$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/98BE8828663D11EE8CBBAE7CC4F9AE02.roa File: 98BE8828663D11EE8CBBAE7CC4F9AE02.roa (raw, json) Hash identifier: 60mmp2xkt956dxyjxxyqpf2kD3SD5zTs5NXxpAz3Fmk= Subject key identifier: 66:B2:78:4C:7E:AD:82:7A:99:A4:18:22:BE:94:7F:AB:4D:C7:D0:6F Certificate issuer: /CN=A91C9E82/serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A Certificate serial: 026D Authority key identifier: 5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/98BE8828663D11EE8CBBAE7CC4F9AE02.roa Signing time: Fri 07 Aug 2026 02:54:02 +0000 ROA not before: Fri 07 Aug 2026 02:54:02 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 7474 IP address blocks: 203.6.0.0/18 maxlen: 18 203.10.243.0/24 maxlen: 24 203.11.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 621 (0x26d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E82, serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A Validity Not Before: Aug 7 02:54:02 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a7548ca-b013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bd:00:fd:6b:a4:cf:f5:69:a7:a2:cc:36:f5: 02:86:fd:63:7f:aa:f8:a5:22:d6:96:fc:b8:fd:ce: 9c:87:87:55:83:52:c9:1a:38:1b:4a:5d:c6:25:e8: e8:05:77:79:2f:c4:02:61:d2:23:c7:19:5b:4d:bc: 1a:ab:52:13:de:a3:75:6f:d1:a1:f8:c2:09:b7:e2: 39:67:f9:91:6c:88:fc:16:ed:89:23:1f:53:86:a9: 0d:bc:e7:fc:11:fe:38:e8:29:89:b9:45:28:e4:77: 32:9e:80:23:42:e5:79:5d:ed:77:82:5f:65:b4:35: da:dc:d1:09:0a:a7:ea:b4:ee:5c:d6:89:22:6a:a9: 42:b1:14:f2:79:03:4f:86:8c:70:f3:7e:e0:91:25: 61:74:2d:32:23:a9:35:20:ee:02:ab:26:41:71:1f: 51:eb:73:f7:63:f2:bd:5a:00:46:85:b7:ab:0e:ab: e1:71:11:90:2c:23:3f:7f:11:f5:02:38:e6:ca:93: 3a:d6:82:a3:84:8e:52:13:ac:d7:41:8f:bf:b4:8c: 60:c9:e6:2c:29:1f:4b:1a:51:dc:45:49:7e:4b:0c: 13:7e:40:95:df:79:81:c0:89:00:91:6f:48:d8:a9: b6:d7:d1:e8:29:a2:d0:5c:81:2c:f1:21:6a:18:21: 53:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B2:78:4C:7E:AD:82:7A:99:A4:18:22:BE:94:7F:AB:4D:C7:D0:6F X509v3 Authority Key Identifier: keyid:5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/98BE8828663D11EE8CBBAE7CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.6.0.0/18 203.10.243.0/24 203.11.1.0/24 Signature Algorithm: sha256WithRSAEncryption 28:85:0d:9e:e0:dd:86:21:48:ec:a2:ce:78:1f:f7:13:60:50: 43:cc:c4:f3:12:66:3c:9a:be:b3:bf:31:8f:82:01:4a:26:be: fe:7e:8d:39:46:6a:94:58:5f:62:af:7d:87:1f:0b:a7:8c:7f: ba:72:60:4c:8f:06:b8:2f:36:f3:e0:ea:43:70:15:15:89:17: cd:76:38:b5:f5:3d:20:36:63:26:b3:3f:30:03:12:a6:b0:ea: dd:e9:ca:67:68:56:aa:d9:95:d2:a5:25:50:63:93:d9:4b:5f: 4f:87:b0:6d:10:fd:49:d1:e6:19:fd:f4:d9:b1:64:66:ef:ce: 84:f7:b4:7f:6c:43:4b:ca:bc:80:a0:7d:99:56:9d:1b:8f:4b: 23:ca:0c:db:55:90:48:03:7c:6f:10:ce:37:65:19:34:e4:d8: a1:40:bc:7f:37:fd:d7:30:27:48:ef:91:7f:66:5c:60:1b:25: e9:e1:ef:c1:e9:25:09:d9:12:3c:b0:4e:08:74:50:bc:5c:03: bd:7d:7e:f6:97:a8:8b:f7:68:b0:e2:2b:a6:8b:35:88:d4:72: 7f:fc:83:54:cb:6b:43:59:11:96:88:c3:94:de:18:24:47:93: 7e:2b:c7:a4:16:66:79:a2:3d:b8:91:f2:49:32:04:81:cc:0e: dd:9a:05:45 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlFODIxMTAvBgNVBAUTKDVFNzJBQTdENUIxRDU2MzJFNUQzM0ZFQzcyRkE3NDMz RjQ5Q0UyOUEwHhcNMjYwODA3MDI1NDAyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTc1NDhjYS1iMDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz70A/Wukz/Vpp6LMNvUChv1jf6r4pSLWlvy4/c6ch4dVg1LJGjgbSl3GJejo BXd5L8QCYdIjxxlbTbwaq1IT3qN1b9Gh+MIJt+I5Z/mRbIj8Fu2JIx9ThqkNvOf8 Ef446CmJuUUo5HcynoAjQuV5Xe13gl9ltDXa3NEJCqfqtO5c1okiaqlCsRTyeQNP hoxw837gkSVhdC0yI6k1IO4CqyZBcR9R63P3Y/K9WgBGhberDqvhcRGQLCM/fxH1 AjjmypM61oKjhI5SE6zXQY+/tIxgyeYsKR9LGlHcRUl+SwwTfkCV33mBwIkAkW9I 2Km219HoKaLQXIEs8SFqGCFTAwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFGayeEx+ rYJ6maQYIr6Uf6tNx9BvMB8GA1UdIwQYMBaAFF5yqn1bHVYy5dM/7HL6dDP0nOKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUU4Mi9FQTdFNUZBNjYz NkYxMUVFOTdDNzRCNUNDNEY5QUUwMi9YbktxZlZzZFZqTGwwel9zY3ZwME1fU2M0 cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huS3FmVnNkVmpMbDB6X3NjdnAwTV9TYzRwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzlFODIvRUE3RTVGQTY2MzZGMTFFRTk3Qzc0QjVDQzRGOUFFMDIvOThCRTg4Mjg2 NjNEMTFFRThDQkJBRTdDQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQGywYAAwQAywrzAwQAywsBMA0GCSqGSIb3DQEBCwUAA4IBAQAohQ2e 4N2GIUjsos54H/cTYFBDzMTzEmY8mr6zvzGPggFKJr7+fo05RmqUWF9ir32HHwun jH+6cmBMjwa4Lzbz4OpDcBUViRfNdji19T0gNmMmsz8wAxKmsOrd6cpnaFaq2ZXS pSVQY5PZS19Ph7BtEP1J0eYZ/fTZsWRm786E97R/bENLyryAoH2ZVp0bj0sjygzb VZBIA3xvEM43ZRk05NihQLx/N/3XMCdI75F/ZlxgGyXp4e/B6SUJ2RI8sE4IdFC8 XAO9fX72l6iL92iw4iumizWI1HJ//INUy2tDWRGWiMOU3hgkR5N+K8ekFmZ5oj24 kfJJMgSBzA7dmgVF -----END CERTIFICATE-----Generated at Sun Sep 20 21:33:20 2026 by rpki-client