$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/9DD3FFC6001111F18C67D2A9406F56BC.roa File: 9DD3FFC6001111F18C67D2A9406F56BC.roa (raw, json) Hash identifier: 5Q7wKhzjs7ph8atS11/z30jhhvzO/AavGeyHW51fSA8= Subject key identifier: 03:E3:04:02:66:FA:B4:81:3C:17:E8:8E:C9:F1:6A:E5:22:CC:9C:79 Certificate issuer: /CN=A91C32D9/serialNumber=4F487EFEB7C7796881572D97D6254FA2DDB5A87C Certificate serial: 89 Authority key identifier: 4F:48:7E:FE:B7:C7:79:68:81:57:2D:97:D6:25:4F:A2:DD:B5:A8:7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T0h-_rfHeWiBVy2X1iVPot21qHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/9DD3FFC6001111F18C67D2A9406F56BC.roa Signing time: Thu 15 Oct 2026 08:57:17 +0000 ROA not before: Thu 15 Oct 2026 08:57:17 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 4686 IP address blocks: 36.255.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.crl rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T0h-_rfHeWiBVy2X1iVPot21qHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 07:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C32D9, serialNumber=4F487EFEB7C7796881572D97D6254FA2DDB5A87C Validity Not Before: Oct 15 08:57:17 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ad0956d-df8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:60:db:ac:b9:b0:3a:9f:73:fb:09:8c:da:73: 07:43:64:de:4e:98:f4:bf:bc:2b:18:b3:0a:d3:7b: 83:77:a8:c7:94:d6:b1:77:a7:62:e4:6a:26:31:b7: 25:4e:59:76:ed:33:04:5d:4e:7a:6e:c5:2f:a6:4d: 5f:ca:f6:14:cd:32:a4:d5:23:0d:44:36:af:5c:b8: 09:fd:50:fc:a0:dc:f0:cb:72:36:31:a1:7c:59:5c: e4:10:a5:a0:1a:12:89:c9:05:17:d6:37:a1:5b:c9: a5:5b:cb:6d:7f:bd:3a:0d:3e:59:9b:ed:7a:a2:d2: 92:9c:61:d1:22:35:9b:85:d1:39:c6:16:37:93:bf: 05:16:e6:bf:02:8f:21:31:be:9e:87:51:cf:94:39: 85:38:6d:b4:c1:28:5c:bf:8e:4b:c6:e8:61:e7:ef: eb:73:d3:73:79:04:c2:16:c7:8a:4d:15:da:11:86: b3:65:51:65:34:d8:97:dc:46:56:64:6a:f3:ab:a7: 4f:1a:7d:f6:45:10:ea:10:bf:67:fd:21:06:a1:e9: 60:9f:fe:82:25:43:44:cc:fb:a0:df:68:f6:f6:9b: 29:3f:9e:f3:7b:38:f9:3e:c1:29:88:45:97:d9:4c: 17:47:02:45:37:30:8a:ff:1b:3d:17:d7:24:eb:56: 6c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E3:04:02:66:FA:B4:81:3C:17:E8:8E:C9:F1:6A:E5:22:CC:9C:79 X509v3 Authority Key Identifier: keyid:4F:48:7E:FE:B7:C7:79:68:81:57:2D:97:D6:25:4F:A2:DD:B5:A8:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T0h-_rfHeWiBVy2X1iVPot21qHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/9DD3FFC6001111F18C67D2A9406F56BC.roa sbgp-ipAddrBlock: