$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/328C9E7CDC1A11EC89244C2FC4F9AE02.roa File: 328C9E7CDC1A11EC89244C2FC4F9AE02.roa (raw, json) Hash identifier: KWwLcsIz3UJKjvUCs3DEDEtcqp2xPeUKe9HlYY14quE= Subject key identifier: 9A:AE:AD:91:81:95:C9:29:B2:23:15:C1:A6:41:C1:7E:A9:97:60:43 Certificate issuer: /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Certificate serial: 043C Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/328C9E7CDC1A11EC89244C2FC4F9AE02.roa Signing time: Fri 19 Jun 2026 01:29:29 +0000 ROA not before: Fri 19 Jun 2026 01:29:29 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 8943 IP address blocks: 203.11.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:28:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1084 (0x43c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E91BC, serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Validity Not Before: Jun 19 01:29:29 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a349b79-3111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:47:5f:5d:c9:ed:f7:c0:67:c1:8a:75:f4:80: b4:92:38:6a:fe:f9:8b:00:41:ec:fe:f5:cc:db:c2: 3d:0c:f2:1c:d4:3f:29:7d:37:3b:a8:7c:97:66:cf: 44:04:fe:3b:29:36:92:10:01:59:4a:5d:40:0b:81: a2:3d:6e:09:4a:d6:5e:fd:c8:ba:50:42:8b:cd:ab: 80:b1:8e:3f:d3:b7:8c:38:f1:66:d5:bc:f9:74:fb: 80:3e:c8:5d:4c:3e:5f:02:be:a1:29:41:c9:b6:4e: 99:15:6a:0a:53:b5:42:31:d8:f5:c2:e7:f5:0f:24: 10:e8:07:87:15:7b:f5:66:8f:35:19:ee:df:e2:35: cf:fb:d6:6e:84:08:aa:e9:56:5d:43:7c:2e:f9:a4: fd:18:0c:3f:27:ba:4a:28:71:ac:b7:55:ae:b4:86: ca:36:84:a2:53:2a:8d:a0:40:b5:d5:f6:d2:db:62: 36:73:14:49:a6:e4:a1:05:db:a5:92:4b:bf:8d:de: 28:63:7b:fa:76:dc:49:79:78:5f:fc:0e:3a:a5:ad: e4:9d:41:5c:44:3e:86:65:12:ca:a2:14:bd:0c:4c: 73:66:da:3c:a6:b7:9a:1c:ca:04:99:18:66:57:10: 3f:c7:5a:c3:7a:13:4e:5a:96:00:ee:d9:11:e4:9a: e0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:AE:AD:91:81:95:C9:29:B2:23:15:C1:A6:41:C1:7E:A9:97:60:43 X509v3 Authority Key Identifier: keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/328C9E7CDC1A11EC89244C2FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.11.114.0/24 Signature Algorithm: sha256WithRSAEncryption 10:59:73:59:23:2d:0c:5b:44:5c:2b:2b:f9:b0:10:ee:c1:c1: 9c:88:ab:32:fa:69:b4:f8:05:31:3b:f9:a3:97:bf:f4:f4:bd: 1c:d9:71:e6:97:aa:ee:cd:77:da:db:57:34:b4:8f:98:1a:ae: 21:ab:93:4f:58:10:0f:23:b0:b7:0f:20:6b:52:6e:7e:5c:57: 6c:ab:d1:6e:2b:00:62:54:e5:37:9c:26:51:bc:d9:d6:17:d8: 8c:7e:37:18:a8:ea:33:6d:56:b2:6a:a1:2d:d3:36:64:63:f1: 76:5e:1a:a6:8a:a9:9c:c1:b0:80:ff:03:e0:d0:2e:9d:03:65: 83:e6:cc:42:06:da:88:42:87:5e:ac:37:c0:a5:70:31:3b:b3: 5b:ea:b3:29:aa:9e:4a:07:fe:b3:13:3f:c2:0e:a4:7a:32:83: 93:67:88:27:64:1a:fe:d6:ea:ee:ed:d9:76:25:c1:6a:3d:0d: 8b:63:22:c4:38:46:fa:8b:d9:70:64:b0:3f:e6:91:39:f0:b1: 62:7f:ef:34:dd:a2:eb:b5:83:35:99:4a:f7:fc:1b:70:7e:5b: 01:92:f9:b9:13:d8:70:a4:90:22:8c:ec:16:8f:1e:31:13:f0: 6e:a3:d7:ad:90:72:8e:d4:e9:01:f6:00:0c:2c:00:52:6d:42: 5a:41:ab:cc -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkxQkMxMTAvBgNVBAUTKDZENUQ1MEU4OEI5RDY1RThBRkRBMjhDMkNFQTYxNTAx MjcwMzg2MDgwHhcNMjYwNjE5MDEyOTI5WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTM0OWI3OS0zMTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkkdfXcnt98BnwYp19IC0kjhq/vmLAEHs/vXM28I9DPIc1D8pfTc7qHyXZs9E BP47KTaSEAFZSl1AC4GiPW4JStZe/ci6UEKLzauAsY4/07eMOPFm1bz5dPuAPshd TD5fAr6hKUHJtk6ZFWoKU7VCMdj1wuf1DyQQ6AeHFXv1Zo81Ge7f4jXP+9ZuhAiq 6VZdQ3wu+aT9GAw/J7pKKHGst1WutIbKNoSiUyqNoEC11fbS22I2cxRJpuShBdul kku/jd4oY3v6dtxJeXhf/A46pa3knUFcRD6GZRLKohS9DExzZto8preaHMoEmRhm VxA/x1rDehNOWpYA7tkR5JrgyQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJqurZGB lckpsiMVwaZBwX6pl2BDMB8GA1UdIwQYMBaAFG1dUOiLnWXor9oows6mFQEnA4YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTFCQy9BRTQ0RDI0QURC RTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFplaXYyaWpDenFZVkFTY0Ro Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JWMVE2SXVkWmVpdjJpakN6cVlWQVNjRGhnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTkxQkMvQUU0NEQyNEFEQkU5MTFFQzk1MTEwNTE1QzRGOUFFMDIvMzI4QzlFN0NE QzFBMTFFQzg5MjQ0QzJGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAywtyMA0GCSqGSIb3DQEBCwUAA4IBAQAQWXNZIy0MW0RcKyv5sBDu wcGciKsy+mm0+AUxO/mjl7/09L0c2XHml6ruzXfa21c0tI+YGq4hq5NPWBAPI7C3 DyBrUm5+XFdsq9FuKwBiVOU3nCZRvNnWF9iMfjcYqOozbVayaqEt0zZkY/F2Xhqm iqmcwbCA/wPg0C6dA2WD5sxCBtqIQoderDfApXAxO7Nb6rMpqp5KB/6zEz/CDqR6 MoOTZ4gnZBr+1uru7dl2JcFqPQ2LYyLEOEb6i9lwZLA/5pE58LFif+803aLrtYM1 mUr3/BtwflsBkvm5E9hwpJAijOwWjx4xE/Buo9etkHKO1OkB9gAMLABSbUJaQavM -----END CERTIFICATE-----Generated at Fri Jul 24 00:06:30 2026 by rpki-client