$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/3423CAAA91A811ED97B3DB55C4F9AE02.roa File: 3423CAAA91A811ED97B3DB55C4F9AE02.roa (raw, json) Hash identifier: lCHmc9SO9yqT3xM8K5NFqJQ98iTMSE3eV4lnpp4jeOs= Subject key identifier: 3C:42:3A:4E:B2:98:79:7B:81:49:AC:DD:90:D2:6D:2F:B1:6E:30:19 Certificate issuer: /CN=A91D6444/serialNumber=8D7D43B6FCB966E8E1A6583BDA07250157AC310F Certificate serial: 02C7 Authority key identifier: 8D:7D:43:B6:FC:B9:66:E8:E1:A6:58:3B:DA:07:25:01:57:AC:31:0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/3423CAAA91A811ED97B3DB55C4F9AE02.roa Signing time: Thu 01 Oct 2026 02:50:05 +0000 ROA not before: Thu 01 Oct 2026 02:50:05 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 17906 IP address blocks: 203.11.224.0/21 maxlen: 24 203.11.232.0/21 maxlen: 24 203.11.240.0/21 maxlen: 24 203.11.248.0/21 maxlen: 24 203.22.32.0/20 maxlen: 24 203.22.48.0/20 maxlen: 21 203.22.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.crl rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 01:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 711 (0x2c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6444, serialNumber=8D7D43B6FCB966E8E1A6583BDA07250157AC310F Validity Not Before: Oct 1 02:50:05 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abdca5d-fbb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c4:b4:85:f6:62:17:3e:6d:05:5e:8e:cb:53: 67:58:93:19:42:48:c2:d6:40:82:d6:80:3b:18:9d: 53:20:bb:4e:22:fd:f8:42:f2:2a:5b:a8:22:54:ec: 15:f3:4f:cd:84:38:e2:54:d3:9f:7a:40:2d:35:84: 71:d9:3b:8a:01:e3:9d:46:d1:f3:e7:86:3e:f7:3d: e3:74:d2:12:5f:32:18:ea:7c:dc:28:56:84:a4:40: 5c:df:67:54:93:9a:64:c6:50:1c:8a:4d:8a:dc:d6: f1:15:20:c8:bf:47:6b:de:c6:59:ab:96:13:07:43: 20:f1:94:8c:24:5f:0d:26:4c:f2:29:f6:3e:3b:ff: 81:e1:18:ac:85:4a:5e:2e:4d:55:8a:4d:74:80:5b: ba:5f:9d:55:fe:1b:39:b6:eb:33:6e:4e:ac:91:15: 0c:e7:04:20:6b:55:67:99:ed:e7:0f:47:d3:1d:ce: 9b:16:a3:b5:ee:11:82:90:e9:56:bf:43:06:c3:ba: fe:15:3d:92:4f:71:6d:79:0d:0a:05:86:8b:59:51: 37:3d:92:22:ec:21:a3:14:40:66:4e:61:5d:1c:8e: 07:b8:da:f3:38:83:82:58:47:3c:25:9d:32:3f:1c: 8f:05:50:5d:d7:6d:a5:2c:68:d1:fe:01:2a:b7:93: 9b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:42:3A:4E:B2:98:79:7B:81:49:AC:DD:90:D2:6D:2F:B1:6E:30:19 X509v3 Authority Key Identifier: keyid:8D:7D:43:B6:FC:B9:66:E8:E1:A6:58:3B:DA:07:25:01:57:AC:31:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/3423CAAA91A811ED97B3DB55C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.11.224.0/19 