$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C104BD4ECAD411F1B3F42FDA4211F970.roa File: C104BD4ECAD411F1B3F42FDA4211F970.roa (raw, json) Hash identifier: BKpYLhu869RNaoPzo1lHfUyg/giiDk01aDp/aDqFX4o= Subject key identifier: C8:F0:EE:71:61:43:62:C8:30:32:73:82:32:94:29:5C:EE:4B:8A:AB Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Certificate serial: 3032 Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C104BD4ECAD411F1B3F42FDA4211F970.roa Signing time: Sun 18 Oct 2026 09:17:34 +0000 ROA not before: Sun 18 Oct 2026 09:17:34 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 38547 IP address blocks: 113.203.241.0/24 maxlen: 24 202.92.16.0/24 maxlen: 24 202.92.17.0/24 maxlen: 24 202.92.23.0/24 maxlen: 24 202.92.24.0/24 maxlen: 24 202.92.24.32/27 maxlen: 27 202.92.25.0/24 maxlen: 24 202.92.26.0/24 maxlen: 24 202.92.27.0/24 maxlen: 24 202.92.28.0/24 maxlen: 24 202.92.29.0/24 maxlen: 24 202.92.30.0/24 maxlen: 24 202.92.31.0/24 maxlen: 24 2400:9560:1::/48 maxlen: 48 2400:9560:5::/48 maxlen: 48 2400:9560:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 09:55:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12338 (0x3032) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Validity Not Before: Oct 18 09:17:34 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6ad48eae-ce62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c6:55:4b:59:7b:79:72:42:96:0d:21:05:ed: 10:08:f5:ae:ba:f7:75:bd:21:74:ae:ea:67:ff:db: 3a:16:86:4a:a1:91:22:d7:47:91:fc:8e:fb:e5:46: 4d:3b:50:cd:1a:03:a3:8e:da:29:13:85:49:30:34: 77:66:1b:38:bc:65:03:78:22:9f:e5:82:35:87:f8: 96:17:ce:eb:21:e6:fd:1f:4b:f4:88:b4:1e:6a:58: 33:d8:ac:75:d6:eb:fc:87:2f:dc:51:11:0f:d2:48: b4:0b:cc:c9:32:08:96:e1:62:86:90:65:e0:c6:f1: d1:8e:ba:cb:cd:f8:0e:7f:a7:73:ba:6b:c0:ed:e3: 7e:30:c6:df:c3:1c:a9:4a:fc:22:9a:46:35:72:74: ef:be:75:ae:e5:b4:dc:de:9c:eb:af:b9:99:94:60: 25:12:b7:1e:bb:65:57:2c:82:25:be:28:1b:cc:f5: 66:26:8f:ae:1b:bc:7e:68:84:87:a1:17:69:fb:ec: 33:89:ae:cc:13:fd:ad:7d:4e:26:12:aa:65:29:64: a7:ca:dc:62:ba:dc:90:21:00:e2:5d:da:64:b2:a0: 17:2b:ee:f7:88:af:eb:8d:99:c0:bb:33:2a:a5:b2: 91:26:6e:90:20:bf:83:79:cf:2a:80:9f:0f:39:89: 13:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F0:EE:71:61:43:62:C8:30:32:73:82:32:94:29:5C:EE:4B:8A:AB X509v3 Authority Key Identifier: keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C104BD4ECAD411F1B3F42FDA4211F970.roa