$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C3809/AB61636A8EE911F1811037946311F970/38FC091E8EEA11F18D5914636411F970.roa File: 38FC091E8EEA11F18D5914636411F970.roa (raw, json) Hash identifier: P+gMb1uNa9z4e+j9ZVbWBhE3RmxdA8J2rZETaUN7ADQ= Subject key identifier: 83:91:C0:C1:3C:C3:EB:4E:04:E6:63:86:F6:7E:87:D4:54:42:4F:90 Certificate issuer: /CN=A91C3809/serialNumber=0DE3EA869991C3B75C3B50D37B06733C29D4BCD5 Certificate serial: 02 Authority key identifier: 0D:E3:EA:86:99:91:C3:B7:5C:3B:50:D3:7B:06:73:3C:29:D4:BC:D5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DePqhpmRw7dcO1DTewZzPCnUvNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3809/AB61636A8EE911F1811037946311F970/38FC091E8EEA11F18D5914636411F970.roa Signing time: Mon 03 Aug 2026 03:20:06 +0000 ROA not before: Mon 03 Aug 2026 03:20:06 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 154791 IP address blocks: 160.236.210.0/23 maxlen: 23 160.236.210.0/24 maxlen: 24 160.236.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3809/AB61636A8EE911F1811037946311F970/DePqhpmRw7dcO1DTewZzPCnUvNU.crl rsync://rpki.apnic.net/member_repository/A91C3809/AB61636A8EE911F1811037946311F970/DePqhpmRw7dcO1DTewZzPCnUvNU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DePqhpmRw7dcO1DTewZzPCnUvNU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 09:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3809, serialNumber=0DE3EA869991C3B75C3B50D37B06733C29D4BCD5 Validity Not Before: Aug 3 03:20:06 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a7008e5-b811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:25:74:0b:4c:bf:07:2d:97:a7:4c:4e:e8:e8: c4:60:9f:1d:1d:c8:39:7c:d7:fd:78:91:78:f8:71: d7:c0:41:d1:18:62:69:90:0b:23:9f:90:78:87:ab: a6:6c:42:7d:e8:cc:af:1f:6a:27:1d:2e:71:46:f3: e8:9e:45:cd:54:2c:3d:bf:8e:a0:bc:46:39:ba:40: 6a:44:ba:9c:ed:00:70:26:27:03:9f:07:95:70:3e: 45:8c:03:05:e8:b6:83:4c:44:ef:4b:b1:c3:b3:91: b6:42:9c:f9:8b:7a:39:8a:e7:6d:41:04:c0:be:93: 18:83:71:7d:c6:54:41:e8:73:32:35:46:76:cb:94: 72:80:72:90:e5:ea:d0:76:61:22:64:5d:1c:2f:ea: 93:79:67:5b:4b:9d:cc:3c:3d:13:a9:1d:3e:e9:bf: ed:6a:66:85:09:30:b5:39:83:59:60:4c:a6:a1:19: 1c:32:44:a6:e6:b1:10:23:2c:b5:27:b8:5f:79:4f: 88:47:f5:3a:5e:5b:d3:20:81:93:d3:62:25:11:07: 53:05:6d:87:1c:00:b9:35:7a:de:81:97:50:a5:31: c2:2d:fd:aa:02:c7:b0:06:a4:88:0a:ba:c6:ac:23: 2f:2a:42:19:75:8b:17:aa:dc:ac:b1:14:e1:19:43: 86:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:91:C0:C1:3C:C3:EB:4E:04:E6:63:86:F6:7E:87:D4:54:42:4F:90 X509v3 Authority Key Identifier: keyid:0D:E3:EA:86:99:91:C3:B7:5C:3B:50:D3:7B:06:73:3C:29:D4:BC:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3809/AB61636A8EE911F1811037946311F970/DePqhpmRw7dcO1DTewZzPCnUvNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DePqhpmRw7dcO1DTewZzPCnUvNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3809/AB61636A8EE911F1811037946311F970/38FC091E8EEA11F18D5914636411F970.roa sbgp-ipAddrBlock: critical IPv4: 160.236.210.0/23 Signature Algorithm: sha256WithRSAEncryption 06:35:63:23:c8:fd:e4:d1:42:8a:09:61:54:ec:35:d3:a1:b1: 0f:20:d2:ef:43:93:dc:f9:43:70:57:08:c8:87:eb:ba:42:39: 5d:50:04:3d:68:05:e3:6e:fb:3e:c9:c5:22:b7:83:d4:8c:54: 87:83:8c:ca:7e:b6:0c:77:16:c4:1f:49:fc:a7:e7:01:a9:0b: d2:d6:8e:b4:03:c5:00:c8:62:e7:3b:52:89:d9:eb:cf:65:3f: c7:1b:f6:47:08:53:bd:87:10:ea:7d:64:80:dc:3b:51:be:67: 62:76:81:28:7f:83:d0:0e:4c:35:dd:8d:59:82:2c:24:96:79: da:06:bd:43:d7:e0:fe:a8:6f:e3:c0:4f:04:d1:64:d0:27:b6: 38:21:dc:d9:0f:54:bc:33:39:95:a1:78:50:e9:35:d9:bc:17: 70:b3:d8:f3:3a:d7:c3:57:6b:d9:fa:e6:3b:55:fa:44:ac:d4: e7:8b:f5:c1:1b:7a:91:14:3c:4a:e6:b8:e4:84:37:f9:80:d8: a4:a7:41:3f:ec:a9:aa:ae:16:3d:80:f3:0d:2d:43:9a:ba:8c: 36:46:d3:12:d9:08:4f:e3:24:91:9c:3a:4d:5c:68:64:a2:e1: 34:ae:e0:65:0c:d2:7b:69:f1:ae:8d:a6:1b:d4:d1:6a:a6:25: ec:80:2b:c8 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MzgwOTExMC8GA1UEBRMoMERFM0VBODY5OTkxQzNCNzVDM0I1MEQzN0IwNjczM0My OUQ0QkNENTAeFw0yNjA4MDMwMzIwMDZaFw0yNzEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNzAwOGU1LWI4MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZJXQLTL8HLZenTE7o6MRgnx0dyDl81/14kXj4cdfAQdEYYmmQCyOfkHiHq6Zs Qn3ozK8faicdLnFG8+ieRc1ULD2/jqC8Rjm6QGpEupztAHAmJwOfB5VwPkWMAwXo toNMRO9LscOzkbZCnPmLejmK521BBMC+kxiDcX3GVEHoczI1RnbLlHKAcpDl6tB2 YSJkXRwv6pN5Z1tLncw8PROpHT7pv+1qZoUJMLU5g1lgTKahGRwyRKbmsRAjLLUn uF95T4hH9TpeW9MggZPTYiURB1MFbYccALk1et6Bl1ClMcIt/aoCx7AGpIgKusas Iy8qQhl1ixeq3KyxFOEZQ4YRAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUg5HAwTzD 604E5mOG9n6H1FRCT5AwHwYDVR0jBBgwFoAUDePqhpmRw7dcO1DTewZzPCnUvNUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMzODA5L0FCNjE2MzZBOEVF OTExRjE4MTEwMzc5NDYzMTFGOTcwL0RlUHFocG1SdzdkY08xRFRld1p6UENuVXZO VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRGVQcWhwbVJ3N2RjTzFEVGV3WnpQQ25Vdk5VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzgwOS9BQjYxNjM2QThFRTkxMUYxODExMDM3OTQ2MzExRjk3MC8zOEZDMDkxRThF RUExMUYxOEQ1OTE0NjM2NDExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGg7NIwDQYJKoZIhvcNAQELBQADggEBAAY1YyPI/eTRQooJYVTsNdOh sQ8g0u9Dk9z5Q3BXCMiH67pCOV1QBD1oBeNu+z7JxSK3g9SMVIeDjMp+tgx3FsQf Sfyn5wGpC9LWjrQDxQDIYuc7UonZ689lP8cb9kcIU72HEOp9ZIDcO1G+Z2J2gSh/ g9AOTDXdjVmCLCSWedoGvUPX4P6ob+PATwTRZNAntjgh3NkPVLwzOZWheFDpNdm8 F3Cz2PM618NXa9n65jtV+kSs1OeL9cEbepEUPErmuOSEN/mA2KSnQT/sqaquFj2A 8w0tQ5q6jDZG0xLZCE/jJJGcOk1caGSi4TSu4GUM0ntp8a6NphvU0WqmJeyAK8g= -----END CERTIFICATE-----Generated at Wed Aug 26 20:28:00 2026 by rpki-client