$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/3773AC0C8B6111EFA3A49037C4F9AE02.roa File: 3773AC0C8B6111EFA3A49037C4F9AE02.roa (raw, json) Hash identifier: fM9Ygytwj129H5NzvpnGbz9FPKEIaP/JBHZZectYeJQ= Subject key identifier: C6:F4:F4:39:D4:7E:39:BF:15:E7:4C:4F:2B:6A:4F:0A:35:39:0F:22 Certificate issuer: /CN=A91E689D/serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F Certificate serial: 359D Authority key identifier: 40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/3773AC0C8B6111EFA3A49037C4F9AE02.roa Signing time: Fri 23 Oct 2026 09:27:20 +0000 ROA not before: Fri 23 Oct 2026 09:27:20 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 45810 IP address blocks: 203.217.128.0/22 maxlen: 22 203.217.128.0/23 maxlen: 23 203.217.128.0/24 maxlen: 24 203.217.129.0/24 maxlen: 24 203.217.130.0/24 maxlen: 24 203.217.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13725 (0x359d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E689D, serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F Validity Not Before: Oct 23 09:27:20 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6adb2878-3376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c6:ae:a2:49:6f:92:87:32:12:63:25:75:f3: bf:2f:6c:f2:6c:24:cf:9b:be:3a:5c:6f:02:32:3b: 2d:5f:f5:69:ba:8a:f1:92:ed:2a:bb:2b:cc:3c:dd: 85:03:ed:8b:c5:12:e9:db:01:0d:7e:8e:e2:6f:1b: aa:51:b7:b2:f7:4f:dd:f8:30:06:0e:89:93:f1:02: 35:07:91:f4:ad:ef:3f:0d:64:7f:32:e4:4f:f7:36: dc:4a:ff:aa:74:88:05:d3:ab:31:1e:6e:09:ba:2d: 1b:e3:3f:a7:47:bb:2f:33:7b:32:8e:ef:33:c5:99: c6:03:17:26:51:32:91:88:b2:29:72:fe:3b:11:54: 2d:b6:c8:67:f3:21:b0:11:83:92:cc:cc:de:6e:a6: 1c:e0:47:c3:a3:58:dc:1f:31:cb:56:66:40:54:bd: 15:5b:57:f0:2d:f4:38:a4:2d:fd:c7:ca:18:25:27: 8d:b1:73:a1:7c:9d:40:c7:7c:4e:27:67:3c:0b:19: c1:06:e4:b9:5e:2e:80:5b:d8:13:87:a9:6e:85:f8: ca:27:1a:b9:28:fd:66:80:cb:00:b9:6c:ab:e8:e3: 0b:6f:ca:93:8e:69:b1:36:c9:b9:ce:62:8d:40:cf: 5e:43:e1:f8:87:af:b3:16:75:44:5a:20:1c:ad:18: 53:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F4:F4:39:D4:7E:39:BF:15:E7:4C:4F:2B:6A:4F:0A:35:39:0F:22 X509v3 Authority Key Identifier: keyid:40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/3773AC0C8B6111EFA3A49037C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.217.128.0/22 Signature Algorithm: sha256WithRSAEncryption 70:2d:9f:cd:5f:77:c0:5d:4c:87:64:cf:64:62:c3:1f:80:af: e3:8e:d1:88:ae:24:31:1c:39:72:8f:5d:ff:15:28:ad:19:f8: b1:aa:41:97:91:88:e0:51:e1:bf:33:9e:f7:a1:8c:86:f8:fc: 1c:bf:81:81:c9:4a:5e:45:02:38:d1:1b:bd:18:24:9b:75:a5: 56:59:45:04:06:34:a8:17:88:78:a5:20:2b:a6:38:c8:a0:26: 42:f1:25:89:4f:5e:aa:b1:cb:b2:9e:74:50:d1:9d:95:b1:7a: ee:83:56:8d:d3:13:95:67:83:83:62:6b:0a:92:15:8c:9f:81: a1:3c:1f:11:4d:f9:24:40:10:76:aa:14:86:e0:0c:c1:3f:38: 9b:7c:72:62:5f:c8:a5:3f:2a:07:8e:21:dd:d1:68:9d:6b:25: 5b:c8:1d:cf:db:6c:7f:4b:7f:d0:04:d9:c4:2b:e5:bd:64:48: ee:24:ff:ab:13:a0:81:eb:96:6d:ca:c8:17:0e:a1:e8:35:13: 68:19:7c:dc:b8:dd:c9:e3:33:89:cb:11:d7:29:59:b1:4a:e6: ee:37:43:e3:7d:95:3e:f2:13:c3:77:8d:83:ca:9e:28:94:7e: 83:79:28:07:71:53:6c:66:c7:6c:62:d2:7c:37:45:c6:cb:09: 52:1f:58:83 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICNZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4OUQxMTAvBgNVBAUTKDQwQjhEMjJFRjIzQjM3QjBCOUU1M0YzQzRFMTBENkFF M0VCOEE5OUYwHhcNMjYxMDIzMDkyNzIwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWRiMjg3OC0zMzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsauoklvkocyEmMldfO/L2zybCTPm746XG8CMjstX/Vpuorxku0quyvMPN2F A+2LxRLp2wENfo7ibxuqUbey90/d+DAGDomT8QI1B5H0re8/DWR/MuRP9zbcSv+q dIgF06sxHm4Jui0b4z+nR7svM3syju8zxZnGAxcmUTKRiLIpcv47EVQttshn8yGw EYOSzMzebqYc4EfDo1jcHzHLVmZAVL0VW1fwLfQ4pC39x8oYJSeNsXOhfJ1Ax3xO J2c8CxnBBuS5Xi6AW9gTh6luhfjKJxq5KP1mgMsAuWyr6OMLb8qTjmmxNsm5zmKN QM9eQ+H4h6+zFnVEWiAcrRhTXwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMb09DnU fjm/FedMTytqTwo1OQ8iMB8GA1UdIwQYMBaAFEC40i7yOzewueU/PE4Q1q4+uKmf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg5RC9DN0M2M0RBODFE OUUxMUUyODNDRUZBOEUwOEIwMkNEMi9RTGpTTHZJN043QzU1VDg4VGhEV3JqNjRx WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FMalNMdkk3TjdDNTVUODhUaERXcmo2NHFaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTY4OUQvQzdDNjNEQTgxRDlFMTFFMjgzQ0VGQThFMDhCMDJDRDIvMzc3M0FDMEM4 QjYxMTFFRkEzQTQ5MDM3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCy9mAMA0GCSqGSIb3DQEBCwUAA4IBAQBwLZ/NX3fAXUyHZM9kYsMf gK/jjtGIriQxHDlyj13/FSitGfixqkGXkYjgUeG/M573oYyG+Pwcv4GByUpeRQI4 0Ru9GCSbdaVWWUUEBjSoF4h4pSArpjjIoCZC8SWJT16qscuynnRQ0Z2VsXrug1aN 0xOVZ4ODYmsKkhWMn4GhPB8RTfkkQBB2qhSG4AzBPzibfHJiX8ilPyoHjiHd0Wid ayVbyB3P22x/S3/QBNnEK+W9ZEjuJP+rE6CB65ZtysgXDqHoNRNoGXzcuN3J4zOJ yxHXKVmxSubuN0PjfZU+8hPDd42Dyp4olH6DeSgHcVNsZsdsYtJ8N0XGywlSH1iD -----END CERTIFICATE-----Generated at Sun Nov 15 14:49:50 2026 by rpki-client