$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/095B5200A5B111F09CCCE85FC4F9AE02.roa File: 095B5200A5B111F09CCCE85FC4F9AE02.roa (raw, json) Hash identifier: dHjg4aetmR+CT/hIpvOyBgw5vrSUKwUdGHYu9vF0GrM= Subject key identifier: 4F:75:ED:9E:00:48:61:CF:21:4A:04:9C:DA:59:C6:F3:B7:11:ED:38 Certificate issuer: /CN=A91B3247/serialNumber=0DDABBF31EEC68766EF669AF9735240C38993459 Certificate serial: F5 Authority key identifier: 0D:DA:BB:F3:1E:EC:68:76:6E:F6:69:AF:97:35:24:0C:38:99:34:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/095B5200A5B111F09CCCE85FC4F9AE02.roa Signing time: Wed 23 Sep 2026 06:56:46 +0000 ROA not before: Wed 23 Sep 2026 06:56:46 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 154112 IP address blocks: 203.9.214.0/24 maxlen: 24 203.9.215.0/24 maxlen: 24 2001:df5:f240::/48 maxlen: 48 2001:df5:f241::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.crl rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 07:19:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3247, serialNumber=0DDABBF31EEC68766EF669AF9735240C38993459 Validity Not Before: Sep 23 06:56:46 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ab3782e-45ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c9:51:35:aa:35:ff:7a:8c:f1:4e:40:b0:e4: f5:e9:a6:7d:67:62:f4:91:e7:20:d7:a2:da:15:6c: e7:8a:55:d9:43:29:e0:e7:f2:bc:2d:8d:53:2d:fd: cc:c7:c8:67:ad:b1:8e:ea:69:ef:10:9e:20:15:88: ca:73:23:37:82:d9:65:c1:61:d8:4b:5e:d6:98:48: b8:56:f0:f7:e0:72:3b:1e:f1:0a:24:46:e4:75:1b: 44:c9:71:3a:44:7e:2a:fb:8a:bc:c8:b5:a6:5d:5a: a9:ff:09:53:3b:d0:5e:00:cc:f4:ca:c0:75:05:81: 6a:be:2b:91:f6:69:e3:19:b5:f6:ad:08:c8:f5:99: 0e:e0:c6:6c:f1:10:0c:7d:d2:67:a7:3d:b0:05:e3: aa:90:1f:ae:5d:63:f7:35:4d:3d:23:f8:c7:72:57: 5b:d1:e7:83:a3:27:08:7c:bb:d2:df:c5:01:6b:52: d1:5f:44:8c:f6:05:64:7d:10:c2:02:86:57:41:bb: 7a:7a:4e:22:67:62:7d:f0:d2:a4:12:d1:e1:83:6e: c5:6f:43:52:3b:a4:10:a3:46:2f:a0:54:24:ca:25: 0e:5e:09:26:0d:95:ec:fc:4d:36:ae:97:fc:9e:ca: e6:1e:f8:b2:8d:d4:0f:a4:24:0a:49:e3:75:7d:97: bb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:75:ED:9E:00:48:61:CF:21:4A:04:9C:DA:59:C6:F3:B7:11:ED:38 X509v3 Authority Key Identifier: keyid:0D:DA:BB:F3:1E:EC:68:76:6E:F6:69:AF:97:35:24:0C:38:99:34:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/095B5200A5B111F09CCCE85FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.9.214.0/23 IPv6: 2001:df5:f240::/47 Signature Algorithm: sha256WithRSAEncryption 