sbgp-ipAddrBlock: critical IPv4: 113.203.241.0/24 202.92.16.0/23 202.92.23.0-202.92.31.255 IPv6: 2400:9560:1::/48 2400:9560:5::/48 2400:9560:9::/48 Signature Algorithm: sha256WithRSAEncryption 58:17:b2:f6:72:e9:53:fd:ac:98:09:1a:1f:a8:3b:5c:db:01: ff:99:e0:fc:d4:78:cb:57:f7:f0:48:99:3b:9f:04:88:4e:c4: 9b:07:45:6b:03:b2:bf:2a:3d:3f:a3:b5:ef:f9:c3:3e:53:86: ac:a1:10:cb:8d:c3:b1:7b:7f:4b:88:7c:79:24:bc:43:c0:2f: 40:a0:b4:01:b4:7c:8c:1a:63:fd:e4:e3:0f:18:8a:83:9d:f3: 59:ca:15:59:a8:76:d6:6d:16:13:ac:da:2e:5d:97:4f:84:c1: a8:f7:3b:7d:25:3b:9c:19:01:7c:72:c1:0e:ba:37:a7:6e:83: ca:d9:69:02:52:ce:19:87:50:23:3e:84:92:28:a3:b5:ab:c6: 0c:06:af:8b:78:aa:f2:ce:f7:77:66:3c:9d:73:15:92:b8:99: 3d:30:c2:16:d7:7d:e3:bd:2e:57:f8:66:06:0b:7b:d1:d6:48: e3:b6:c3:d4:96:eb:7a:e9:5e:34:31:82:ad:06:28:68:ac:88: ce:fd:75:28:fb:ae:0c:7a:b7:64:c6:8a:ba:f4:02:63:04:95: 6e:d5:44:ac:f3:44:9d:1b:a1:9f:f6:bc:28:39:a7:16:63:2e: cf:b6:0a:ae:61:1b:73:bd:85:a1:c6:64:68:c5:ef:c9:77:09: c5:03:d5:c9 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICMDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy MUU1QjM5QzQwHhcNMjYxMDE4MDkxNzM0WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWQ0OGVhZS1jZTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8ZVS1l7eXJClg0hBe0QCPWuuvd1vSF0rupn/9s6FoZKoZEi10eR/I775UZN O1DNGgOjjtopE4VJMDR3Zhs4vGUDeCKf5YI1h/iWF87rIeb9H0v0iLQealgz2Kx1 1uv8hy/cUREP0ki0C8zJMgiW4WKGkGXgxvHRjrrLzfgOf6dzumvA7eN+MMbfwxyp SvwimkY1cnTvvnWu5bTc3pzrr7mZlGAlErceu2VXLIIlvigbzPVmJo+uG7x+aISH oRdp++wzia7ME/2tfU4mEqplKWSnytxiutyQIQDiXdpksqAXK+73iK/rjZnAuzMq pbKRJm6QIL+Dec8qgJ8POYkT8wIDAQABo4IClzCCApMwHQYDVR0OBBYEFMjw7nFh Q2LIMDJzgjKUKVzuS4qrMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvQzEwNEJENEVD QUQ0MTFGMUIzRjQyRkRBNDIxMUY5NzAucm9hMFYGCCsGAQUFBwEHAQH/BEcwRTAg BAIAATAaAwQAccvxAwQBylwQMAwDBADKXBcDBAXKXAAwIQQCAAIwGwMHACQAlWAA AQMHACQAlWAABQMHACQAlWAACTANBgkqhkiG9w0BAQsFAAOCAQEAWBey9nLpU/2s mAkaH6g7XNsB/5ng/NR4y1f38EiZO58EiE7EmwdFawOyvyo9P6O17/nDPlOGrKEQ y43DsXt/S4h8eSS8Q8AvQKC0AbR8jBpj/eTjDxiKg53zWcoVWah21m0WE6zaLl2X T4TBqPc7fSU7nBkBfHLBDro3p26DytlpAlLOGYdQIz6EkiijtavGDAavi3iq8s73 d2Y8nXMVkriZPTDCFtd9470uV/hmBgt70dZI47bD1JbreuleNDGCrQYoaKyIzv11 KPuuDHq3ZMaKuvQCYwSVbtVErPNEnRuhn/a8KDmnFmMuz7YKrmEbc72FocZkaMXv yXcJxQPVyQ== -----END CERTIFICATE-----Generated at Sat Oct 24 12:15:15 2026 by rpki-client