$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/24C9831E83E611F0AF39BE57C4F9AE02.roa File: 24C9831E83E611F0AF39BE57C4F9AE02.roa (raw, json) Hash identifier: PV505vcxJcO7ZFJdVNwFHR8RvwMM2r7DRm4JIM8Xl/U= Subject key identifier: A3:18:36:0D:89:1A:46:91:87:F7:7B:DE:AD:B1:91:53:02:5F:A5:E7 Certificate issuer: /CN=A91B46FE/serialNumber=4ED0887BD304E04C98FBA53B9B9B02BDE4389703 Certificate serial: C8 Authority key identifier: 4E:D0:88:7B:D3:04:E0:4C:98:FB:A5:3B:9B:9B:02:BD:E4:38:97:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TtCIe9ME4EyY-6U7m5sCveQ4lwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/24C9831E83E611F0AF39BE57C4F9AE02.roa Signing time: Tue 15 Sep 2026 06:56:18 +0000 ROA not before: Tue 15 Sep 2026 06:56:18 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 154180 IP address blocks: 203.20.42.0/24 maxlen: 24 2001:df6:ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.crl rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TtCIe9ME4EyY-6U7m5sCveQ4lwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B46FE, serialNumber=4ED0887BD304E04C98FBA53B9B9B02BDE4389703 Validity Not Before: Sep 15 06:56:18 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6aa8ec12-47fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:43:e9:77:1e:3b:87:e5:eb:cf:7e:f5:cb:0e: 12:30:55:54:c4:51:9d:63:b3:b3:40:95:6e:74:82: e5:01:8c:be:2c:26:9e:a0:5c:59:32:54:30:ef:9a: d5:d6:38:74:03:ac:8c:56:0f:14:af:7e:5f:a9:a0: fe:e1:32:ab:37:58:0a:54:0a:fb:46:88:88:2c:04: e3:9d:aa:a0:ec:a3:51:52:39:30:b2:ba:91:4d:e9: 8d:7d:95:87:e5:3a:2f:4e:a5:45:1c:c7:5b:f4:12: 12:7b:7d:c9:55:41:ca:29:a7:c5:b6:78:13:11:e8: ca:30:8f:9b:1d:8a:99:bd:49:c6:c6:b6:3c:72:d6: 72:3d:fd:f0:6f:02:81:cb:ec:f6:f8:19:ec:ed:1e: 27:ad:fd:38:74:5d:dd:59:fd:45:56:56:32:dd:08: 3a:3f:dc:16:62:79:f0:ab:57:20:38:8d:68:c8:41: 1c:4a:9f:1e:32:e3:aa:ea:8e:d1:ec:1f:80:01:98: 2a:67:48:2f:74:53:9d:3c:24:ed:b0:32:f3:2f:6a: 46:32:6d:41:f0:60:b0:5d:85:a9:62:dd:85:73:f3: 32:e8:57:34:38:78:7f:b3:d6:8a:c0:1f:ba:0a:c7: e1:54:20:e4:66:6f:74:6f:d1:8f:fa:2a:6a:55:df: ae:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:18:36:0D:89:1A:46:91:87:F7:7B:DE:AD:B1:91:53:02:5F:A5:E7 X509v3 Authority Key Identifier: keyid:4E:D0:88:7B:D3:04:E0:4C:98:FB:A5:3B:9B:9B:02:BD:E4:38:97:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TtCIe9ME4EyY-6U7m5sCveQ4lwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/24C9831E83E611F0AF39BE57C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.20.42.0/24 IPv6: 