$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/855AECF29B3A11EB9B73EB7BC4F9AE02.roa File: 855AECF29B3A11EB9B73EB7BC4F9AE02.roa (raw, json) Hash identifier: tjBgUERDNlX0vVwthkUmYdv4wGMbSaZtWaLqVCL5g+E= Subject key identifier: 28:A0:D5:6D:0B:15:04:97:A3:A0:C3:A5:4A:12:19:41:50:3C:40:1B Certificate issuer: /CN=A91F7DCD/serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86 Certificate serial: 0B31 Authority key identifier: 3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/855AECF29B3A11EB9B73EB7BC4F9AE02.roa Signing time: Thu 10 Sep 2026 19:39:27 +0000 ROA not before: Thu 10 Sep 2026 19:39:27 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 141768 IP address blocks: 39.109.92.0/22 maxlen: 22 39.109.92.0/24 maxlen: 24 39.109.93.0/24 maxlen: 24 39.109.94.0/24 maxlen: 24 39.109.95.0/24 maxlen: 24 103.120.228.0/23 maxlen: 23 103.120.228.0/24 maxlen: 24 103.120.229.0/24 maxlen: 24 103.227.128.0/24 maxlen: 24 103.227.129.0/24 maxlen: 24 103.227.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2865 (0xb31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7DCD, serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86 Validity Not Before: Sep 10 19:39:27 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aa3076f-daaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:46:38:90:cd:6b:52:1d:e7:9f:58:41:8a:43: 68:10:77:5d:27:1b:b5:eb:ca:49:18:7e:01:d0:a2: 4f:26:be:25:9d:99:74:02:4d:98:99:80:81:32:1e: 1e:8c:b9:d7:36:7c:83:f2:20:8b:99:c4:c1:f9:73: 9f:74:dd:a7:b8:33:43:a0:72:2c:c3:0e:94:a6:50: be:f0:b3:79:96:c5:14:1c:87:54:3e:89:b2:6a:c6: 71:2a:d3:81:89:2b:69:39:d3:6f:ef:70:cf:42:f1: 54:85:0f:a1:c2:81:47:a1:e8:98:e3:03:6d:31:ad: b4:93:39:7c:3c:f0:ee:98:cc:62:9c:2b:e0:c6:a4: 97:8a:b1:cd:8e:14:fc:81:0d:08:ee:55:24:f9:12: e5:23:bb:cf:8c:a0:a1:74:af:7b:aa:f8:21:5d:89: 94:46:2a:b7:c8:9c:9f:70:30:16:2b:6c:d0:9d:15: 23:2c:7f:4f:e3:e3:94:a6:4c:e5:ac:07:1c:35:17: cf:81:da:51:cd:cf:2f:df:5f:88:ba:e5:4f:73:99: 60:72:4e:49:0d:7f:40:47:5a:ee:3c:8f:ec:d6:52: a3:ab:c3:6f:0b:35:d1:fa:2f:29:01:f9:94:dc:6d: 4b:4b:f5:63:dd:9d:c1:03:41:02:e8:e6:73:fb:5a: 92:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A0:D5:6D:0B:15:04:97:A3:A0:C3:A5:4A:12:19:41:50:3C:40:1B X509v3 Authority Key Identifier: keyid:3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/855AECF29B3A11EB9B73EB7BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 39.109.92.0/22 103.120.228.0/23 103.227.128.0/23 103.227.131.0/24 Signature Algorithm: sha256WithRSAEncryption 