$ rpki-client -vvvf rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/D3D36BE0271011ECA0D7D95AC4F9AE02.roa File: D3D36BE0271011ECA0D7D95AC4F9AE02.roa (raw, json) Hash identifier: duFnEGiuT26TMk2ZSfK1MgR6+5z5a4gsXx+ILFt0PxU= Subject key identifier: 7F:5A:D3:5F:A7:5C:2F:F2:1F:4A:24:C4:B4:C1:B3:AB:C1:5E:D4:AC Certificate issuer: /CN=A91514B1/serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6 Certificate serial: 0658 Authority key identifier: 96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/D3D36BE0271011ECA0D7D95AC4F9AE02.roa Signing time: Wed 02 Sep 2026 23:43:37 +0000 ROA not before: Wed 02 Sep 2026 23:43:37 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 198949 IP address blocks: 161.43.102.0/24 maxlen: 24 161.43.122.0/24 maxlen: 24 198.142.0.0/24 maxlen: 24 198.142.152.0/24 maxlen: 24 198.142.231.0/24 maxlen: 24 198.142.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 22:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1624 (0x658) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91514B1, serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6 Validity Not Before: Sep 2 23:43:37 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a98b4a9-dd27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5a:cd:02:46:92:7d:bb:cf:71:ac:ee:4d:b4: 9d:4e:e3:10:51:1b:76:bf:28:4b:6e:02:f6:7d:1f: ee:45:d0:50:5b:21:e9:cb:03:4a:e5:a2:d4:99:01: 37:98:27:88:c7:e4:c5:e0:a8:4a:9c:cb:c0:79:b5: 35:94:45:6f:a6:1d:f0:af:fd:c9:36:0e:94:fd:59: 3c:26:37:b8:04:d1:a2:db:3a:04:30:d2:4d:07:53: 87:30:36:2b:a2:c1:d3:97:80:3d:38:38:81:50:e3: 5d:38:df:9d:87:f0:5b:64:1f:ec:af:57:60:7a:2c: b5:cb:3b:f2:84:95:dc:bc:98:d8:69:d7:be:ba:38: b5:3f:2d:80:66:09:aa:3c:09:f5:ac:bf:9e:0a:69: 63:a8:26:2a:14:c2:d9:72:7c:63:e2:55:47:ae:24: 40:70:97:61:ca:42:65:a8:b1:17:7d:6a:23:23:12: 24:95:fc:f5:80:b2:9d:3e:55:79:fc:90:0d:84:b4: ec:c8:27:0c:5e:64:78:7c:bd:fb:4f:3a:ba:75:de: f4:ab:1e:7d:f1:c0:94:d2:1b:35:a2:29:15:77:96: 1e:bc:20:3e:5f:2c:c8:6c:58:07:bc:b7:0f:40:c8: 5f:54:6c:56:02:45:1d:83:38:a8:7f:7a:20:37:92: 29:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5A:D3:5F:A7:5C:2F:F2:1F:4A:24:C4:B4:C1:B3:AB:C1:5E:D4:AC X509v3 Authority Key Identifier: keyid:96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/D3D36BE0271011ECA0D7D95AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.43.102.0/24 161.43.122.0/24 198.142.0.0/24 198.142.152.0/24 198.142.231.0/24 198.142.235.