$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/3B8DEC18F67C11EFA12FD55AC4F9AE02.roa File: 3B8DEC18F67C11EFA12FD55AC4F9AE02.roa (raw, json) Hash identifier: cceRHowy60ndHsS0V7KTQnvxOpHcB4H7ok2enChJkmk= Subject key identifier: 46:C4:76:3F:93:A5:31:6D:31:81:DD:4D:7B:AF:F1:DA:24:FA:30:8F Certificate issuer: /CN=A91A560A/serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD Certificate serial: 38EC Authority key identifier: 86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/3B8DEC18F67C11EFA12FD55AC4F9AE02.roa Signing time: Thu 10 Sep 2026 01:16:23 +0000 ROA not before: Thu 10 Sep 2026 01:16:23 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 140766 IP address blocks: 79.108.216.0/21 maxlen: 24 85.155.16.0/20 maxlen: 24 109.237.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.crl rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:32:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14572 (0x38ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD Validity Not Before: Sep 10 01:16:23 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6aa204e7-4e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d2:03:d2:c7:e0:a1:dc:8f:22:d4:35:6f:82: 0d:91:58:fc:78:73:db:4f:85:ed:e6:ec:8b:99:9f: 7f:01:10:19:7f:e9:0e:be:ab:1a:cc:2e:3e:05:56: 14:cc:35:cb:30:fa:0f:72:2b:a6:89:e1:8c:0c:5d: 52:c9:ed:52:02:f2:b1:a8:d8:15:c7:8d:3f:7e:3c: d8:93:10:01:c2:7a:51:d5:19:3f:c0:fe:cf:c7:54: e6:ac:c0:2c:cc:ff:4b:0a:02:82:95:c1:66:a1:6b: 2d:e1:b5:99:62:85:36:17:26:39:33:5b:af:5b:e6: f2:3e:70:1e:43:51:a0:dd:bb:89:2b:43:c7:82:30: 2e:a3:7d:08:17:3a:02:be:96:29:9c:78:a8:49:3c: e6:78:55:ff:3c:5a:7f:da:d8:0c:32:e2:19:00:00: 83:73:0a:44:45:58:7f:c6:9a:f3:a5:e9:02:94:a1: c4:0e:8b:1f:1d:c5:51:dc:38:44:5a:61:69:15:bb: 03:ad:de:3b:f8:49:92:e5:c1:93:e7:29:4e:15:22: ee:79:c1:38:42:9a:61:37:55:f7:f8:3d:d8:3f:03: aa:1a:5d:b8:c0:27:8a:b7:f6:bb:73:8b:bf:de:06: fa:de:e6:a6:59:b4:d3:8a:00:fb:55:3b:ee:e7:8e: 3d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C4:76:3F:93:A5:31:6D:31:81:DD:4D:7B:AF:F1:DA:24:FA:30:8F X509v3 Authority Key Identifier: keyid:86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/3B8DEC18F67C11EFA12FD55AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 79.108.216.0/21 85.155.16.0/20 109.237.64.0/21 Signature Algorithm: sha256WithRSAEncryption 46:94:fd:ce:e1:2c:c0:f6:1f:c9:98:8c:c1:f1:15:35:0f:10: 41:6a:e7:02:7f:31:aa:ee:af:bf:b0:f7:0b:b4:c2:d2:12:16: 53:bf:ff:60:7d:41:70:5d:92:fd:b5:45:92:df:71:9d:9d:f7: 64:1a:d7:94:72:ba:00:cb:02:1c:c4:9f:a5:66:28:93:7b:93: 9d:35:27:6b:0d:4f:f1:3b:2f:80:09:c0:44:43:5d:86:5a:a5: 2c:8c:3d:89:6e:f9:58:50:e3:1e:d9:fe:96:28:d1:59:55:f1: 9a:8b:23:3a:da:97:04:1c:a5:b3:3d:d8:70:46:e7:fb:f8:48: 4d:c4:ce:42:f3:b7:19:35:e7:07:38:d2:ba:15:0e:ca:da:b9: bf:69:64:12:c7:ea:5f:c9:3c:58:cd:15:1c:11:0f:86:de:12: 65:b2:f4:8a:61:68:76:c6:a4:77:90:bf:2d:87:f8:3a:1b:37: f4:ef:ef:84:40:3b:38:fa:1e:5a:ee:b7:25:82:9b:f7:b5:fc: 3e:41:4b:70:6f:09:81:e1:d8:95:3e:5e:75:47:0b:10:d6:d2: 3e:c8:71:3c:94:4d:f9:d2:d8:f6:4f:bb:ac:0d:13:7b:8c:5b: 8d:fd:1a:3b:b4:f3:97:6c:6b:f5:cf:c4:e1:d9:3f:48:21:83: 83:1b:22:ee -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICOOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDg2REI1N0U2OTBGN0QzMDkyOTNBMjhCQTdDNTVGQjhB RjM3RDVEQkQwHhcNMjYwOTEwMDExNjIzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEyMDRlNy00ZTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtID0sfgodyPItQ1b4INkVj8eHPbT4Xt5uyLmZ9/ARAZf+kOvqsazC4+BVYU zDXLMPoPciumieGMDF1Sye1SAvKxqNgVx40/fjzYkxABwnpR1Rk/wP7Px1TmrMAs zP9LCgKClcFmoWst4bWZYoU2FyY5M1uvW+byPnAeQ1Gg3buJK0PHgjAuo30IFzoC vpYpnHioSTzmeFX/PFp/2tgMMuIZAACDcwpERVh/xprzpekClKHEDosfHcVR3DhE WmFpFbsDrd47+EmS5cGT5ylOFSLuecE4QpphN1X3+D3YPwOqGl24wCeKt/a7c4u/ 3gb63uamWbTTigD7VTvu5449awIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFEbEdj+T pTFtMYHdTXuv8dok+jCPMB8GA1UdIwQYMBaAFIbbV+aQ99MJKToounxV+4rzfV29 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9COTk1M0RCQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9odHRYNXBEMzB3a3BPaWk2ZkZYN2l2TjlY YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2h0dFg1cEQzMHdrcE9paTZmRlg3aXZOOVhiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQjk5NTNEQkExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvM0I4REVDMThG NjdDMTFFRkExMkZENTVBQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQDT2zYAwQEVZsQAwQDbe1AMA0GCSqGSIb3DQEBCwUAA4IBAQBGlP3O 4SzA9h/JmIzB8RU1DxBBaucCfzGq7q+/sPcLtMLSEhZTv/9gfUFwXZL9tUWS33Gd nfdkGteUcroAywIcxJ+lZiiTe5OdNSdrDU/xOy+ACcBEQ12GWqUsjD2JbvlYUOMe 2f6WKNFZVfGaiyM62pcEHKWzPdhwRuf7+EhNxM5C87cZNecHONK6FQ7K2rm/aWQS x+pfyTxYzRUcEQ+G3hJlsvSKYWh2xqR3kL8th/g6Gzf07++EQDs4+h5a7rclgpv3 tfw+QUtwbwmB4diVPl51RwsQ1tI+yHE8lE350tj2T7usDRN7jFuN/Ro7tPOXbGv1 z8Th2T9IIYODGyLu -----END CERTIFICATE-----Generated at Mon Sep 21 22:23:30 2026 by rpki-client