203.22.32.0/19 Signature Algorithm: sha256WithRSAEncryption 48:66:ef:76:84:3a:61:b4:cd:8a:e7:2d:0b:4d:59:3f:9d:7b: d0:e0:4d:fd:4c:02:34:dd:d7:ba:c5:38:c4:58:dc:ae:62:1f: 83:e3:72:8e:0f:ed:e4:8e:0b:d4:d5:97:b9:24:72:3d:ec:df: 04:35:af:b8:d7:f9:fa:fb:23:19:da:36:3f:33:37:b2:3e:50: d3:42:fd:12:e4:f1:96:a6:ac:d3:bd:3d:e2:1e:e2:46:97:e6: d3:a9:95:23:fa:71:4f:20:88:d2:12:20:26:37:99:52:68:14: 7a:10:4c:6e:9d:24:f1:35:a9:d5:86:97:21:68:11:fa:be:44: f7:a9:d0:46:cb:09:d5:f5:79:f7:23:6b:0f:ee:b4:d1:b3:aa: 88:79:ab:45:2b:cd:d0:13:2a:c8:9b:f1:8e:66:89:25:19:72: 94:5d:cf:22:2b:17:3a:aa:7d:f4:bb:bc:48:00:2b:ff:52:2d: 81:ea:e9:88:f6:2b:c0:c0:ce:32:ca:07:e3:b8:3b:79:fd:bc: a2:99:95:5a:7d:27:e8:59:a7:36:ae:49:1d:7a:05:be:01:80: e9:24:db:c9:d7:be:6e:e4:d3:82:79:de:79:5d:fb:24:d2:58: 29:30:f7:c6:a5:d9:80:70:63:df:50:88:42:ce:f7:c8:77:a3: 00:34:87:b2 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY0NDQxMTAvBgNVBAUTKDhEN0Q0M0I2RkNCOTY2RThFMUE2NTgzQkRBMDcyNTAx NTdBQzMxMEYwHhcNMjYxMDAxMDI1MDA1WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkY2E1ZC1mYmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8S0hfZiFz5tBV6Oy1NnWJMZQkjC1kCC1oA7GJ1TILtOIv34QvIqW6giVOwV 80/NhDjiVNOfekAtNYRx2TuKAeOdRtHz54Y+9z3jdNISXzIY6nzcKFaEpEBc32dU k5pkxlAcik2K3NbxFSDIv0dr3sZZq5YTB0Mg8ZSMJF8NJkzyKfY+O/+B4RishUpe Lk1Vik10gFu6X51V/hs5tuszbk6skRUM5wQga1Vnme3nD0fTHc6bFqO17hGCkOlW v0MGw7r+FT2ST3FteQ0KBYaLWVE3PZIi7CGjFEBmTmFdHI4HuNrzOIOCWEc8JZ0y PxyPBVBd122lLGjR/gEqt5ObywIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFDxCOk6y mHl7gUms3ZDSbS+xbjAZMB8GA1UdIwQYMBaAFI19Q7b8uWbo4aZYO9oHJQFXrDEP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjQ0NC9EQ0M3NkY3NDkw QkIxMUVEQjVCNUZGNTdDNEY5QUUwMi9qWDFEdHZ5NVp1amhwbGc3MmdjbEFWZXNN UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pYMUR0dnk1WnVqaHBsZzcyZ2NsQVZlc01ROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDY0NDQvRENDNzZGNzQ5MEJCMTFFREI1QjVGRjU3QzRGOUFFMDIvMzQyM0NBQUE5 MUE4MTFFRDk3QjNEQjU1QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQFywvgAwQFyxYgMA0GCSqGSIb3DQEBCwUAA4IBAQBIZu92hDphtM2K 5y0LTVk/nXvQ4E39TAI03de6xTjEWNyuYh+D43KOD+3kjgvU1Ze5JHI97N8ENa+4 1/n6+yMZ2jY/MzeyPlDTQv0S5PGWpqzTvT3iHuJGl+bTqZUj+nFPIIjSEiAmN5lS aBR6EExunSTxNanVhpchaBH6vkT3qdBGywnV9Xn3I2sP7rTRs6qIeatFK83QEyrI m/GOZoklGXKUXc8iKxc6qn30u7xIACv/Ui2B6umI9ivAwM4yygfjuDt5/byimZVa fSfoWac2rkkdegW+AYDpJNvJ175u5NOCed55Xfsk0lgpMPfGpdmAcGPfUIhCzvfI d6MANIey -----END CERTIFICATE-----Generated at Mon Oct 5 13:05:11 2026 by rpki-client