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:eb:28:64:b1:f4:e1:ee:0d:4e:7d:97:d2:ef:a2:60:31:39: ef:c0:3f:ca:4e:2c:58:fe:ff:b5:8f:70:ff:ec:52:4a:b5:97: 9a:17:30:2b:48:79:0a:f3:e1:37:fc:76:da:c2:7f:e3:dd:d1: 29:4e:f1:b9:e2:07:9f:5a:90:27:c8:a2:6c:64:d7:3e:25:b3: c2:ea:59:87:66:35:89:ae:c6:19:31:06:b5:6c:b5:e9:76:31: 75:82:90:28:82:83:89:da:25:5c:25:ad:66:e0:b3:14:94:34: a8:4c:fa:d8:18:ed:b6:36:57:b9:17:87:32:9e:a2:9d:43:ea: 6e:bf:11:19:46:29:07:0e:a2:b0:aa:c1:c1:9d:e4:3a:4f:55: 1c:b8:73:c2:b5:60:7f:a3:22:c3:11:a3:a3:59:9a:01:6f:94: 77:41:62:fa:31:f1:7f:e2:0e:18:c8:58:f0:6b:b2:87:ab:39: 5b:d4:3d:e8:fb:cb:d8:3e:a8:95:05:a1:a3:d9:2a:6b:44:2f: 10:b0:98:90:93:99:56:b0:9e:62:db:f7:0e:7a:53:f2:e7:9b: 5a:05:fe:74:35:08:8c:31:9f:d1:77:9a:fc:87:0d:89:56:70: b9:45:01:0a:23:21:aa:4e:5f:f1:41:15:b4:34:e9:5b:6e:bd: f9:eb:90:9c -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICBlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE0QjExMTAvBgNVBAUTKDk2ODJDMkFCRTI1MzIzNTgwNzc2QjFEMEUyNzVEMkZE MkQ2OTdFQjYwHhcNMjYwOTAyMjM0MzM3WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4YjRhOS1kZDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFrNAkaSfbvPcazuTbSdTuMQURt2vyhLbgL2fR/uRdBQWyHpywNK5aLUmQE3 mCeIx+TF4KhKnMvAebU1lEVvph3wr/3JNg6U/Vk8Jje4BNGi2zoEMNJNB1OHMDYr osHTl4A9ODiBUONdON+dh/BbZB/sr1dgeiy1yzvyhJXcvJjYade+uji1Py2AZgmq PAn1rL+eCmljqCYqFMLZcnxj4lVHriRAcJdhykJlqLEXfWojIxIklfz1gLKdPlV5 /JANhLTsyCcMXmR4fL37Tzq6dd70qx598cCU0hs1oikVd5YevCA+XyzIbFgHvLcP QMhfVGxWAkUdgziof3ogN5IpowIDAQABo4ICfjCCAnowHQYDVR0OBBYEFH9a01+n XC/yH0okxLTBs6vBXtSsMB8GA1UdIwQYMBaAFJaCwqviUyNYB3ax0OJ10v0taX62 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTRCMS83QTg4NjRBQ0ZC RTQxMUVCODJCNjI2NEZDNEY5QUUwMi9sb0xDcS1KVEkxZ0hkckhRNG5YU19TMXBm clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xvTENxLUpUSTFnSGRySFE0blhTX1MxcGZyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTE0QjEvN0E4ODY0QUNGQkU0MTFFQjgyQjYyNjRGQzRGOUFFMDIvRDNEMzZCRTAy NzEwMTFFQ0EwRDdEOTVBQzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAq BAIAATAkAwQAoStmAwQAoSt6AwQAxo4AAwQAxo6YAwQAxo7nAwQAxo7rMA0GCSqG SIb3DQEBCwUAA4IBAQA86yhksfTh7g1OfZfS76JgMTnvwD/KTixY/v+1j3D/7FJK tZeaFzArSHkK8+E3/Hbawn/j3dEpTvG54gefWpAnyKJsZNc+JbPC6lmHZjWJrsYZ MQa1bLXpdjF1gpAogoOJ2iVcJa1m4LMUlDSoTPrYGO22Nle5F4cynqKdQ+puvxEZ RikHDqKwqsHBneQ6T1UcuHPCtWB/oyLDEaOjWZoBb5R3QWL6MfF/4g4YyFjwa7KH qzlb1D3o+8vYPqiVBaGj2SprRC8QsJiQk5lWsJ5i2/cOelPy55taBf50NQiMMZ/R d5r8hw2JVnC5RQEKIyGqTl/xQRW0NOlbbr3565Cc -----END CERTIFICATE-----Generated at Tue Sep 15 11:22:57 2026 by rpki-client