$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4BD7A88C836411F0993AF30FC4F9AE02.roa File: 4BD7A88C836411F0993AF30FC4F9AE02.roa (raw, json) Hash identifier: /NPMfr/hHDSSyya6nHfcBxwmO4WirQH/LUhTqrr9BlQ= Subject key identifier: F0:CE:0F:D1:30:93:8A:12:75:41:63:62:CE:58:E4:A7:43:DE:A8:DC Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6EF5 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4BD7A88C836411F0993AF30FC4F9AE02.roa Signing time: Fri 02 Oct 2026 15:34:55 +0000 ROA not before: Fri 02 Oct 2026 15:34:55 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 24086 IP address blocks: 27.64.0.0/12 maxlen: 24 103.84.76.0/22 maxlen: 24 115.72.0.0/13 maxlen: 24 116.96.0.0/12 maxlen: 24 117.0.0.0/13 maxlen: 24 125.212.128.0/17 maxlen: 24 125.214.0.0/18 maxlen: 24 125.234.0.0/17 maxlen: 24 125.234.128.0/19 maxlen: 24 125.234.176.0/20 maxlen: 24 125.234.192.0/18 maxlen: 24 125.235.0.0/16 maxlen: 24 171.224.0.0/11 maxlen: 24 203.113.128.0/19 maxlen: 24 203.113.160.0/19 maxlen: 24 203.190.160.0/20 maxlen: 24 220.231.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 14:27:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28405 (0x6ef5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 2 15:34:55 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcf1f-8be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7b:db:4b:9f:1a:73:21:47:b7:6b:1e:ef:f7: 58:98:b5:fd:cb:d1:2b:05:70:88:f2:2f:f7:58:86: 27:7e:2e:70:0a:3e:f9:4c:29:86:a9:3e:c3:13:b0: 89:ce:54:c7:60:e8:14:fe:0e:10:78:ee:af:9d:f2: 48:f6:00:7a:32:60:5a:8f:fd:6c:03:03:6b:d8:e0: c6:72:ee:95:b1:7d:bc:82:9c:e2:cd:ca:2d:e3:b3: 20:fe:ef:a5:44:60:26:3f:55:4f:08:ca:ef:16:d3: 9a:28:4c:34:11:e8:07:a7:fe:cf:5e:b7:bc:ba:29: 93:d5:2b:af:27:5d:5a:47:a8:6c:9d:1f:d5:e5:7d: 48:a5:1d:9a:21:8f:8c:92:b9:32:04:1b:4c:55:c6: bd:c2:69:53:66:8a:4c:23:8d:8f:a1:77:7a:f2:a1: 54:f7:03:73:91:7c:bd:cd:38:81:48:eb:2d:15:0c: b2:39:27:4e:1c:92:30:d7:16:b2:d3:c1:5c:71:12: 4c:4f:3f:6f:9c:12:a8:e5:dc:44:f1:03:8c:bd:0b: 53:f5:2c:b4:ad:a4:66:9c:7d:7f:78:6b:18:f3:dd: ad:6b:76:3a:4e:3d:f5:c3:bf:c7:19:64:38:e9:4a: e2:b8:f2:b7:38:c8:f3:99:38:c4:99:1c:31:ca:f4: 17:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:CE:0F:D1:30:93:8A:12:75:41:63:62:CE:58:E4:A7:43:DE:A8:DC X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4BD7A88C836411F0993AF30FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.64.0.0/12 103.84.76.0/22 