critical IPv4: 36.255.216.0/22 Signature Algorithm: sha256WithRSAEncryption 71:e3:51:6b:86:88:28:96:99:3f:f3:b0:70:3a:64:f3:3b:f2: 4c:c4:41:1d:f6:17:71:10:6a:7c:9f:50:05:34:fe:01:cb:40: dc:b4:11:05:60:6c:26:6b:cd:87:14:7c:fa:19:e8:c1:09:a8: 8f:04:b1:6c:09:7d:54:b5:5f:4b:7c:48:1e:0f:a7:38:50:4d: f1:a0:cd:7b:e1:25:d7:d9:66:c9:f8:3c:8a:70:64:e0:96:4d: 33:0e:e6:52:dd:2d:e4:d1:e4:34:22:7c:11:39:6d:57:cf:96: 0d:9a:b2:ba:35:94:81:b2:6f:fe:c1:df:37:b0:2b:93:73:33: 8d:85:cf:a2:69:e1:55:32:1f:e4:17:f0:33:6a:a7:50:7f:3b: a5:ef:9e:73:2c:ad:3c:c0:43:40:cf:19:89:b4:a3:3e:94:f1: f0:7d:1c:a3:64:59:be:50:10:d0:06:5d:f2:5c:d0:7e:3c:aa: 69:89:18:61:1f:bf:62:cc:c5:ff:68:46:d2:46:09:12:9e:67: a8:bc:1b:71:bc:cb:11:e7:d5:44:da:81:f0:f3:32:94:c6:24: 86:06:16:6a:73:85:0c:6f:41:ff:94:be:db:9c:c6:f8:fd:57: 6e:1b:a2:ee:07:a1:4e:12:d4:aa:0a:cc:2e:70:48:dc:de:dd: f0:95:c5:89 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMyRDkxMTAvBgNVBAUTKDRGNDg3RUZFQjdDNzc5Njg4MTU3MkQ5N0Q2MjU0RkEy RERCNUE4N0MwHhcNMjYxMDE1MDg1NzE3WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWQwOTU2ZC1kZjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWDbrLmwOp9z+wmM2nMHQ2TeTpj0v7wrGLMK03uDd6jHlNaxd6di5GomMbcl Tll27TMEXU56bsUvpk1fyvYUzTKk1SMNRDavXLgJ/VD8oNzwy3I2MaF8WVzkEKWg GhKJyQUX1jehW8mlW8ttf706DT5Zm+16otKSnGHRIjWbhdE5xhY3k78FFua/Ao8h Mb6eh1HPlDmFOG20wShcv45Lxuhh5+/rc9NzeQTCFseKTRXaEYazZVFlNNiX3EZW ZGrzq6dPGn32RRDqEL9n/SEGoelgn/6CJUNEzPug32j29pspP57zezj5PsEpiEWX 2UwXRwJFNzCK/xs9F9ck61ZszQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAPjBAJm +rSBPBfojsnxauUizJx5MB8GA1UdIwQYMBaAFE9Ifv63x3logVctl9YlT6Ldtah8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzJEOS82NERGMTMyQzAw MTExMUYxQUIyN0VEODA0MDZGNTZCQy9UMGgtX3JmSGVXaUJWeTJYMWlWUG90MjFx SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QwaC1fcmZIZVdpQlZ5MlgxaVZQb3QyMXFIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzMyRDkvNjRERjEzMkMwMDExMTFGMUFCMjdFRDgwNDA2RjU2QkMvOUREM0ZGQzYw MDExMTFGMThDNjdEMkE5NDA2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCJP/YMA0GCSqGSIb3DQEBCwUAA4IBAQBx41Frhogolpk/87BwOmTz O/JMxEEd9hdxEGp8n1AFNP4By0DctBEFYGwma82HFHz6GejBCaiPBLFsCX1UtV9L fEgeD6c4UE3xoM174SXX2WbJ+DyKcGTglk0zDuZS3S3k0eQ0InwROW1Xz5YNmrK6 NZSBsm/+wd83sCuTczONhc+iaeFVMh/kF/AzaqdQfzul755zLK08wENAzxmJtKM+ lPHwfRyjZFm+UBDQBl3yXNB+PKppiRhhH79izMX/aEbSRgkSnmeovBtxvMsR59VE 2oHw8zKUxiSGBhZqc4UMb0H/lL7bnMb4/VduG6LuB6FOEtSqCswucEjc3t3wlcWJ -----END CERTIFICATE-----Generated at Sun Nov 15 17:07:12 2026 by rpki-client