$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/2A3F7C6A879F11F09F9FAD48C4F9AE02.roa File: 2A3F7C6A879F11F09F9FAD48C4F9AE02.roa (raw, json) Hash identifier: UkkS6G8nABH21udxFTPHo42v9MWP6LMB6XmE004AcR4= Subject key identifier: 56:17:33:BE:69:37:78:76:7B:34:10:F5:59:5E:C7:FD:7F:FC:9B:CB Certificate issuer: /CN=A91C5E1C/serialNumber=76078D3619B7C2AFBDDA33AB5363EE5FED7A860D Certificate serial: D3 Authority key identifier: 76:07:8D:36:19:B7:C2:AF:BD:DA:33:AB:53:63:EE:5F:ED:7A:86:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dgeNNhm3wq-92jOrU2PuX-16hg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/2A3F7C6A879F11F09F9FAD48C4F9AE02.roa Signing time: Tue 13 Oct 2026 07:56:09 +0000 ROA not before: Tue 13 Oct 2026 07:56:09 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 136408 IP address blocks: 203.12.86.0/24 maxlen: 24 2001:df5:ff40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.crl rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dgeNNhm3wq-92jOrU2PuX-16hg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 07:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5E1C, serialNumber=76078D3619B7C2AFBDDA33AB5363EE5FED7A860D Validity Not Before: Oct 13 07:56:09 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6acde419-a69b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ee:cb:dd:dd:41:ab:90:1c:86:c8:c1:c0:cc: 7b:83:60:4a:a6:f2:45:be:d3:7c:7d:a1:ad:25:5b: d1:1d:0f:09:31:d2:55:11:db:c1:78:df:a5:0c:53: 0a:c2:85:3e:3f:29:a5:85:58:07:b0:ea:5f:98:91: f8:e3:dc:65:f8:4e:0b:3e:c2:ee:0c:86:b3:26:10: 47:32:6d:51:51:50:63:65:d0:24:6d:15:5e:59:55: 3d:5d:48:2f:75:e8:6e:5b:26:ec:d3:e8:05:ae:ef: 78:57:30:7f:7b:60:23:ea:4a:b6:4b:4a:33:19:92: b2:90:f6:33:a0:5b:ab:0a:69:d2:12:6c:8c:d3:8a: a0:03:f8:98:5d:8a:f7:54:25:96:2f:05:14:4f:af: 4b:9f:18:a7:1a:c5:f4:7c:b3:80:63:81:c2:e6:30: 8d:21:68:19:cb:5e:d7:df:89:fe:c3:89:5d:e6:f8: cd:68:e3:a5:b6:de:33:e7:cf:a6:9e:18:e8:90:2e: ae:57:89:b8:78:e7:15:4b:09:b0:0f:b0:25:36:3a: 9c:be:35:23:81:1c:38:d1:4c:63:5e:f8:ce:5d:b4: db:8b:b1:2c:eb:12:7c:06:60:c5:28:44:5c:c5:65: e4:25:32:50:bd:25:62:64:0c:1f:f4:6e:f5:ed:4d: c3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:17:33:BE:69:37:78:76:7B:34:10:F5:59:5E:C7:FD:7F:FC:9B:CB X509v3 Authority Key Identifier: keyid:76:07:8D:36:19:B7:C2:AF:BD:DA:33:AB:53:63:EE:5F:ED:7A:86:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dgeNNhm3wq-92jOrU2PuX-16hg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/2A3F7C6A879F11F09F9FAD48C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.12.86.0/24 