$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/0D06C406887511F094C09643C4F9AE02.roa File: 0D06C406887511F094C09643C4F9AE02.roa (raw, json) Hash identifier: fZLS7BTbHgwFyiQ62aGPt6/LG4QSbyVXY6J5NvFpJ1g= Subject key identifier: CE:71:DD:E2:3A:02:B4:C9:04:E2:20:6D:75:0D:DD:B9:03:0D:64:38 Certificate issuer: /CN=A91CFDD0/serialNumber=92B4C2A692940B548E635044335A985BEE22BDA1 Certificate serial: D0 Authority key identifier: 92:B4:C2:A6:92:94:0B:54:8E:63:50:44:33:5A:98:5B:EE:22:BD:A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/0D06C406887511F094C09643C4F9AE02.roa Signing time: Sat 03 Oct 2026 07:55:26 +0000 ROA not before: Sat 03 Oct 2026 07:55:26 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 154166 IP address blocks: 203.174.16.0/23 maxlen: 23 203.174.16.0/24 maxlen: 24 203.174.17.0/24 maxlen: 24 2402:2560::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.crl rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 07:08:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFDD0, serialNumber=92B4C2A692940B548E635044335A985BEE22BDA1 Validity Not Before: Oct 3 07:55:26 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ac0b4ee-fd03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c8:79:2f:b3:5a:f1:21:a1:8a:be:fa:98:b1: f9:02:1c:29:f2:33:e3:be:e1:27:31:79:b8:38:a6: c2:88:c6:31:d9:90:fe:37:e9:a2:1b:5a:f2:5a:9b: f6:b2:0d:66:02:2e:38:b4:51:8e:48:10:2f:87:21: ae:c1:99:5e:37:1b:8c:7a:a0:dd:c2:f0:2d:05:5d: 00:81:c9:9b:a1:79:b4:36:4d:0b:f2:4d:be:cf:b5: 0d:e1:36:8d:56:dc:70:e0:ba:de:f1:28:bc:d3:4c: 3e:49:d7:6c:ff:48:33:bb:ed:fb:2b:46:a6:19:6e: 23:04:c8:ca:5e:f5:96:13:0b:8e:50:c3:be:c1:1b: 27:10:7b:97:5c:4c:f7:b7:c4:fe:24:33:10:60:cd: 16:e8:d6:fa:21:98:05:5c:86:9b:59:80:e5:1f:a2: a1:c8:65:50:2d:1a:f0:ce:a7:f5:49:bd:72:73:78: ee:bb:ce:9b:be:bb:21:01:49:9e:4f:89:9a:2c:55: d7:9a:ed:28:53:f2:ac:7e:36:92:f1:3e:65:38:35: b0:a1:24:a9:01:da:ac:6c:b8:6a:b6:ec:27:a0:4f: 5b:78:e8:5d:6d:26:f6:28:26:dd:ad:f1:6a:fc:54: e4:8a:46:1c:0b:36:2b:2f:3d:72:9c:f4:c2:9e:22: 1d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:71:DD:E2:3A:02:B4:C9:04:E2:20:6D:75:0D:DD:B9:03:0D:64:38 X509v3 Authority Key Identifier: keyid:92:B4:C2:A6:92:94:0B:54:8E:63:50:44:33:5A:98:5B:EE:22:BD:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/0D06C406887511F094C09643C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.174.16.0/23 IPv6: 2402:2560::/32 Signature Algorithm: sha256WithRSAEncryption 