$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/99341DD6663D11EE8CBBAE7CC4F9AE02.roa File: 99341DD6663D11EE8CBBAE7CC4F9AE02.roa (raw, json) Hash identifier: MCZY8TcdrHRZrLBUjIYxaW3GviqDbhXanSznbYkRJNw= Subject key identifier: AE:A8:03:8D:20:74:D8:E8:2A:AA:49:D0:A7:98:0D:22:6A:68:0B:B6 Certificate issuer: /CN=A91C9E82/serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A Certificate serial: 026F Authority key identifier: 5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/99341DD6663D11EE8CBBAE7CC4F9AE02.roa Signing time: Fri 07 Aug 2026 02:54:06 +0000 ROA not before: Fri 07 Aug 2026 02:54:06 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 9466 IP address blocks: 203.5.217.0/24 maxlen: 24 203.6.31.0/24 maxlen: 24 203.6.32.0/24 maxlen: 24 203.6.33.0/24 maxlen: 24 203.6.36.0/22 maxlen: 22 203.6.64.0/21 maxlen: 21 203.6.72.0/21 maxlen: 21 203.6.118.0/24 maxlen: 24 203.6.119.0/24 maxlen: 24 203.6.120.0/24 maxlen: 24 203.6.121.0/24 maxlen: 24 203.10.217.0/24 maxlen: 24 203.11.0.0/24 maxlen: 24 2401:6bff::/40 maxlen: 40 2401:6bff:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 623 (0x26f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E82, serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A Validity Not Before: Aug 7 02:54:06 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a7548cd-84a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e7:2a:8f:d5:b7:7a:85:fb:10:bb:72:12:91: 65:e3:62:c5:ee:79:38:9c:68:a5:05:c1:1c:10:65: 20:88:58:5c:62:ec:85:3e:ba:70:e4:df:40:2d:18: a2:62:1a:15:71:90:9b:8d:ab:ee:19:85:5b:5e:21: 85:15:b1:4e:66:7f:91:eb:83:d3:2d:09:fa:01:9d: 09:41:1a:66:36:53:c1:34:42:e7:64:23:3a:96:7d: 95:fa:b1:fe:b8:5d:a4:d2:6b:14:79:e5:eb:c8:28: ae:ad:f0:92:26:9e:2e:ad:1a:ca:9c:3b:36:92:7d: f2:fa:de:f3:19:f9:dd:8a:62:4c:bc:8d:22:54:30: 91:15:cd:c7:15:18:ed:fc:d4:ad:6d:49:2a:5f:2a: 12:10:67:a9:8c:10:e7:13:c3:83:d6:38:39:1f:e0: 42:37:ac:aa:39:92:0a:7b:ce:2b:2c:63:36:b0:b0: 2b:3a:02:59:eb:46:de:77:47:b5:4f:f5:76:da:13: 52:04:63:e3:8b:c2:c6:f1:1f:a3:0c:05:c3:c4:cc: 0f:77:c0:e7:07:8c:a0:12:58:ce:ca:ea:96:5b:a7: c2:4d:67:17:2b:19:55:8a:d4:d8:47:bb:69:78:25: 2b:21:49:99:5f:3e:58:d1:63:d2:92:77:fb:37:b4: ac:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A8:03:8D:20:74:D8:E8:2A:AA:49:D0:A7:98:0D:22:6A:68:0B:B6 X509v3 Authority Key Identifier: keyid:5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/99341DD6663D11EE8CBBAE7CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.5.217.0/24 203.6.31.0-203.6.33.255 203.6.36.0/22 203.6.64.0/20 203.6.118.0-203.6.121.255 203.10.217.0/24 203.11.0.0/24 IPv6: 