$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/3CFE7680BC5C11EFB951FD4FC4F9AE02.roa File: 3CFE7680BC5C11EFB951FD4FC4F9AE02.roa (raw, json) Hash identifier: LyR1iv+/BLoRmPRdRTSwxRSYCihT/qICYCrr65jscuI= Subject key identifier: AE:B8:AB:A5:A6:12:18:94:C5:F7:DB:3A:F3:72:DF:B6:28:5B:E8:6F Certificate issuer: /CN=A917B520/serialNumber=393EA78E4D93236E5071FB8AFFAD41D62426AA5D Certificate serial: 015C Authority key identifier: 39:3E:A7:8E:4D:93:23:6E:50:71:FB:8A:FF:AD:41:D6:24:26:AA:5D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/3CFE7680BC5C11EFB951FD4FC4F9AE02.roa Signing time: Mon 21 Sep 2026 08:18:17 +0000 ROA not before: Mon 21 Sep 2026 08:18:17 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 150436 IP address blocks: 91.110.0.0/17 maxlen: 17 145.223.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.crl rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=393EA78E4D93236E5071FB8AFFAD41D62426AA5D Validity Not Before: Sep 21 08:18:17 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6ab0e849-fdf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:23:88:bf:12:06:5c:17:02:27:1a:8a:f6:e7: 35:9f:1a:a5:ba:9e:94:09:a3:ae:2a:44:06:3e:de: b8:1a:e4:2e:fd:49:1e:e8:8e:6b:4b:69:e2:26:b8: ee:66:2e:12:d7:d4:6f:53:49:09:f2:0d:8e:5a:8b: 71:e7:df:9e:1f:04:2b:80:1f:33:1c:60:ed:52:37: 0b:c4:1a:53:78:9a:72:1d:66:3a:10:b1:9d:30:d9: e7:18:01:99:f9:03:e6:70:25:eb:e3:08:53:b6:85: 23:1f:0f:77:9b:c6:0b:6c:ee:2a:6a:21:83:66:d1: 6f:29:e1:70:d0:3e:64:0e:ca:4f:03:1c:60:a0:33: 19:86:fa:46:f9:7a:07:86:24:a5:d8:b2:91:f4:ee: 3e:01:55:0e:45:df:60:6e:a2:5c:eb:5e:3e:5b:ad: 10:a1:1b:80:c3:31:36:29:8d:ba:11:4d:17:53:03: ef:49:8d:03:3c:b5:18:b7:ff:5d:d5:39:23:b4:b1: 29:57:52:d5:9d:3a:08:8a:ba:03:6c:14:04:cf:38: 28:2e:69:c1:06:98:36:e2:da:51:0f:67:19:32:10: a1:5e:b6:57:31:b7:0e:54:15:ac:44:eb:97:cc:74: 39:83:0d:ea:8d:e7:02:16:8a:54:09:f8:97:6d:08: af:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B8:AB:A5:A6:12:18:94:C5:F7:DB:3A:F3:72:DF:B6:28:5B:E8:6F X509v3 Authority Key Identifier: keyid:39:3E:A7:8E:4D:93:23:6E:50:71:FB:8A:FF:AD:41:D6:24:26:AA:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/3CFE7680BC5C11EFB951FD4FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 91.110.0.0/17 145.223.128.0/18 Signature Algorithm: sha256WithRSAEncryption 09:fb:97:a2:76:b9:69:88:f5:a5:e6:e5:9c:73:31:54:4c:43: 