54:e6:6b:9a:7c:3c:63:68:a0:f3:4a:e0:06:cc:06:63:8f:fb: c0:52:d2:0a:24:f6:e4:d2:74:58:2f:2c:87:82:a1:48:02:89: e5:46:37:60:85:1c:84:68:9f:c3:b7:e1:77:9d:40:cf:9a:8e: 81:8f:0f:ac:4e:c1:bd:21:76:2d:6d:d9:3d:31:be:7e:bc:ee: 5e:7a:bd:f6:05:2a:1a:4d:50:69:39:5a:12:bd:bd:80:c5:cb: 5e:2f:46:94:68:56:4a:86:61:3a:ec:91:9f:c7:94:37:ea:64: 0c:2c:65:c6:33:47:26:36:a1:c6:dd:0c:f4:c1:d7:42:94:33: f1:cd:08:84:7a:ce:1b:3e:3c:eb:63:88:37:b2:35:37:7a:db: 0d:7b:fb:08:ae:52:b1:2e:1a:b1:22:64:37:3a:4e:9e:f9:4f: de:58:15:64:1c:0b:82:79:fc:89:f4:a3:df:ca:c9:dd:de:1f: 06:8d:80:8a:fa:4c:be:f1:f7:19:e7:af:5e:3f:b5:c4:c4:96: a5:5f:ab:63:5b:d1:8b:dd:3f:b7:43:a9:b6:27:a7:3b:74:7c: 27:03:10:48:08:e6:82:d2:2b:57:b6:63:54:2f:81:f9:35:5f: db:4d:33:53:76:49:c5:d8:9b:2b:05:b2:dc:e9:1f:1e:75:6e: 58:1e:a4:8e -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZERDAxMTAvBgNVBAUTKDkyQjRDMkE2OTI5NDBCNTQ4RTYzNTA0NDMzNUE5ODVC RUUyMkJEQTEwHhcNMjYxMDAzMDc1NTI2WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMwYjRlZS1mZDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlsh5L7Na8SGhir76mLH5Ahwp8jPjvuEnMXm4OKbCiMYx2ZD+N+miG1ryWpv2 sg1mAi44tFGOSBAvhyGuwZleNxuMeqDdwvAtBV0AgcmboXm0Nk0L8k2+z7UN4TaN Vtxw4Lre8Si800w+Sdds/0gzu+37K0amGW4jBMjKXvWWEwuOUMO+wRsnEHuXXEz3 t8T+JDMQYM0W6Nb6IZgFXIabWYDlH6KhyGVQLRrwzqf1Sb1yc3juu86bvrshAUme T4maLFXXmu0oU/KsfjaS8T5lODWwoSSpAdqsbLhqtuwnoE9beOhdbSb2KCbdrfFq /FTkikYcCzYrLz1ynPTCniIddwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFM5x3eI6 ArTJBOIgbXUN3bkDDWQ4MB8GA1UdIwQYMBaAFJK0wqaSlAtUjmNQRDNamFvuIr2h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkREMC85RTBFRTg0NDg4 NzQxMUYwOEJENzNCM0ZDNEY5QUUwMi9rclRDcHBLVUMxU09ZMUJFTTFxWVctNGl2 YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tyVENwcEtVQzFTT1kxQkVNMXFZVy00aXZhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZERDAvOUUwRUU4NDQ4ODc0MTFGMDhCRDczQjNGQzRGOUFFMDIvMEQwNkM0MDY4 ODc1MTFGMDk0QzA5NjQzQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBy64QMA0EAgACMAcDBQAkAiVgMA0GCSqGSIb3DQEBCwUAA4IBAQBU 5muafDxjaKDzSuAGzAZjj/vAUtIKJPbk0nRYLyyHgqFIAonlRjdghRyEaJ/Dt+F3 nUDPmo6Bjw+sTsG9IXYtbdk9Mb5+vO5eer32BSoaTVBpOVoSvb2AxcteL0aUaFZK hmE67JGfx5Q36mQMLGXGM0cmNqHG3Qz0wddClDPxzQiEes4bPjzrY4g3sjU3etsN e/sIrlKxLhqxImQ3Ok6e+U/eWBVkHAuCefyJ9KPfysnd3h8GjYCK+ky+8fcZ569e P7XExJalX6tjW9GL3T+3Q6m2J6c7dHwnAxBICOaC0itXtmNUL4H5NV/bTTNTdknF 2JsrBbLc6R8edW5YHqSO -----END CERTIFICATE-----Generated at Mon Oct 5 13:04:00 2026 by rpki-client