$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/3B8DEC18F67C11EFA12FD55AC4F9AE02.roa File: 3B8DEC18F67C11EFA12FD55AC4F9AE02.roa (raw, json) Hash identifier: oOBcoVuJpPgn5ByEJPJQ2DYmHtprtdSc5gSjorkGddw= Subject key identifier: AC:D8:76:20:F0:B8:5B:AE:D4:62:10:0C:7A:7D:05:D4:14:DF:AC:E6 Certificate issuer: /CN=A91A560A/serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD Certificate serial: 38FD Authority key identifier: 86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/3B8DEC18F67C11EFA12FD55AC4F9AE02.roa Signing time: Fri 02 Oct 2026 15:38:24 +0000 ROA not before: Fri 02 Oct 2026 15:38:24 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 140766 IP address blocks: 79.108.216.0/21 maxlen: 24 85.155.16.0/20 maxlen: 24 109.237.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.crl rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14589 (0x38fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD Validity Not Before: Oct 2 15:38:24 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcff0-f344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6a:e7:b0:24:84:44:75:26:ec:4d:55:31:0e: 40:ad:ee:8a:73:79:fe:44:64:95:70:e8:68:93:bf: de:2b:16:36:ab:56:5d:aa:bd:e7:6d:58:ed:6b:da: 8b:7a:0b:b1:75:a5:84:a6:1c:19:52:1a:bd:4d:9d: ac:f8:06:a9:95:b2:f7:a7:b8:26:52:e2:34:e7:4f: ca:e1:b2:84:08:5e:3b:cf:55:19:88:8f:55:c0:f6: 76:0b:d8:74:c5:2b:06:7a:91:44:aa:70:19:d2:ea: 86:2c:8c:83:4f:c8:3d:c4:c8:82:d2:e3:d3:b4:83: 36:0f:de:38:6f:11:38:2c:ef:31:b9:73:b8:16:ef: 9d:af:5b:75:0c:6f:33:e8:22:56:6a:63:3d:cd:d6: 0d:21:82:e2:93:9a:30:c3:0a:68:1d:6d:ac:27:94: 74:71:ba:6d:a6:ee:0d:88:6a:81:d2:87:47:b7:7f: 07:56:88:0e:63:ba:fd:a6:0a:df:0f:86:52:6e:a0: 85:12:26:8c:9a:a7:75:66:61:91:34:fa:ca:6d:77: 00:4e:23:1f:db:e4:65:7a:bc:09:6d:98:da:47:de: 14:03:7f:0a:ec:aa:5f:b8:f4:7a:d3:c2:07:e1:2a: f3:42:ca:53:1c:2e:d8:37:00:ab:fa:a8:df:b8:70: a1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D8:76:20:F0:B8:5B:AE:D4:62:10:0C:7A:7D:05:D4:14:DF:AC:E6 X509v3 Authority Key Identifier: keyid:86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/3B8DEC18F67C11EFA12FD55AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 79.108.216.0/21 85.155.16.0/20 109.237.64.0/21 Signature Algorithm: sha256WithRSAEncryption 5b:10:1c:4f:22:d8:ac:85:9c:45:aa:5a:de:2a:6c:80:5b:aa: 1a:c1:d1:33:6b:a5:e7:a8:43:94:fe:d3:98:e1:5b:e8:a9:e7: ce:41:79:2c:10:09:16:8b:c7:67:a3:55:d0:25:4b:ca:6b:d7: a0:0b:69:56:00:02:f7:2e:b7:66:f0:9d:48:d1:e6:ea:1d:22: 5a:36:ff:8c:91:c3:fa:c8:73:28:59:5a:3d:30:96:50:e9:48: a9:2f:d9:d9:8f:8f:03:ac:e2:71:81:21:35:8e:5f:5e:e0:dd: b4:48:53:6a:48:27:f7:18:dd:26:d8:b4:9f:e1:fb:79:db:a5: 84:b3:9a:d5:69:c6:18:82:26:c0:19:f9:ac:07:19:cd:6d:92: bf:7a:38:6f:5b:bc:b8:c2:c3:35:ab:db:95:e8:40:f8:33:07: 67:7a:4f:48:77:79:04:4e:e1:e0:81:ab:bd:aa:af:bb:0a:ff: a9:56:35:6d:85:80:92:0d:72:2c:84:86:b1:4f:33:0c:b5:82: ad:26:3d:92:7a:a7:72:40:92:e9:58:38:35:05:8b:4e:c5:54: 86:eb:1e:ba:74:54:ec:52:03:8e:66:29:07:d1:4c:4a:a3:a8: 95:0d:de:c7:b1:86:42:52:c0:2e:5b:de:61:1a:80:97:bd:47: 29:31:7b:9d -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICOP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDg2REI1N0U2OTBGN0QzMDkyOTNBMjhCQTdDNTVGQjhB RjM3RDVEQkQwHhcNMjYxMDAyMTUzODI0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2ZmMC1mMzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmrnsCSERHUm7E1VMQ5Are6Kc3n+RGSVcOhok7/eKxY2q1Zdqr3nbVjta9qL eguxdaWEphwZUhq9TZ2s+AaplbL3p7gmUuI050/K4bKECF47z1UZiI9VwPZ2C9h0 xSsGepFEqnAZ0uqGLIyDT8g9xMiC0uPTtIM2D944bxE4LO8xuXO4Fu+dr1t1DG8z 6CJWamM9zdYNIYLik5owwwpoHW2sJ5R0cbptpu4NiGqB0odHt38HVogOY7r9pgrf D4ZSbqCFEiaMmqd1ZmGRNPrKbXcATiMf2+RlerwJbZjaR94UA38K7KpfuPR608IH 4SrzQspTHC7YNwCr+qjfuHChzwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFKzYdiDw uFuu1GIQDHp9BdQU36zmMB8GA1UdIwQYMBaAFIbbV+aQ99MJKToounxV+4rzfV29 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9COTk1M0RCQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9odHRYNXBEMzB3a3BPaWk2ZkZYN2l2TjlY YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2h0dFg1cEQzMHdrcE9paTZmRlg3aXZOOVhiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQjk5NTNEQkExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvM0I4REVDMThG NjdDMTFFRkExMkZENTVBQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQDT2zYAwQEVZsQAwQDbe1AMA0GCSqGSIb3DQEBCwUAA4IBAQBbEBxP ItishZxFqlreKmyAW6oawdEza6XnqEOU/tOY4VvoqefOQXksEAkWi8dno1XQJUvK a9egC2lWAAL3Lrdm8J1I0ebqHSJaNv+MkcP6yHMoWVo9MJZQ6UipL9nZj48DrOJx gSE1jl9e4N20SFNqSCf3GN0m2LSf4ft526WEs5rVacYYgibAGfmsBxnNbZK/ejhv W7y4wsM1q9uV6ED4Mwdnek9Id3kETuHggau9qq+7Cv+pVjVthYCSDXIshIaxTzMM tYKtJj2SeqdyQJLpWDg1BYtOxVSG6x66dFTsUgOOZikH0UxKo6iVDd7HsYZCUsAu W95hGoCXvUcpMXud -----END CERTIFICATE-----Generated at Thu Oct 22 08:17:06 2026 by rpki-client