$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/357B8ABEC67F11F08B0CE042C4F9AE02.roa File: 357B8ABEC67F11F08B0CE042C4F9AE02.roa (raw, json) Hash identifier: nw9otOiCwQ8wtLQCh0wMrV+Kd/Ck+Jle9oO9lFGDeX0= Subject key identifier: EC:CA:1A:C0:D6:93:01:51:41:08:9C:24:61:08:DA:D8:D6:A3:7C:E1 Certificate issuer: /CN=A9110C2F/serialNumber=63F359A69EDC3863486F46D6141F9B5C014323FB Certificate serial: 9E Authority key identifier: 63:F3:59:A6:9E:DC:38:63:48:6F:46:D6:14:1F:9B:5C:01:43:23:FB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/357B8ABEC67F11F08B0CE042C4F9AE02.roa Signing time: Fri 04 Sep 2026 15:17:04 +0000 ROA not before: Fri 04 Sep 2026 15:17:04 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 38229 IP address blocks: 192.248.0.0/17 maxlen: 17 192.248.0.0/22 maxlen: 22 192.248.4.0/22 maxlen: 22 192.248.8.0/21 maxlen: 21 192.248.16.0/20 maxlen: 21 192.248.32.0/19 maxlen: 19 192.248.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.crl rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:52:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C2F, serialNumber=63F359A69EDC3863486F46D6141F9B5C014323FB Validity Not Before: Sep 4 15:17:04 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a9ae0f0-9af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f0:8e:96:ed:0c:9a:e5:0a:f2:a6:0a:d9:b4: d6:a1:78:1f:33:13:e6:98:ba:09:72:51:21:32:d7: ae:25:4e:4f:0a:2c:3c:03:22:3d:bf:32:4a:d2:05: a9:37:62:26:e1:23:c3:89:6f:92:99:e0:de:de:6c: 63:92:b9:99:c2:74:d0:1a:67:62:0e:2f:63:fc:e9: 01:8c:f3:3c:cd:fb:fb:a2:93:8a:1f:93:5a:7a:69: a0:70:f8:11:1b:d9:e8:31:0d:6d:94:1a:ed:92:b8: a5:bb:03:83:ba:ec:11:79:cc:70:1c:f6:90:61:8e: d9:61:43:71:6f:0b:8c:5b:12:ee:6a:f8:f3:59:61: 91:47:fe:3c:40:9d:20:70:f1:18:cb:ca:a6:9f:ce: 75:e3:ae:d9:6e:98:20:83:e8:8b:fb:5a:b8:60:21: 11:a6:75:e1:e6:95:2a:52:ec:95:3c:95:1a:6f:e2: 3f:03:4c:1e:fe:6e:51:0b:a8:30:5b:6d:26:99:ac: d6:ff:7f:f9:cf:fc:e4:be:26:fa:8c:76:f3:3f:73: b3:70:3b:c1:07:8e:f3:87:4c:7e:56:46:5e:44:97: b7:05:c9:9c:42:72:4d:df:a5:9f:dc:3d:98:03:6b: 15:da:b6:fd:29:ee:37:07:0f:50:6a:7e:6b:59:b4: c7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:CA:1A:C0:D6:93:01:51:41:08:9C:24:61:08:DA:D8:D6:A3:7C:E1 X509v3 Authority Key Identifier: keyid:63:F3:59:A6:9E:DC:38:63:48:6F:46:D6:14:1F:9B:5C:01:43:23:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/357B8ABEC67F11F08B0CE042C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 192.248.0.0/17 Signature