$ rpki-client -vvvf rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/2486E806F0E311EAA1C58D62C4F9AE02.roa File: 2486E806F0E311EAA1C58D62C4F9AE02.roa (raw, json) Hash identifier: v5qJBu+OWFEnkwxaOoi2OvsuXEKt2KlAZCEvGvrSuiQ= Subject key identifier: BD:BB:87:B3:86:CE:FB:75:45:45:55:09:46:F2:DB:FB:72:B8:90:ED Certificate issuer: /CN=A91650A5/serialNumber=408C999C3C1EC01644945B3477A9F2234EB5791C Certificate serial: 25BE Authority key identifier: 40:8C:99:9C:3C:1E:C0:16:44:94:5B:34:77:A9:F2:23:4E:B5:79:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/2486E806F0E311EAA1C58D62C4F9AE02.roa Signing time: Mon 12 Oct 2026 16:23:27 +0000 ROA not before: Mon 12 Oct 2026 16:23:27 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 19905 IP address blocks: 116.0.107.0/24 maxlen: 24 124.158.230.0/24 maxlen: 24 124.158.233.0/24 maxlen: 24 203.223.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.crl rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 15:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9662 (0x25be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91650A5, serialNumber=408C999C3C1EC01644945B3477A9F2234EB5791C Validity Not Before: Oct 12 16:23:27 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6acd097e-6d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:2a:8d:82:55:a2:79:66:a8:40:ca:ef:6e:65: f6:fd:f5:1c:35:9c:53:2f:93:c0:3a:2c:1f:4b:a8: ea:33:bf:a6:89:2c:a2:16:98:17:22:4f:bf:d6:51: 9c:63:1f:70:1e:c8:14:f8:c1:c9:bd:50:07:38:b4: c1:c8:84:53:dd:0a:6c:7d:37:80:43:06:c5:a3:21: de:3c:8b:c0:0e:b8:fe:0a:86:95:30:94:61:2e:f2: 8a:c5:22:e4:a1:86:5e:a5:1a:3e:9a:fa:c9:6d:ea: e7:c6:14:6d:10:1e:d3:24:34:4b:c9:22:48:e7:78: 7f:c5:22:66:37:55:7e:cc:6b:cc:6c:6d:da:18:e3: a5:31:fa:77:6f:82:9b:73:ea:e6:eb:d4:84:1a:f0: 2b:7d:50:9d:b6:e6:4d:79:40:24:1b:b3:36:02:8b: ba:96:45:a7:3c:b7:b6:5c:2f:79:e9:7d:af:f0:72: 4b:7a:bd:a2:36:7c:d4:6d:7e:68:8b:06:a2:8a:98: 05:5e:a5:5d:0d:36:d6:ed:8c:f6:98:69:da:82:4b: 51:36:4a:f7:2f:1a:ae:7c:2e:d7:20:0f:dc:fd:e1: d2:b1:f4:25:43:e0:ea:61:29:39:76:db:15:fe:7e: 46:8d:f1:ae:ca:88:02:8a:4b:5d:9b:a2:f5:7d:ad: ff:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:BB:87:B3:86:CE:FB:75:45:45:55:09:46:F2:DB:FB:72:B8:90:ED X509v3 Authority Key Identifier: keyid:40:8C:99:9C:3C:1E:C0:16:44:94:5B:34:77:A9:F2:23:4E:B5:79:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/2486E806F0E311EAA1C58D62C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 116.0.107.0/24 124.158.230.0/24 124.158.233.0/24 203.223.145.