$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0C1B9792FE6511EEB708BA39C4F9AE02.roa File: 0C1B9792FE6511EEB708BA39C4F9AE02.roa (raw, json) Hash identifier: 2LLvkLu4Tc3h0fxST9w+ez/MkgpyJBbz9rmxgKmTbrY= Subject key identifier: 2A:9C:72:D0:B9:33:3F:53:4E:7D:C6:DE:A0:7A:EA:1F:93:54:1F:AE Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6EF8 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0C1B9792FE6511EEB708BA39C4F9AE02.roa Signing time: Fri 02 Oct 2026 15:35:02 +0000 ROA not before: Fri 02 Oct 2026 15:35:02 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 24173 IP address blocks: 101.53.0.0/18 maxlen: 24 101.96.64.0/18 maxlen: 24 119.15.160.0/20 maxlen: 24 119.15.176.0/20 maxlen: 24 119.17.192.0/19 maxlen: 24 119.17.224.0/19 maxlen: 24 202.151.160.0/21 maxlen: 24 202.151.168.0/21 maxlen: 24 210.86.224.0/21 maxlen: 24 210.86.232.0/21 maxlen: 24 2401:e800::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28408 (0x6ef8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 2 15:35:02 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcf26-ec25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e3:2e:f1:64:3d:9f:7d:1b:d9:ef:e4:58:e8: 85:35:ad:f3:db:99:93:c5:4a:9f:4d:b6:5d:e3:08: 5c:f3:52:a9:f7:9d:da:4d:dc:71:44:fa:b0:b7:7b: 10:4c:2c:5c:94:ef:c9:9d:0b:bb:b9:dd:9d:81:d2: a2:90:83:fb:5f:82:90:50:c9:cf:69:4d:81:fc:83: 79:7b:56:05:72:9b:3c:b1:74:5f:c4:fa:78:00:7a: e9:b2:27:6c:2e:e8:8a:ca:a0:1e:ab:1d:4e:9a:78: ad:fa:c2:f9:93:6c:eb:c0:e6:73:0e:1d:9e:96:09: 3e:14:5f:b9:4e:67:94:51:d5:d1:4d:65:ea:dc:c3: 6a:d6:1e:a9:d6:d4:20:37:68:8a:c7:ff:f1:53:02: 86:8e:bf:ad:d1:25:fa:49:e1:5d:70:b9:0c:af:09: a5:e8:cc:58:56:a6:13:a6:c7:61:78:c4:5d:1a:18: 99:8f:15:87:fa:8e:b8:5b:1f:53:ff:f2:ca:16:cd: 93:2c:1a:35:59:21:90:40:63:87:fe:d3:b8:f1:27: 2c:0a:d2:d6:a7:2b:ff:b4:ae:6b:db:3e:32:3f:db: 1b:d1:e3:9e:10:40:f0:72:47:c6:3e:dd:09:14:ee: ff:76:fd:e4:e8:9d:50:98:a9:8d:fd:5f:4e:67:d4: 04:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9C:72:D0:B9:33:3F:53:4E:7D:C6:DE:A0:7A:EA:1F:93:54:1F:AE X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0C1B9792FE6511EEB708BA39C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 101.53.0.0/18 101.96.64.0/18 119.15.160.0/19 119.17.192.0/18 202.151.160.0/20 210.86.224.0/20 IPv6: 2401:e800::/32 Signature Algorithm: sha256WithRSAEncryption 4a:96:b4:c0:00:1b:83:7e:4c:e8:15:2e:10:6b:5c:cb:40:09: 81:a2:fa:f2:3e:4b:ca:64:cf:10:e7:04:06:bd:85:cd:d7:a2: 41:1c:d4:01:f3:a1:4c:5c:f9:d8:d4:d7:da:c9:59:13:b4:cd: ec:2b:f5:2e:d3:db:49:a2:62:30:2f:2b:ea:22:4a:f5:b8:ae: 03:3f:65:c6:c6:4e:70:ea:e3:45:e1:06:f2:01:03:87:55:07: 02:d0:fd:5d:88:6b:d2:ba:86:ec:17:1f:87:05:11:ca:ab:9f: 22:cb:ef:72:9a:a9:92:3d:60:20:64:cc:9f:40:2b:30:04:e3: e5:45:b5:bb:c9:fd:54:cc:27:ae:8e:8a:b3:36:fe:94:5b:7d: 81:52:43:67:90:79:19:d6:f8:23:b0:fa:0b:27:ab:fe:55:9a: 45:18:2c:e9:0b:1d:b2:d1:72:1f:37:c4:6d:ab:e9:c0:40:d0: f5:66:eb:29:01:9b:2a:2f:d2:01:2a:7c:5b:d1:a8:ee:47:1a: a0:4c:ae:76:90:22:3e:7a:0a:a5:ba:75:fb:25:2a:23:ea:4e: 72:c7:62:0b:fe:20:28:c1:52:12:8e:94:d8:42:de:40:f6:3f: 08:5c:14:82:13:80:e3:8b:a3:b9:5c:93:0b:34:04:f5:89:81: b9:71:54:4d -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgICbvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYxMDAyMTUzNTAyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2YyNi1lYzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4OMu8WQ9n30b2e/kWOiFNa3z25mTxUqfTbZd4whc81Kp953aTdxxRPqwt3sQ TCxclO/JnQu7ud2dgdKikIP7X4KQUMnPaU2B/IN5e1YFcps8sXRfxPp4AHrpsids LuiKyqAeqx1Omnit+sL5k2zrwOZzDh2elgk+FF+5TmeUUdXRTWXq3MNq1h6p1tQg N2iKx//xUwKGjr+t0SX6SeFdcLkMrwml6MxYVqYTpsdheMRdGhiZjxWH+o64Wx9T //LKFs2TLBo1WSGQQGOH/tO48ScsCtLWpyv/tK5r2z4yP9sb0eOeEEDwckfGPt0J FO7/dv3k6J1QmKmN/V9OZ9QEDwIDAQABo4ICjTCCAokwHQYDVR0OBBYEFCqcctC5 Mz9TTn3G3qB66h+TVB+uMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMEMxQjk3OTJG RTY1MTFFRUI3MDhCQTM5QzRGOUFFMDIucm9hMEwGCCsGAQUFBwEHAQH/BD0wOzAq BAIAATAkAwQGZTUAAwQGZWBAAwQFdw+gAwQGdxHAAwQEypegAwQE0lbgMA0EAgAC MAcDBQAkAegAMA0GCSqGSIb3DQEBCwUAA4IBAQBKlrTAABuDfkzoFS4Qa1zLQAmB ovryPkvKZM8Q5wQGvYXN16JBHNQB86FMXPnY1NfayVkTtM3sK/Uu09tJomIwLyvq Ikr1uK4DP2XGxk5w6uNF4QbyAQOHVQcC0P1diGvSuobsFx+HBRHKq58iy+9ymqmS PWAgZMyfQCswBOPlRbW7yf1UzCeujoqzNv6UW32BUkNnkHkZ1vgjsPoLJ6v+VZpF GCzpCx2y0XIfN8Rtq+nAQND1ZuspAZsqL9IBKnxb0ajuRxqgTK52kCI+egqlunX7 JSoj6k5yx2IL/iAowVISjpTYQt5A9j8IXBSCE4Dji6O5XJMLNAT1iYG5cVRN -----END CERTIFICATE-----Generated at Sat Oct 24 17:31:07 2026 by rpki-client