$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/23C52CAEACC511EB8D348368C4F9AE02.roa File: 23C52CAEACC511EB8D348368C4F9AE02.roa (raw, json) Hash identifier: HcL7OI5wC4chcjB+2YKllN47W8ufWauyTBjpfaAQZZc= Subject key identifier: D3:B0:31:8E:7D:E0:22:B6:8F:57:91:4C:96:90:3F:22:7E:41:6B:CB Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6DFF Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/23C52CAEACC511EB8D348368C4F9AE02.roa Signing time: Fri 02 Oct 2026 15:26:26 +0000 ROA not before: Fri 02 Oct 2026 15:26:26 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 140799 IP address blocks: 103.166.140.0/23 maxlen: 24 103.166.142.0/23 maxlen: 24 2407:5740::/48 maxlen: 48 2407:57c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28159 (0x6dff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 2 15:26:26 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcd21-6784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3b:0a:db:e4:d8:08:55:fb:4d:49:ac:5d:a1: 0d:20:d5:d6:80:80:0c:fd:e9:f9:3a:a5:68:4f:6b: 40:c1:7f:ec:33:54:f7:da:83:d3:7f:bb:13:c4:d3: 7d:c5:a4:a2:b1:b0:0a:99:d1:c1:e7:63:32:b8:74: 73:36:be:1a:ef:d3:06:4f:62:f3:35:9d:5b:76:17: 18:68:b7:25:f2:be:04:34:cc:35:c7:44:2c:f1:eb: b5:77:fe:36:d0:2d:c3:3d:51:35:02:99:1c:a2:d6: fd:e9:10:0d:de:35:72:1f:61:d1:26:e7:5e:0d:13: c0:4f:4d:34:99:3f:0d:c4:36:42:48:8f:f8:a2:63: 0a:fa:a0:29:21:22:c1:2c:42:7c:ac:0b:23:34:34: 16:d2:01:09:ec:0b:2e:4b:d2:2e:ff:d9:83:56:6e: be:a2:eb:c5:c1:cd:f1:e2:78:c3:5e:c5:33:2b:df: 93:38:ad:6e:c1:aa:a7:94:71:59:30:e9:38:86:ac: c9:a2:3a:9a:c8:86:d0:1b:1e:71:f2:9a:ef:24:cc: 0b:df:d1:ca:b2:a1:d3:33:9d:04:81:e1:ac:12:14: 3f:b8:07:94:3b:0f:7a:84:39:64:c1:f1:ee:4f:fc: f1:3f:b1:b1:d0:f8:7b:3b:97:af:07:75:b7:5a:57: 5c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B0:31:8E:7D:E0:22:B6:8F:57:91:4C:96:90:3F:22:7E:41:6B:CB X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/23C52CAEACC511EB8D348368C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.166.140.0/22 IPv6: 2407:5740::/48 2407:57c0::/48 Signature Algorithm: sha256WithRSAEncryption 04:7c:fe:96:63:fd:ad:0d:b6:ef:d3:46:ba:a2:bf:fa:5e:a0: ea:77:03:21:03:7d:9b:2a:1b:c3:25:e8:0a:be:91:55:d5:94: 8e:84:1a:05:13:fe:c3:32:91:69:ec:3f:0a:94:6b:49:1c:54: f5:f4:50:8f:d3:33:2b:61:af:12:85:98:a4:aa:95:e8:eb:86: 1e:5a:6a:46:06:01:8c:bb:33:28:02:b0:b8:ad:6e:5b:23:3e: 89:1e:11:51:8c:47:4f:9b:82:f6:fa:3c:e2:54:96:69:de:77: b4:0d:37:9e:5c:7d:99:de:2b:42:63:21:06:c1:3d:97:a7:12: 39:32:4f:60:df:97:7d:61:1f:6a:68:51:bb:44:57:61:fe:cd: 7f:f3:60:26:22:02:81:21:6e:0a:db:b8:67:ac:07:a5:f4:46: 58:a5:8d:78:a3:b9:ca:e5:13:1a:06:0d:f3:9e:46:2c:bf:15: d4:d3:a8:d3:b9:5e:af:1d:10:ea:38:86:42:e1:12:a9:4d:8c: 77:95:eb:fb:5f:1a:72:fe:ad:64:cc:54:e6:cf:8a:56:98:18: 0e:b5:c8:9e:88:b8:3a:50:a2:b7:96:10:a5:8f:89:35:ec:f0: 70:09:4f:94:f3:eb:b8:3f:6c:ad:f2:48:74:17:1b:01:2a:ff: f2:03:1d:51 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICbf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYxMDAyMTUyNjI2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2QyMS02Nzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTsK2+TYCFX7TUmsXaENINXWgIAM/en5OqVoT2tAwX/sM1T32oPTf7sTxNN9 xaSisbAKmdHB52MyuHRzNr4a79MGT2LzNZ1bdhcYaLcl8r4ENMw1x0Qs8eu1d/42 0C3DPVE1Apkcotb96RAN3jVyH2HRJudeDRPAT000mT8NxDZCSI/4omMK+qApISLB LEJ8rAsjNDQW0gEJ7AsuS9Iu/9mDVm6+ouvFwc3x4njDXsUzK9+TOK1uwaqnlHFZ MOk4hqzJojqayIbQGx5x8prvJMwL39HKsqHTM50EgeGsEhQ/uAeUOw96hDlkwfHu T/zxP7Gx0Ph7O5evB3W3WldcmwIDAQABo4ICejCCAnYwHQYDVR0OBBYEFNOwMY59 4CK2j1eRTJaQPyJ+QWvLMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMjNDNTJDQUVB Q0M1MTFFQjhEMzQ4MzY4QzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAM BAIAATAGAwQCZ6aMMBgEAgACMBIDBwAkB1dAAAADBwAkB1fAAAAwDQYJKoZIhvcN AQELBQADggEBAAR8/pZj/a0Ntu/TRrqiv/peoOp3AyEDfZsqG8Ml6Aq+kVXVlI6E GgUT/sMykWnsPwqUa0kcVPX0UI/TMythrxKFmKSqlejrhh5aakYGAYy7MygCsLit blsjPokeEVGMR0+bgvb6POJUlmned7QNN55cfZneK0JjIQbBPZenEjkyT2Dfl31h H2poUbtEV2H+zX/zYCYiAoEhbgrbuGesB6X0RliljXijucrlExoGDfOeRiy/FdTT qNO5Xq8dEOo4hkLhEqlNjHeV6/tfGnL+rWTMVObPilaYGA61yJ6IuDpQoreWEKWP iTXs8HAJT5Tz67g/bK3ySHQXGwEq//IDHVE= -----END CERTIFICATE-----Generated at Mon Oct 26 11:12:09 2026 by rpki-client