$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/D6D1A360323911F0BDA2E834C4F9AE02.roa File: D6D1A360323911F0BDA2E834C4F9AE02.roa (raw, json) Hash identifier: GDZokXpZ+niO8zKz7vtzfAEOG0XN49j5ArWRaowNtqg= Subject key identifier: 3E:6C:D6:A7:22:10:EC:8D:17:17:FA:85:F5:2F:45:96:EB:B9:64:E6 Certificate issuer: /CN=A91D366A/serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85 Certificate serial: 038F Authority key identifier: B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/D6D1A360323911F0BDA2E834C4F9AE02.roa Signing time: Sat 29 Aug 2026 01:50:40 +0000 ROA not before: Sat 29 Aug 2026 01:50:40 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 56971 IP address blocks: 203.18.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 911 (0x38f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D366A, serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85 Validity Not Before: Aug 29 01:50:40 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a923af0-0115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:df:51:21:47:a5:bf:16:6b:50:3a:ed:fb:bf: c4:6b:fb:6e:c0:53:61:cf:09:c1:39:0f:e5:08:f5: 25:1e:31:77:f9:1a:0a:a1:57:ea:75:56:62:cc:c4: f4:c9:fb:b0:54:76:ee:f2:30:18:da:2b:05:43:e2: 6a:c4:65:5f:c2:49:db:3a:3b:84:13:5a:f6:5e:20: 4c:ef:22:be:80:27:f9:b7:f2:3b:21:81:33:99:60: dc:66:8f:60:bd:32:fe:0b:ba:3d:30:fe:4e:d3:64: 90:fe:bb:ed:24:12:45:4d:4f:e9:4b:dc:65:bd:0c: 16:da:08:0e:ca:15:d5:d3:4a:92:80:55:13:a3:e2: e0:69:45:42:dd:f0:ab:3f:dd:6f:15:f4:ac:36:f3: 20:b6:97:f1:7f:c3:68:42:6c:a9:03:50:d6:e4:12: 0b:04:cf:95:0f:89:9c:28:8f:93:bd:42:b0:0e:ba: aa:5e:38:09:4c:25:95:82:03:a2:02:d6:38:9d:01: 02:22:13:e2:5d:d8:fb:2b:7f:60:3b:8f:09:8f:b9: ef:d2:8f:52:22:2e:a0:46:91:d2:26:a1:35:4f:2f: 4f:76:ef:85:ef:14:cd:2a:f2:78:fa:ea:ff:e8:e9: ac:8b:09:18:47:35:35:6e:86:38:c3:47:99:2f:c9: bc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6C:D6:A7:22:10:EC:8D:17:17:FA:85:F5:2F:45:96:EB:B9:64:E6 X509v3 Authority Key Identifier: keyid:B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/D6D1A360323911F0BDA2E834C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.18.98.0/24 Signature Algorithm: sha256WithRSAEncryption 46:a3:ff:c7:8e:28:2a:7f:51:0f:1e:7e:8d:9c:d8:3c:08:8a: b5:d7:37:e1:5d:a2:ab:70:8f:76:ec:09:90:39:52:1b:ee:96: e4:9b:38:5c:52:8e:bc:c1:2f:b1:03:9c:2d:b6:c0:0a:55:17: cd:ca:8f:02:77:be:f5:87:f2:8e:94:06:86:c9:e7:1c:b5:ab: 11:d9:a8:53:ac:a9:5a:3a:9a:19:86:f5:25:c7:cf:94:5c:a1: da:b4:2c:55:50:7e:f8:b8:62:66:cc:60:7f:d4:5b:70:5c:f4: 95:65:8c:79:f3:32:97:1e:66:d4:1d:52:5e:dd:85:23:84:3e: 8e:4e:22:8c:4d:8b:0d:d9:0c:0e:f8:42:dc:73:64:47:2e:d6: cd:c6:e3:80:61:db:a5:2b:d4:cb:c3:4c:d6:aa:7a:58:a4:68: 52:9b:a7:45:11:31:1d:6e:27:ce:81:22:39:58:4c:d4:2d:e1: 16:9c:47:c2:e6:3b:b8:3a:d6:44:57:51:2f:fc:f4:b3:9a:c2: 68:a1:3f:3b:ca:80:3b:b5:92:18:05:6e:78:77:45:06:eb:ca: 85:f3:62:14:e6:c1:e7:18:4a:60:1b:94:98:f2:54:69:78:5c: 72:d8:a2:64:b5:45:80:78:44:75:b2:5a:c0:81:ff:e0:3e:6b: c0:d1:9f:a8 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICA48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM2NkExMTAvBgNVBAUTKEIwNjdDNkJCNzBERjBEQzA0Q0U3N0Y3QzhENzY3MDZB NDlGNkNCODUwHhcNMjYwODI5MDE1MDQwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTkyM2FmMC0wMTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9t9RIUelvxZrUDrt+7/Ea/tuwFNhzwnBOQ/lCPUlHjF3+RoKoVfqdVZizMT0 yfuwVHbu8jAY2isFQ+JqxGVfwknbOjuEE1r2XiBM7yK+gCf5t/I7IYEzmWDcZo9g vTL+C7o9MP5O02SQ/rvtJBJFTU/pS9xlvQwW2ggOyhXV00qSgFUTo+LgaUVC3fCr P91vFfSsNvMgtpfxf8NoQmypA1DW5BILBM+VD4mcKI+TvUKwDrqqXjgJTCWVggOi AtY4nQECIhPiXdj7K39gO48Jj7nv0o9SIi6gRpHSJqE1Ty9Pdu+F7xTNKvJ4+ur/ 6OmsiwkYRzU1boY4w0eZL8m8owIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFD5s1qci EOyNFxf6hfUvRZbruWTmMB8GA1UdIwQYMBaAFLBnxrtw3w3ATOd/fI12cGpJ9suF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzY2QS9FQzA5QUE0QTMw N0QxMUVEQTZDM0EyMTJDNEY5QUUwMi9zR2ZHdTNEZkRjQk01Mzk4alhad2FrbjJ5 NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHZkd1M0RmRGNCTTUzOThqWFp3YWtuMnk0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDM2NkEvRUMwOUFBNEEzMDdEMTFFREE2QzNBMjEyQzRGOUFFMDIvRDZEMUEzNjAz MjM5MTFGMEJEQTJFODM0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyxJiMA0GCSqGSIb3DQEBCwUAA4IBAQBGo//Hjigqf1EPHn6NnNg8 CIq11zfhXaKrcI927AmQOVIb7pbkmzhcUo68wS+xA5wttsAKVRfNyo8Cd771h/KO lAaGyecctasR2ahTrKlaOpoZhvUlx8+UXKHatCxVUH74uGJmzGB/1FtwXPSVZYx5 8zKXHmbUHVJe3YUjhD6OTiKMTYsN2QwO+ELcc2RHLtbNxuOAYdulK9TLw0zWqnpY pGhSm6dFETEdbifOgSI5WEzULeEWnEfC5ju4OtZEV1Ev/PSzmsJooT87yoA7tZIY BW54d0UG68qF82IU5sHnGEpgG5SY8lRpeFxy2KJktUWAeER1slrAgf/gPmvA0Z+o -----END CERTIFICATE-----Generated at Mon Sep 21 17:08:38 2026 by rpki-client