$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AA709C8EDD9811ECA143AA87C4F9AE02.roa File: AA709C8EDD9811ECA143AA87C4F9AE02.roa (raw, json) Hash identifier: Io0dUnIvhZV4NsmMvcrD5B5tIyGeLC6bg52/uwVvozk= Subject key identifier: 1A:34:75:78:F3:51:D3:E4:83:9A:25:4A:0B:3F:0A:6E:AB:3D:E3:27 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6DA1 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AA709C8EDD9811ECA143AA87C4F9AE02.roa Signing time: Fri 02 Oct 2026 15:23:27 +0000 ROA not before: Fri 02 Oct 2026 15:23:27 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 131428 IP address blocks: 45.117.76.0/22 maxlen: 24 45.117.172.0/22 maxlen: 24 103.99.228.0/22 maxlen: 24 103.238.212.0/24 maxlen: 24 103.238.213.0/24 maxlen: 24 103.254.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28065 (0x6da1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 2 15:23:27 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcc6f-f614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:60:38:7a:41:3a:01:57:b6:d8:4e:a5:bf:ad: c9:77:08:67:10:ae:19:e1:13:b1:bb:be:5c:46:5b: 9f:d3:8b:0a:87:27:cb:65:6a:ef:da:e2:13:22:d2: 6d:05:a2:ea:26:b5:f2:6e:1d:d1:06:87:67:dc:12: 9e:7a:cb:b0:db:c8:5b:9e:d0:14:dd:e7:13:c0:65: 1e:c9:77:bb:e4:ce:d6:ff:74:c9:a5:b8:06:5a:bf: a8:3d:3b:3a:ff:7a:a0:3a:a6:27:d0:a3:58:32:f0: 83:8a:37:0b:e4:23:e1:8c:8a:71:f6:21:d4:62:06: 5a:fc:a6:63:c7:3c:10:2c:24:31:98:7f:92:68:c7: f7:70:3c:81:21:45:fb:de:66:cb:19:81:32:f8:2d: 1d:57:f7:7f:a2:02:50:97:5b:26:56:58:c5:38:60: bc:ee:dd:95:75:39:2c:d2:0b:56:23:94:10:b7:1f: 3a:1c:bc:77:fc:73:20:cf:cb:57:1b:1f:ca:ae:64: 27:af:a3:df:0f:3a:f8:24:43:2c:3d:ad:93:fd:26: a7:c3:39:c0:94:43:b3:76:ad:24:1c:1c:f4:ae:97: 60:08:20:77:69:79:ff:5d:1a:db:3e:4d:9d:be:b9: 66:b4:ef:54:0d:47:fe:63:b7:07:ac:83:50:5e:f0: 89:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:34:75:78:F3:51:D3:E4:83:9A:25:4A:0B:3F:0A:6E:AB:3D:E3:27 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AA709C8EDD9811ECA143AA87C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.117.76.0/22 45.117.172.0/22 103.99.228.0/22 103.238.212.0/23 103.254.12.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:b0:00:83:3f:74:25:28:bd:0e:af:1c:63:30:22:05:5e:d0: 46:26:c8:0c:c5:95:d2:c7:36:01:55:a9:90:ae:32:79:4d:25: 1e:13:e9:9b:cc:99:04:d8:05:03:ab:f0:ba:8f:b5:bc:b6:6f: b7:ea:e6:98:c8:0e:ad:00:96:0a:82:4e:cf:4e:e4:c8:6b:b3: de:97:c7:9c:57:86:3a:fa:df:98:4a:58:82:e8:d3:00:1e:c0: 3a:89:73:b1:22:28:80:50:f4:fc:f8:53:26:1f:0c:c4:2e:fb: 9a:d6:69:e8:b9:51:ef:a8:86:e0:d3:fb:6a:cb:e6:1e:85:e8: e1:98:bf:25:4a:6f:b2:57:bf:ef:23:f6:3a:e5:99:4c:78:a7: 1f:f9:df:5a:aa:e1:4f:8b:56:59:c7:77:36:cf:f0:41:80:bb: f7:ff:56:34:8a:bf:b0:59:02:6c:ca:26:26:fb:6d:4d:19:d9: 3c:bc:c1:df:9e:15:77:51:dc:d4:db:21:1d:b2:e4:37:51:18: c5:99:76:d9:b3:b3:26:87:42:b1:cd:bf:d9:ee:ba:bb:95:5d: ab:b4:2e:b1:25:1d:c2:02:1f:67:ec:e1:05:4f:96:c2:cb:b0: 58:ce:4b:00:27:8c:f1:5a:76:73:58:4d:da:4b:e6:dd:cb:7d: ef:dc:4a:2a -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICbaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYxMDAyMTUyMzI3WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2M2Zi1mNjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2A4ekE6AVe22E6lv63JdwhnEK4Z4ROxu75cRluf04sKhyfLZWrv2uITItJt BaLqJrXybh3RBodn3BKeesuw28hbntAU3ecTwGUeyXe75M7W/3TJpbgGWr+oPTs6 /3qgOqYn0KNYMvCDijcL5CPhjIpx9iHUYgZa/KZjxzwQLCQxmH+SaMf3cDyBIUX7 3mbLGYEy+C0dV/d/ogJQl1smVljFOGC87t2VdTks0gtWI5QQtx86HLx3/HMgz8tX Gx/KrmQnr6PfDzr4JEMsPa2T/SanwznAlEOzdq0kHBz0rpdgCCB3aXn/XRrbPk2d vrlmtO9UDUf+Y7cHrINQXvCJhwIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFBo0dXjz UdPkg5olSgs/Cm6rPeMnMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQUE3MDlDOEVE RDk4MTFFQ0ExNDNBQTg3QzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQCLXVMAwQCLXWsAwQCZ2PkAwQBZ+7UAwQCZ/4MMA0GCSqGSIb3DQEB CwUAA4IBAQBcsACDP3QlKL0OrxxjMCIFXtBGJsgMxZXSxzYBVamQrjJ5TSUeE+mb zJkE2AUDq/C6j7W8tm+36uaYyA6tAJYKgk7PTuTIa7Pel8ecV4Y6+t+YSliC6NMA HsA6iXOxIiiAUPT8+FMmHwzELvua1mnouVHvqIbg0/tqy+YehejhmL8lSm+yV7/v I/Y65ZlMeKcf+d9aquFPi1ZZx3c2z/BBgLv3/1Y0ir+wWQJsyiYm+21NGdk8vMHf nhV3UdzU2yEdsuQ3URjFmXbZs7Mmh0Kxzb/Z7rq7lV2rtC6xJR3CAh9n7OEFT5bC y7BYzksAJ4zxWnZzWE3aS+bdy33v3Eoq -----END CERTIFICATE-----Generated at Mon Oct 26 12:48:59 2026 by rpki-client