$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42A8B35A753911ED9FF88D3DC4F9AE02.roa File: 42A8B35A753911ED9FF88D3DC4F9AE02.roa (raw, json) Hash identifier: o3N7jsbue2reN1U1uLFxtAlbyzsuaPEJTJe09ncGjsE= Subject key identifier: 5C:AC:B0:6A:32:F2:27:B9:43:67:3C:70:F8:9E:79:76:83:93:15:09 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6F2A Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42A8B35A753911ED9FF88D3DC4F9AE02.roa Signing time: Fri 02 Oct 2026 15:36:51 +0000 ROA not before: Fri 02 Oct 2026 15:36:51 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 56141 IP address blocks: 49.156.52.0/22 maxlen: 24 103.101.76.0/22 maxlen: 24 2001:df2:9b00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 10:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28458 (0x6f2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 2 15:36:51 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcf92-77c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ce:03:b3:87:ce:54:24:2d:01:34:21:8e:bf: b4:87:57:06:f9:0d:75:1a:f5:8d:fe:60:3a:ca:7f: c3:13:95:91:09:e3:92:18:76:13:43:ee:f9:99:ed: 84:42:28:57:32:c3:9b:73:45:ee:51:6b:e4:d6:5f: 46:98:e0:1c:c1:8c:40:5c:a8:c6:6e:f5:11:c9:98: 2c:7b:5e:78:b8:af:8f:f2:73:3d:97:85:76:9f:da: d4:2c:32:bd:b6:22:45:fc:36:26:b5:be:40:85:9c: 29:6b:4d:49:ae:3d:11:b1:a5:a8:e8:87:80:8c:ce: 3d:62:e7:be:f3:43:e1:12:f6:36:38:27:76:b8:45: 02:8e:22:2d:a6:2c:f3:fb:1e:c8:9d:9e:cb:17:5e: e9:51:53:e0:36:2d:92:50:9e:ee:b7:3a:1b:35:86: a9:91:c7:49:48:b6:fa:b9:fb:b6:a1:25:79:fe:ab: 6e:72:dd:34:95:08:47:ff:1f:06:bf:5a:ae:1f:ce: e0:20:f3:f6:ea:bb:02:58:ad:70:09:1b:ac:5e:d2: a1:ab:e5:c9:b0:e4:f2:5a:e9:65:12:84:a0:60:86: f2:3e:9f:d1:05:51:f1:7e:a9:24:41:4b:b1:66:0e: 52:de:f1:02:c5:28:1a:61:85:3b:48:ba:40:7e:9a: 43:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:AC:B0:6A:32:F2:27:B9:43:67:3C:70:F8:9E:79:76:83:93:15:09 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42A8B35A753911ED9FF88D3DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 49.156.52.0/22 103.101.76.0/22 IPv6: 2001:df2:9b00::/48 Signature Algorithm: sha256WithRSAEncryption 79:cb:4b:50:df:72:33:e2:95:97:c9:95:4a:2d:a4:bb:e9:68: 63:eb:db:46:6e:66:b7:c5:81:b3:c0:02:96:89:53:51:a2:d8: 3a:eb:85:3a:44:ec:1d:3f:3d:b2:4c:de:03:05:b9:16:c5:7e: 78:85:f7:c2:15:57:a8:4e:d7:59:f7:45:8f:f8:f3:a6:14:38: 2c:02:8a:79:00:8a:1a:43:30:0b:3b:69:f0:82:d3:0c:3b:c7: 45:21:1a:13:ae:d8:c8:fa:16:ab:b1:a5:7f:27:5a:4a:0e:df: 0c:06:bd:33:49:c9:c5:60:d9:5c:39:4a:3e:73:e4:6f:8d:27: 05:c3:22:06:d2:3f:73:80:e5:45:2b:66:b7:9d:bf:b1:cd:b2: bb:b2:78:ff:3d:d6:40:1d:10:f4:d3:15:94:58:1e:e9:1b:e4: 51:6a:f2:13:c9:c8:74:1e:3a:0e:d8:60:ea:09:c4:6c:d5:52: 1a:e8:d7:9b:a0:c1:27:cf:ea:2b:b4:20:29:d8:16:bd:4f:2a: 24:c2:75:6c:06:b6:31:82:6b:ca:22:24:21:5e:98:c4:f1:c8: 26:fa:4b:e0:d5:2c:a7:6a:2f:ec:9e:65:10:f7:6a:1b:67:e6: 37:0c:4d:76:1e:41:2e:82:c3:1d:93:cf:62:39:65:55:32:b7: 7a:69:63:d5 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICbyowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYxMDAyMTUzNjUxWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2Y5Mi03N2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlM4Ds4fOVCQtATQhjr+0h1cG+Q11GvWN/mA6yn/DE5WRCeOSGHYTQ+75me2E QihXMsObc0XuUWvk1l9GmOAcwYxAXKjGbvURyZgse154uK+P8nM9l4V2n9rULDK9 tiJF/DYmtb5AhZwpa01Jrj0RsaWo6IeAjM49Yue+80PhEvY2OCd2uEUCjiItpizz +x7InZ7LF17pUVPgNi2SUJ7utzobNYapkcdJSLb6ufu2oSV5/qtuct00lQhH/x8G v1quH87gIPP26rsCWK1wCRusXtKhq+XJsOTyWullEoSgYIbyPp/RBVHxfqkkQUux Zg5S3vECxSgaYYU7SLpAfppDfwIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFFyssGoy 8ie5Q2c8cPieeXaDkxUJMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNDJBOEIzNUE3 NTM5MTFFRDlGRjg4RDNEQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQCMZw0AwQCZ2VMMA8EAgACMAkDBwAgAQ3ymwAwDQYJKoZIhvcNAQEL BQADggEBAHnLS1DfcjPilZfJlUotpLvpaGPr20ZuZrfFgbPAApaJU1Gi2DrrhTpE 7B0/PbJM3gMFuRbFfniF98IVV6hO11n3RY/486YUOCwCinkAihpDMAs7afCC0ww7 x0UhGhOu2Mj6FquxpX8nWkoO3wwGvTNJycVg2Vw5Sj5z5G+NJwXDIgbSP3OA5UUr Zredv7HNsruyeP891kAdEPTTFZRYHukb5FFq8hPJyHQeOg7YYOoJxGzVUhro15ug wSfP6iu0ICnYFr1PKiTCdWwGtjGCa8oiJCFemMTxyCb6S+DVLKdqL+yeZRD3ahtn 5jcMTXYeQS6Cwx2Tz2I5ZVUyt3ppY9U= -----END CERTIFICATE-----Generated at Sat Oct 24 15:41:40 2026 by rpki-client