$ rpki-client -vvvf rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/947F9724B93411F0909C206FC4F9AE02.roa File: 947F9724B93411F0909C206FC4F9AE02.roa (raw, json) Hash identifier: HKRINKfdW6OxbgzNhqaUSGs4TSQwp+VkhHhepGXG6W8= Subject key identifier: A6:0F:1E:92:2C:62:07:F8:90:1F:CD:43:EF:F6:1F:D5:90:55:3D:57 Certificate issuer: /CN=A91168B5/serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39 Certificate serial: 1CC9 Authority key identifier: DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/947F9724B93411F0909C206FC4F9AE02.roa Signing time: Wed 16 Sep 2026 16:29:07 +0000 ROA not before: Wed 16 Sep 2026 16:29:07 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 9432 IP address blocks: 202.36.178.0/24 maxlen: 24 202.36.179.0/24 maxlen: 24 2404:6a00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 16:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7369 (0x1cc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168B5, serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39 Validity Not Before: Sep 16 16:29:07 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aaac3d3-3b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c3:62:5f:a9:fa:a5:00:80:f0:f2:13:5b:ef: cd:fc:7a:f0:1b:52:f1:ae:61:73:02:4b:01:8b:a6: 22:1f:0d:da:83:5a:54:b4:56:98:0c:53:bd:60:20: 17:76:7b:e3:88:7f:f6:1e:da:c7:e3:f8:b3:2c:29: 2d:8d:cb:f0:48:61:1b:e7:77:72:9d:18:69:16:13: fe:ff:65:95:f7:00:ee:c4:12:8a:ca:b4:c8:9d:86: a4:9c:dd:24:56:c3:45:19:64:f7:3f:88:c7:48:f6: 18:3a:39:79:03:8c:57:28:1a:7c:a1:8b:cd:78:f6: 60:1c:51:40:17:ae:d8:be:4a:86:54:6d:9b:3a:8b: 47:a7:6e:0e:f9:a3:80:d6:f9:3c:c8:e6:11:b6:87: b6:2d:c1:66:66:a7:19:2b:72:a6:79:4a:31:b8:c3: ad:b8:e7:1e:55:09:7c:6c:ee:cf:b1:42:23:d5:ee: 8a:8c:cc:d8:9c:7c:d6:a9:33:7d:eb:8b:a0:46:95: 00:d1:58:3c:49:28:3a:38:de:2c:63:c6:ec:c5:6d: f5:fb:56:44:72:8d:20:b1:d1:de:54:e7:42:0b:78: 5c:b1:4f:04:db:17:3a:04:2f:58:69:18:56:9f:01: fb:73:83:dd:da:03:19:dc:c3:18:98:a3:f9:84:dd: 66:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:0F:1E:92:2C:62:07:F8:90:1F:CD:43:EF:F6:1F:D5:90:55:3D:57 X509v3 Authority Key Identifier: keyid:DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/947F9724B93411F0909C206FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.36.178.0/23 IPv6: 2404:6a00::/32 Signature Algorithm: sha256WithRSAEncryption bd:10:8d:2a:11:9a:4f:8f:80:41:4f:c7:8a:e0:b3:bb:84:12: 81:8e:39:ca:96:e2:d7:54:62:f3:01:a6:58:ae:6a:39:c8:d9: 5f:82:b7:64:08:66:88:27:c6:4b:59:5f:8a:05:4d:db:d4:1c: 2d:c3:29:58:02:d7:61:42:e0:d9:96:f1:8d:b4:6f:97:d8:9a: 41:e4:23:f1:15:5b:b0:d0:38:73:e2:98:2c:12:7e:53:03:6a: 88:df:01:c2:31:82:57:75:4f:70:bb:2e:aa:24:af:1c:ca:59: b6:f9:3d:c3:76:0f:76:db:97:ac:05:23:c9:65:32:19:64:32: 2c:b0:4b:a3:15:cb:19:5c:68:f8:eb:9c:2b:16:95:86:b0:ce: f6:7a:d4:dd:68:c5:d7:cc:e6:1e:c4:16:9c:7e:e5:88:c2:c6: ff:f2:7c:29:60:63:69:d0:7c:ad:d9:cb:bb:1c:b6:d0:d2:8e: ad:8a:f4:ff:be:a1:63:62:2f:50:b0:65:d7:73:6f:61:cf:13: c5:46:84:cd:8b:17:69:d9:57:4c:06:0b:f8:7a:a7:d1:66:08: cb:6c:e0:f5:1a:20:ac:6a:af:aa:e2:75:8d:48:f0:c9:e4:db: c6:13:bf:a6:60:0a:70:37:62:3f:45:a7:6e:e7:39:ea:37:b9: 8b:a1:a9:65 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICHMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4QjUxMTAvBgNVBAUTKERDOTAxODE1REM5MTk3M0NBRkExOUE4QjU3NkY4NjhF OTg0MTNFMzkwHhcNMjYwOTE2MTYyOTA3WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFhYzNkMy0zYjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkMNiX6n6pQCA8PITW+/N/HrwG1LxrmFzAksBi6YiHw3ag1pUtFaYDFO9YCAX dnvjiH/2HtrH4/izLCktjcvwSGEb53dynRhpFhP+/2WV9wDuxBKKyrTInYaknN0k VsNFGWT3P4jHSPYYOjl5A4xXKBp8oYvNePZgHFFAF67YvkqGVG2bOotHp24O+aOA 1vk8yOYRtoe2LcFmZqcZK3KmeUoxuMOtuOceVQl8bO7PsUIj1e6KjMzYnHzWqTN9 64ugRpUA0Vg8SSg6ON4sY8bsxW31+1ZEco0gsdHeVOdCC3hcsU8E2xc6BC9YaRhW nwH7c4Pd2gMZ3MMYmKP5hN1mfwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFKYPHpIs Ygf4kB/NQ+/2H9WQVT1XMB8GA1UdIwQYMBaAFNyQGBXckZc8r6Gai1dvho6YQT45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhCNS8zMkM2NTY4Q0Y2 RTAxMUU2OTJBMjBCODdDNEY5QUUwMi8zSkFZRmR5Umx6eXZvWnFMVjItR2pwaEJQ amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNKQVlGZHlSbHp5dm9acUxWMi1HanBoQlBqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTY4QjUvMzJDNjU2OENGNkUwMTFFNjkyQTIwQjg3QzRGOUFFMDIvOTQ3Rjk3MjRC OTM0MTFGMDkwOUMyMDZGQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQByiSyMA0EAgACMAcDBQAkBGoAMA0GCSqGSIb3DQEBCwUAA4IBAQC9 EI0qEZpPj4BBT8eK4LO7hBKBjjnKluLXVGLzAaZYrmo5yNlfgrdkCGaIJ8ZLWV+K BU3b1BwtwylYAtdhQuDZlvGNtG+X2JpB5CPxFVuw0Dhz4pgsEn5TA2qI3wHCMYJX dU9wuy6qJK8cylm2+T3Ddg9225esBSPJZTIZZDIssEujFcsZXGj465wrFpWGsM72 etTdaMXXzOYexBacfuWIwsb/8nwpYGNp0Hyt2cu7HLbQ0o6tivT/vqFjYi9QsGXX c29hzxPFRoTNixdp2VdMBgv4eqfRZgjLbOD1GiCsaq+q4nWNSPDJ5NvGE7+mYApw N2I/Radu5znqN7mLoall -----END CERTIFICATE-----Generated at Wed Sep 23 11:00:54 2026 by rpki-client