$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/40838EC01EDA11ED90A3A71FC4F9AE02.roa File: 40838EC01EDA11ED90A3A71FC4F9AE02.roa (raw, json) Hash identifier: mEMF2EAxQOT8HjksswAup4xTzv21CP0nOKEj71FqbXc= Subject key identifier: DC:37:20:61:5E:C6:B1:5E:75:30:83:F1:6E:7B:53:2A:15:2B:1B:6F Certificate issuer: /CN=A91F33A5/serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Certificate serial: 042C Authority key identifier: C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/40838EC01EDA11ED90A3A71FC4F9AE02.roa Signing time: Wed 09 Sep 2026 00:50:46 +0000 ROA not before: Wed 09 Sep 2026 00:50:46 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 134111 IP address blocks: 202.8.32.0/21 maxlen: 24 202.9.8.0/22 maxlen: 24 202.9.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1068 (0x42c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33A5, serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Validity Not Before: Sep 9 00:50:46 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aa0ad66-f1a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:14:c5:41:8a:b1:77:32:72:4c:e6:16:c9:db: 59:cd:59:5e:22:bb:15:ac:c1:11:b3:84:72:db:ad: d6:b1:f4:02:fa:d6:00:fc:d4:a3:20:c0:cc:62:2a: 69:ef:ce:98:6d:30:b7:32:dd:d6:49:a5:94:9a:c2: 39:49:99:74:bc:15:69:d0:5c:3a:e8:92:1a:f9:28: bf:3c:82:86:c3:4c:81:91:90:0f:1e:08:27:95:bc: c8:0f:a6:22:c4:0b:49:82:d4:1d:b2:5e:fa:68:cb: 5a:cd:e1:83:6d:e7:48:33:6a:9f:d4:c9:a3:09:6c: b1:c8:2a:a7:2a:1e:49:d1:7a:e7:c5:fc:ab:80:d6: 27:3c:50:c7:52:27:e8:c2:75:88:32:84:28:d6:a9: 55:2f:38:c9:70:e5:0d:af:8b:3b:59:04:1d:13:94: c6:48:2c:83:54:1f:38:7e:99:ad:b5:89:76:86:99: 09:ce:80:5f:07:29:af:60:59:56:4e:46:51:d8:04: f7:77:d1:e8:ee:ff:e0:69:f5:23:7b:71:85:73:44: 76:37:d7:e9:93:83:0f:0c:f2:ee:1a:ce:79:93:ed: eb:69:bf:29:0d:44:9a:c5:fd:4e:4d:b2:36:a2:59: 93:49:cf:70:a0:d9:bf:34:66:83:87:b5:d2:51:23: f6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:37:20:61:5E:C6:B1:5E:75:30:83:F1:6E:7B:53:2A:15:2B:1B:6F X509v3 Authority Key Identifier: keyid:C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/40838EC01EDA11ED90A3A71FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.8.32.0/21 202.9.8.0-202.9.13.255 Signature Algorithm: sha256WithRSAEncryption 57:46:4a:a9:5a:e2:95:37:bc:f8:99:4c:4d:25:31:f9:60:ff: 91:9d:ac:16:39:be:47:96:8a:c8:65:df:9b:f1:7a:be:f4:a4: 47:82:d2:bf:eb:d9:c1:ad:d5:88:1c:4d:2e:17:e3:eb:9d:1f: b1:d3:6e:b2:05:cc:d4:d7:e4:be:7d:9c:d6:b3:de:f5:a4:ba: cf:be:78:d8:da:1c:8f:e0:e5:02:d9:1e:b7:98:c0:43:37:41: d6:3d:cc:0d:29:9f:9b:7f:e8:3c:aa:18:f5:0a:86:1d:90:1c: c6:19:5c:2e:b3:d2:cf:ab:2e:e7:7c:d8:8f:0d:8a:58:08:19: fa:24:aa:7c:14:30:09:82:ef:d3:49:f0:cf:ce:9c:44:ed:38: 8c:2c:d7:19:1f:cc:90:d9:1d:5a:8d:7b:8a:a6:d4:3f:44:17: b1:46:0b:d8:8c:bf:bc:cb:41:9d:e0:54:c8:ce:a5:dd:52:5d: 5b:84:6c:a2:9f:3e:d0:8c:93:ca:bb:c1:9a:3d:20:e9:29:60: f6:6f:f2:c4:8a:69:f3:6b:6f:5e:43:da:f2:40:c8:43:d8:f4: 77:2a:31:25:42:40:34:80:36:bb:7e:fd:b4:b9:39:55:31:1a: 1b:ba:ed:bc:a4:62:5b:42:df:a5:1c:d6:50:6d:84:31:f6:5c: f9:0a:a2:a8 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICBCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzQTUxMTAvBgNVBAUTKEM0RjYzOEMwOUUzNzIwNDZDMDFERjQ2MDRDMjgxMTY0 RjZBQzE2MjIwHhcNMjYwOTA5MDA1MDQ2WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEwYWQ2Ni1mMWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBTFQYqxdzJyTOYWydtZzVleIrsVrMERs4Ry263WsfQC+tYA/NSjIMDMYipp 786YbTC3Mt3WSaWUmsI5SZl0vBVp0Fw66JIa+Si/PIKGw0yBkZAPHggnlbzID6Yi xAtJgtQdsl76aMtazeGDbedIM2qf1MmjCWyxyCqnKh5J0XrnxfyrgNYnPFDHUifo wnWIMoQo1qlVLzjJcOUNr4s7WQQdE5TGSCyDVB84fpmttYl2hpkJzoBfBymvYFlW TkZR2AT3d9Ho7v/gafUje3GFc0R2N9fpk4MPDPLuGs55k+3rab8pDUSaxf1OTbI2 olmTSc9woNm/NGaDh7XSUSP2vQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFNw3IGFe xrFedTCD8W57UyoVKxtvMB8GA1UdIwQYMBaAFMT2OMCeNyBGwB30YEwoEWT2rBYi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNBNS8xQzBFNzA2QUQ0 RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lFYkFIZlJnVENnUlpQYXNG aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQWTR3SjQzSUViQUhmUmdUQ2dSWlBhc0ZpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjMzQTUvMUMwRTcwNkFENEQ4MTFFQ0E0MjQ1RjEwQzRGOUFFMDIvNDA4MzhFQzAx RURBMTFFRDkwQTNBNzFGQzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUAwQDygggMAwDBAPKCQgDBAHKCQwwDQYJKoZIhvcNAQELBQADggEBAFdG Sqla4pU3vPiZTE0lMflg/5GdrBY5vkeWishl35vxer70pEeC0r/r2cGt1YgcTS4X 4+udH7HTbrIFzNTX5L59nNaz3vWkus++eNjaHI/g5QLZHreYwEM3QdY9zA0pn5t/ 6DyqGPUKhh2QHMYZXC6z0s+rLud82I8NilgIGfokqnwUMAmC79NJ8M/OnETtOIws 1xkfzJDZHVqNe4qm1D9EF7FGC9iMv7zLQZ3gVMjOpd1SXVuEbKKfPtCMk8q7wZo9 IOkpYPZv8sSKafNrb15D2vJAyEPY9HcqMSVCQDSANrt+/bS5OVUxGhu67bykYltC 36Uc1lBthDH2XPkKoqg= -----END CERTIFICATE-----Generated at Thu Sep 24 22:06:11 2026 by rpki-client