$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/14D49D84671711ED91494347C4F9AE02.roa File: 14D49D84671711ED91494347C4F9AE02.roa (raw, json) Hash identifier: SKeTNdYQQZ7CZbwNIcWTTsT5r2Rp5NzfXv0SaIuvm0M= Subject key identifier: 65:6C:AE:F8:F9:8B:F5:A4:75:60:E3:82:6D:3A:0D:6C:27:D0:BE:1D Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6F02 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/14D49D84671711ED91494347C4F9AE02.roa Signing time: Fri 02 Oct 2026 15:35:22 +0000 ROA not before: Fri 02 Oct 2026 15:35:22 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 38726 IP address blocks: 43.239.188.0/22 maxlen: 24 103.227.112.0/22 maxlen: 24 118.107.64.0/18 maxlen: 24 119.18.184.0/21 maxlen: 24 2400:bc80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 10:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28418 (0x6f02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 2 15:35:22 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcf3a-0c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:db:2c:d7:56:a6:7b:33:38:c6:6e:42:c2:58: 08:92:da:d7:24:ee:40:af:ff:fd:81:2c:f6:02:6f: 5d:f6:bf:d1:e1:4d:ed:9b:5a:96:11:5a:44:2f:6e: e5:df:7c:2b:a7:0e:47:42:e0:11:93:a5:3d:17:fa: cc:e9:11:ab:f3:61:b3:31:cc:92:aa:1e:76:9e:30: 1f:6c:e3:40:ca:9d:54:c7:c6:66:52:74:92:d1:58: a4:16:45:3d:d2:eb:3c:d3:32:a0:59:b3:3f:6d:8a: eb:f9:20:d9:60:dd:74:c5:d6:4f:80:f1:72:2b:bc: 4b:ec:d8:94:fc:c4:29:41:77:a2:88:86:0d:29:42: d9:08:96:72:dc:25:75:6b:58:12:70:9c:57:cd:5b: fd:6b:6c:9a:ce:60:d8:f3:57:e3:03:4d:14:d0:dc: b0:ec:56:bc:7f:e9:d9:4b:f0:65:62:16:5c:a4:dc: f6:c5:d1:ac:06:45:28:a2:c3:af:20:03:89:76:ef: 39:1a:3b:fd:94:ae:25:fc:5d:23:af:8e:78:c9:b7: 9b:39:15:ba:b7:52:32:1c:d8:d8:20:1d:08:c3:48: a2:59:08:57:6c:12:8a:77:9c:c8:60:94:fd:f5:48: 11:e0:6b:d6:b7:42:2c:ef:39:70:fa:03:a7:f1:1d: 6c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6C:AE:F8:F9:8B:F5:A4:75:60:E3:82:6D:3A:0D:6C:27:D0:BE:1D X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/14D49D84671711ED91494347C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.239.188.0/22 103.227.112.0/22 118.107.64.0/18 119.18.184.0/21 IPv6: 2400:bc80::/32 Signature Algorithm: sha256WithRSAEncryption 6f:fb:72:49:61:16:2a:f1:77:3e:ab:0f:44:77:77:c3:b9:02: 99:63:52:a9:6b:66:53:72:14:c1:43:96:a9:b0:6d:43:4c:5a: 3e:69:c6:fd:82:2a:0b:49:f1:19:f7:81:73:b6:12:29:a2:0b: 96:31:20:81:e5:cd:c6:ae:b7:99:12:5b:f6:21:1f:31:67:74: ae:d0:ff:ce:89:d9:69:e7:d6:84:c0:9e:62:7e:4a:cf:ae:8d: 5c:a8:dd:42:0f:ea:9e:43:55:4b:e9:78:8f:47:54:2b:35:40: 3a:8a:6b:3a:37:f1:41:6b:66:99:0c:92:14:7b:15:a9:99:d7: d4:57:00:bb:26:72:1b:b7:7e:41:38:34:f7:8d:30:23:23:e5: e4:8e:39:28:75:fc:15:d3:5e:12:c9:e8:c5:6c:f7:5e:42:d7: 7b:54:42:16:97:ca:06:b2:f7:1f:89:94:44:0b:bb:0f:a5:38: 44:a3:b8:ab:1e:ed:f9:64:7c:c8:c2:38:9d:3f:d7:b6:49:06: 8c:0b:70:5e:f7:95:a8:6b:6c:1e:20:5f:0f:9e:82:3f:1b:f9: da:34:41:a6:37:be:6c:6f:66:05:95:46:48:99:86:0b:6f:eb: 6f:24:0e:da:2f:5b:0c:6d:72:fb:1e:ab:62:21:40:e3:b9:01: 5f:0a:b9:9b -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICbwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYxMDAyMTUzNTIyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2YzYS0wYzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9ss11amezM4xm5CwlgIktrXJO5Ar//9gSz2Am9d9r/R4U3tm1qWEVpEL27l 33wrpw5HQuARk6U9F/rM6RGr82GzMcySqh52njAfbONAyp1Ux8ZmUnSS0VikFkU9 0us80zKgWbM/bYrr+SDZYN10xdZPgPFyK7xL7NiU/MQpQXeiiIYNKULZCJZy3CV1 a1gScJxXzVv9a2yazmDY81fjA00U0Nyw7Fa8f+nZS/BlYhZcpNz2xdGsBkUoosOv IAOJdu85Gjv9lK4l/F0jr454ybebORW6t1IyHNjYIB0Iw0iiWQhXbBKKd5zIYJT9 9UgR4GvWt0Is7zlw+gOn8R1skwIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFGVsrvj5 i/WkdWDjgm06DWwn0L4dMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMTRENDlEODQ2 NzE3MTFFRDkxNDk0MzQ3QzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQCK++8AwQCZ+NwAwQGdmtAAwQDdxK4MA0EAgACMAcDBQAkALyAMA0G CSqGSIb3DQEBCwUAA4IBAQBv+3JJYRYq8Xc+qw9Ed3fDuQKZY1Kpa2ZTchTBQ5ap sG1DTFo+acb9gioLSfEZ94FzthIpoguWMSCB5c3GrreZElv2IR8xZ3Su0P/Oidlp 59aEwJ5ifkrPro1cqN1CD+qeQ1VL6XiPR1QrNUA6ims6N/FBa2aZDJIUexWpmdfU VwC7JnIbt35BODT3jTAjI+XkjjkodfwV014SyejFbPdeQtd7VEIWl8oGsvcfiZRE C7sPpThEo7irHu35ZHzIwjidP9e2SQaMC3Be95Woa2weIF8PnoI/G/naNEGmN75s b2YFlUZImYYLb+tvJA7aL1sMbXL7HqtiIUDjuQFfCrmb -----END CERTIFICATE-----Generated at Sat Oct 24 15:43:09 2026 by rpki-client