$ rpki-client -vvvf rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/AE8BB766178911EC876F5F50C4F9AE02.roa File: AE8BB766178911EC876F5F50C4F9AE02.roa (raw, json) Hash identifier: w+XVJvyQqIrmXBsUmFsNFlbtg+AluDO/hxGeKDlbC/I= Subject key identifier: 02:65:81:A0:61:75:1D:6E:C3:6F:30:23:6A:F6:97:86:32:52:40:A0 Certificate issuer: /CN=A91514B1/serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6 Certificate serial: 065A Authority key identifier: 96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/AE8BB766178911EC876F5F50C4F9AE02.roa Signing time: Wed 02 Sep 2026 23:43:41 +0000 ROA not before: Wed 02 Sep 2026 23:43:41 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 58780 IP address blocks: 161.43.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 22:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1626 (0x65a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91514B1, serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6 Validity Not Before: Sep 2 23:43:41 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a98b4ad-ff65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a4:ed:dd:a2:ac:bc:0e:33:1f:93:c2:10:22: 22:e4:b8:42:b5:33:75:af:5d:ac:63:ec:de:d9:76: d4:65:91:24:45:f5:8f:30:b6:81:de:27:ec:9b:05: 50:4d:28:95:23:e5:76:ec:4d:bc:45:b4:0b:33:f3: f3:33:0f:3b:a3:fa:24:e7:6d:d7:61:c8:a1:78:8d: 06:8d:b5:4e:0e:a5:82:12:53:87:fb:b7:bc:64:d0: 77:f0:dd:04:74:52:59:d3:8b:a2:fa:cf:41:ec:9b: 90:71:da:37:d3:1d:4b:5d:94:3b:ff:3e:c1:2b:f6: 8b:f1:9d:a3:62:77:2c:9e:60:6e:50:a9:88:1d:1f: e5:60:5f:5e:ed:34:9f:26:e3:da:85:01:ba:95:14: 21:a6:b4:41:1b:b0:cf:e0:18:b1:15:95:20:47:ff: c0:f5:06:9a:40:6e:06:1a:7f:85:5a:77:5e:c5:f2: 68:77:ea:81:82:de:74:d2:4f:3d:b2:52:f5:2d:22: 02:90:f8:99:f6:ba:94:2f:4d:9d:07:63:2d:05:b3: 5a:91:1d:5f:92:6f:19:ba:4b:db:8b:87:80:4f:c4: cb:47:96:0d:83:c2:fc:c5:97:a9:d3:f0:d4:27:f7: 42:df:76:fe:89:2b:a9:8d:24:29:e1:99:a1:b3:1d: 97:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:65:81:A0:61:75:1D:6E:C3:6F:30:23:6A:F6:97:86:32:52:40:A0 X509v3 Authority Key Identifier: keyid:96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/AE8BB766178911EC876F5F50C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.43.223.0/24 Signature Algorithm: sha256WithRSAEncryption 85:d9:da:59:7c:09:2a:32:64:7b:e0:e9:e8:03:6d:59:6c:77: 5a:ec:cc:a5:9d:ee:f6:86:57:5b:6d:92:fd:7c:92:10:db:15: 31:f7:02:19:fd:ca:c5:c0:c0:42:61:f7:82:35:66:58:af:5d: c2:4c:6d:8e:d2:6f:c5:67:63:ef:82:96:5c:6d:2d:d6:99:67: 4a:13:77:fb:96:f9:25:61:27:aa:5c:89:43:97:d1:48:c6:4b: 52:e1:17:e4:81:74:af:ac:89:e6:c2:2c:91:b8:39:d6:48:a0: 64:03:d0:22:b3:a9:0f:8c:6f:4b:d4:e4:d5:16:56:36:f4:a6: 98:c6:d6:71:c7:ed:91:d4:b8:28:be:4f:04:e1:a8:37:e3:79: 7b:3f:bc:ac:5d:15:bd:33:63:a9:b9:c0:b3:6b:7e:7a:45:72: 2a:e8:45:4c:67:3f:51:58:7b:e6:25:20:21:f7:23:1e:34:61: 46:be:5c:4d:6d:c4:3d:a6:c1:96:35:b3:8a:48:22:85:25:5d: ad:27:90:78:db:dd:03:82:98:72:a3:54:3c:2d:05:0e:e5:93: 46:c3:b0:b4:eb:8a:76:c7:6c:5d:23:27:73:d8:fa:3a:e2:72: 69:ac:39:d5:15:40:eb:45:bc:ad:5e:03:f7:5b:98:7b:7c:ed: 7d:17:93:c6 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE0QjExMTAvBgNVBAUTKDk2ODJDMkFCRTI1MzIzNTgwNzc2QjFEMEUyNzVEMkZE MkQ2OTdFQjYwHhcNMjYwOTAyMjM0MzQxWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4YjRhZC1mZjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6Tt3aKsvA4zH5PCECIi5LhCtTN1r12sY+ze2XbUZZEkRfWPMLaB3ifsmwVQ TSiVI+V27E28RbQLM/PzMw87o/ok523XYciheI0GjbVODqWCElOH+7e8ZNB38N0E dFJZ04ui+s9B7JuQcdo30x1LXZQ7/z7BK/aL8Z2jYncsnmBuUKmIHR/lYF9e7TSf JuPahQG6lRQhprRBG7DP4BixFZUgR//A9QaaQG4GGn+FWndexfJod+qBgt500k89 slL1LSICkPiZ9rqUL02dB2MtBbNakR1fkm8Zukvbi4eAT8TLR5YNg8L8xZep0/DU J/dC33b+iSupjSQp4Zmhsx2XJwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAJlgaBh dR1uw28wI2r2l4YyUkCgMB8GA1UdIwQYMBaAFJaCwqviUyNYB3ax0OJ10v0taX62 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTRCMS83QTg4NjRBQ0ZC RTQxMUVCODJCNjI2NEZDNEY5QUUwMi9sb0xDcS1KVEkxZ0hkckhRNG5YU19TMXBm clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xvTENxLUpUSTFnSGRySFE0blhTX1MxcGZyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTE0QjEvN0E4ODY0QUNGQkU0MTFFQjgyQjYyNjRGQzRGOUFFMDIvQUU4QkI3NjYx Nzg5MTFFQzg3NkY1RjUwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAoSvfMA0GCSqGSIb3DQEBCwUAA4IBAQCF2dpZfAkqMmR74OnoA21Z bHda7Mylne72hldbbZL9fJIQ2xUx9wIZ/crFwMBCYfeCNWZYr13CTG2O0m/FZ2Pv gpZcbS3WmWdKE3f7lvklYSeqXIlDl9FIxktS4RfkgXSvrInmwiyRuDnWSKBkA9Ai s6kPjG9L1OTVFlY29KaYxtZxx+2R1Lgovk8E4ag343l7P7ysXRW9M2OpucCza356 RXIq6EVMZz9RWHvmJSAh9yMeNGFGvlxNbcQ9psGWNbOKSCKFJV2tJ5B4290Dgphy o1Q8LQUO5ZNGw7C064p2x2xdIydz2Po64nJprDnVFUDrRbytXgP3W5h7fO19F5PG -----END CERTIFICATE-----Generated at Tue Sep 15 10:10:54 2026 by rpki-client