2001:df6:ec0::/48 Signature Algorithm: sha256WithRSAEncryption 7b:52:61:c9:cd:60:ea:9e:7c:a8:4e:b1:02:ba:14:9c:f6:a0: 42:f3:47:da:42:26:7f:c8:9c:a3:4b:f7:e4:96:1c:c8:d4:38: f1:0b:d2:b5:af:ed:af:2b:67:00:9b:a0:99:da:bb:f7:c6:af: 85:26:dd:b8:ee:a0:53:0d:5c:39:9e:cd:ae:76:43:2e:2a:12: e2:f0:1f:0e:e8:f2:16:ce:4d:4b:e8:24:2d:0f:4c:28:17:ff: ff:97:22:e0:d7:dc:99:05:dc:20:f1:2b:ae:1f:0e:54:d7:d7: e5:d3:31:53:85:c4:80:13:63:2b:df:c0:cb:ef:f8:48:8c:1e: 41:3a:5b:9d:43:62:49:b8:ba:a7:30:68:4b:85:3e:50:ed:75: 2e:01:b0:0e:c4:fe:3e:a2:af:b6:06:69:b9:6d:91:99:10:8d: 0d:c7:fe:7a:7a:25:46:b7:0d:be:b4:91:06:8c:a7:6c:d9:c4: fb:65:06:50:3d:9a:4e:39:33:6a:05:94:45:c3:00:cc:bb:d5: 97:f2:14:db:6d:d0:be:4c:08:76:77:14:47:b3:00:64:ef:7c: 69:61:3c:49:3e:13:9f:b3:d2:91:e4:6f:56:da:b8:35:67:d8: 17:77:3c:08:77:58:4f:89:9f:97:0c:a4:0d:e0:a2:50:5c:68: b6:67:36:ed -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ2RkUxMTAvBgNVBAUTKDRFRDA4ODdCRDMwNEUwNEM5OEZCQTUzQjlCOUIwMkJE RTQzODk3MDMwHhcNMjYwOTE1MDY1NjE4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE4ZWMxMi00N2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUPpdx47h+Xrz371yw4SMFVUxFGdY7OzQJVudILlAYy+LCaeoFxZMlQw75rV 1jh0A6yMVg8Ur35fqaD+4TKrN1gKVAr7RoiILATjnaqg7KNRUjkwsrqRTemNfZWH 5TovTqVFHMdb9BISe33JVUHKKafFtngTEejKMI+bHYqZvUnGxrY8ctZyPf3wbwKB y+z2+Bns7R4nrf04dF3dWf1FVlYy3Qg6P9wWYnnwq1cgOI1oyEEcSp8eMuOq6o7R 7B+AAZgqZ0gvdFOdPCTtsDLzL2pGMm1B8GCwXYWpYt2Fc/My6Fc0OHh/s9aKwB+6 CsfhVCDkZm90b9GP+ipqVd+uKwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFKMYNg2J GkaRh/d73q2xkVMCX6XnMB8GA1UdIwQYMBaAFE7QiHvTBOBMmPulO5ubAr3kOJcD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDZGRS85QjY1NkY4RTgz RTUxMUYwOUM3NzFFNEJDNEY5QUUwMi9UdENJZTlNRTRFeVktNlU3bTVzQ3ZlUTRs d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R0Q0llOU1FNEV5WS02VTdtNXNDdmVRNGx3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjQ2RkUvOUI2NTZGOEU4M0U1MTFGMDlDNzcxRTRCQzRGOUFFMDIvMjRDOTgzMUU4 M0U2MTFGMEFGMzlCRTU3QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAyxQqMA8EAgACMAkDBwAgAQ32DsAwDQYJKoZIhvcNAQELBQADggEB AHtSYcnNYOqefKhOsQK6FJz2oELzR9pCJn/InKNL9+SWHMjUOPEL0rWv7a8rZwCb oJnau/fGr4Um3bjuoFMNXDmeza52Qy4qEuLwHw7o8hbOTUvoJC0PTCgX//+XIuDX 3JkF3CDxK64fDlTX1+XTMVOFxIATYyvfwMvv+EiMHkE6W51DYkm4uqcwaEuFPlDt dS4BsA7E/j6ir7YGabltkZkQjQ3H/np6JUa3Db60kQaMp2zZxPtlBlA9mk45M2oF lEXDAMy71ZfyFNtt0L5MCHZ3FEezAGTvfGlhPEk+E5+z0pHkb1bauDVn2Bd3PAh3 WE+Jn5cMpA3golBcaLZnNu0= -----END CERTIFICATE-----Generated at Tue Sep 22 13:33:23 2026 by rpki-client