$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E491927E2A6611F0A02D3886C4F9AE02.roa File: E491927E2A6611F0A02D3886C4F9AE02.roa (raw, json) Hash identifier: yutsUmMMHPM4fsUrbEJJG8ZRf6k+xYtr3dCv7YuQKeY= Subject key identifier: D3:01:41:15:9E:0B:9D:43:75:34:86:7F:3A:EE:29:E9:9C:64:B5:84 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6EF6 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E491927E2A6611F0A02D3886C4F9AE02.roa Signing time: Fri 02 Oct 2026 15:34:57 +0000 ROA not before: Fri 02 Oct 2026 15:34:57 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 24088 IP address blocks: 14.0.16.0/20 maxlen: 24 103.19.220.0/22 maxlen: 24 103.71.104.0/23 maxlen: 24 103.88.112.0/22 maxlen: 24 103.88.116.0/22 maxlen: 24 103.130.208.0/22 maxlen: 24 103.235.212.0/22 maxlen: 24 103.238.68.0/22 maxlen: 24 103.238.72.0/22 maxlen: 24 103.244.136.0/22 maxlen: 24 116.118.56.0/22 maxlen: 24 202.60.104.0/21 maxlen: 24 202.93.156.0/22 maxlen: 24 203.128.240.0/21 maxlen: 24 203.209.180.0/22 maxlen: 24 2001:df4:acc0::/48 maxlen: 48 2001:df5:aac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 10:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28406 (0x6ef6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 2 15:34:57 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcf21-f269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f6:5c:a2:53:b6:16:d7:8d:73:09:22:f2:7f: 2e:6f:c6:c1:74:1f:d1:a4:6e:42:40:7b:2e:6c:17: 13:b0:1e:1c:6a:7b:19:aa:ff:f0:6a:e7:e3:ae:d7: 06:92:bb:2b:0f:57:25:36:95:da:af:7d:b9:38:9b: 04:18:7f:7a:30:31:9f:11:02:9a:12:15:b1:c5:ca: f2:d1:95:f0:b4:ce:ce:85:d0:a1:82:a0:69:8f:b9: d3:c0:9f:19:eb:b2:a8:c9:ad:9d:ca:fb:7a:9d:f5: ac:5f:c5:f7:d6:db:ab:bf:ac:42:dc:b5:75:f8:5b: c7:64:bd:8b:a3:0b:0b:09:fb:e2:8f:97:b4:46:1c: 71:18:dc:ef:9e:a1:30:b9:aa:7c:6e:04:86:77:55: cd:e8:cf:25:af:0a:99:59:bf:0b:83:01:b3:89:27: c6:0e:74:5c:ca:1d:e7:86:1a:63:b7:ea:cb:54:51: e6:36:31:dd:db:ed:aa:0a:22:53:4d:ff:3c:95:60: 53:da:12:95:a0:8c:c5:ab:3f:e7:4c:2b:96:b1:82: d6:d6:45:53:1c:28:e7:9d:c9:99:eb:aa:2b:58:80: 73:46:a4:a4:27:7f:a6:c3:f6:d5:ba:5e:d5:eb:f2: a4:1a:18:c5:21:94:54:6b:a5:23:02:e4:71:e9:de: 21:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:01:41:15:9E:0B:9D:43:75:34:86:7F:3A:EE:29:E9:9C:64:B5:84 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E491927E2A6611F0A02D3886C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 14.0.16.0/20 103.19.220.0/22 103.71.104.0/23 103.88.112.0/21 