3d:e1:4b:20:02:63:c0:f6:29:76:0e:37:8f:64:e0:44:2e:1a: 64:95:92:db:26:de:2b:ff:03:9f:81:b1:a4:52:a7:52:e6:b0: d9:f5:69:1e:ef:8d:10:f0:82:9c:50:0b:e9:ad:7d:48:aa:79: 0e:25:79:d4:7c:ac:67:a3:64:ad:d2:4b:83:ce:10:fa:2a:ee: 32:e3:f2:17:b0:06:5a:96:b8:3a:1e:d5:37:20:cc:de:71:e0: 35:ee:a6:c5:c6:4d:b3:f2:d9:43:19:57:4e:31:d0:07:05:b1: 54:bc:f8:1f:7b:83:4c:bf:a2:b7:1e:a3:0d:8b:1f:b4:e6:c2: 2a:fd:f4:ff:c3:7c:be:e3:bf:b0:6d:53:5f:bd:49:a5:36:91: 32:01:39:71:de:17:0e:43:83:6e:1c:b2:81:a5:1c:ab:a8:06: 34:7a:fc:37:87:6a:b8:d1:bb:c7:61:c8:f5:ce:ca:b6:f4:63: 16:6a:28:3d:d1:5e:77:0d:b7:49:0d:13:53:1d:37:15:6c:ae: f1:e7:55:54:6d:03:cb:04:e9:df:97:0f:fb:9f:6f:c6:8a:b5: a2:4f:96:6d:96:c0:2c:f9:4c:b0:2a:25:cd:80:d0:fd:f4:b5: 6c:4e:cf:64 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MjAxMTAvBgNVBAUTKDM5M0VBNzhFNEQ5MzIzNkU1MDcxRkI4QUZGQUQ0MUQ2 MjQyNkFBNUQwHhcNMjYwOTIxMDgxODE3WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWIwZTg0OS1mZGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtiOIvxIGXBcCJxqK9uc1nxqlup6UCaOuKkQGPt64GuQu/Uke6I5rS2niJrju Zi4S19RvU0kJ8g2OWotx59+eHwQrgB8zHGDtUjcLxBpTeJpyHWY6ELGdMNnnGAGZ +QPmcCXr4whTtoUjHw93m8YLbO4qaiGDZtFvKeFw0D5kDspPAxxgoDMZhvpG+XoH hiSl2LKR9O4+AVUORd9gbqJc614+W60QoRuAwzE2KY26EU0XUwPvSY0DPLUYt/9d 1TkjtLEpV1LVnToIiroDbBQEzzgoLmnBBpg24tpRD2cZMhChXrZXMbcOVBWsROuX zHQ5gw3qjecCFopUCfiXbQivsQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFK64q6Wm EhiUxffbOvNy37YoW+hvMB8GA1UdIwQYMBaAFDk+p45NkyNuUHH7iv+tQdYkJqpd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC80Q0ZDMDhEQUI3 NkMxMUVGQjg3NDI3NkVDNEY5QUUwMi9PVDZuamsyVEkyNVFjZnVLXzYxQjFpUW1x bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL09UNm5qazJUSTI1UWNmdUtfNjFCMWlRbXFsMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0I1MjAvNENGQzA4REFCNzZDMTFFRkI4NzQyNzZFQzRGOUFFMDIvM0NGRTc2ODBC QzVDMTFFRkI5NTFGRDRGQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQHW24AAwQGkd+AMA0GCSqGSIb3DQEBCwUAA4IBAQAJ+5eidrlpiPWl 5uWcczFUTEM94UsgAmPA9il2DjePZOBELhpklZLbJt4r/wOfgbGkUqdS5rDZ9Wke 740Q8IKcUAvprX1IqnkOJXnUfKxno2St0kuDzhD6Ku4y4/IXsAZalrg6HtU3IMze ceA17qbFxk2z8tlDGVdOMdAHBbFUvPgfe4NMv6K3HqMNix+05sIq/fT/w3y+47+w bVNfvUmlNpEyATlx3hcOQ4NuHLKBpRyrqAY0evw3h2q40bvHYcj1zsq29GMWaig9 0V53DbdJDRNTHTcVbK7x51VUbQPLBOnflw/7n2/GirWiT5ZtlsAs+UywKiXNgND9 9LVsTs9k -----END CERTIFICATE-----Generated at Tue Sep 22 06:36:50 2026 by rpki-client