82:14:41:7b:49:98:b4:3b:39:ab:0e:6a:ce:59:21:c2:74:a0: cc:5e:ba:ad:99:48:7e:f2:5e:e3:4e:6c:7c:c8:8a:88:28:38: 45:ef:3f:bb:9a:00:59:35:b1:8a:da:aa:b2:37:bd:9b:db:61: fd:fe:c6:80:2a:f9:f9:30:6d:5f:fd:aa:14:15:96:18:e6:25: e5:5c:2a:4e:fc:28:ce:20:e7:65:be:05:c3:fb:d9:38:a5:c7: 78:99:64:f9:51:49:2e:2f:92:1e:9a:b2:6d:a3:e6:b6:fb:71: c8:82:0d:be:4c:c4:6a:99:25:15:30:d6:4a:d5:5b:01:df:63: 8c:c3:89:4a:e0:c6:45:fc:f0:f9:e4:2a:50:b9:1e:4f:f0:a5: 76:88:70:b1:fb:6b:1d:5a:de:d3:01:c1:77:4d:84:52:cb:f0: 1f:bb:18:cf:e3:95:99:ed:0a:95:b9:56:03:a4:e6:3b:df:8f: 17:14:65:a2:bd:76:00:8e:3d:d9:e2:6c:5a:ee:00:71:aa:63: e4:be:7f:28:87:20:0d:df:3d:9e:64:08:02:69:66:c9:46:a3: 0f:ab:c6:0d:99:ec:84:0f:ad:dd:d1:f1:30:2b:52:11:fd:08: 0c:e7:97:82:b5:0b:3f:d6:2e:12:2e:c2:c6:9a:42:c1:8c:b3: 9f:7a:34:ae -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMyNDcxMTAvBgNVBAUTKDBEREFCQkYzMUVFQzY4NzY2RUY2NjlBRjk3MzUyNDBD Mzg5OTM0NTkwHhcNMjYwOTIzMDY1NjQ2WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWIzNzgyZS00NWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApslRNao1/3qM8U5AsOT16aZ9Z2L0kecg16LaFWznilXZQyng5/K8LY1TLf3M x8hnrbGO6mnvEJ4gFYjKcyM3gtllwWHYS17WmEi4VvD34HI7HvEKJEbkdRtEyXE6 RH4q+4q8yLWmXVqp/wlTO9BeAMz0ysB1BYFqviuR9mnjGbX2rQjI9ZkO4MZs8RAM fdJnpz2wBeOqkB+uXWP3NU09I/jHcldb0eeDoycIfLvS38UBa1LRX0SM9gVkfRDC AoZXQbt6ek4iZ2J98NKkEtHhg27Fb0NSO6QQo0YvoFQkyiUOXgkmDZXs/E02rpf8 nsrmHviyjdQPpCQKSeN1fZe7zwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFE917Z4A SGHPIUoEnNpZxvO3Ee04MB8GA1UdIwQYMBaAFA3au/Me7Gh2bvZpr5c1JAw4mTRZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzI0Ny8zMjA0NEJGRTcx RUUxMUYwOTNDMjJFMThDNEY5QUUwMi9EZHE3OHg3c2FIWnU5bW12bHpVa0REaVpO RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RkcTc4eDdzYUhadTltbXZselVrRERpWk5Gay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjMyNDcvMzIwNDRCRkU3MUVFMTFGMDkzQzIyRTE4QzRGOUFFMDIvMDk1QjUyMDBB NUIxMTFGMDlDQ0NFODVGQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBywnWMA8EAgACMAkDBwEgAQ318kAwDQYJKoZIhvcNAQELBQADggEB AIIUQXtJmLQ7OasOas5ZIcJ0oMxeuq2ZSH7yXuNObHzIiogoOEXvP7uaAFk1sYra qrI3vZvbYf3+xoAq+fkwbV/9qhQVlhjmJeVcKk78KM4g52W+BcP72Tilx3iZZPlR SS4vkh6asm2j5rb7cciCDb5MxGqZJRUw1krVWwHfY4zDiUrgxkX88PnkKlC5Hk/w pXaIcLH7ax1a3tMBwXdNhFLL8B+7GM/jlZntCpW5VgOk5jvfjxcUZaK9dgCOPdni bFruAHGqY+S+fyiHIA3fPZ5kCAJpZslGow+rxg2Z7IQPrd3R8TArUhH9CAznl4K1 Cz/WLhIuwsaaQsGMs596NK4= -----END CERTIFICATE-----Generated at Sun Oct 4 10:33:28 2026 by rpki-client