$ rpki-client -vvvf rpki.apnic.net/member_repository/A91393AF/3CBD07F8995B11F1BE0CE0905811F970/408FD6F4CA1F11F1ACFC5A054D11F970.roa File: 408FD6F4CA1F11F1ACFC5A054D11F970.roa (raw, json) Hash identifier: xmqaCiNvdAyEp9MhF8Xa5cxe+aGmisoKVn7k6vEqnKw= Subject key identifier: 6C:C9:E8:04:35:F4:77:3E:F9:55:FE:BF:92:AF:5E:55:E0:6E:E9:E5 Certificate issuer: /CN=A91393AF/serialNumber=81A74ACBF59FA7520ECE6CC5C43627A9BDAA72AD Certificate serial: 25 Authority key identifier: 81:A7:4A:CB:F5:9F:A7:52:0E:CE:6C:C5:C4:36:27:A9:BD:AA:72:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gadKy_Wfp1IOzmzFxDYnqb2qcq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91393AF/3CBD07F8995B11F1BE0CE0905811F970/408FD6F4CA1F11F1ACFC5A054D11F970.roa Signing time: Sat 17 Oct 2026 14:11:02 +0000 ROA not before: Sat 17 Oct 2026 14:11:02 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 9564 IP address blocks: 202.146.187.0/24 maxlen: 24 202.158.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91393AF/3CBD07F8995B11F1BE0CE0905811F970/gadKy_Wfp1IOzmzFxDYnqb2qcq0.crl rsync://rpki.apnic.net/member_repository/A91393AF/3CBD07F8995B11F1BE0CE0905811F970/gadKy_Wfp1IOzmzFxDYnqb2qcq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gadKy_Wfp1IOzmzFxDYnqb2qcq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91393AF, serialNumber=81A74ACBF59FA7520ECE6CC5C43627A9BDAA72AD Validity Not Before: Oct 17 14:11:02 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6ad381f6-5e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:66:5a:2b:8e:db:ee:fa:42:19:f1:5f:ca:10: a9:04:48:3a:79:64:f2:b5:89:bb:12:34:f5:fc:e3: ea:46:73:e6:9f:6e:e8:8d:73:ee:b2:94:a6:85:61: 3c:08:c0:49:8e:7e:a9:58:84:f3:cd:39:54:6a:ca: eb:65:60:31:d0:3a:1c:0a:55:7b:ac:07:bf:18:52: a8:23:ee:a9:8c:8f:aa:40:ba:2c:43:1f:01:ba:9d: 62:bf:0d:78:ef:9a:05:a2:bb:5d:8c:2b:37:c0:04: f3:87:7a:43:4e:10:d8:0f:5d:28:56:fd:6e:1f:bb: 56:4a:5c:7e:ab:a7:eb:d4:d5:14:fc:8e:2d:a0:cc: ca:ca:23:40:48:ef:76:85:92:0b:bd:be:8a:8c:51: ef:99:4f:87:ee:62:4f:43:09:29:9f:af:72:e6:88: cb:d8:29:c5:26:23:ae:40:54:b2:e6:82:09:cf:06: a8:68:13:8b:0b:55:3f:c2:e7:ab:07:a9:a9:26:3c: a2:94:1e:0f:2c:bb:cb:c2:20:a7:36:77:3b:a5:c6: 15:44:ee:de:c9:6b:bb:89:ab:c1:d7:c0:e5:a6:48: bc:17:f2:6c:1c:72:83:70:07:38:11:25:79:d1:4c: 91:6f:50:61:ee:cc:04:e7:6b:96:57:61:85:75:db: 0d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C9:E8:04:35:F4:77:3E:F9:55:FE:BF:92:AF:5E:55:E0:6E:E9:E5 X509v3 Authority Key Identifier: keyid:81:A7:4A:CB:F5:9F:A7:52:0E:CE:6C:C5:C4:36:27:A9:BD:AA:72:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91393AF/3CBD07F8995B11F1BE0CE0905811F970/gadKy_Wfp1IOzmzFxDYnqb2qcq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gadKy_Wfp1IOzmzFxDYnqb2qcq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91393AF/3CBD07F8995B11F1BE0CE0905811F970/408FD6F4CA1F11F1ACFC5A054D11F970.roa sbgp-ipAddrBlock: critical IPv4: 202.146.187.0/24 202.158.243.