$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A0EF6C88655D11ED8378684BC4F9AE02.roa File: A0EF6C88655D11ED8378684BC4F9AE02.roa (raw, json) Hash identifier: ROUqwZ4YEk4X9lbvp6dvwfHiTxmntComo5LGdu26ENk= Subject key identifier: 11:87:E0:88:F4:43:34:02:28:C7:02:B0:07:56:27:65:5B:F1:67:95 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6F41 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A0EF6C88655D11ED8378684BC4F9AE02.roa Signing time: Fri 02 Oct 2026 15:37:42 +0000 ROA not before: Fri 02 Oct 2026 15:37:42 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 63747 IP address blocks: 45.252.240.0/22 maxlen: 23 45.252.240.0/24 maxlen: 24 45.252.241.0/24 maxlen: 24 45.252.242.0/24 maxlen: 24 45.252.243.0/24 maxlen: 24 45.252.244.0/22 maxlen: 24 103.221.224.0/22 maxlen: 24 103.221.228.0/22 maxlen: 24 2001:df2:ce00::/48 maxlen: 48 2405:53c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28481 (0x6f41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 2 15:37:42 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcfc6-e54b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5b:4c:a3:8e:e7:2a:0b:a7:40:a6:a1:e2:73: 58:93:3e:ec:44:3e:e4:24:03:10:6d:b2:e3:d1:c3: 50:6d:99:7b:ab:84:96:d5:93:52:f2:de:98:53:88: 28:f1:80:bf:3e:97:6b:6d:60:28:b8:ab:e0:90:06: 15:dc:6d:f7:6f:70:b5:8b:5c:ae:b7:4c:09:e6:2e: f9:6e:7b:87:d7:62:f4:11:83:ca:4c:8a:12:3c:d1: 6c:9b:16:e6:cb:1f:e3:86:45:24:0b:c7:e2:79:c4: 96:d7:76:ea:04:e9:46:15:9f:8a:e6:4a:c9:7e:81: 8f:eb:ce:91:76:12:4f:29:71:8e:ea:8b:d1:0f:88: cc:c7:e1:51:d4:fa:56:ff:e5:c2:5b:34:1a:54:86: b9:bd:53:eb:7e:01:2f:ba:af:d4:b8:c9:67:7f:e1: 5a:36:17:7a:70:7d:98:f4:42:df:24:52:a9:92:d8: 19:de:c9:21:4e:84:67:01:82:77:11:3f:80:63:c6: bd:78:61:fc:a0:4e:19:5a:56:bb:bf:8d:3b:0e:4a: 76:43:03:30:89:ee:16:ff:6d:e7:4f:1f:39:35:59: 01:03:9c:25:32:6f:a3:25:57:42:ba:0d:58:22:4e: 01:fe:58:80:54:08:76:ee:09:bc:cf:cb:00:a0:54: 85:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:87:E0:88:F4:43:34:02:28:C7:02:B0:07:56:27:65:5B:F1:67:95 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A0EF6C88655D11ED8378684BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.252.240.0/21 103.221.224.0/21 IPv6: 2001:df2:ce00::/48 2405:53c0::/32 Signature Algorithm: sha256WithRSAEncryption 77:bb:ef:08:fa:24:36:89:7e:9c:33:0c:83:0e:c0:1c:ac:a8: 87:50:f3:a2:97:1b:36:b7:83:04:f1:70:09:05:e9:d9:bd:65: 4b:f3:f6:1c:6e:6c:9d:1b:26:dd:a9:8a:5f:28:c5:8b:81:72: fa:fb:d8:9d:55:5e:00:5c:ac:1d:67:23:a2:82:41:6f:8f:79: 54:19:15:92:f0:ca:8e:76:8b:fa:78:82:33:2f:7e:b2:b2:b5: 91:e3:9f:31:79:06:1c:91:a4:a0:84:fe:63:89:d2:a4:fc:2d: 61:34:73:86:de:14:fb:bc:ae:52:90:91:e4:9c:20:1b:02:4d: 0a:0d:2d:55:32:9a:46:42:76:50:73:93:ca:6c:92:09:55:c7: 7d:3d:04:92:da:7c:be:b6:28:43:34:3c:6c:29:28:71:46:44: 77:94:3b:4f:53:00:44:ce:d3:49:5f:85:54:5b:38:69:3f:90: 88:01:be:4f:0c:ec:bb:82:f8:bd:cd:7e:4a:5b:30:97:24:9c: 0f:76:0b:dd:e4:ad:3e:9b:5f:42:cb:fa:d0:45:48:2a:09:23: 7a:b7:b6:8f:37:9d:b2:75:b4:e5:1a:e6:53:08:b3:e4:da:fd: 70:83:b2:67:0f:a6:0d:cd:cb:c0:0a:77:d9:13:19:00:a7:0a: b4:62:db:41 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICb0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYxMDAyMTUzNzQyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2ZjNi1lNTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlFtMo47nKgunQKah4nNYkz7sRD7kJAMQbbLj0cNQbZl7q4SW1ZNS8t6YU4go 8YC/PpdrbWAouKvgkAYV3G33b3C1i1yut0wJ5i75bnuH12L0EYPKTIoSPNFsmxbm yx/jhkUkC8fiecSW13bqBOlGFZ+K5krJfoGP686RdhJPKXGO6ovRD4jMx+FR1PpW /+XCWzQaVIa5vVPrfgEvuq/UuMlnf+FaNhd6cH2Y9ELfJFKpktgZ3skhToRnAYJ3 ET+AY8a9eGH8oE4ZWla7v407Dkp2QwMwie4W/23nTx85NVkBA5wlMm+jJVdCug1Y Ik4B/liAVAh27gm8z8sAoFSF3QIDAQABo4ICfjCCAnowHQYDVR0OBBYEFBGH4Ij0 QzQCKMcCsAdWJ2Vb8WeVMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQTBFRjZDODg2 NTVEMTFFRDgzNzg2ODRCQzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAS BAIAATAMAwQDLfzwAwQDZ93gMBYEAgACMBADBwAgAQ3yzgADBQAkBVPAMA0GCSqG SIb3DQEBCwUAA4IBAQB3u+8I+iQ2iX6cMwyDDsAcrKiHUPOilxs2t4ME8XAJBenZ vWVL8/YcbmydGybdqYpfKMWLgXL6+9idVV4AXKwdZyOigkFvj3lUGRWS8MqOdov6 eIIzL36ysrWR458xeQYckaSghP5jidKk/C1hNHOG3hT7vK5SkJHknCAbAk0KDS1V MppGQnZQc5PKbJIJVcd9PQSS2ny+tihDNDxsKShxRkR3lDtPUwBEztNJX4VUWzhp P5CIAb5PDOy7gvi9zX5KWzCXJJwPdgvd5K0+m19Cy/rQRUgqCSN6t7aPN52ydbTl GuZTCLPk2v1wg7JnD6YNzcvACnfZExkApwq0YttB -----END CERTIFICATE-----Generated at Sun Oct 25 20:13:12 2026 by rpki-client