$ rpki-client -vvvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C39CEEAAE17C11EC93AB7473C4F9AE02.roa File: C39CEEAAE17C11EC93AB7473C4F9AE02.roa (raw, json) Hash identifier: Bd8Qh7oBetdY6jmb8hWcyIBnYiSQJ3CYVSDwp/CG4iI= Subject key identifier: 66:7D:51:3C:86:53:91:00:8A:54:1C:7B:F5:EB:E8:29:E8:8F:94:1D Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19 Certificate serial: 0B20 Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C39CEEAAE17C11EC93AB7473C4F9AE02.roa Signing time: Thu 03 Sep 2026 00:49:17 +0000 ROA not before: Thu 03 Sep 2026 00:49:17 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 133481 IP address blocks: 203.170.208.0/24 maxlen: 24 203.170.209.0/24 maxlen: 24 203.170.212.0/24 maxlen: 24 203.170.213.0/24 maxlen: 24 203.170.216.0/24 maxlen: 24 203.170.217.0/24 maxlen: 24 203.170.218.0/24 maxlen: 24 203.170.219.0/24 maxlen: 24 203.170.220.0/24 maxlen: 24 203.170.221.0/24 maxlen: 24 203.170.222.0/24 maxlen: 24 203.170.223.0/24 maxlen: 24 203.170.240.0/24 maxlen: 24 203.170.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2848 (0xb20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19 Validity Not Before: Sep 3 00:49:17 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a98c40d-afb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:96:8b:15:4e:ef:ae:58:6a:20:5c:85:11:98: 40:29:7c:a9:60:28:23:2f:89:78:44:f3:90:c7:f8: bd:50:f3:e5:8c:9e:3b:5d:1b:17:6d:f4:28:ce:d4: 18:25:11:ac:0b:e2:1f:0f:34:bf:aa:34:fe:e5:af: a3:d3:f5:6a:70:ff:c7:1f:f5:67:66:dd:a2:b6:cb: 42:50:dd:c1:48:37:13:1f:f9:10:db:bc:c7:41:53: 1b:63:1c:b4:a5:74:a4:f1:e6:dc:8a:a8:23:ea:cc: f7:0d:7b:33:b5:a0:02:51:0a:48:fe:f9:76:d9:c4: 95:5a:9a:40:5e:3b:a3:20:98:8c:25:72:40:7a:9c: ee:49:b4:f5:65:c2:48:40:82:bb:c0:e4:95:31:ce: ec:12:9d:0d:d7:e4:93:bc:03:a5:96:92:bb:51:1c: 2a:52:32:10:bf:61:b1:d8:7e:61:fc:3c:13:d1:8f: 38:ee:13:02:40:ca:72:c9:be:24:24:38:6e:33:77: 2d:9d:b4:0f:1c:89:c0:a4:d3:f7:65:e4:b3:2f:3a: cf:a2:30:c6:ac:0d:96:13:86:29:48:e6:c0:02:e3: 05:7d:43:3a:0f:68:a0:18:62:38:cc:e5:fb:0e:9f: 71:5c:76:4e:68:2a:89:eb:31:e9:91:a7:29:b4:6b: 1a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7D:51:3C:86:53:91:00:8A:54:1C:7B:F5:EB:E8:29:E8:8F:94:1D X509v3 Authority Key Identifier: keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C39CEEAAE17C11EC93AB7473C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.170.208.0/23 203.170.212.0/23 203.170.216.0/21 203.170.240.0/23 Signature Algorithm: sha256WithRSAEncryption 84:22:3d:45:8a:6a:57:91:66:b9:f4:db:e1:5b:22:57:9f:62: 