$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D2835514991411EBAD428141C4F9AE02.roa File: D2835514991411EBAD428141C4F9AE02.roa (raw, json) Hash identifier: f5pIrbb1H8wqsHkihcl4mH3tRmpQ6doq7Cq4BpDg7l8= Subject key identifier: 73:FC:4C:62:C1:D2:AD:46:4B:75:7A:4C:33:10:7E:B2:6C:B7:9F:22 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6F17 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D2835514991411EBAD428141C4F9AE02.roa Signing time: Fri 02 Oct 2026 15:36:08 +0000 ROA not before: Fri 02 Oct 2026 15:36:08 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 45896 IP address blocks: 45.125.200.0/22 maxlen: 24 45.125.204.0/22 maxlen: 24 45.125.208.0/22 maxlen: 24 103.19.164.0/22 maxlen: 24 103.37.28.0/22 maxlen: 24 103.37.32.0/22 maxlen: 24 103.38.136.0/22 maxlen: 24 103.234.88.0/22 maxlen: 24 103.237.64.0/22 maxlen: 24 111.91.232.0/22 maxlen: 24 2001:df0:2e8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28439 (0x6f17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 2 15:36:08 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcf68-d4ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:60:97:58:66:91:c0:f1:21:1c:92:60:1b:52: ed:ac:cd:79:6b:29:04:07:61:df:35:d3:cc:1a:b4: 2f:41:37:31:79:6d:c3:ff:ac:b8:cc:ca:ac:c6:b0: 5a:04:2b:96:ba:a6:53:af:0d:d5:55:0b:01:af:f5: 26:db:88:eb:c1:cb:a5:4d:c1:19:0d:a8:95:30:9b: eb:05:c9:17:f8:d5:03:d1:8a:61:a1:67:79:48:8a: ec:e1:d5:bb:c8:35:eb:1b:bb:c3:10:9b:e6:44:f9: 31:b5:70:5b:89:a9:92:6b:52:0b:78:84:03:3c:40: da:07:50:2d:47:cf:f7:5d:e6:3b:95:07:0c:ef:a3: fe:22:65:22:e8:e0:4e:6c:48:26:61:1c:a4:0e:6f: 6a:c6:7a:91:e1:58:6a:8e:d7:7d:f5:bf:19:b7:48: 33:24:83:30:38:09:a6:a5:ee:e3:c7:11:10:e5:da: bd:f4:bb:be:35:26:d1:c9:44:e4:89:28:ac:5f:88: 7d:83:7c:6a:a7:be:1d:2c:9e:72:eb:45:4f:f0:cc: 00:b8:79:17:62:78:4a:21:fc:53:56:6a:ae:0a:3e: de:ab:4e:8b:b9:8f:34:09:52:48:33:f5:b6:e7:1b: e8:77:62:ab:f9:84:f7:c9:c9:ad:cf:a1:8b:18:cd: fd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:FC:4C:62:C1:D2:AD:46:4B:75:7A:4C:33:10:7E:B2:6C:B7:9F:22 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D2835514991411EBAD428141C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.125.200.0-45.125.211.255 103.19.164.0/22 103.37.28.0-103.37.35.255 103.38.136.0/22 103.234.88.0/22 103.237.64.0/22 111.91.232.0/22 IPv6: 2001:df0:2e8::/48 Signature Algorithm: sha256WithRSAEncryption 51:79:8c:5c:b6:5b:33:91:bb:e6:4f:ca:0f:83:6f:d8:e5:4b: 1e:c5:2f:78:47:4f:d0:56:1b:50:fd:54:b3:e5:ad:9f:78:36: 00:34:1b:97:33:e9:73:67:9e:06:f7:52:7e:35:37:fa:75:98: 23:1e:eb:c8:e6:36:50:23:d8:1b:67:ec:94:c4:65:17:c6:30: 5b:18:1e:21:1a:50:7e:2e:82:ea:05:51:b2:c8:35:fd:1d:af: 8d:a7:b2:44:2e:5d:48:4f:03:32:41:3e:53:1b:c7:4b:65:44: 52:8a:99:06:c2:60:a5:80:3a:78:5f:54:1e:72:aa:0d:85:c9: 42:65:38:7a:51:bb:e1:58:c9:d4:0c:bd:07:a2:01:52:f0:f4: f1:f9:ee:d3:af:fc:03:5a:fe:92:fe:f3:99:4b:6d:7c:7d:0b: 78:af:2b:f1:cb:0f:7a:7a:d6:6e:2a:97:2e:73:6a:c8:a1:9c: 30:f0:77:3c:79:ab:78:ab:78:c0:cb:c9:6a:1e:7a:74:06:b3: 5f:af:4a:ab:96:f2:a7:cc:dd:61:6c:d4:a3:d4:97:40:92:d9: d6:d3:9b:c1:a6:6d:8b:0e:b1:8e:64:5b:c1:97:59:80:15:f3: 39:1a:39:79:a8:32:b2:45:02:56:dc:8c:75:42:33:5c:19:c5: 92:e0:78:ce -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICbxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYxMDAyMTUzNjA4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2Y2OC1kNGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkWCXWGaRwPEhHJJgG1LtrM15aykEB2HfNdPMGrQvQTcxeW3D/6y4zMqsxrBa BCuWuqZTrw3VVQsBr/Um24jrwculTcEZDaiVMJvrBckX+NUD0YphoWd5SIrs4dW7 yDXrG7vDEJvmRPkxtXBbiamSa1ILeIQDPEDaB1AtR8/3XeY7lQcM76P+ImUi6OBO bEgmYRykDm9qxnqR4Vhqjtd99b8Zt0gzJIMwOAmmpe7jxxEQ5dq99Lu+NSbRyUTk iSisX4h9g3xqp74dLJ5y60VP8MwAuHkXYnhKIfxTVmquCj7eq06LuY80CVJIM/W2 5xvod2Kr+YT3ycmtz6GLGM39VQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHP8TGLB 0q1GS3V6TDMQfrJst58iMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRDI4MzU1MTQ5 OTE0MTFFQkFENDI4MTQxQzRGOUFFMDIucm9hMGQGCCsGAQUFBwEHAQH/BFUwUzBA BAIAATA6MAwDBAMtfcgDBAItfdADBAJnE6QwDAMEAmclHAMEAmclIAMEAmcmiAME AmfqWAMEAmftQAMEAm9b6DAPBAIAAjAJAwcAIAEN8ALoMA0GCSqGSIb3DQEBCwUA A4IBAQBReYxctlszkbvmT8oPg2/Y5UsexS94R0/QVhtQ/VSz5a2feDYANBuXM+lz Z54G91J+NTf6dZgjHuvI5jZQI9gbZ+yUxGUXxjBbGB4hGlB+LoLqBVGyyDX9Ha+N p7JELl1ITwMyQT5TG8dLZURSipkGwmClgDp4X1QecqoNhclCZTh6UbvhWMnUDL0H ogFS8PTx+e7Tr/wDWv6S/vOZS218fQt4ryvxyw96etZuKpcuc2rIoZww8Hc8eat4 q3jAy8lqHnp0BrNfr0qrlvKnzN1hbNSj1JdAktnW05vBpm2LDrGOZFvBl1mAFfM5 Gjl5qDKyRQJW3Ix1QjNcGcWS4HjO -----END CERTIFICATE-----Generated at Sat Oct 24 20:44:55 2026 by rpki-client