$ rpki-client -vvvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/DF742E02A83511F197EEE3443611F970.roa File: DF742E02A83511F197EEE3443611F970.roa (raw, json) Hash identifier: LR/itoK/L5aRch4pJhKFTPYm9kxaZD8MEBm8uT1T9hA= Subject key identifier: 39:77:3E:6A:04:06:6A:31:0B:C0:B9:6A:58:33:45:C4:08:33:8B:BE Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Certificate serial: 017C Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/DF742E02A83511F197EEE3443611F970.roa Signing time: Fri 04 Sep 2026 07:54:36 +0000 ROA not before: Fri 04 Sep 2026 07:54:36 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 17676 IP address blocks: 63.223.99.0/24 maxlen: 24 63.223.117.0/24 maxlen: 24 63.223.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:54:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 380 (0x17c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Validity Not Before: Sep 4 07:54:36 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a9a793c-bc19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f0:7b:18:57:d8:82:0a:f4:2d:8a:92:6b:66: 40:12:8e:b0:83:53:b1:4e:db:a2:a3:ac:0f:55:4a: cf:72:e5:ad:48:e8:13:43:f7:40:29:a9:f3:7a:3f: 23:8f:6a:f2:c0:fa:ed:89:9d:b4:f4:8f:9f:3b:7c: 13:62:ab:cd:d2:ba:cc:d2:54:c0:2f:ce:e8:32:ef: 9c:4c:2c:81:83:37:35:cc:9a:e1:b4:39:ee:ab:9f: 7a:cb:45:8d:65:b9:d4:0f:ab:48:e6:23:4d:06:0e: 18:b7:d6:83:22:38:10:19:83:e5:ee:63:52:5c:17: 6b:24:c0:48:24:f8:4f:2c:37:11:99:05:ad:74:bb: be:0a:66:54:0c:c3:f8:9e:75:8f:f9:36:30:b9:b5: 2e:b9:2c:5f:67:f4:83:bf:5f:5b:f7:4f:ba:ad:43: 2d:a4:95:74:6e:03:db:a3:6c:7e:7c:20:38:d0:f2: 17:1c:8e:86:d2:d2:ec:ce:5b:8e:da:19:d3:cf:9e: 4d:df:14:5e:a7:fc:99:af:be:80:c8:18:d9:b1:44: c0:e7:78:65:02:16:d1:27:23:40:bc:ba:7b:ed:38: d9:79:2b:a1:c2:df:2c:99:54:fd:cc:c9:12:da:e0: 54:62:12:ba:f9:8f:66:4f:e6:5a:c1:9d:b1:1a:49: b1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:77:3E:6A:04:06:6A:31:0B:C0:B9:6A:58:33:45:C4:08:33:8B:BE X509v3 Authority Key Identifier: keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/DF742E02A83511F197EEE3443611F970.roa sbgp-ipAddrBlock: critical IPv4: 63.223.99.0/24 63.223.117.0/24 63.223.123.0/24 Signature Algorithm: sha256WithRSAEncryption 59:87:cd:a1:02:58:10:0c:15:8a:3e:1b:0a:05:0c:ba:ac:e3: ce:25:68:90:a0:73:4b:f0:ea:ac:bd:8b:7f:5e:9c:51:cf:94: e9:72:86:32:c1:c7:4d:6a:a5:47:ba:16:5c:53:5f:5c:fc:f5: 8f:9e:3d:1b:51:72:bf:34:08:bc:01:39:83:82:33:55:81:b7: 37:c7:36:ee:e6:4b:74:62:81:b2:84:e7:89:2a:7b:6d:db:8c: f4:05:6f:b0:5b:52:97:05:2a:ac:18:b1:0d:4d:19:61:0a:fe: 00:c0:d1:5c:d8:ab:63:07:7c:b0:fb:1d:f5:6e:03:aa:5b:8a: f3:ab:28:32:2a:1f:71:90:9e:f6:e7:af:ef:6a:cf:29:83:4c: 25:42:aa:ad:c8:2a:f4:57:61:5a:d2:25:c5:91:54:51:58:f1: de:f4:da:68:02:23:0e:1e:07:5e:fc:6b:35:f4:04:77:a5:2c: c7:8d:fd:f0:63:18:8b:ff:2d:ed:08:ae:2d:26:ca:70:36:43: e4:63:9d:22:ab:a6:73:a7:c9:ba:70:bf:7c:11:32:16:99:df: e1:68:63:3c:33:b1:db:fd:26:0e:bd:4c:72:ee:d8:0a:a5:c6: 8a:83:81:60:a8:7c:35:a1:5d:7d:03:fc:0b:58:cd:9a:34:0b: 73:35:18:1b -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0QTkxMTAvBgNVBAUTKDNEN0IxNUJENzdEOUI5NzRFMzczNThEQTc1NERGRUE5 MjkxRTY4M0EwHhcNMjYwOTA0MDc1NDM2WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTlhNzkzYy1iYzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlfB7GFfYggr0LYqSa2ZAEo6wg1OxTtuio6wPVUrPcuWtSOgTQ/dAKanzej8j j2rywPrtiZ209I+fO3wTYqvN0rrM0lTAL87oMu+cTCyBgzc1zJrhtDnuq596y0WN ZbnUD6tI5iNNBg4Yt9aDIjgQGYPl7mNSXBdrJMBIJPhPLDcRmQWtdLu+CmZUDMP4 nnWP+TYwubUuuSxfZ/SDv19b90+6rUMtpJV0bgPbo2x+fCA40PIXHI6G0tLszluO 2hnTz55N3xRep/yZr76AyBjZsUTA53hlAhbRJyNAvLp77TjZeSuhwt8smVT9zMkS 2uBUYhK6+Y9mT+ZawZ2xGkmxfwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFDl3PmoE BmoxC8C5algzRcQIM4u+MB8GA1UdIwQYMBaAFD17Fb132bl043NY2nVN/qkpHmg6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9GRDM3MkU0QTI5 NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS9QWHNWdlhmWnVYVGpjMWphZFUzLXFTa2Vh RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzA0QTkvRkQzNzJFNEEyOTQ1MTFGMUE3QUEzRUJEODRFRTUyOEUvREY3NDJFMDJB ODM1MTFGMTk3RUVFMzQ0MzYxMUY5NzAucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAP99jAwQAP991AwQAP997MA0GCSqGSIb3DQEBCwUAA4IBAQBZh82h AlgQDBWKPhsKBQy6rOPOJWiQoHNL8OqsvYt/XpxRz5TpcoYywcdNaqVHuhZcU19c /PWPnj0bUXK/NAi8ATmDgjNVgbc3xzbu5kt0YoGyhOeJKntt24z0BW+wW1KXBSqs GLENTRlhCv4AwNFc2KtjB3yw+x31bgOqW4rzqygyKh9xkJ7256/vas8pg0wlQqqt yCr0V2Fa0iXFkVRRWPHe9NpoAiMOHgde/Gs19AR3pSzHjf3wYxiL/y3tCK4tJspw NkPkY50iq6Zzp8m6cL98ETIWmd/haGM8M7Hb/SYOvUxy7tgKpcaKg4FgqHw1oV19 A/wLWM2aNAtzNRgb -----END CERTIFICATE-----Generated at Tue Sep 22 16:22:19 2026 by rpki-client