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:1c:3b:d0:09:f7:c9:91:08:4f:bc:ca:8e:06:3c:a1:ae:4c: 4e:08:ca:44:ed:29:92:46:90:2c:2d:2e:5d:d2:70:df:74:29: 52:1e:47:e8:6f:2e:c7:09:ad:1b:76:dd:3a:82:0a:62:83:99: 44:7c:92:4a:3b:d0:63:57:76:28:40:4c:13:17:f5:8b:5d:d4: 24:26:41:15:15:f5:b2:fc:8d:2d:59:c7:42:f5:06:1d:51:71: a7:38:12:5d:38:b9:63:98:17:fb:f2:31:b5:f3:db:2c:ad:75: 72:8e:6b:f2:e8:7e:71:5b:5f:3e:68:2d:39:da:e7:75:78:b9: 61:58:83:b2:f4:ec:22:bc:40:81:6a:79:c8:14:a6:e5:19:ef: a0:fd:95:bd:56:85:11:88:df:be:aa:54:dc:60:22:f4:39:16: 8e:55:88:a3:12:e2:8f:6e:ab:90:03:8a:3e:79:d8:1f:0b:0a: f1:55:aa:c4:8f:a5:7c:71:39:3e:b8:36:67:5c:68:e3:3b:e2: 3d:03:d4:38:10:e1:0d:43:fb:08:2c:a0:86:2a:c6:c2:54:25: 9d:5b:9e:29:b9:67:3d:d9:25:df:02:4d:ad:1e:59:b5:1f:87: 61:ee:6b:5c:a2:18:fd:73:69:72:ff:9e:f2:28:67:b6:69:ae: 49:27:ee:43 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICJb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUwQTUxMTAvBgNVBAUTKDQwOEM5OTlDM0MxRUMwMTY0NDk0NUIzNDc3QTlGMjIz NEVCNTc5MUMwHhcNMjYxMDEyMTYyMzI3WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNkMDk3ZS02ZDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6iqNglWieWaoQMrvbmX2/fUcNZxTL5PAOiwfS6jqM7+miSyiFpgXIk+/1lGc Yx9wHsgU+MHJvVAHOLTByIRT3QpsfTeAQwbFoyHePIvADrj+CoaVMJRhLvKKxSLk oYZepRo+mvrJbernxhRtEB7TJDRLySJI53h/xSJmN1V+zGvMbG3aGOOlMfp3b4Kb c+rm69SEGvArfVCdtuZNeUAkG7M2Aou6lkWnPLe2XC956X2v8HJLer2iNnzUbX5o iwaiipgFXqVdDTbW7Yz2mGnagktRNkr3LxqufC7XIA/c/eHSsfQlQ+DqYSk5dtsV /n5GjfGuyogCiktdm6L1fa3/GwIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFL27h7OG zvt1RUVVCUby2/tyuJDtMB8GA1UdIwQYMBaAFECMmZw8HsAWRJRbNHep8iNOtXkc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTBBNS8xN0RGQjM1QTQ2 RTYxMUU1QjA4REExN0JDNEY5QUUwMi9RSXlabkR3ZXdCWkVsRnMwZDZueUkwNjFl UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FJeVpuRHdld0JaRWxGczBkNm55STA2MWVSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjUwQTUvMTdERkIzNUE0NkU2MTFFNUIwOERBMTdCQzRGOUFFMDIvMjQ4NkU4MDZG MEUzMTFFQUExQzU4RDYyQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAdABrAwQAfJ7mAwQAfJ7pAwQAy9+RMA0GCSqGSIb3DQEBCwUAA4IB AQB8HDvQCffJkQhPvMqOBjyhrkxOCMpE7SmSRpAsLS5d0nDfdClSHkfoby7HCa0b dt06ggpig5lEfJJKO9BjV3YoQEwTF/WLXdQkJkEVFfWy/I0tWcdC9QYdUXGnOBJd OLljmBf78jG189ssrXVyjmvy6H5xW18+aC052ud1eLlhWIOy9OwivECBannIFKbl Ge+g/ZW9VoURiN++qlTcYCL0ORaOVYijEuKPbquQA4o+edgfCwrxVarEj6V8cTk+ uDZnXGjjO+I9A9Q4EOENQ/sILKCGKsbCVCWdW54puWc92SXfAk2tHlm1H4dh7mtc ohj9c2ly/57yKGe2aa5JJ+5D -----END CERTIFICATE-----Generated at Thu Oct 29 13:56:14 2026 by rpki-client