2401:6bff::/40 2401:6bff:8000::/40 Signature Algorithm: sha256WithRSAEncryption 6c:6a:fa:73:af:60:ef:7d:df:d9:4c:70:3b:12:dc:5e:73:8d: 22:b5:08:2b:48:93:98:65:a3:db:82:5b:b1:ba:df:7f:95:88: b8:72:48:ab:86:42:cd:38:7b:95:e2:13:70:7c:e4:04:0f:e2: 23:f9:09:96:dd:a6:a2:99:c4:b0:ec:58:ad:4e:84:2b:81:d0: 40:cd:e0:ac:5f:a4:a5:a6:c2:77:ac:95:51:5a:ff:7f:f9:dc: dd:89:a9:0e:f6:a8:83:46:9d:9a:38:46:95:06:ff:ac:9e:ff: b3:45:85:aa:db:20:af:04:76:0f:e5:54:17:62:84:12:0e:96: 42:2e:98:80:d5:17:7b:09:15:80:ae:a9:d6:c2:79:07:8f:24: 98:0e:30:1b:b1:16:ae:2b:67:7b:dc:00:2d:e5:2e:cf:c4:72: 10:ef:4e:e5:07:7e:b1:1f:29:e8:14:4f:3d:c6:1c:98:e9:ed: 21:7d:8c:d0:1f:24:cd:4f:c0:8a:74:2e:20:ce:3b:6b:3d:f1: d7:04:f2:fa:82:86:41:ea:69:d5:74:ac:f4:81:12:d2:19:e4: 8f:99:4a:f1:29:22:73:b3:4e:fc:01:73:5c:3e:04:ec:c7:7f: 1f:cd:62:d3:eb:4e:b0:67:53:12:b0:e9:92:75:78:2f:7c:f3: ae:87:89:9e -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlFODIxMTAvBgNVBAUTKDVFNzJBQTdENUIxRDU2MzJFNUQzM0ZFQzcyRkE3NDMz RjQ5Q0UyOUEwHhcNMjYwODA3MDI1NDA2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTc1NDhjZC04NGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+cqj9W3eoX7ELtyEpFl42LF7nk4nGilBcEcEGUgiFhcYuyFPrpw5N9ALRii YhoVcZCbjavuGYVbXiGFFbFOZn+R64PTLQn6AZ0JQRpmNlPBNELnZCM6ln2V+rH+ uF2k0msUeeXryCiurfCSJp4urRrKnDs2kn3y+t7zGfndimJMvI0iVDCRFc3HFRjt /NStbUkqXyoSEGepjBDnE8OD1jg5H+BCN6yqOZIKe84rLGM2sLArOgJZ60bed0e1 T/V22hNSBGPji8LG8R+jDAXDxMwPd8DnB4ygEljOyuqWW6fCTWcXKxlVitTYR7tp eCUrIUmZXz5Y0WPSknf7N7SsOwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFK6oA40g dNjoKqpJ0KeYDSJqaAu2MB8GA1UdIwQYMBaAFF5yqn1bHVYy5dM/7HL6dDP0nOKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUU4Mi9FQTdFNUZBNjYz NkYxMUVFOTdDNzRCNUNDNEY5QUUwMi9YbktxZlZzZFZqTGwwel9zY3ZwME1fU2M0 cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huS3FmVnNkVmpMbDB6X3NjdnAwTV9TYzRwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzlFODIvRUE3RTVGQTY2MzZGMTFFRTk3Qzc0QjVDQzRGOUFFMDIvOTkzNDFERDY2 NjNEMTFFRThDQkJBRTdDQzRGOUFFMDIucm9hMGsGCCsGAQUFBwEHAQH/BFwwWjBA BAIAATA6AwQAywXZMAwDBADLBh8DBAHLBiADBALLBiQDBATLBkAwDAMEAcsGdgME AcsGeAMEAMsK2QMEAMsLADAWBAIAAjAQAwYAJAFr/wADBgAkAWv/gDANBgkqhkiG 9w0BAQsFAAOCAQEAbGr6c69g733f2UxwOxLcXnONIrUIK0iTmGWj24Jbsbrff5WI uHJIq4ZCzTh7leITcHzkBA/iI/kJlt2mopnEsOxYrU6EK4HQQM3grF+kpabCd6yV UVr/f/nc3YmpDvaog0admjhGlQb/rJ7/s0WFqtsgrwR2D+VUF2KEEg6WQi6YgNUX ewkVgK6p1sJ5B48kmA4wG7EWritne9wALeUuz8RyEO9O5Qd+sR8p6BRPPcYcmOnt IX2M0B8kzU/AinQuIM47az3x1wTy+oKGQepp1XSs9IES0hnkj5lK8Skic7NO/AFz XD4E7Md/H81i0+tOsGdTErDpknV4L3zzroeJng== -----END CERTIFICATE-----Generated at Mon Sep 21 17:49:18 2026 by rpki-client