$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3DC9CCC4AC4A11F199EB65634211F970.roa File: 3DC9CCC4AC4A11F199EB65634211F970.roa (raw, json) Hash identifier: 9ASxwF0gTHSlKzDFapefVUpz6ogFigYAOzKtxdpXqvc= Subject key identifier: 39:CF:1F:0C:89:7D:67:BB:D0:CA:63:C2:06:56:8A:40:A4:FB:29:4A Certificate issuer: /CN=A9110DC8/serialNumber=DE17FEB19AEC4DF57EB2B578ACFB9E1031396F20 Certificate serial: 12 Authority key identifier: DE:17:FE:B1:9A:EC:4D:F5:7E:B2:B5:78:AC:FB:9E:10:31:39:6F:20 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3hf-sZrsTfV-srV4rPueEDE5byA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3DC9CCC4AC4A11F199EB65634211F970.roa Signing time: Wed 09 Sep 2026 12:30:29 +0000 ROA not before: Wed 09 Sep 2026 12:30:29 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 138954 IP address blocks: 160.236.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3hf-sZrsTfV-srV4rPueEDE5byA.crl rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3hf-sZrsTfV-srV4rPueEDE5byA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3hf-sZrsTfV-srV4rPueEDE5byA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110DC8, serialNumber=DE17FEB19AEC4DF57EB2B578ACFB9E1031396F20 Validity Not Before: Sep 9 12:30:29 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aa15165-2e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:51:a2:82:e0:e3:35:fc:14:2d:43:6f:ef:93: ba:e0:16:67:db:41:5b:74:58:6e:db:eb:88:1b:bd: 1e:99:1f:8e:61:83:27:e7:51:9a:ff:6a:81:d1:cc: 22:68:83:e1:4d:b1:98:c0:42:c1:45:f9:59:73:fc: ed:e5:5a:2b:2a:68:ff:a5:69:e6:4a:71:69:73:28: db:87:fc:8e:7e:37:be:5a:6e:bb:93:40:dc:42:90: d5:2f:1c:2b:0b:85:97:3f:b4:32:9d:33:29:cf:41: 5b:d5:4f:fc:2b:63:5e:c6:79:c2:33:83:14:93:7f: 9b:cb:5f:11:87:35:09:0e:07:1b:59:f6:1a:03:28: 58:4e:48:12:fb:2e:0f:02:0c:e9:a4:72:5f:49:71: 76:55:ee:4d:20:43:e7:ff:e1:e2:7c:57:26:97:12: f6:77:aa:3b:90:fb:ba:36:0f:16:8a:76:eb:ec:86: d4:59:f4:0f:9e:ad:4d:9d:d8:52:53:04:04:78:5e: 57:d5:e1:26:a4:91:7d:d6:73:2a:84:62:79:b6:da: 96:3f:ed:e5:fb:61:e3:e8:c4:80:c8:5c:33:c5:1b: 9c:78:20:ec:c1:fd:28:b4:c5:5a:c9:db:74:b0:4e: 1e:7a:ed:67:99:08:82:39:21:29:d7:c2:b5:5a:f6: 85:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CF:1F:0C:89:7D:67:BB:D0:CA:63:C2:06:56:8A:40:A4:FB:29:4A X509v3 Authority Key Identifier: keyid:DE:17:FE:B1:9A:EC:4D:F5:7E:B2:B5:78:AC:FB:9E:10:31:39:6F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3hf-sZrsTfV-srV4rPueEDE5byA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3hf-sZrsTfV-srV4rPueEDE5byA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110DC8/3E6E2EDC9C0411F18BC4D3006B11F970/3DC9CCC4AC4A11F199EB65634211F970.roa