97:07:43:0b:7b:81:54:8d:d4:97:70:66:71:48:1c:73:10:0b: 93:9d:8d:73:d1:41:d0:cb:32:77:77:32:38:5b:1b:89:71:37: 88:fd:b9:30:8f:5d:28:bc:19:22:3d:b3:3f:6f:e7:fd:8d:50: dd:63:7b:51:cb:89:89:4b:ba:85:4f:d6:3f:66:fd:43:ca:5b: 53:d7:c4:6c:3c:2e:e9:e5:0b:5a:2b:b8:56:f4:ed:42:99:ae: 74:72:af:53:eb:12:8b:8a:6a:aa:b0:be:c1:5e:15:09:8a:8d: 19:67:c3:41:f0:b3:f8:a7:d0:84:7f:4c:20:d4:89:04:c3:29: 1a:2b:28:37:c5:62:4c:73:b8:fc:93:2b:1b:70:66:e8:dc:9e: 99:06:8b:f9:1b:a4:48:57:ed:40:8b:25:c7:0e:02:8f:7f:6d: bb:78:06:cc:f7:ed:5b:21:8f:57:29:cb:df:0f:bf:07:be:99: 22:e8:ee:8f:fb:d8:a2:a4:68:92:2d:8d:f5:af:48:1b:42:66: 24:f9:af:d3:d7:60:ac:e7:24:90:11:9d:3a:c1:66:00:52:98: c3:84:ce:e4:60:c8:bb:85:e9:8e:27:60:a4:b8:5f:5d:d9:72: b5:0e:ef:5a:41:00:a9:e8:de:10:92:95:9a:1b:80:00:d7:65: ef:07:b8:3a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICCzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdEQ0QxMTAvBgNVBAUTKDNCRDMwMkZBN0EyRTg2NkE2NzlCMUI2MDk2REI2NzQ1 M0EwM0FCODYwHhcNMjYwOTEwMTkzOTI3WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEzMDc2Zi1kYWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0Y4kM1rUh3nn1hBikNoEHddJxu168pJGH4B0KJPJr4lnZl0Ak2YmYCBMh4e jLnXNnyD8iCLmcTB+XOfdN2nuDNDoHIsww6UplC+8LN5lsUUHIdUPomyasZxKtOB iStpOdNv73DPQvFUhQ+hwoFHoeiY4wNtMa20kzl8PPDumMxinCvgxqSXirHNjhT8 gQ0I7lUk+RLlI7vPjKChdK97qvghXYmURiq3yJyfcDAWK2zQnRUjLH9P4+OUpkzl rAccNRfPgdpRzc8v31+IuuVPc5lgck5JDX9AR1ruPI/s1lKjq8NvCzXR+i8pAfmU 3G1LS/Vj3Z3BA0EC6OZz+1qS6QIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFCig1W0L FQSXo6DDpUoSGUFQPEAbMB8GA1UdIwQYMBaAFDvTAvp6LoZqZ5sbYJbbZ0U6A6uG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0RDRC84NDQyOEIwRTcz RDExMUVBOUNERUM1MzRDNEY5QUUwMi9POU1DLW5vdWhtcG5teHRnbHR0blJUb0Rx NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL085TUMtbm91aG1wbm14dGdsdHRuUlRvRHE0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjdEQ0QvODQ0MjhCMEU3M0QxMTFFQTlDREVDNTM0QzRGOUFFMDIvODU1QUVDRjI5 QjNBMTFFQjlCNzNFQjdCQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQCJ21cAwQBZ3jkAwQBZ+OAAwQAZ+ODMA0GCSqGSIb3DQEBCwUAA4IB AQCXB0MLe4FUjdSXcGZxSBxzEAuTnY1z0UHQyzJ3dzI4WxuJcTeI/bkwj10ovBki PbM/b+f9jVDdY3tRy4mJS7qFT9Y/Zv1DyltT18RsPC7p5QtaK7hW9O1Cma50cq9T 6xKLimqqsL7BXhUJio0ZZ8NB8LP4p9CEf0wg1IkEwykaKyg3xWJMc7j8kysbcGbo 3J6ZBov5G6RIV+1AiyXHDgKPf227eAbM9+1bIY9XKcvfD78Hvpki6O6P+9iipGiS LY31r0gbQmYk+a/T12Cs5ySQEZ06wWYAUpjDhM7kYMi7hemOJ2CkuF9d2XK1Du9a QQCp6N4QkpWaG4AA12XvB7g6 -----END CERTIFICATE-----Generated at Tue Sep 22 03:53:13 2026 by rpki-client