$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/368F5308A27311EFA8731822C4F9AE02.roa File: 368F5308A27311EFA8731822C4F9AE02.roa (raw, json) Hash identifier: nHjk6ycOjw5Wpke07bx/YMXOlW9tR7e2S+Z0rd77qg0= Subject key identifier: 29:A1:50:CF:FD:DF:69:CD:97:B9:25:83:CE:14:D1:96:82:34:CE:76 Certificate issuer: /CN=A9185D6E/serialNumber=9524EA9B823C20FA78923BE6667E14F6C4C3B47E Certificate serial: 068D Authority key identifier: 95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/368F5308A27311EFA8731822C4F9AE02.roa Signing time: Fri 04 Sep 2026 22:43:55 +0000 ROA not before: Fri 04 Sep 2026 22:43:55 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 14618 IP address blocks: 104.161.192.0/20 maxlen: 24 104.161.208.0/20 maxlen: 24 161.32.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1677 (0x68d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D6E, serialNumber=9524EA9B823C20FA78923BE6667E14F6C4C3B47E Validity Not Before: Sep 4 22:43:55 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a9b49ab-0838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:85:b6:2b:92:fb:64:c2:7d:b0:5c:84:5c:ec: b5:dc:68:c1:99:34:f6:3a:f0:05:fe:87:1a:f4:ea: 83:ac:07:a8:3b:19:93:59:cf:83:31:b6:72:cc:e0: 7d:ee:cd:26:a9:38:02:bc:08:7e:22:cc:6c:c8:bb: 30:e8:5d:84:cd:b8:74:97:08:45:c2:8f:b9:f5:9e: 69:12:49:bb:66:40:ca:fa:3d:2b:51:87:c4:e8:3e: b0:a0:c4:d2:42:6e:35:ba:c1:78:4b:cf:7d:0d:ab: 4c:d6:e7:ff:e9:d9:54:86:d1:57:31:ca:84:da:2c: 6d:97:6b:b6:0f:bc:19:16:9e:75:af:93:a2:47:b8: 32:5f:13:ed:a8:73:6f:9e:06:85:04:73:39:1b:48: 02:f6:72:65:83:fb:60:83:3a:3f:76:ab:4f:de:eb: a6:ed:80:ca:4e:8c:3e:24:3f:39:86:e6:72:9d:b6: 54:1e:32:e9:c8:25:03:76:30:0f:db:f0:00:09:48: c1:d9:d0:1d:4c:fe:87:48:2f:55:02:5b:61:b8:f2: ba:15:68:d7:d2:2a:ff:35:78:40:fa:1f:84:94:3b: 25:b3:9d:12:4b:bd:81:52:8f:d7:c7:e5:c4:67:3d: a8:11:2b:fc:fd:ee:8d:a9:69:97:39:01:aa:26:38: 73:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A1:50:CF:FD:DF:69:CD:97:B9:25:83:CE:14:D1:96:82:34:CE:76 X509v3 Authority Key Identifier: keyid:95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/368F5308A27311EFA8731822C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 104.161.192.0/19 161.32.64.0/20 Signature Algorithm: sha256WithRSAEncryption 39:00:12:3d:bd:3a:32:f2:cb:a5:1b:91:b7:c3:1e:ea:cd:ac: 7c:6c:2a:3d:d1:79:1d:58:a9:7b:5a:84:ce:b9:6d:ac:81:0f: da:44:1e:a8:08:35:37:40:fc:8f:90:9d:f7:5d:21:33:8e:f6: 7b:3f:f5:4d:a1:d4:e7:5f:eb:fb:ae:9a:fe:9e:47:ef:6c:07: d3:be:d1:ce:d9:31:3a:d9:f2:65:b0:70:ab:cf:0c:38:b3:72: 64:bd:9d:19:97:f9:c5:38:72:5e:c1:56:36:f2:0d:43:33:94: 01:18:4b:b7:00:08:43:1d:64:cb:31:8a:46:78:43:1b:31:89: 0a:5f:67:3e:42:3b:42:b9:50:6d:18:8b:c9:5d:33:28:b1:88: 33:c3:2c:7f:87:af:1a:6f:5c:0d:8e:29:bb:c0:0c:96:ce:e5: 43:da:cb:b6:35:24:00:f6:78:3c:24:cb:2c:e2:e4:8d:93:ff: b4:d4:b6:77:88:92:03:15:db:4e:c0:61:eb:e2:d8:dd:e3:c2: ff:48:10:ac:bc:8d:a0:fd:53:7f:3a:f6:ca:9d:79:f5:81:95: 70:4d:d8:2d:02:63:22:90:e7:8f:1f:83:50:ee:37:4a:50:d9: ac:7d:36:d6:c4:34:cd:98:1d:0d:b0:9b:ca:a2:93:6c:4d:98: 6f:8e:75:c7 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENkUxMTAvBgNVBAUTKDk1MjRFQTlCODIzQzIwRkE3ODkyM0JFNjY2N0UxNEY2 QzRDM0I0N0UwHhcNMjYwOTA0MjI0MzU1WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTliNDlhYi0wODM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24W2K5L7ZMJ9sFyEXOy13GjBmTT2OvAF/oca9OqDrAeoOxmTWc+DMbZyzOB9 7s0mqTgCvAh+IsxsyLsw6F2Ezbh0lwhFwo+59Z5pEkm7ZkDK+j0rUYfE6D6woMTS Qm41usF4S899DatM1uf/6dlUhtFXMcqE2ixtl2u2D7wZFp51r5OiR7gyXxPtqHNv ngaFBHM5G0gC9nJlg/tggzo/dqtP3uum7YDKTow+JD85huZynbZUHjLpyCUDdjAP 2/AACUjB2dAdTP6HSC9VAlthuPK6FWjX0ir/NXhA+h+ElDsls50SS72BUo/Xx+XE Zz2oESv8/e6NqWmXOQGqJjhzcwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFCmhUM/9 32nNl7klg84U0ZaCNM52MB8GA1UdIwQYMBaAFJUk6puCPCD6eJI75mZ+FPbEw7R+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ2RS80Q0JGRjRBRURG RjExMUVCODk0RjMwNjdDNEY5QUUwMi9sU1RxbTRJOElQcDRranZtWm40VTlzVER0 SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xTVHFtNEk4SVBwNGtqdm1abjRVOXNURHRINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODVENkUvNENCRkY0QUVERkYxMTFFQjg5NEYzMDY3QzRGOUFFMDIvMzY4RjUzMDhB MjczMTFFRkE4NzMxODIyQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQFaKHAAwQEoSBAMA0GCSqGSIb3DQEBCwUAA4IBAQA5ABI9vToy8sul G5G3wx7qzax8bCo90XkdWKl7WoTOuW2sgQ/aRB6oCDU3QPyPkJ33XSEzjvZ7P/VN odTnX+v7rpr+nkfvbAfTvtHO2TE62fJlsHCrzww4s3JkvZ0Zl/nFOHJewVY28g1D M5QBGEu3AAhDHWTLMYpGeEMbMYkKX2c+QjtCuVBtGIvJXTMosYgzwyx/h68ab1wN jim7wAyWzuVD2su2NSQA9ng8JMss4uSNk/+01LZ3iJIDFdtOwGHr4tjd48L/SBCs vI2g/VN/OvbKnXn1gZVwTdgtAmMikOePH4NQ7jdKUNmsfTbWxDTNmB0NsJvKopNs TZhvjnXH -----END CERTIFICATE-----Generated at Sun Sep 20 21:57:30 2026 by rpki-client