$ rpki-client -vvvf rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/AF0A3F14178911EC876F5F50C4F9AE02.roa File: AF0A3F14178911EC876F5F50C4F9AE02.roa (raw, json) Hash identifier: mVZ3jUqq7v+mPV7fPjGzfalsiJzHL52IjarkxH7YoEA= Subject key identifier: 15:85:46:47:90:F9:0A:2B:DD:7F:17:C4:DC:5A:BC:FA:91:9F:6B:83 Certificate issuer: /CN=A91514B1/serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6 Certificate serial: 065B Authority key identifier: 96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/AF0A3F14178911EC876F5F50C4F9AE02.roa Signing time: Wed 02 Sep 2026 23:43:43 +0000 ROA not before: Wed 02 Sep 2026 23:43:43 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 7474 IP address blocks: 161.43.64.0/18 maxlen: 18 161.43.96.0/24 maxlen: 24 161.43.97.0/24 maxlen: 24 161.43.192.0/18 maxlen: 18 161.43.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 22:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1627 (0x65b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91514B1, serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6 Validity Not Before: Sep 2 23:43:43 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a98b4af-92d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f8:ed:e4:6f:5f:e8:02:32:54:62:c0:4c:e8: 0f:d9:08:9e:75:db:b3:13:1f:97:41:5c:37:02:da: e1:7d:76:07:92:a3:30:4a:d7:f1:66:f0:a7:05:48: 6a:07:29:95:57:bd:66:5d:a1:16:0e:17:fb:12:0b: da:5e:df:3c:c0:0a:61:2d:60:1b:db:49:10:26:37: fd:4f:58:bb:3b:8b:6e:20:9c:af:a7:51:4c:91:09: 07:c4:e8:76:4d:5e:e2:e5:8f:5d:62:81:c4:18:df: e1:34:18:b1:5a:9a:ef:bf:83:3b:26:43:a8:dd:56: 45:63:39:3f:09:a6:8a:0d:1b:45:e9:6e:48:47:9f: a6:5a:45:89:59:c4:46:87:15:ca:0c:d7:cd:12:04: 10:4c:f3:84:74:77:a4:94:73:60:2d:34:48:cf:d0: c3:94:15:97:30:95:73:05:90:4d:ac:b7:5d:49:8e: c9:3b:a4:d0:08:6e:61:7e:79:ab:df:d2:f4:96:3c: 08:44:d7:5a:8d:b9:18:af:c8:32:6d:eb:e2:ed:67: 99:07:2b:99:bc:3d:b0:95:9c:81:07:63:d0:88:a5: c1:18:f2:e9:28:9b:c3:24:d0:50:6d:7c:b7:f3:b8: 3b:f1:03:91:5e:be:c4:9e:6d:9d:08:c9:6d:af:77: 69:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:85:46:47:90:F9:0A:2B:DD:7F:17:C4:DC:5A:BC:FA:91:9F:6B:83 X509v3 Authority Key Identifier: keyid:96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/AF0A3F14178911EC876F5F50C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.43.64.0/18 161.43.192.0/18 Signature Algorithm: sha256WithRSAEncryption 8a:4f:69:90:ed:70:47:a5:c1:2d:cd:e0:8c:78:a7:d7:2f:87: ab:39:9a:bb:14:b8:b7:11:b3:7e:3e:72:a8:d3:a9:14:64:7b: 3c:5c:22:8b:12:1e:7c:bb:7c:6d:53:0d:4b:d6:7b:71:a2:21: 12:22:2f:15:d1:2b:51:ff:3e:40:2b:ed:18:5c:e2:82:09:68: 80:75:ae:b4:c6:f4:3d:0b:80:e2:ae:0e:ab:00:78:c4:1a:0d: d5:43:b3:ea:f3:a3:1c:18:93:3f:e4:29:45:23:ad:68:66:0d: 38:58:3b:f3:18:3c:84:d1:47:13:34:ef:d2:aa:5b:51:04:51: 14:34:f7:59:11:ba:b8:45:3a:07:01:78:cc:d3:81:47:d9:72: b1:f1:0b:49:48:74:80:91:db:c6:ee:d5:9c:5e:1e:06:57:25: e3:1d:37:6e:05:b2:e3:a4:92:1c:34:3f:84:29:ee:56:54:22: 41:07:3b:6e:98:be:e1:55:bb:d8:45:38:6b:4b:16:82:76:90: 06:8a:e9:a0:f4:48:6d:f0:7b:e0:a4:67:54:e4:fb:07:58:86: 97:88:10:7a:c2:29:a1:24:16:6b:7a:bb:40:70:e7:41:74:2c: 17:31:31:e1:74:e6:3a:68:48:36:45:34:01:62:3a:c3:b1:44: 66:72:a9:62 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE0QjExMTAvBgNVBAUTKDk2ODJDMkFCRTI1MzIzNTgwNzc2QjFEMEUyNzVEMkZE MkQ2OTdFQjYwHhcNMjYwOTAyMjM0MzQzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4YjRhZi05MmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/jt5G9f6AIyVGLATOgP2QiedduzEx+XQVw3AtrhfXYHkqMwStfxZvCnBUhq BymVV71mXaEWDhf7EgvaXt88wAphLWAb20kQJjf9T1i7O4tuIJyvp1FMkQkHxOh2 TV7i5Y9dYoHEGN/hNBixWprvv4M7JkOo3VZFYzk/CaaKDRtF6W5IR5+mWkWJWcRG hxXKDNfNEgQQTPOEdHeklHNgLTRIz9DDlBWXMJVzBZBNrLddSY7JO6TQCG5hfnmr 39L0ljwIRNdajbkYr8gybevi7WeZByuZvD2wlZyBB2PQiKXBGPLpKJvDJNBQbXy3 87g78QORXr7Enm2dCMltr3dp/wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFBWFRkeQ +Qor3X8XxNxavPqRn2uDMB8GA1UdIwQYMBaAFJaCwqviUyNYB3ax0OJ10v0taX62 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTRCMS83QTg4NjRBQ0ZC RTQxMUVCODJCNjI2NEZDNEY5QUUwMi9sb0xDcS1KVEkxZ0hkckhRNG5YU19TMXBm clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xvTENxLUpUSTFnSGRySFE0blhTX1MxcGZyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTE0QjEvN0E4ODY0QUNGQkU0MTFFQjgyQjYyNjRGQzRGOUFFMDIvQUYwQTNGMTQx Nzg5MTFFQzg3NkY1RjUwQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQGoStAAwQGoSvAMA0GCSqGSIb3DQEBCwUAA4IBAQCKT2mQ7XBHpcEt zeCMeKfXL4erOZq7FLi3EbN+PnKo06kUZHs8XCKLEh58u3xtUw1L1ntxoiESIi8V 0StR/z5AK+0YXOKCCWiAda60xvQ9C4Dirg6rAHjEGg3VQ7Pq86McGJM/5ClFI61o Zg04WDvzGDyE0UcTNO/SqltRBFEUNPdZEbq4RToHAXjM04FH2XKx8QtJSHSAkdvG 7tWcXh4GVyXjHTduBbLjpJIcND+EKe5WVCJBBztumL7hVbvYRThrSxaCdpAGiumg 9Eht8HvgpGdU5PsHWIaXiBB6wimhJBZrertAcOdBdCwXMTHhdOY6aEg2RTQBYjrD sURmcqli -----END CERTIFICATE-----Generated at Tue Sep 15 11:22:50 2026 by rpki-client