$ rpki-client -vvvf rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/398B3186FE5111E6BCEC6E72C4F9AE02.roa File: 398B3186FE5111E6BCEC6E72C4F9AE02.roa (raw, json) Hash identifier: Up9Voxo6f5gLlI/IfXH3StiM4EBdfHVFloNHgcadWBY= Subject key identifier: CB:76:5B:14:31:E6:AC:3A:BD:D9:E8:A2:38:1F:7E:03:4F:5A:5D:D3 Certificate issuer: /CN=A91798AD/serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B Certificate serial: 1DA4 Authority key identifier: 7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/398B3186FE5111E6BCEC6E72C4F9AE02.roa Signing time: Fri 18 Sep 2026 16:29:07 +0000 ROA not before: Fri 18 Sep 2026 16:29:07 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 17922 IP address blocks: 114.4.64.0/24 maxlen: 24 114.4.65.0/24 maxlen: 24 114.4.66.0/24 maxlen: 24 114.4.67.0/24 maxlen: 24 114.4.68.0/24 maxlen: 24 114.4.69.0/24 maxlen: 24 114.4.70.0/24 maxlen: 24 114.4.71.0/24 maxlen: 24 124.195.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7588 (0x1da4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91798AD, serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B Validity Not Before: Sep 18 16:29:07 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6aad66d3-e3a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bc:97:a7:0a:99:3f:2b:c8:3e:b2:fb:db:c8: fc:c3:c3:25:d6:a5:64:7c:05:f3:31:b1:60:7e:df: e5:8b:ee:88:37:4f:48:7e:b0:41:78:ec:69:4d:ad: 6d:37:98:82:43:e8:96:dd:4e:b4:03:d5:f1:91:a9: 1c:76:84:dd:b2:f5:60:a1:09:0b:be:30:c0:75:db: d0:19:cd:35:e0:ce:e6:ba:83:b8:3f:f4:2d:2a:0b: 0c:b8:84:8a:62:5c:46:37:7a:7c:c4:be:0d:e8:70: b5:b9:a5:a4:b5:c0:f8:59:af:2f:a6:74:1c:72:c6: d2:64:4e:5e:90:01:8a:8b:55:fa:75:32:3e:86:58: 55:be:da:8a:d8:98:b2:72:73:3d:83:8c:a7:89:c4: d6:06:7d:c3:0d:6f:2d:f2:3d:cb:27:50:aa:1a:9b: f2:2f:28:0f:ad:5b:16:94:13:de:73:bb:54:c5:3c: 6a:0d:47:28:ff:4f:e3:f1:24:6c:3f:5e:46:b3:18: a4:15:ad:ba:c9:bf:60:11:be:b0:d2:d8:20:1c:cf: 07:b4:ac:02:84:70:6d:30:06:9c:d2:86:f4:cf:1a: 26:99:3b:86:25:d7:52:1b:69:10:58:89:9b:87:3e: 44:82:b0:e1:5f:ba:9a:b9:bf:bb:22:bf:d7:fa:68: fa:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:76:5B:14:31:E6:AC:3A:BD:D9:E8:A2:38:1F:7E:03:4F:5A:5D:D3 X509v3 Authority Key Identifier: keyid:7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/398B3186FE5111E6BCEC6E72C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 114.4.64.0/21 124.195.38.0/23 Signature Algorithm: sha256WithRSAEncryption b4:98:87:2f:cd:aa:94:44:2e:e1:5d:c1:97:c8:a0:bf:c4:5b: