBAE35771C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.4.197.0-203.4.198.255 Signature Algorithm: sha256WithRSAEncryption 27:72:a9:46:c6:6a:08:da:73:d9:0b:21:a1:6e:b9:47:13:1a: f5:7b:7b:46:9b:cd:61:70:16:75:52:96:14:9e:70:7f:d9:7f: 56:5d:b1:79:3c:06:22:16:21:3e:18:95:07:29:16:64:de:31: 66:fe:31:00:93:7b:c7:be:dc:7b:68:ae:27:89:18:1f:bb:da: 28:62:06:30:23:5f:e1:c5:58:9b:ba:64:15:b8:7c:d3:78:20: 79:72:98:cc:41:9e:ab:44:71:f5:f5:a2:7e:f8:18:30:f4:1f: 47:cc:16:79:6d:9a:63:ee:13:cb:73:68:2f:62:28:a5:d8:b1: 8f:d7:ba:4d:cc:b4:57:b8:b3:37:60:c1:8e:2b:2a:56:9f:91: e1:ea:47:a4:c5:33:1c:e2:a7:c0:40:43:64:88:cd:88:56:08: 80:4b:02:c0:24:52:ad:0d:63:79:c7:25:26:b5:3d:e5:2c:1a: ed:fa:70:10:66:f2:61:af:7a:cb:bc:74:fe:e8:96:db:14:9a: fd:c2:a6:b2:cc:95:22:00:1d:7d:48:10:ce:77:aa:24:23:61: 2f:fa:11:2d:c3:d4:5a:98:5d:73:eb:f5:f9:48:e9:41:5d:cc: 9d:a0:7c:aa:a0:ce:d6:3a:57:15:3b:9e:24:a0:88:f2:d4:7f: 87:9d:b1:78 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICCMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE0RTkxMTAvBgNVBAUTKEM0MkZGMUQyRkYzNTI5ODFCQzVGODIyNDBFQzkzOTRF RkFCMzExODYwHhcNMjYxMTEwMjAzODQzWhcNMjgwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWYzODBkMy04ZGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnvw9Rji6WkGYFT9KCxLgJ5er50W+sR1ndWIfbuZrh3lfHxyzWU8UvX4x9pgO OUv30bRAmuWM2r2gIWebZqAPfNdAEmmDnRBrDW163eF13GN4HShDer61XMSWyHVc ryYumgKv95xHVfW6ZIMP3WjxX73LwJhEN6zAsZyeGsH64wgTrkeNsyDypygsDLog aCGGV2G3mcwm5JTNSNW0Mu7JbDKVyFPSKWpmc8m4fvKUz/+kCkve1mCqHeWc0Zn3 uxAK2EFx4w5MLmgeBUKZgswwgdbP9EmZZZIrAzjoUDXFAGQZekMIIgR1CrGV7W6T 26LhWyZ6gaQcIi8jYgPR79QPBwIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFAnQMaSu 7YjBqSq05j48pGVgA4CiMB8GA1UdIwQYMBaAFMQv8dL/NSmBvF+CJA7JOU76sxGG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTRFOS9GRTU3QzJCQzA4 MzAxMUVCQkZFNEM3MzJDNEY5QUUwMi94Q194MHY4MUtZRzhYNElrRHNrNVR2cXpF WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDX3gwdjgxS1lHOFg0SWtEc2s1VHZxekVZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODE0RTkvRkU1N0MyQkMwODMwMTFFQkJGRTRDNzMyQzRGOUFFMDIvMjRENEY5RjBF NjFCMTFFQkJBRTM1NzcxQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBADLBMUDBADLBMYwDQYJKoZIhvcNAQELBQADggEBACdyqUbGagja c9kLIaFuuUcTGvV7e0abzWFwFnVSlhSecH/Zf1ZdsXk8BiIWIT4YlQcpFmTeMWb+ MQCTe8e+3HtorieJGB+72ihiBjAjX+HFWJu6ZBW4fNN4IHlymMxBnqtEcfX1on74 GDD0H0fMFnltmmPuE8tzaC9iKKXYsY/Xuk3MtFe4szdgwY4rKlafkeHqR6TFMxzi p8BAQ2SIzYhWCIBLAsAkUq0NY3nHJSa1PeUsGu36cBBm8mGvesu8dP7oltsUmv3C prLMlSIAHX1IEM53qiQjYS/6ES3D1FqYXXPr9flI6UFdzJ2gfKqgztY6VxU7niSg iPLUf4edsXg= -----END CERTIFICATE-----Generated at Sun Nov 15 10:56:28 2026 by rpki-client