115.72.0.0/13 116.96.0.0/12 117.0.0.0/13 125.212.128.0/17 125.214.0.0/18 125.234.0.0-125.234.159.255 125.234.176.0-125.235.255.255 171.224.0.0/11 203.113.128.0/18 203.190.160.0/20 220.231.64.0/18 Signature Algorithm: sha256WithRSAEncryption a7:f5:c5:dc:2b:c9:98:93:cc:70:cf:2a:d7:03:25:40:c4:79: de:9d:29:01:9f:2c:97:ff:22:28:12:77:85:3d:d0:4b:98:e2: 09:80:e6:d1:52:75:da:8d:d8:97:0b:ed:5e:0d:b1:91:93:fc: ba:4f:f9:a8:7d:de:fd:b5:8a:14:72:3a:3d:60:dc:6f:5c:96: cf:af:b0:9b:b4:ee:dd:21:8c:ed:e4:6d:82:a6:b2:3a:2f:56: 04:a2:9c:a0:9a:58:03:ee:19:37:15:be:65:73:54:4d:4e:bf: 13:33:40:73:bd:f8:10:fd:10:11:3a:33:1b:10:4e:57:b5:ba: 91:e4:f0:49:52:4d:0b:4a:ff:5f:27:38:af:12:dc:ee:1f:3f: 33:1f:56:6e:3e:dd:86:7f:d7:f8:9c:cc:e7:8d:09:c3:ef:23: ec:30:b8:23:aa:0e:31:9c:de:98:5c:c9:5a:c8:8f:f0:2c:1f: 1c:d5:dd:62:7a:36:60:d8:b1:3d:c8:4d:94:b0:3a:15:5a:bc: fc:a5:d7:fa:ea:7a:f7:57:13:2e:0d:69:4f:b9:94:6d:f8:1e: 8d:12:8e:3a:39:77:84:36:e6:c8:12:fa:e2:87:ae:61:a1:2a: 81:d7:fa:16:bb:3e:e1:21:0b:de:91:8a:5b:67:a9:2d:4e:da: a2:5f:6d:59 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICbvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYxMDAyMTUzNDU1WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2YxZi04YmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnvbS58acyFHt2se7/dYmLX9y9ErBXCI8i/3WIYnfi5wCj75TCmGqT7DE7CJ zlTHYOgU/g4QeO6vnfJI9gB6MmBaj/1sAwNr2ODGcu6VsX28gpzizcot47Mg/u+l RGAmP1VPCMrvFtOaKEw0EegHp/7PXre8uimT1SuvJ11aR6hsnR/V5X1IpR2aIY+M krkyBBtMVca9wmlTZopMI42PoXd68qFU9wNzkXy9zTiBSOstFQyyOSdOHJIw1xay 08FccRJMTz9vnBKo5dxE8QOMvQtT9Sy0raRmnH1/eGsY892ta3Y6Tj31w7/HGWQ4 6UriuPK3OMjzmTjEmRwxyvQX1QIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFPDOD9Ew k4oSdUFjYs5Y5KdD3qjcMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNEJEN0E4OEM4 MzY0MTFGMDk5M0FGMzBGQzRGOUFFMDIucm9hMHAGCCsGAQUFBwEHAQH/BGEwXzBd BAIAATBXAwMEG0ADBAJnVEwDAwNzSAMDBHRgAwMDdQADBAd91IADBAZ91gAwCwMD AX3qAwQFfeqAMAsDBAR96rADAwJ96AMDBavgAwQGy3GAAwQEy76gAwQG3OdAMA0G CSqGSIb3DQEBCwUAA4IBAQCn9cXcK8mYk8xwzyrXAyVAxHnenSkBnyyX/yIoEneF PdBLmOIJgObRUnXajdiXC+1eDbGRk/y6T/mofd79tYoUcjo9YNxvXJbPr7CbtO7d IYzt5G2CprI6L1YEopygmlgD7hk3Fb5lc1RNTr8TM0BzvfgQ/RAROjMbEE5XtbqR 5PBJUk0LSv9fJzivEtzuHz8zH1ZuPt2Gf9f4nMznjQnD7yPsMLgjqg4xnN6YXMla yI/wLB8c1d1iejZg2LE9yE2UsDoVWrz8pdf66nr3VxMuDWlPuZRt+B6NEo46OXeE NubIEvrih65hoSqB1/oWuz7hIQvekYpbZ6ktTtqiX21Z -----END CERTIFICATE-----Generated at Mon Oct 26 17:28:14 2026 by rpki-client