IPv6: 2001:df5:ff40::/48 Signature Algorithm: sha256WithRSAEncryption 23:27:f9:80:f5:df:c3:40:4c:95:20:79:2f:8a:16:78:65:28: ad:9e:05:77:33:2e:d8:05:53:f1:1c:09:f2:de:48:64:dd:01: 7a:f7:1a:44:29:68:da:af:90:a8:d2:a0:30:6d:e1:d4:51:78: 20:f0:e6:8c:20:74:41:7e:fc:55:a7:b5:c5:1a:d6:04:d8:50: 7d:53:5e:6d:b1:b5:22:3a:14:30:60:94:9b:c8:a6:7c:c8:d7: fd:2c:81:8b:a8:aa:26:07:9f:11:1b:2c:6f:37:0a:77:98:58: ed:a9:c8:86:71:53:b2:8f:e0:1f:74:96:cf:d2:15:48:d4:47: 2a:94:de:c8:99:54:cf:c5:42:d8:ad:d6:55:6a:c9:fe:56:5a: dc:81:5c:e6:0e:a1:69:07:d3:c2:19:55:46:32:46:4c:ed:4c: 54:40:ba:21:21:28:38:70:57:2e:e0:22:63:61:d6:fb:af:6c: eb:22:f8:77:11:d4:f1:44:27:39:ed:6e:95:03:5d:fb:95:ee: 8d:71:ba:a4:bd:f6:51:95:42:72:28:e7:e5:9c:bc:e6:46:ea: c4:13:8b:e2:e5:b5:09:b8:b1:c5:1e:5a:14:a2:df:e5:a6:8d: bd:80:b1:37:00:23:8f:d0:8c:08:ea:e4:29:c4:4c:a0:89:80: 13:3f:f6:2a -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVFMUMxMTAvBgNVBAUTKDc2MDc4RDM2MTlCN0MyQUZCRERBMzNBQjUzNjNFRTVG RUQ3QTg2MEQwHhcNMjYxMDEzMDc1NjA5WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNkZTQxOS1hNjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsO7L3d1Bq5AchsjBwMx7g2BKpvJFvtN8faGtJVvRHQ8JMdJVEdvBeN+lDFMK woU+PymlhVgHsOpfmJH449xl+E4LPsLuDIazJhBHMm1RUVBjZdAkbRVeWVU9XUgv dehuWybs0+gFru94VzB/e2Aj6kq2S0ozGZKykPYzoFurCmnSEmyM04qgA/iYXYr3 VCWWLwUUT69LnxinGsX0fLOAY4HC5jCNIWgZy17X34n+w4ld5vjNaOOltt4z58+m nhjokC6uV4m4eOcVSwmwD7AlNjqcvjUjgRw40UxjXvjOXbTbi7Es6xJ8BmDFKERc xWXkJTJQvSViZAwf9G717U3D6wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFFYXM75p N3h2ezQQ9Vlex/1//JvLMB8GA1UdIwQYMBaAFHYHjTYZt8Kvvdozq1Nj7l/teoYN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUUxQy82NDc1ODkzQTg3 OTMxMUYwQjU3ODYzNDZDNEY5QUUwMi9kZ2VOTmhtM3dxLTkyak9yVTJQdVgtMTZo ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RnZU5OaG0zd3EtOTJqT3JVMlB1WC0xNmhnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzVFMUMvNjQ3NTg5M0E4NzkzMTFGMEI1Nzg2MzQ2QzRGOUFFMDIvMkEzRjdDNkE4 NzlGMTFGMDlGOUZBRDQ4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAywxWMA8EAgACMAkDBwAgAQ31/0AwDQYJKoZIhvcNAQELBQADggEB ACMn+YD138NATJUgeS+KFnhlKK2eBXczLtgFU/EcCfLeSGTdAXr3GkQpaNqvkKjS oDBt4dRReCDw5owgdEF+/FWntcUa1gTYUH1TXm2xtSI6FDBglJvIpnzI1/0sgYuo qiYHnxEbLG83CneYWO2pyIZxU7KP4B90ls/SFUjURyqU3siZVM/FQtit1lVqyf5W WtyBXOYOoWkH08IZVUYyRkztTFRAuiEhKDhwVy7gImNh1vuvbOsi+HcR1PFEJznt bpUDXfuV7o1xuqS99lGVQnIo5+WcvOZG6sQTi+LltQm4scUeWhSi3+Wmjb2AsTcA I4/QjAjq5CnETKCJgBM/9io= -----END CERTIFICATE-----Generated at Wed Oct 14 15:57:22 2026 by rpki-client