$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/0791DE6034A511ED9D82D13BC4F9AE02.roa File: 0791DE6034A511ED9D82D13BC4F9AE02.roa (raw, json) Hash identifier: EahjIzDunS5kJ7uh0KLSIyNDojbGXwaI7ZaquLDLzIA= Subject key identifier: A9:57:B9:C6:C1:33:8B:75:42:F0:38:CF:D1:76:77:4F:44:03:08:AC Certificate issuer: /CN=A91F7DCD/serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86 Certificate serial: 0B32 Authority key identifier: 3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/0791DE6034A511ED9D82D13BC4F9AE02.roa Signing time: Thu 10 Sep 2026 19:39:29 +0000 ROA not before: Thu 10 Sep 2026 19:39:29 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 149175 IP address blocks: 39.109.92.0/24 maxlen: 24 39.109.93.0/24 maxlen: 24 39.109.94.0/24 maxlen: 24 39.109.95.0/24 maxlen: 24 103.120.228.0/23 maxlen: 24 103.227.128.0/24 maxlen: 24 103.227.129.0/24 maxlen: 24 103.227.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2866 (0xb32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7DCD, serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86 Validity Not Before: Sep 10 19:39:29 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aa30771-84f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7c:6f:a3:9c:d7:77:c7:ff:96:8e:f7:e4:59: 0b:d4:e2:32:4a:6c:a3:d5:e5:74:2c:84:4d:94:72: 28:90:b8:48:39:03:fd:20:5f:4a:6c:59:6f:a8:d6: 06:94:da:e2:7e:25:61:64:a7:11:d3:ff:13:39:7e: 0b:3a:69:19:86:14:1f:2a:fd:0e:9d:a4:83:98:dd: 33:48:b6:d0:25:9b:3c:38:9a:90:51:59:62:29:80: bd:1e:a2:6a:44:01:e4:e0:79:bf:25:23:65:74:ba: 5d:fa:03:d9:f4:21:b4:fe:df:e9:e0:e0:be:14:90: 33:37:ab:b2:ac:0e:d2:21:6d:30:54:3b:ce:d2:a6: da:8b:1e:dd:68:bb:ad:39:0e:08:f6:3d:57:6d:2f: 8f:67:db:c1:94:f7:b1:05:41:cd:bd:f4:16:36:77: 52:31:31:a1:d5:77:e8:1b:89:29:5f:f6:04:71:42: b8:c7:14:07:e0:7c:2a:a2:b3:44:fd:d8:84:45:c5: 49:89:10:e4:ae:8b:a7:98:fd:f5:38:d8:e0:3b:10: 97:9f:ad:fd:fb:ce:54:51:51:e6:c9:9d:81:05:14: 70:64:b8:7f:44:ee:e0:2f:ce:b2:3e:08:10:8a:8f: 43:a5:06:c3:ff:f3:eb:48:24:7c:4a:08:0c:ae:1c: 38:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:57:B9:C6:C1:33:8B:75:42:F0:38:CF:D1:76:77:4F:44:03:08:AC X509v3 Authority Key Identifier: keyid:3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/0791DE6034A511ED9D82D13BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 39.109.92.0/22 103.120.228.0/23 103.227.128.0/23 103.227.131.0/24 Signature Algorithm: sha256WithRSAEncryption 86:37:39:cf:09:af:37:0a:8c:89:c5:12:97:6a:ad:32:07:a2: 