sbgp-ipAddrBlock: critical IPv4: 160.236.238.0/24 Signature Algorithm: sha256WithRSAEncryption a4:23:01:c6:30:d0:92:77:49:44:2c:76:8e:b1:0d:73:62:c8: 0a:51:6e:c2:92:76:42:70:b0:06:c3:f9:35:47:06:27:1c:17: 18:f6:0c:d0:f2:51:79:05:90:92:74:8b:59:e1:30:8b:8e:e9: a5:e7:a3:f6:5b:e1:50:84:ef:41:d4:a2:4a:41:55:4e:36:e8: 94:e1:f6:a2:bf:20:99:59:47:b8:73:76:65:e9:89:fa:75:fe: d8:88:fe:bb:b1:04:7b:53:93:dc:88:8e:38:fc:64:25:1e:9f: f3:28:e7:74:a6:19:2b:74:fc:cc:ac:e3:bc:e1:fe:67:4f:9d: 75:c1:91:a8:83:00:75:4a:91:ac:ac:3b:03:99:56:24:1f:89: 6f:65:3b:50:cf:70:17:3e:4f:e9:8d:28:90:d1:65:54:ca:32: 87:28:42:58:64:ed:d8:96:f0:40:2e:0e:22:af:f6:46:96:40: 5f:87:47:90:ba:e9:fd:41:ac:8f:98:46:60:f3:03:7d:0d:a8: 51:61:a2:97:f4:38:05:52:3d:ca:a1:04:ff:bb:66:3a:79:a8: 17:11:02:88:03:9c:a6:fe:1e:9b:0a:42:5b:2c:23:30:5d:45: 08:f2:f2:58:ef:c7:57:a9:32:1f:b6:1a:fe:25:53:7e:97:5a: 7e:aa:5e:ee -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MERDODExMC8GA1UEBRMoREUxN0ZFQjE5QUVDNERGNTdFQjJCNTc4QUNGQjlFMTAz MTM5NkYyMDAeFw0yNjA5MDkxMjMwMjlaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYTE1MTY1LTJlOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBUaKC4OM1/BQtQ2/vk7rgFmfbQVt0WG7b64gbvR6ZH45hgyfnUZr/aoHRzCJo g+FNsZjAQsFF+Vlz/O3lWisqaP+laeZKcWlzKNuH/I5+N75abruTQNxCkNUvHCsL hZc/tDKdMynPQVvVT/wrY17GecIzgxSTf5vLXxGHNQkOBxtZ9hoDKFhOSBL7Lg8C DOmkcl9JcXZV7k0gQ+f/4eJ8VyaXEvZ3qjuQ+7o2DxaKduvshtRZ9A+erU2d2FJT BAR4XlfV4SakkX3WcyqEYnm22pY/7eX7YePoxIDIXDPFG5x4IOzB/Si0xVrJ23Sw Th567WeZCII5ISnXwrVa9oUXAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUOc8fDIl9 Z7vQymPCBlaKQKT7KUowHwYDVR0jBBgwFoAU3hf+sZrsTfV+srV4rPueEDE5byAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwREM4LzNFNkUyRURDOUMw NDExRjE4QkM0RDMwMDZCMTFGOTcwLzNoZi1zWnJzVGZWLXNyVjRyUHVlRURFNWJ5 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM2hmLXNacnNUZlYtc3JWNHJQdWVFREU1YnlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MERDOC8zRTZFMkVEQzlDMDQxMUYxOEJDNEQzMDA2QjExRjk3MC8zREM5Q0NDNEFD NEExMUYxOTlFQjY1NjM0MjExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACg7O4wDQYJKoZIhvcNAQELBQADggEBAKQjAcYw0JJ3SUQsdo6xDXNi yApRbsKSdkJwsAbD+TVHBiccFxj2DNDyUXkFkJJ0i1nhMIuO6aXno/Zb4VCE70HU okpBVU426JTh9qK/IJlZR7hzdmXpifp1/tiI/ruxBHtTk9yIjjj8ZCUen/Mo53Sm GSt0/Mys47zh/mdPnXXBkaiDAHVKkaysOwOZViQfiW9lO1DPcBc+T+mNKJDRZVTK MocoQlhk7diW8EAuDiKv9kaWQF+HR5C66f1BrI+YRmDzA30NqFFhopf0OAVSPcqh BP+7Zjp5qBcRAogDnKb+HpsKQlssIzBdRQjy8ljvx1epMh+2Gv4lU36XWn6qXu4= -----END CERTIFICATE-----Generated at Mon Sep 21 18:09:03 2026 by rpki-client