$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/CE3FCE34AF1611F0B50BFF7AC4F9AE02.roa File: CE3FCE34AF1611F0B50BFF7AC4F9AE02.roa (raw, json) Hash identifier: 8Ac19pb5+p9KK1Iemz1RgsRRRrnuxVd5vC2V5ZATZXA= Subject key identifier: A6:0E:37:F9:61:55:A8:42:05:AF:85:2B:9B:91:7D:A8:1E:76:10:84 Certificate issuer: /CN=A91E7BC4/serialNumber=DDA7F8A74A0A74CFF6EB630428B6C9D70D57BD76 Certificate serial: 0EB7 Authority key identifier: DD:A7:F8:A7:4A:0A:74:CF:F6:EB:63:04:28:B6:C9:D7:0D:57:BD:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/CE3FCE34AF1611F0B50BFF7AC4F9AE02.roa Signing time: Thu 03 Sep 2026 10:04:40 +0000 ROA not before: Thu 03 Sep 2026 10:04:40 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 19551 IP address blocks: 203.121.10.0/24 maxlen: 24 203.121.47.0/24 maxlen: 24 210.19.93.0/24 maxlen: 24 210.19.124.0/24 maxlen: 24 210.19.153.0/24 maxlen: 24 210.19.176.0/24 maxlen: 24 211.24.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.crl rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 17:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3767 (0xeb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7BC4, serialNumber=DDA7F8A74A0A74CFF6EB630428B6C9D70D57BD76 Validity Not Before: Sep 3 10:04:40 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6a994637-57f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7b:d4:49:98:80:22:80:05:17:4d:2c:1d:ca: 66:f6:54:eb:08:a9:9a:c3:68:f8:36:5c:55:ec:6b: b4:55:2e:10:53:8d:c3:86:f2:28:bb:0c:05:b2:13: 8f:73:03:5a:64:53:02:ad:32:94:aa:4b:bb:c5:27: 8c:d9:fa:a7:83:81:64:cd:fb:b8:89:4b:dc:fc:a4: 3b:26:51:93:21:c6:33:d0:72:ea:ed:be:bf:84:8d: 36:25:72:47:cf:eb:6f:1a:a5:a0:16:79:1d:12:f8: fd:d2:dd:e1:a4:72:39:a8:f8:b2:92:c7:8a:a6:19: 1c:ff:14:dd:ed:40:b7:28:ac:a0:1b:cc:b3:97:02: 65:f6:9f:2c:50:80:93:85:a6:c5:f6:9c:49:12:a3: de:0d:30:a8:65:52:11:bb:cb:fe:a7:f9:6c:70:14: 8d:fa:4f:60:9b:ab:a5:ec:5d:24:20:f8:25:f4:64: af:e1:2c:a0:aa:c0:b2:fa:ba:b4:82:c6:42:68:f4: b9:00:ef:da:2b:08:17:5e:ee:fa:6e:d8:44:75:ce: a2:ce:84:92:3a:24:35:6c:c1:8b:61:53:a1:78:6b: 9c:9a:79:bb:ed:b6:e4:0c:29:d4:60:e8:6b:de:ec: ed:0a:40:5e:93:2c:d9:0f:7c:81:61:65:a3:50:ff: 43:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:0E:37:F9:61:55:A8:42:05:AF:85:2B:9B:91:7D:A8:1E:76:10:84 X509v3 Authority Key Identifier: keyid:DD:A7:F8:A7:4A:0A:74:CF:F6:EB:63:04:28:B6:C9:D7:0D:57:BD:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/CE3FCE34AF1611F0B50BFF7AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.121.10.0/24 203.121.47.0/24 210.19.93.0/24 210.19.124.0/24 210.19.153.0/24 210.19.176.0/24 211.24.174.