3f:2a:56:15:4e:8f:4e:07:e3:20:f2:f2:b2:10:5d:b8:c2:80: a7:0b:8f:72:17:52:54:0d:b4:a4:ed:3b:1f:53:a1:e9:87:37: 20:f4:7f:4c:ec:95:52:20:c2:44:79:a6:9c:5f:e8:02:a2:5c: 5b:7f:8f:e0:c0:f9:3e:91:a4:86:d5:ed:45:c3:84:2d:f6:6a: b9:22:b7:dd:18:ee:28:89:17:4a:ed:af:95:32:e2:85:27:54: 22:77:f7:33:1a:5a:8b:3a:f8:1f:d9:e7:f3:01:c5:28:84:33: 55:b2:96:23:7d:9f:42:cc:64:5d:44:f7:8a:e6:a6:23:8d:29: 01:fc:97:f8:8b:36:32:6c:54:df:33:68:49:42:66:2c:03:16: d6:82:ea:fb:4b:3f:06:3f:e0:9c:a2:a1:8f:ee:b8:18:62:2a: f5:c1:15:35:3c:50:da:46:e2:07:5b:98:a2:7a:de:91:e5:b2: d7:c4:57:86:10:37:16:1f:85:37:96:c8:9e:ff:c3:e7:06:8e: 8d:33:5f:ee:89:3a:10:7d:8c:88:37:b8:cd:98:60:96:82:ce: b1:6b:18:a8:4a:66:fb:a4:be:ed:3e:39:be:0e:5b:d7:8e:c8: 1d:60:8b:43 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICCzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdEQ0QxMTAvBgNVBAUTKDNCRDMwMkZBN0EyRTg2NkE2NzlCMUI2MDk2REI2NzQ1 M0EwM0FCODYwHhcNMjYwOTEwMTkzOTI5WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEzMDc3MS04NGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn3xvo5zXd8f/lo735FkL1OIySmyj1eV0LIRNlHIokLhIOQP9IF9KbFlvqNYG lNrifiVhZKcR0/8TOX4LOmkZhhQfKv0OnaSDmN0zSLbQJZs8OJqQUVliKYC9HqJq RAHk4Hm/JSNldLpd+gPZ9CG0/t/p4OC+FJAzN6uyrA7SIW0wVDvO0qbaix7daLut OQ4I9j1XbS+PZ9vBlPexBUHNvfQWNndSMTGh1XfoG4kpX/YEcUK4xxQH4HwqorNE /diERcVJiRDkrounmP31ONjgOxCXn639+85UUVHmyZ2BBRRwZLh/RO7gL86yPggQ io9DpQbD//PrSCR8SggMrhw4jwIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFKlXucbB M4t1QvA4z9F2d09EAwisMB8GA1UdIwQYMBaAFDvTAvp6LoZqZ5sbYJbbZ0U6A6uG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0RDRC84NDQyOEIwRTcz RDExMUVBOUNERUM1MzRDNEY5QUUwMi9POU1DLW5vdWhtcG5teHRnbHR0blJUb0Rx NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL085TUMtbm91aG1wbm14dGdsdHRuUlRvRHE0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjdEQ0QvODQ0MjhCMEU3M0QxMTFFQTlDREVDNTM0QzRGOUFFMDIvMDc5MURFNjAz NEE1MTFFRDlEODJEMTNCQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQCJ21cAwQBZ3jkAwQBZ+OAAwQAZ+ODMA0GCSqGSIb3DQEBCwUAA4IB AQCGNznPCa83CoyJxRKXaq0yB6I/KlYVTo9OB+Mg8vKyEF24woCnC49yF1JUDbSk 7TsfU6Hphzcg9H9M7JVSIMJEeaacX+gColxbf4/gwPk+kaSG1e1Fw4Qt9mq5Irfd GO4oiRdK7a+VMuKFJ1Qid/czGlqLOvgf2efzAcUohDNVspYjfZ9CzGRdRPeK5qYj jSkB/Jf4izYybFTfM2hJQmYsAxbWgur7Sz8GP+CcoqGP7rgYYir1wRU1PFDaRuIH W5iiet6R5bLXxFeGEDcWH4U3lsie/8PnBo6NM1/uiToQfYyIN7jNmGCWgs6xaxio Smb7pL7tPjm+DlvXjsgdYItD -----END CERTIFICATE-----Generated at Mon Sep 21 21:23:31 2026 by rpki-client