f7:15:5f:5f:bd:07:6e:77:37:b4:75:17:a9:9e:85:b6:67:be: 5e:90:92:4f:dd:3c:7a:3a:35:a6:71:92:18:51:95:aa:da:54: 49:65:44:49:b1:05:37:7b:eb:82:7d:27:c4:23:38:9c:ef:1f: 3a:a8:9f:40:68:c8:51:b2:1d:4b:04:25:7e:dd:4c:64:cc:81: 72:8d:6e:ad:7c:44:66:76:08:36:55:fc:2f:ae:f3:8d:a9:c0: 4a:3b:ec:6e:e2:df:f2:ac:61:8d:1c:ea:a6:dc:aa:97:72:72: 1f:c7:ef:9a:43:ee:96:81:7f:b2:cf:96:53:2f:49:15:36:ff: 96:0d:0e:17:d3:4c:91:27:e5:76:80:37:45:69:26:b3:4b:b6: de:92:14:c7:38:1a:35:8e:00:69:6a:47:07:47:7e:fe:69:6d: 42:b5:90:68:7a:de:94:33:63:5b:e1:ee:62:2e:49:81:a4:7f: 05:fa:50:7f:79:6b:e6:ed:2d:5f:02:1f:3b:52:cd:42:9a:1f: 8e:0b:e5:dd:3a:0a:18:5a:a4:ce:73:85:7e:69:7e:f9:9b:6a: 0c:8b:c1:8e:90:90:63:99:48:4b:28:a6:a5:2b:ac:8d:6d:d4: c9:92:01:36 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICHaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk4QUQxMTAvBgNVBAUTKDdDMUEwRjQ4RUE0MzIzMUZBMzM0M0Q1OTI4MjFFRjI5 RThEMkIzMUIwHhcNMjYwOTE4MTYyOTA3WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFkNjZkMy1lM2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkbyXpwqZPyvIPrL728j8w8Ml1qVkfAXzMbFgft/li+6IN09IfrBBeOxpTa1t N5iCQ+iW3U60A9XxkakcdoTdsvVgoQkLvjDAddvQGc014M7muoO4P/QtKgsMuISK YlxGN3p8xL4N6HC1uaWktcD4Wa8vpnQccsbSZE5ekAGKi1X6dTI+hlhVvtqK2Jiy cnM9g4ynicTWBn3DDW8t8j3LJ1CqGpvyLygPrVsWlBPec7tUxTxqDUco/0/j8SRs P15GsxikFa26yb9gEb6w0tggHM8HtKwChHBtMAac0ob0zxommTuGJddSG2kQWImb hz5EgrDhX7qaub+7Ir/X+mj6pwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFMt2WxQx 5qw6vdnoojgffgNPWl3TMB8GA1UdIwQYMBaAFHwaD0jqQyMfozQ9WSgh7yno0rMb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OThBRC83MEVGQjRBQ0ZF MkExMUU2OEYyQzVBMTNDNEY5QUUwMi9mQm9QU09wREl4LWpORDFaS0NIdktlalNz eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZCb1BTT3BESXgtak5EMVpLQ0h2S2VqU3N4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Nzk4QUQvNzBFRkI0QUNGRTJBMTFFNjhGMkM1QTEzQzRGOUFFMDIvMzk4QjMxODZG RTUxMTFFNkJDRUM2RTcyQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQDcgRAAwQBfMMmMA0GCSqGSIb3DQEBCwUAA4IBAQC0mIcvzaqURC7h XcGXyKC/xFv3FV9fvQdudze0dRepnoW2Z75ekJJP3Tx6OjWmcZIYUZWq2lRJZURJ sQU3e+uCfSfEIzic7x86qJ9AaMhRsh1LBCV+3UxkzIFyjW6tfERmdgg2VfwvrvON qcBKO+xu4t/yrGGNHOqm3KqXcnIfx++aQ+6WgX+yz5ZTL0kVNv+WDQ4X00yRJ+V2 gDdFaSazS7bekhTHOBo1jgBpakcHR37+aW1CtZBoet6UM2Nb4e5iLkmBpH8F+lB/ eWvm7S1fAh87Us1Cmh+OC+XdOgoYWqTOc4V+aX75m2oMi8GOkJBjmUhLKKalK6yN bdTJkgE2 -----END CERTIFICATE-----Generated at Tue Sep 22 20:28:32 2026 by rpki-client