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:f4:e8:55:e1:cc:e6:44:ed:1b:95:db:c0:85:fe:09:ef:f8: 4b:41:ba:55:cb:e5:7b:07:a5:16:70:77:a1:7b:fe:06:41:3e: 00:09:07:a8:89:fc:d8:35:99:8d:3d:0a:18:6e:89:e8:2d:59: f0:2f:e2:9e:d4:9f:ae:c0:42:c0:08:e4:ab:1d:6d:2b:f8:ae: d5:2c:dd:61:49:55:cd:84:dc:f7:e8:71:77:dc:15:c7:ae:54: 7c:13:96:75:c8:a1:44:c4:fb:68:bd:3f:88:5e:1b:06:45:fd: 85:07:3f:6f:ff:99:ac:7e:d3:96:1c:2e:a5:83:93:77:90:05: e1:e0:41:64:fd:c7:da:97:35:f6:fd:62:6a:e4:b4:f2:5e:43: 12:06:e2:89:4e:e6:1b:6e:1b:11:a0:84:0e:ac:73:ee:bf:1f: c4:db:e7:f5:6b:66:bc:61:c1:e0:58:8a:11:cb:64:e8:56:72: 7c:d3:f4:7b:df:0c:b7:05:b0:d4:9d:fc:92:90:1f:0b:3c:93: cf:3e:d9:bb:93:64:bd:d2:b2:b9:c9:2d:90:3f:5a:7d:cc:6a: b5:cd:75:0b:0b:13:3b:c4:1a:51:f1:f0:89:d5:9b:d9:1c:8c: 76:ee:b1:da:64:79:ff:25:c2:aa:41:f8:80:5e:5a:e6:4a:cd: 13:68:07:d0 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgICDrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdCQzQxMTAvBgNVBAUTKEREQTdGOEE3NEEwQTc0Q0ZGNkVCNjMwNDI4QjZDOUQ3 MEQ1N0JENzYwHhcNMjYwOTAzMTAwNDQwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk5NDYzNy01N2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2XvUSZiAIoAFF00sHcpm9lTrCKmaw2j4NlxV7Gu0VS4QU43DhvIouwwFshOP cwNaZFMCrTKUqku7xSeM2fqng4Fkzfu4iUvc/KQ7JlGTIcYz0HLq7b6/hI02JXJH z+tvGqWgFnkdEvj90t3hpHI5qPiykseKphkc/xTd7UC3KKygG8yzlwJl9p8sUICT habF9pxJEqPeDTCoZVIRu8v+p/lscBSN+k9gm6ul7F0kIPgl9GSv4SygqsCy+rq0 gsZCaPS5AO/aKwgXXu76bthEdc6izoSSOiQ1bMGLYVOheGucmnm77bbkDCnUYOhr 3uztCkBekyzZD3yBYWWjUP9DAwIDAQABo4IChDCCAoAwHQYDVR0OBBYEFKYON/lh VahCBa+FK5uRfagedhCEMB8GA1UdIwQYMBaAFN2n+KdKCnTP9utjBCi2ydcNV712 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0JDNC8yRDFBNTk1QUQ1 MEQxMUU5QkFENkMyMjZDNEY5QUUwMi8zYWY0cDBvS2RNXzI2Mk1FS0xiSjF3MVh2 WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNhZjRwMG9LZE1fMjYyTUVLTGJKMXcxWHZYWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTdCQzQvMkQxQTU5NUFENTBEMTFFOUJBRDZDMjI2QzRGOUFFMDIvQ0UzRkNFMzRB RjE2MTFGMEI1MEJGRjdBQzRGOUFFMDIucm9hMEMGCCsGAQUFBwEHAQH/BDQwMjAw BAIAATAqAwQAy3kKAwQAy3kvAwQA0hNdAwQA0hN8AwQA0hOZAwQA0hOwAwQA0xiu MA0GCSqGSIb3DQEBCwUAA4IBAQCN9OhV4czmRO0bldvAhf4J7/hLQbpVy+V7B6UW cHehe/4GQT4ACQeoifzYNZmNPQoYbonoLVnwL+Ke1J+uwELACOSrHW0r+K7VLN1h SVXNhNz36HF33BXHrlR8E5Z1yKFExPtovT+IXhsGRf2FBz9v/5msftOWHC6lg5N3 kAXh4EFk/cfalzX2/WJq5LTyXkMSBuKJTuYbbhsRoIQOrHPuvx/E2+f1a2a8YcHg WIoRy2ToVnJ80/R73wy3BbDUnfySkB8LPJPPPtm7k2S90rK5yS2QP1p9zGq1zXUL CxM7xBpR8fCJ1ZvZHIx27rHaZHn/JcKqQfiAXlrmSs0TaAfQ -----END CERTIFICATE-----Generated at Sat Sep 5 05:07:40 2026 by rpki-client