103.130.208.0/22 103.235.212.0/22 103.238.68.0-103.238.75.255 103.244.136.0/22 116.118.56.0/22 202.60.104.0/21 202.93.156.0/22 203.128.240.0/21 203.209.180.0/22 IPv6: 2001:df4:acc0::/48 2001:df5:aac0::/48 Signature Algorithm: sha256WithRSAEncryption 4f:57:54:52:a6:c4:0f:02:40:65:4a:18:c2:67:88:b9:f9:e0: 64:90:90:b5:9a:ec:11:12:22:5b:8c:7a:14:8f:fc:63:48:78: 10:35:ee:aa:87:20:34:58:f8:d7:ac:6b:36:a7:ea:41:87:3c: 02:5e:3a:c8:a4:23:d2:d5:46:d1:02:c1:ac:c7:e8:22:a9:25: 2f:e0:a6:e3:db:04:66:e5:c2:fa:35:bf:a9:47:3e:b9:cf:eb: 64:8a:08:dd:6b:ef:59:12:f3:ae:84:9a:7b:3f:6d:ea:27:13: 0e:a0:38:b8:63:86:b2:be:e4:cc:f0:08:79:36:62:a4:2c:98: 80:e1:36:32:c5:50:3f:fa:29:03:0c:f4:82:3a:54:5c:fe:98: a6:e9:50:47:8c:64:83:16:f0:b0:55:0a:1f:17:8d:01:93:c0: d9:17:53:c5:f9:2c:58:ba:59:a4:40:27:ca:d4:c1:3c:46:47: fd:e6:8a:2f:cf:52:ae:c0:9d:24:6e:99:46:ea:ae:cf:04:2e: af:75:49:69:c8:1c:a8:cb:17:39:fa:06:1d:9c:19:0f:2a:9e: e2:34:53:de:36:7d:fc:b2:0f:dd:a7:04:e8:12:9a:4c:09:e0: 69:cf:4d:0b:31:7c:2a:7b:33:67:87:66:c4:1e:22:85:f5:2b: 04:a0:30:2e -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgICbvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYxMDAyMTUzNDU3WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2YyMS1mMjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhPZcolO2FteNcwki8n8ub8bBdB/RpG5CQHsubBcTsB4cansZqv/waufjrtcG krsrD1clNpXar325OJsEGH96MDGfEQKaEhWxxcry0ZXwtM7OhdChgqBpj7nTwJ8Z 67Koya2dyvt6nfWsX8X31turv6xC3LV1+FvHZL2LowsLCfvij5e0RhxxGNzvnqEw uap8bgSGd1XN6M8lrwqZWb8LgwGziSfGDnRcyh3nhhpjt+rLVFHmNjHd2+2qCiJT Tf88lWBT2hKVoIzFqz/nTCuWsYLW1kVTHCjnncmZ66orWIBzRqSkJ3+mw/bVul7V 6/KkGhjFIZRUa6UjAuRx6d4h4QIDAQABo4ICyzCCAscwHQYDVR0OBBYEFNMBQRWe C51DdTSGfzruKemcZLWEMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRTQ5MTkyN0Uy QTY2MTFGMEEwMkQzODg2QzRGOUFFMDIucm9hMIGJBggrBgEFBQcBBwEB/wR6MHgw XAQCAAEwVgMEBA4AEAMEAmcT3AMEAWdHaAMEA2dYcAMEAmeC0AMEAmfr1DAMAwQC Z+5EAwQCZ+5IAwQCZ/SIAwQCdHY4AwQDyjxoAwQCyl2cAwQDy4DwAwQCy9G0MBgE AgACMBIDBwAgAQ30rMADBwAgAQ31qsAwDQYJKoZIhvcNAQELBQADggEBAE9XVFKm xA8CQGVKGMJniLn54GSQkLWa7BESIluMehSP/GNIeBA17qqHIDRY+Nesazan6kGH PAJeOsikI9LVRtECwazH6CKpJS/gpuPbBGblwvo1v6lHPrnP62SKCN1r71kS866E mns/beonEw6gOLhjhrK+5MzwCHk2YqQsmIDhNjLFUD/6KQMM9II6VFz+mKbpUEeM ZIMW8LBVCh8XjQGTwNkXU8X5LFi6WaRAJ8rUwTxGR/3mii/PUq7AnSRumUbqrs8E Lq91SWnIHKjLFzn6Bh2cGQ8qnuI0U942ffyyD92nBOgSmkwJ4GnPTQsxfCp7M2eH ZsQeIoX1KwSgMC4= -----END CERTIFICATE-----Generated at Sat Oct 24 15:42:41 2026 by rpki-client