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:93:2f:a1:2d:7b:be:18:ea:09:c0:84:a3:16:43:36:9b:07: 40:3e:fe:19:80:c4:55:3f:5c:16:1f:7a:29:f9:c3:92:22:4c: 1e:2a:21:11:d3:18:65:12:94:8d:df:11:38:6d:dd:32:e5:f4: fd:2b:fc:9d:3d:b6:ec:aa:45:d3:85:bc:57:dd:af:be:c4:8b: de:f7:49:50:8a:bd:c0:bd:4c:03:b4:a4:47:24:53:77:f5:96: 75:94:c1:02:a3:98:d7:4c:fb:1c:3a:59:69:80:f7:ce:6e:c6: ac:6c:82:10:ab:32:8e:5b:48:8f:4f:c6:c9:ca:3f:f4:be:e8: 78:f1:c1:5e:fb:9f:55:1d:32:21:56:55:03:82:06:11:56:1f: c4:54:dd:fd:09:87:18:49:a1:9c:b0:05:aa:15:9e:e8:e2:d9: 9b:1f:df:a0:bf:34:53:3d:37:0e:c9:0e:4c:c7:f8:f8:d8:ef: 2e:52:59:11:32:67:69:f7:74:3e:cd:50:e1:82:a4:65:26:91: 4f:f2:a3:63:f6:f0:ea:9a:11:2f:d4:41:a2:ad:d7:b9:fe:5b: 43:66:2e:a6:0d:8a:b5:5b:50:e2:dd:46:56:20:8c:25:4e:5a: 70:23:2f:03:19:b4:27:de:2e:c9:c9:ea:05:85:75:02:55:5d: 94:31:7a:b0 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OTNBRjExMC8GA1UEBRMoODFBNzRBQ0JGNTlGQTc1MjBFQ0U2Q0M1QzQzNjI3QTlC REFBNzJBRDAeFw0yNjEwMTcxNDExMDJaFw0yNzA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTZhZDM4MWY2LTVlMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5Zlorjtvu+kIZ8V/KEKkESDp5ZPK1ibsSNPX84+pGc+afbuiNc+6ylKaFYTwI wEmOfqlYhPPNOVRqyutlYDHQOhwKVXusB78YUqgj7qmMj6pAuixDHwG6nWK/DXjv mgWiu12MKzfABPOHekNOENgPXShW/W4fu1ZKXH6rp+vU1RT8ji2gzMrKI0BI73aF kgu9voqMUe+ZT4fuYk9DCSmfr3LmiMvYKcUmI65AVLLmggnPBqhoE4sLVT/C56sH qakmPKKUHg8su8vCIKc2dzulxhVE7t7Ja7uJq8HXwOWmSLwX8mwccoNwBzgRJXnR TJFvUGHuzATna5ZXYYV12w29AgMBAAGjggJmMIICYjAdBgNVHQ4EFgQUbMnoBDX0 dz75Vf6/kq9eVeBu6eUwHwYDVR0jBBgwFoAUgadKy/Wfp1IOzmzFxDYnqb2qcq0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5M0FGLzNDQkQwN0Y4OTk1 QjExRjFCRTBDRTA5MDU4MTFGOTcwL2dhZEt5X1dmcDFJT3ptekZ4RFlucWIycWNx MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ2FkS3lfV2ZwMUlPem16RnhEWW5xYjJxY3EwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTNBRi8zQ0JEMDdGODk5NUIxMUYxQkUwQ0UwOTA1ODExRjk3MC80MDhGRDZGNENB MUYxMUYxQUNGQzVBMDU0RDExRjk3MC5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBADKkrsDBADKnvMwDQYJKoZIhvcNAQELBQADggEBAIyTL6Ete74Y6gnA hKMWQzabB0A+/hmAxFU/XBYfein5w5IiTB4qIRHTGGUSlI3fETht3TLl9P0r/J09 tuyqRdOFvFfdr77Ei973SVCKvcC9TAO0pEckU3f1lnWUwQKjmNdM+xw6WWmA985u xqxsghCrMo5bSI9PxsnKP/S+6HjxwV77n1UdMiFWVQOCBhFWH8RU3f0JhxhJoZyw BaoVnuji2Zsf36C/NFM9Nw7JDkzH+PjY7y5SWREyZ2n3dD7NUOGCpGUmkU/yo2P2 8OqaES/UQaKt17n+W0NmLqYNirVbUOLdRlYgjCVOWnAjLwMZtCfeLsnJ6gWFdQJV XZQxerA= -----END CERTIFICATE-----Generated at Thu Oct 22 12:04:50 2026 by rpki-client