$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CF428AB8A87511EF9905FE0AC4F9AE02.roa File: CF428AB8A87511EF9905FE0AC4F9AE02.roa (raw, json) Hash identifier: LugZaV/xSTh3xmv0FX//s+jTrqVbLXcuGd3TIyt0srk= Subject key identifier: 58:51:71:9B:E4:81:9A:0A:39:30:A6:79:3A:93:21:AE:DC:BE:01:83 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6E51 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CF428AB8A87511EF9905FE0AC4F9AE02.roa Signing time: Fri 02 Oct 2026 15:29:03 +0000 ROA not before: Fri 02 Oct 2026 15:29:03 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 150820 IP address blocks: 36.50.174.0/23 maxlen: 23 103.70.114.0/23 maxlen: 23 203.175.96.0/23 maxlen: 23 2001:df3:f0c0::/48 maxlen: 48 2001:df3:f140::/48 maxlen: 48 2001:df4:35c0::/48 maxlen: 48 2001:df4:5040::/48 maxlen: 48 2001:df4:8d40::/48 maxlen: 48 2001:df4:9b40::/48 maxlen: 48 2001:df4:a640::/48 maxlen: 48 2001:df4:ee40::/48 maxlen: 48 2001:df5:82c0::/48 maxlen: 48 2401:4e20::/48 maxlen: 48 2401:9be0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28241 (0x6e51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 2 15:29:03 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcdbf-cc97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:34:68:50:11:7f:e1:b0:a6:6a:8a:f8:d5:8b: 0a:68:90:5d:11:fe:b6:57:5f:4e:07:e5:91:1c:a5: d9:c2:61:61:93:17:2e:e8:d3:e1:55:bf:7b:38:05: 49:95:2b:3b:b1:37:5e:85:2d:4e:ab:99:9e:68:84: 3c:e2:b2:f3:db:2c:f5:b1:c4:10:d7:ef:1c:64:d1: 07:00:8a:49:72:58:19:4a:29:a4:52:75:04:c1:0e: e3:21:eb:2f:1e:33:c1:bf:55:32:67:01:e6:80:45: 8a:86:67:48:95:4e:48:e7:88:ef:6b:8d:e7:2d:55: 27:e8:5d:1f:d4:d6:71:41:7f:85:b8:02:d7:84:5b: e1:29:e9:04:15:a6:3c:02:ba:5a:84:5d:8c:cd:55: d6:23:e8:d9:0f:f9:9e:0c:d3:f4:df:03:2c:80:be: e1:ee:ac:4a:f0:bf:d2:85:4e:b1:e7:82:d8:e2:33: 1a:f4:12:49:45:cc:da:62:10:30:51:83:bc:d4:9b: 5a:31:50:86:5b:fa:71:9d:64:0f:ad:1c:d0:11:e2: fe:76:e9:99:47:59:7f:bc:dc:25:8e:37:47:59:59: b9:b3:61:96:8f:5d:81:db:9b:dc:85:e1:bc:63:0a: cc:36:29:df:f9:71:35:dc:d3:17:36:88:20:db:2e: ff:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:51:71:9B:E4:81:9A:0A:39:30:A6:79:3A:93:21:AE:DC:BE:01:83 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CF428AB8A87511EF9905FE0AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.50.174.0/23 103.70.114.0/23 203.175.96.0/23 IPv6: 2001:df3:f0c0::/48 2001:df3:f140::/48 2001:df4:35c0::/48 2001:df4:5040::/48 