37:2c:b0:7d:41:5a:02:26:10:0a:d9:01:72:04:d2:4a:ec:1e: 85:a1:ea:34:6a:41:22:01:73:56:e4:96:1d:26:21:5b:68:2e: 9a:00:82:71:5c:8e:22:75:68:73:d6:f6:ec:48:f8:6d:0f:df: d2:da:07:3a:fc:94:94:ce:ac:75:89:b5:77:ae:37:a9:99:3e: 77:31:77:76:8e:9f:83:96:7e:f3:29:27:2f:47:bc:aa:69:5f: 6b:a1:9b:df:71:e5:28:b6:b4:be:5d:15:20:0a:19:89:3b:45: de:b2:94:02:c3:28:e0:8b:6f:03:c2:f6:02:26:48:3f:ce:91: 53:c4:03:4e:80:4f:bd:42:3a:82:cd:2d:42:c5:86:f9:40:3d: e1:01:75:12:8f:0f:8d:87:6c:29:2a:08:e7:9d:ea:5c:4c:a8: 3d:5d:a4:2b:dc:1e:f3:23:e8:bc:9d:81:05:15:bc:bf:a3:be: e8:55:d6:e8:92:f5:c5:3a:f6:c2:be:89:12:98:e4:5d:a6:35: df:0a:2b:97:4a:46:91:f0:76:c1:9f:71:f8:1b:30:a9:bb:16: c1:e9:13:03:73:41:e1:00:7f:13:a6:5b:60:05:15:03:05:e2: 84:da:ff:71 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICCyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyQ0ExMTAvBgNVBAUTKDc3QTIwMUM1OEVCM0I0MjA4QzkxQkE3RUNFRDkzNkU1 OTVFNjFBMTkwHhcNMjYwOTAzMDA0OTE3WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4YzQwZC1hZmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpaLFU7vrlhqIFyFEZhAKXypYCgjL4l4RPOQx/i9UPPljJ47XRsXbfQoztQY JRGsC+IfDzS/qjT+5a+j0/VqcP/HH/VnZt2itstCUN3BSDcTH/kQ27zHQVMbYxy0 pXSk8ebciqgj6sz3DXsztaACUQpI/vl22cSVWppAXjujIJiMJXJAepzuSbT1ZcJI QIK7wOSVMc7sEp0N1+STvAOllpK7URwqUjIQv2Gx2H5h/DwT0Y847hMCQMpyyb4k JDhuM3ctnbQPHInApNP3ZeSzLzrPojDGrA2WE4YpSObAAuMFfUM6D2igGGI4zOX7 Dp9xXHZOaCqJ6zHpkacptGsaywIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFGZ9UTyG U5EAilQce/Xr6Cnoj5QdMB8GA1UdIwQYMBaAFHeiAcWOs7QgjJG6fs7ZNuWV5hoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9GNUVEQzdGQzhB NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi9kNklCeFk2enRDQ01rYnAtenRrMjVaWG1H aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q2SUJ4WTZ6dENDTWticC16dGsyNVpYbUdoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjYyQ0EvRjVFREM3RkM4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvQzM5Q0VFQUFF MTdDMTFFQzkzQUI3NDczQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQBy6rQAwQBy6rUAwQDy6rYAwQBy6rwMA0GCSqGSIb3DQEBCwUAA4IB AQCEIj1FimpXkWa59NvhWyJXn2I3LLB9QVoCJhAK2QFyBNJK7B6Foeo0akEiAXNW 5JYdJiFbaC6aAIJxXI4idWhz1vbsSPhtD9/S2gc6/JSUzqx1ibV3rjepmT53MXd2 jp+Dln7zKScvR7yqaV9roZvfceUotrS+XRUgChmJO0XespQCwyjgi28DwvYCJkg/ zpFTxANOgE+9QjqCzS1CxYb5QD3hAXUSjw+Nh2wpKgjnnepcTKg9XaQr3B7zI+i8 nYEFFby/o77oVdbokvXFOvbCvokSmORdpjXfCiuXSkaR8HbBn3H4GzCpuxbB6RMD c0HhAH8TpltgBRUDBeKE2v9x -----END CERTIFICATE-----Generated at Sat Sep 19 01:33:38 2026 by rpki-client