$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6096E8CCC69111EF839BD231C4F9AE02.roa File: 6096E8CCC69111EF839BD231C4F9AE02.roa (raw, json) Hash identifier: p1pYnGfNq9/AQKieVHLBPVQBHMEgTXNMOJT/niPg75Y= Subject key identifier: 1E:77:29:A4:42:8A:7D:AB:0A:46:D8:C2:34:5E:63:33:B0:8A:D3:E5 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6F15 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6096E8CCC69111EF839BD231C4F9AE02.roa Signing time: Fri 02 Oct 2026 15:36:03 +0000 ROA not before: Fri 02 Oct 2026 15:36:03 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 45557 IP address blocks: 45.118.136.0/22 maxlen: 24 103.17.88.0/22 maxlen: 24 103.129.80.0/22 maxlen: 24 103.153.218.0/23 maxlen: 24 103.153.220.0/23 maxlen: 24 103.153.222.0/23 maxlen: 24 103.170.248.0/23 maxlen: 24 180.148.0.0/21 maxlen: 24 2404:3a00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28437 (0x6f15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 2 15:36:03 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcf63-fadd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0a:64:2a:98:e0:b0:31:90:8e:b0:bf:90:59: 8c:c4:c6:6e:68:9d:57:da:31:17:61:7c:fa:ab:00: cd:e7:5f:6a:e4:10:72:8e:d0:8c:cf:c0:1d:f7:dd: 7b:d6:07:32:34:17:7e:74:00:20:b6:a5:92:91:dc: f2:c2:8c:e1:90:92:90:69:65:a5:85:d0:45:0c:f8: 12:de:30:c3:f3:95:20:69:93:9e:89:96:aa:5a:f4: 1b:1b:de:9c:64:2a:3f:77:5a:f3:2e:40:70:dc:84: db:03:ee:26:65:1b:53:6a:89:da:84:ac:b2:d2:22: 49:de:e9:61:20:72:71:b3:d4:9f:80:fe:43:d6:18: 4e:6e:26:35:9a:02:63:99:86:48:5d:3e:e1:24:92: c7:29:dd:f0:b7:00:c2:c4:40:61:03:9c:9c:21:bc: b8:89:15:23:78:85:77:32:e2:7b:9c:e3:25:70:c8: 4b:2f:7b:96:20:cf:a0:10:08:d1:54:c7:80:9c:a4: 92:b0:1a:94:3d:5d:57:84:75:a8:f1:91:ef:9c:67: 8f:ba:5f:52:dc:7f:ac:8a:32:79:00:f9:89:24:d5: ad:71:42:6f:31:82:d1:85:6c:88:2a:60:af:08:1c: be:f0:9c:59:07:66:7d:da:6f:4a:ab:1f:1d:73:17: 94:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:77:29:A4:42:8A:7D:AB:0A:46:D8:C2:34:5E:63:33:B0:8A:D3:E5 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6096E8CCC69111EF839BD231C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.118.136.0/22 103.17.88.0/22 103.129.80.0/22 103.153.218.0-103.153.223.255 103.170.248.0/23 180.148.0.0/21 IPv6: 2404:3a00::/32 Signature Algorithm: sha256WithRSAEncryption 3b:83:1c:7b:8b:9d:58:ba:ab:cf:32:db:9f:46:09:b6:4a:2c: 12:fc:1a:68:5c:a1:0e:14:4a:3a:e3:f0:14:7c:4b:27:40:5b: ef:c3:02:b1:7d:3f:c5:61:b6:19:44:25:8f:d8:a7:d3:e4:33: 8b:ea:6f:49:ea:52:dd:c4:80:6a:e3:2b:ec:2f:51:49:81:73: c8:cd:b9:26:7a:ae:05:20:fc:3d:60:0c:b8:37:7f:25:58:bb: d1:79:c2:13:63:e1:3a:72:44:4d:57:4f:33:79:6d:56:24:2c: 38:c8:8f:02:a3:95:13:31:02:3b:16:69:00:e8:fd:b4:d6:f3: db:fe:6a:c0:2b:d1:2f:83:a4:da:88:9e:a4:1d:1d:01:83:f5: 0f:f1:f5:49:0a:28:12:0b:47:29:e5:7d:6f:83:69:e0:f4:8c: 3c:66:5c:5a:b1:51:da:ec:de:9f:f1:5c:13:55:5c:a5:31:50: a0:75:2a:d5:e9:50:be:db:83:32:43:d1:dc:95:06:1d:51:43: f0:ee:28:77:6d:50:7f:2d:1f:9e:36:b8:8c:9c:25:90:3b:82: a7:81:84:3c:26:c6:06:60:24:f8:c6:4b:e6:77:a8:dd:e2:9b: bd:36:96:5a:a6:ba:58:57:ed:0e:87:aa:e1:44:7f:0f:ed:77: 69:3e:90:2c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYxMDAyMTUzNjAzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2Y2My1mYWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjgpkKpjgsDGQjrC/kFmMxMZuaJ1X2jEXYXz6qwDN519q5BByjtCMz8Ad9917 1gcyNBd+dAAgtqWSkdzywozhkJKQaWWlhdBFDPgS3jDD85UgaZOeiZaqWvQbG96c ZCo/d1rzLkBw3ITbA+4mZRtTaonahKyy0iJJ3ulhIHJxs9SfgP5D1hhObiY1mgJj mYZIXT7hJJLHKd3wtwDCxEBhA5ycIby4iRUjeIV3MuJ7nOMlcMhLL3uWIM+gEAjR VMeAnKSSsBqUPV1XhHWo8ZHvnGePul9S3H+sijJ5APmJJNWtcUJvMYLRhWyIKmCv CBy+8JxZB2Z92m9Kqx8dcxeUmQIDAQABo4IClTCCApEwHQYDVR0OBBYEFB53KaRC in2rCkbYwjReYzOwitPlMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNjA5NkU4Q0ND NjkxMTFFRjgzOUJEMjMxQzRGOUFFMDIucm9hMFQGCCsGAQUFBwEHAQH/BEUwQzAy BAIAATAsAwQCLXaIAwQCZxFYAwQCZ4FQMAwDBAFnmdoDBAVnmcADBAFnqvgDBAO0 lAAwDQQCAAIwBwMFACQEOgAwDQYJKoZIhvcNAQELBQADggEBADuDHHuLnVi6q88y 259GCbZKLBL8GmhcoQ4USjrj8BR8SydAW+/DArF9P8VhthlEJY/Yp9PkM4vqb0nq Ut3EgGrjK+wvUUmBc8jNuSZ6rgUg/D1gDLg3fyVYu9F5whNj4TpyRE1XTzN5bVYk LDjIjwKjlRMxAjsWaQDo/bTW89v+asAr0S+DpNqInqQdHQGD9Q/x9UkKKBILRynl fW+DaeD0jDxmXFqxUdrs3p/xXBNVXKUxUKB1KtXpUL7bgzJD0dyVBh1RQ/DuKHdt UH8tH542uIycJZA7gqeBhDwmxgZgJPjGS+Z3qN3im702llqmulhX7Q6HquFEfw/t d2k+kCw= -----END CERTIFICATE-----Generated at Sat Oct 24 20:45:13 2026 by rpki-client