2001:df4:8d40::/48 2001:df4:9b40::/48 2001:df4:a640::/48 2001:df4:ee40::/48 2001:df5:82c0::/48 2401:4e20::/48 2401:9be0::/48 Signature Algorithm: sha256WithRSAEncryption 89:93:f2:f5:13:8c:de:ca:35:17:f8:61:14:f4:1e:bc:3f:e0: f0:7b:bd:4b:3e:92:10:a1:8c:84:bd:be:f2:23:e9:6f:8a:d4: 96:b1:ff:cf:b9:9b:84:87:87:36:30:10:df:c9:e7:29:d2:d7: 8d:2d:60:7c:db:7e:fe:58:39:01:e8:a5:71:fa:f9:5c:db:28: cc:2e:d7:67:93:08:fb:3d:02:0b:e4:c3:e0:da:02:b8:3a:d3: fc:e4:e1:7a:da:e0:c7:7d:ba:49:f9:c3:62:3a:c9:a6:98:12: 93:10:f6:8c:ad:a0:13:15:34:d3:71:0a:90:30:79:db:dc:9c: ec:8e:46:03:81:6e:ba:93:07:d9:f6:f3:23:b5:d6:07:21:90: 68:71:2f:d3:69:87:5c:f9:8d:91:99:63:c5:46:a0:13:f7:36: a0:b5:73:c2:ae:39:ba:07:b3:8e:12:d3:8e:f5:9d:ca:d5:30: a7:e7:99:29:78:64:70:7a:7c:58:21:98:82:38:80:3b:a9:89: ae:31:cf:f9:df:2b:f8:6d:b4:11:08:e0:01:d7:2f:6a:48:de: 49:53:d9:02:ab:a8:af:3e:b6:2c:ad:bc:0b:fe:1d:e6:c3:87: db:95:20:64:c4:f5:5f:85:f3:3c:3c:31:27:f0:5b:08:ee:e4: b1:57:90:2f -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgICblEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYxMDAyMTUyOTAzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2RiZi1jYzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDRoUBF/4bCmaor41YsKaJBdEf62V19OB+WRHKXZwmFhkxcu6NPhVb97OAVJ lSs7sTdehS1Oq5meaIQ84rLz2yz1scQQ1+8cZNEHAIpJclgZSimkUnUEwQ7jIesv HjPBv1UyZwHmgEWKhmdIlU5I54jva43nLVUn6F0f1NZxQX+FuALXhFvhKekEFaY8 ArpahF2MzVXWI+jZD/meDNP03wMsgL7h7qxK8L/ShU6x54LY4jMa9BJJRczaYhAw UYO81JtaMVCGW/pxnWQPrRzQEeL+dumZR1l/vNwljjdHWVm5s2GWj12B25vcheG8 YwrMNinf+XE13NMXNogg2y7/9QIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFFhRcZvk gZoKOTCmeTqTIa7cvgGDMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQ0Y0MjhBQjhB ODc1MTFFRjk5MDVGRTBBQzRGOUFFMDIucm9hMIGYBggrBgEFBQcBBwEB/wSBiDCB hTAYBAIAATASAwQBJDKuAwQBZ0ZyAwQBy69gMGkEAgACMGMDBwAgAQ3z8MADBwAg AQ3z8UADBwAgAQ30NcADBwAgAQ30UEADBwAgAQ30jUADBwAgAQ30m0ADBwAgAQ30 pkADBwAgAQ307kADBwAgAQ31gsADBwAkAU4gAAADBwAkAZvgAAAwDQYJKoZIhvcN AQELBQADggEBAImT8vUTjN7KNRf4YRT0Hrw/4PB7vUs+khChjIS9vvIj6W+K1Jax /8+5m4SHhzYwEN/J5ynS140tYHzbfv5YOQHopXH6+VzbKMwu12eTCPs9Agvkw+Da Arg60/zk4Xra4Md9ukn5w2I6yaaYEpMQ9oytoBMVNNNxCpAwedvcnOyORgOBbrqT B9n28yO11gchkGhxL9Nph1z5jZGZY8VGoBP3NqC1c8KuOboHs44S0471ncrVMKfn mSl4ZHB6fFghmII4gDupia4xz/nfK/httBEI4AHXL2pI3klT2QKrqK8+tiytvAv+ HebDh9uVIGTE9V+F8zw8MSfwWwju5LFXkC8= -----END CERTIFICATE-----Generated at Mon Oct 26 02:20:51 2026 by rpki-client