Algorithm: sha256WithRSAEncryption 64:83:76:bd:6d:07:50:fe:f8:88:9e:50:2c:53:18:79:9d:d3: e4:b5:5a:36:55:f9:2b:5d:8a:94:3b:8c:a7:c6:23:ae:7f:49: 82:d4:c4:20:71:ed:e9:11:30:b7:cc:65:bd:e6:d7:7f:ca:3c: 9b:14:fd:59:7c:7b:5d:b9:5e:ac:1a:01:b9:28:13:be:59:44: 3d:9f:fa:4a:9f:1e:da:02:db:e0:7a:d4:7f:3b:03:ac:52:a0: 45:f2:b6:d2:14:58:bd:a8:d3:07:ac:b9:3a:ce:cc:d9:86:2e: 0e:74:b4:ca:f0:07:4a:68:47:47:6d:fd:04:2b:c3:12:05:53: 84:b5:71:3f:a6:1c:0f:f8:8c:99:6b:57:18:00:22:fb:b5:fc: ee:f1:e0:dc:eb:fd:46:73:a2:54:24:75:3b:90:25:27:0e:93: 8e:01:df:7e:14:ee:d1:77:78:18:bb:a0:dd:3a:2f:e9:88:22: ee:9d:a2:cb:83:99:a3:36:15:d7:8b:70:c2:44:4f:28:71:bb: a4:19:e5:d2:ff:1c:75:ce:b4:55:4c:8b:47:60:da:f8:e8:3f: a6:1e:3f:aa:a1:0e:6b:99:05:60:01:b4:d9:83:9d:a7:8f:93: 46:74:b6:7e:19:88:f2:e6:2a:26:36:77:b6:10:04:a0:d1:12: d1:3c:4e:85 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDMkYxMTAvBgNVBAUTKDYzRjM1OUE2OUVEQzM4NjM0ODZGNDZENjE0MUY5QjVD MDE0MzIzRkIwHhcNMjYwOTA0MTUxNzA0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTlhZTBmMC05YWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn/COlu0MmuUK8qYK2bTWoXgfMxPmmLoJclEhMteuJU5PCiw8AyI9vzJK0gWp N2Im4SPDiW+SmeDe3mxjkrmZwnTQGmdiDi9j/OkBjPM8zfv7opOKH5NaemmgcPgR G9noMQ1tlBrtkriluwODuuwRecxwHPaQYY7ZYUNxbwuMWxLuavjzWWGRR/48QJ0g cPEYy8qmn851467Zbpggg+iL+1q4YCERpnXh5pUqUuyVPJUab+I/A0we/m5RC6gw W20mmazW/3/5z/zkvib6jHbzP3OzcDvBB47zh0x+VkZeRJe3BcmcQnJN36Wf3D2Y A2sV2rb9Ke43Bw9Qan5rWbTHRQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOzKGsDW kwFRQQicJGEI2tjWo3zhMB8GA1UdIwQYMBaAFGPzWaae3DhjSG9G1hQfm1wBQyP7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEMyRi8xQTZBRTk3Q0M1 QTgxMUYwOTNBN0YwMkNDNEY5QUUwMi9ZX05acHA3Y09HTkliMGJXRkItYlhBRkRJ X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lfTlpwcDdjT0dOSWIwYldGQi1iWEFGRElfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTBDMkYvMUE2QUU5N0NDNUE4MTFGMDkzQTdGMDJDQzRGOUFFMDIvMzU3QjhBQkVD NjdGMTFGMDhCMENFMDQyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQHwPgAMA0GCSqGSIb3DQEBCwUAA4IBAQBkg3a9bQdQ/viInlAsUxh5 ndPktVo2VfkrXYqUO4ynxiOuf0mC1MQgce3pETC3zGW95td/yjybFP1ZfHtduV6s GgG5KBO+WUQ9n/pKnx7aAtvgetR/OwOsUqBF8rbSFFi9qNMHrLk6zszZhi4OdLTK 8AdKaEdHbf0EK8MSBVOEtXE/phwP+IyZa1cYACL7tfzu8eDc6/1Gc6JUJHU7kCUn DpOOAd9+FO7Rd3gYu6DdOi/piCLunaLLg5mjNhXXi3DCRE8ocbukGeXS/xx1zrRV TItHYNr46D+mHj+qoQ5rmQVgAbTZg52nj5NGdLZ+GYjy5iomNne2EASg0RLRPE6F -----END CERTIFICATE-----Generated at Mon Sep 21 12:24:38 2026 by rpki-client