$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B546C/07129CC6A4FA11F19C2349247011F970/1E3BD8A8A4FB11F1837756A17011F970.roa File: 1E3BD8A8A4FB11F1837756A17011F970.roa (raw, json) Hash identifier: 6ad3MddjpmzPtpQkxpgYMqyDaN47j/Tz+nm6LoY8luc= Subject key identifier: 42:0E:43:DA:0A:BB:6E:9F:85:3A:9F:3F:71:04:11:68:9A:31:87:7A Certificate issuer: /CN=A91B546C/serialNumber=678B8C9696CD7E80319ABC1207AA2754EA1BB629 Certificate serial: 0B Authority key identifier: 67:8B:8C:96:96:CD:7E:80:31:9A:BC:12:07:AA:27:54:EA:1B:B6:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z4uMlpbNfoAxmrwSB6onVOobtik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B546C/07129CC6A4FA11F19C2349247011F970/1E3BD8A8A4FB11F1837756A17011F970.roa Signing time: Fri 11 Sep 2026 02:22:12 +0000 ROA not before: Fri 11 Sep 2026 02:22:12 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 9559 IP address blocks: 202.36.174.0/24 maxlen: 24 202.49.64.0/21 maxlen: 21 202.49.64.0/23 maxlen: 23 202.49.64.0/24 maxlen: 24 202.49.66.0/24 maxlen: 24 202.49.68.0/24 maxlen: 24 202.49.69.0/24 maxlen: 24 202.49.70.0/24 maxlen: 24 202.49.71.0/24 maxlen: 24 202.49.140.0/24 maxlen: 24 2402:72e0::/32 maxlen: 32 2402:72e0:64::/48 maxlen: 48 2402:72e0:6667::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B546C/07129CC6A4FA11F19C2349247011F970/Z4uMlpbNfoAxmrwSB6onVOobtik.crl rsync://rpki.apnic.net/member_repository/A91B546C/07129CC6A4FA11F19C2349247011F970/Z4uMlpbNfoAxmrwSB6onVOobtik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z4uMlpbNfoAxmrwSB6onVOobtik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 09:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B546C, serialNumber=678B8C9696CD7E80319ABC1207AA2754EA1BB629 Validity Not Before: Sep 11 02:22:12 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6aa365d4-42fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:af:c2:30:bc:89:9e:a3:be:13:39:09:3e:8b: f1:3c:b0:e3:93:57:59:24:50:01:d0:be:cc:72:cf: 70:25:62:44:61:68:c2:f6:e3:f6:48:ef:89:cd:73: ee:15:09:1f:1d:a7:6d:8d:ea:2a:62:4b:bc:4d:bb: 47:43:8b:87:3f:98:88:91:c6:2d:1c:fb:d1:c9:81: f6:cb:21:bf:e0:dc:7a:11:3b:3d:c6:63:76:be:da: 0c:ab:43:4d:72:87:0a:8a:e2:5e:53:a1:84:c8:e4: 66:88:2b:88:ca:f8:e8:56:22:2b:56:c7:b3:66:0a: 4c:02:c3:06:0b:8e:d7:28:82:6f:4c:9d:de:aa:a1: 1f:1b:08:04:8c:4a:09:cb:bf:f5:07:95:73:eb:7f: d9:aa:ec:98:c4:5d:6c:73:09:3d:7f:48:ec:9c:53: d6:82:22:ab:74:14:da:9a:91:a7:81:80:30:11:72: 2d:3d:ee:56:9b:c8:29:38:49:95:af:ab:d9:8a:ab: 35:e8:08:c4:92:ac:96:fe:d6:9e:32:c3:e8:98:5b: e4:9e:ef:b9:f1:db:c4:23:e0:15:14:4d:80:bb:03: 52:f3:43:68:32:d2:91:5f:24:47:2d:de:c4:4c:df: a4:d9:d9:e8:5b:67:34:a8:f6:1d:1a:e8:23:61:b5: 39:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0E:43:DA:0A:BB:6E:9F:85:3A:9F:3F:71:04:11:68:9A:31:87:7A X509v3 Authority Key Identifier: keyid:67:8B:8C:96:96:CD:7E:80:31:9A:BC:12:07:AA:27:54:EA:1B:B6:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B546C/07129CC6A4FA11F19C2349247011F970/Z4uMlpbNfoAxmrwSB6onVOobtik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z4uMlpbNfoAxmrwSB6onVOobtik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B546C/07129CC6A4FA11F19C2349247011F970/1E3BD8A8A4FB11F1837756A17011F970.roa sbgp-ipAddrBlock: critical IPv4: 202.36.174.0/24 202.49.64.0/21 202.49.140.0/24 IPv6: 2402:72e0::/32 Signature Algorithm: sha256WithRSAEncryption 02:9c:61:73:b4:56:85:cc:ae:4b:10:fe:e1:5f:b9:4f:71:a7: 27:88:07:42:f8:2c:16:bd:c1:06:63:0b:64:62:7d:e6:3f:07: 97:d0:12:40:2d:f5:40:4c:aa:38:43:18:01:93:da:af:04:a7: e5:bc:c1:72:ca:9d:2c:ba:09:26:87:9c:03:61:c9:24:10:c5: 67:f5:cd:2a:b8:37:f0:f7:ae:a7:b8:30:de:61:bc:a8:43:36: 44:d0:e6:fc:29:48:46:2f:70:75:4e:fe:55:e6:6e:67:00:d1: 06:21:2e:94:b0:9f:78:63:c2:6e:ac:7e:01:36:50:56:bd:6e: de:f0:fb:46:5d:cf:67:a9:05:71:1a:2c:b4:2e:43:43:09:59: 20:2c:99:45:59:1e:26:47:2d:49:fb:6f:b8:84:7a:e6:4d:b0: bf:ef:9a:e1:f3:eb:36:f5:eb:f5:8a:12:fe:18:d8:ff:cb:c2: 97:bd:ef:99:37:6b:ed:38:76:43:4f:a0:3a:94:78:2e:96:6f: a4:b3:12:5f:be:59:c0:8c:7d:6f:cc:b9:cf:20:84:0d:ad:89: b9:fb:76:9f:51:8f:75:b9:85:85:af:4e:e3:58:65:33:a3:54: 30:c0:48:43:81:61:bc:18:3f:f6:e9:1d:87:76:be:22:c7:b4: 0e:9c:1c:5e -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NTQ2QzExMC8GA1UEBRMoNjc4QjhDOTY5NkNEN0U4MDMxOUFCQzEyMDdBQTI3NTRF QTFCQjYyOTAeFw0yNjA5MTEwMjIyMTJaFw0yNzA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYTM2NWQ0LTQyZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpr8IwvImeo74TOQk+i/E8sOOTV1kkUAHQvsxyz3AlYkRhaML24/ZI74nNc+4V CR8dp22N6ipiS7xNu0dDi4c/mIiRxi0c+9HJgfbLIb/g3HoROz3GY3a+2gyrQ01y hwqK4l5ToYTI5GaIK4jK+OhWIitWx7NmCkwCwwYLjtcogm9Mnd6qoR8bCASMSgnL v/UHlXPrf9mq7JjEXWxzCT1/SOycU9aCIqt0FNqakaeBgDARci097labyCk4SZWv q9mKqzXoCMSSrJb+1p4yw+iYW+Se77nx28Qj4BUUTYC7A1LzQ2gy0pFfJEct3sRM 36TZ2ehbZzSo9h0a6CNhtTl7AgMBAAGjggJ7MIICdzAdBgNVHQ4EFgQUQg5D2gq7 bp+FOp8/cQQRaJoxh3owHwYDVR0jBBgwFoAUZ4uMlpbNfoAxmrwSB6onVOobtikw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1NDZDLzA3MTI5Q0M2QTRG QTExRjE5QzIzNDkyNDcwMTFGOTcwL1o0dU1scGJOZm9BeG1yd1NCNm9uVk9vYnRp ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjR1TWxwYk5mb0F4bXJ3U0I2b25WT29idGlrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTQ2Qy8wNzEyOUNDNkE0RkExMUYxOUMyMzQ5MjQ3MDExRjk3MC8xRTNCRDhBOEE0 RkIxMUYxODM3NzU2QTE3MDExRjk3MC5yb2EwOgYIKwYBBQUHAQcBAf8EKzApMBgE AgABMBIDBADKJK4DBAPKMUADBADKMYwwDQQCAAIwBwMFACQCcuAwDQYJKoZIhvcN AQELBQADggEBAAKcYXO0VoXMrksQ/uFfuU9xpyeIB0L4LBa9wQZjC2RifeY/B5fQ EkAt9UBMqjhDGAGT2q8Ep+W8wXLKnSy6CSaHnANhySQQxWf1zSq4N/D3rqe4MN5h vKhDNkTQ5vwpSEYvcHVO/lXmbmcA0QYhLpSwn3hjwm6sfgE2UFa9bt7w+0Zdz2ep BXEaLLQuQ0MJWSAsmUVZHiZHLUn7b7iEeuZNsL/vmuHz6zb16/WKEv4Y2P/Lwpe9 75k3a+04dkNPoDqUeC6Wb6SzEl++WcCMfW/Muc8ghA2tibn7dp9Rj3W5hYWvTuNY ZTOjVDDASEOBYbwYP/bpHYd2viLHtA6cHF4= -----END CERTIFICATE-----Generated at Sun Sep 27 03:02:12 2026 by rpki-client