$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/E3AAE94243B511EB8DA3F473C4F9AE02.roa File: E3AAE94243B511EB8DA3F473C4F9AE02.roa (raw, json) Hash identifier: jmySrqpn+S69gbBWSjHPk8y6x2hnK6aVJ0YM9ayH/ko= Subject key identifier: D5:21:0B:4D:FA:8A:4D:FE:17:5F:26:DD:0B:D8:63:76:00:97:37:A6 Certificate issuer: /CN=A91AB20B/serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808 Certificate serial: 08EE Authority key identifier: 5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/E3AAE94243B511EB8DA3F473C4F9AE02.roa Signing time: Fri 28 Aug 2026 21:41:03 +0000 ROA not before: Fri 28 Aug 2026 21:41:03 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 138655 IP address blocks: 110.93.226.0/24 maxlen: 24 110.93.227.0/24 maxlen: 24 119.63.138.0/24 maxlen: 24 119.63.139.0/24 maxlen: 24 221.132.118.0/24 maxlen: 24 221.132.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2286 (0x8ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB20B, serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808 Validity Not Before: Aug 28 21:41:03 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a92006f-69df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:99:f1:d6:b0:23:de:fa:09:31:5f:fa:e4:ec: c3:a0:23:f7:7c:76:90:99:3b:e2:37:b3:3f:8e:9f: 24:da:ac:f6:10:d7:d7:dd:19:d2:2a:17:be:3b:51: 0a:76:dc:a8:dc:15:3d:4e:84:b9:b6:4e:ed:e2:58: 14:e8:11:1b:96:aa:8c:c7:b0:82:30:a3:56:60:f8: 74:59:1e:68:d0:81:3c:39:e8:af:06:83:0e:1b:24: c7:45:80:c6:ef:0c:58:72:83:5d:40:a3:4e:89:c7: e3:36:08:ef:bd:0a:8c:be:d0:5a:c3:b9:d2:ff:68: 58:6c:fc:86:4f:89:8c:18:44:34:85:a6:99:04:1b: 3e:72:f2:a1:08:85:e6:25:de:fb:7f:3e:ff:54:41: 0e:b1:a8:20:06:c6:62:a2:70:c3:6d:a0:1f:08:ec: d0:cd:59:9c:7b:72:a8:59:c2:38:85:ed:da:78:50: 9f:09:72:7a:12:d0:72:0e:30:60:2e:fa:70:1c:5d: 95:01:38:45:d5:f2:49:53:cf:b6:8a:a0:9b:73:c0: 0a:12:78:61:da:3c:68:71:75:e5:72:48:cb:2d:69: 01:a7:3c:73:b4:ac:50:88:9d:18:17:c3:b6:58:30: 94:5e:87:95:d7:22:45:f9:fe:6e:2b:8b:8b:80:a5: 71:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:21:0B:4D:FA:8A:4D:FE:17:5F:26:DD:0B:D8:63:76:00:97:37:A6 X509v3 Authority Key Identifier: keyid:5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/E3AAE94243B511EB8DA3F473C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 110.93.226.0/23 119.63.138.0/23 221.132.118.0/23 Signature Algorithm: sha256WithRSAEncryption 14:d1:4d:48:1a:eb:0f:66:8b:15:2f:8b:e0:27:e5:7b:b0:e3: f7:f4:37:d3:9a:6c:eb:f9:69:c7:cc:ee:a5:21:03:5c:2f:f4: f9:9d:bd:a8:78:8a:53:06:c0:4c:6e:a1:e6:da:da:53:c4:a3: 99:00:0f:bf:50:64:d9:e9:20:f4:1b:87:71:49:ec:c6:85:27: 89:5c:bd:29:d2:07:e9:27:d3:4b:39:ed:9a:82:0c:2e:24:ee: 51:e2:c5:30:1d:2f:f9:cf:41:9e:32:15:f9:5e:99:c5:08:da: 7d:33:14:29:f6:6d:c7:98:f2:89:9e:70:fa:53:90:e8:26:3a: 30:44:73:58:ce:83:be:8a:e4:5f:80:9d:f7:3f:1c:7b:bb:0a: 64:46:c5:9a:f6:8f:bf:d0:4b:d3:4a:15:cd:f7:93:29:a3:3f: d2:ce:79:41:30:e0:c3:2b:27:5b:6f:04:3a:9a:9e:03:2b:19: e3:a0:c4:e1:27:d8:e5:9a:00:88:5c:be:50:3b:56:1d:64:f5: 63:5f:18:5f:6a:7b:e3:78:47:dd:6f:0e:f4:c2:bb:ab:86:d0: fe:84:04:94:0c:0b:de:a2:76:8f:30:10:38:30:52:30:8b:29: 0c:e2:73:b0:28:e7:ae:4e:4c:fc:49:51:df:13:a5:ca:b5:91: f6:34:72:ab -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICCO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIyMEIxMTAvBgNVBAUTKDVFQzFBNkFENzZBM0FCRkRDMUUxMzI5RUIyNjM3QzAx ODY0QjQ4MDgwHhcNMjYwODI4MjE0MTAzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTkyMDA2Zi02OWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJnx1rAj3voJMV/65OzDoCP3fHaQmTviN7M/jp8k2qz2ENfX3RnSKhe+O1EK dtyo3BU9ToS5tk7t4lgU6BEblqqMx7CCMKNWYPh0WR5o0IE8OeivBoMOGyTHRYDG 7wxYcoNdQKNOicfjNgjvvQqMvtBaw7nS/2hYbPyGT4mMGEQ0haaZBBs+cvKhCIXm Jd77fz7/VEEOsaggBsZionDDbaAfCOzQzVmce3KoWcI4he3aeFCfCXJ6EtByDjBg LvpwHF2VAThF1fJJU8+2iqCbc8AKEnhh2jxocXXlckjLLWkBpzxztKxQiJ0YF8O2 WDCUXoeV1yJF+f5uK4uLgKVxsQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFNUhC036 ik3+F18m3QvYY3YAlzemMB8GA1UdIwQYMBaAFF7Bpq12o6v9weEynrJjfAGGS0gI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjIwQi9CQTcxQjY0ODEy MDMxMUVCQkFBMTk0MTRDNEY5QUUwMi9Yc0dtclhhanFfM0I0VEtlc21OOEFZWkxT QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hzR21yWGFqcV8zQjRUS2VzbU44QVlaTFNBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUIyMEIvQkE3MUI2NDgxMjAzMTFFQkJBQTE5NDE0QzRGOUFFMDIvRTNBQUU5NDI0 M0I1MTFFQjhEQTNGNDczQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQBbl3iAwQBdz+KAwQB3YR2MA0GCSqGSIb3DQEBCwUAA4IBAQAU0U1I GusPZosVL4vgJ+V7sOP39DfTmmzr+WnHzO6lIQNcL/T5nb2oeIpTBsBMbqHm2tpT xKOZAA+/UGTZ6SD0G4dxSezGhSeJXL0p0gfpJ9NLOe2aggwuJO5R4sUwHS/5z0Ge MhX5XpnFCNp9MxQp9m3HmPKJnnD6U5DoJjowRHNYzoO+iuRfgJ33Pxx7uwpkRsWa 9o+/0EvTShXN95Mpoz/SznlBMODDKydbbwQ6mp4DKxnjoMThJ9jlmgCIXL5QO1Yd ZPVjXxhfanvjeEfdbw70wrurhtD+hASUDAveonaPMBA4MFIwiykM4nOwKOeuTkz8 SVHfE6XKtZH2NHKr -----END CERTIFICATE-----Generated at Fri Sep 11 14:22:36 2026 by rpki-client