$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/4CB6FAD482E511F0B57EE434C4F9AE02.roa File: 4CB6FAD482E511F0B57EE434C4F9AE02.roa (raw, json) Hash identifier: KotE2q/pDb05tZSWjDtzPTU8V3aKT2A+1Zc7HR+Jj2M= Subject key identifier: 08:1E:5A:09:3B:F0:46:40:C5:29:E1:87:0B:78:1E:E5:D8:02:F1:55 Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 02FE Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/4CB6FAD482E511F0B57EE434C4F9AE02.roa Signing time: Sat 31 Jan 2026 01:21:24 +0000 ROA not before: Sat 31 Jan 2026 01:21:23 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 45867 IP address blocks: 140.168.64.0/18 maxlen: 20 140.168.66.0/24 maxlen: 24 140.168.67.0/24 maxlen: 24 140.168.78.0/24 maxlen: 24 140.168.79.0/24 maxlen: 24 140.168.80.0/24 maxlen: 24 140.168.81.0/24 maxlen: 24 140.168.87.0/24 maxlen: 24 140.168.128.0/18 maxlen: 20 140.168.135.0/24 maxlen: 24 140.168.138.0/24 maxlen: 24 140.168.139.0/24 maxlen: 24 140.168.166.0/24 maxlen: 24 140.168.236.0/22 maxlen: 24 140.168.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Feb 2026 00:46:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 766 (0x2fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Validity Not Before: Jan 31 01:21:23 2026 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=697d5913-00ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:eb:47:7a:ae:7f:07:21:b3:35:8e:06:d0:41: 90:97:e3:46:6f:34:3d:bc:02:9c:13:da:65:f0:89: b0:24:ad:ee:8b:8e:de:20:bf:12:3a:db:65:7b:bc: a1:50:9a:37:71:df:ec:ed:85:3d:b8:63:3c:b7:18: 6d:18:07:5f:9c:1e:54:3a:5f:9a:95:be:d8:cd:75: d5:06:78:41:f1:08:f5:3b:99:39:dd:77:a7:df:79: 0d:6a:4b:fa:4c:4b:2d:bf:1f:44:fd:d1:0e:3f:3c: b9:55:e1:25:6c:49:c2:c8:9a:1f:f2:bb:fe:72:c9: 5b:6d:a5:33:dd:1a:96:13:16:9b:6a:a3:af:45:08: 3e:e6:fb:c8:f8:df:52:9a:9f:e7:a2:60:6b:2e:06: d0:9c:b4:bf:50:e7:2a:e0:ce:af:3f:ef:23:d8:64: 03:5b:e9:29:ce:64:80:2c:85:75:68:44:db:ea:13: f3:e4:ef:ce:d6:75:53:43:59:95:07:09:85:62:0b: c7:c9:b4:bb:4c:82:7f:a0:22:ab:32:79:5e:8f:ca: c7:22:78:ae:e0:54:4f:ec:ee:ba:c8:fd:98:fc:ba: f4:09:d6:7f:1b:b1:01:8b:82:0b:c4:1d:17:9f:8d: 62:f7:c1:92:07:c8:dd:1c:e5:d4:50:83:81:8e:89: c4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:1E:5A:09:3B:F0:46:40:C5:29:E1:87:0B:78:1E:E5:D8:02:F1:55 X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/4CB6FAD482E511F0B57EE434C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 140.168.64.0-140.168.191.255 140.168.236.0/22 140.168.250.0/23 Signature Algorithm: sha256WithRSAEncryption 19:23:45:1b:57:cb:67:90:3d:7c:f6:5f:35:13:6d:67:24:ea: 5e:5a:d1:20:f2:64:db:54:0c:46:f4:b6:16:46:c4:6e:9a:c2: 51:9a:ec:93:c9:38:7a:12:98:64:ee:22:92:41:ad:b0:8f:c3: c6:91:26:e3:01:66:b0:65:53:fa:d3:7c:50:65:46:66:4d:1d: c8:14:f9:e8:37:e5:60:75:c9:d4:70:7c:5e:8a:d4:7b:e4:13: 3d:e2:3d:cd:5f:04:76:14:c1:1c:0c:0b:e2:9e:a9:15:0e:ec: c8:28:29:14:0e:8d:15:b2:9e:90:2f:ad:9f:7c:13:d1:c6:b3: 67:b1:74:55:93:84:ae:32:24:8b:c7:ef:e9:11:f7:4d:68:14: 5a:eb:38:4e:bc:3e:c3:00:75:0f:17:ee:90:7c:c0:77:28:68: 60:3e:44:71:0f:49:3c:99:0b:2d:cd:c7:17:a1:dd:df:6a:64: 22:b2:b8:d0:25:08:82:63:99:51:da:94:d8:85:15:83:9b:8b: 21:a9:e1:73:72:20:9a:dd:b9:07:fe:aa:14:4c:04:4f:a8:04: f9:a0:50:d1:00:43:a2:05:9a:85:19:45:0b:8d:7a:c0:48:72: f9:4a:b7:eb:c2:3b:07:7e:3f:91:d8:69:64:6a:de:9f:70:03: d7:56:09:69 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICAv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjYwMTMxMDEyMTIzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDDA02OTdkNTkxMy0wMGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+tHeq5/ByGzNY4G0EGQl+NGbzQ9vAKcE9pl8ImwJK3ui47eIL8SOttle7yh UJo3cd/s7YU9uGM8txhtGAdfnB5UOl+alb7YzXXVBnhB8Qj1O5k53Xen33kNakv6 TEstvx9E/dEOPzy5VeElbEnCyJof8rv+cslbbaUz3RqWExabaqOvRQg+5vvI+N9S mp/nomBrLgbQnLS/UOcq4M6vP+8j2GQDW+kpzmSALIV1aETb6hPz5O/O1nVTQ1mV BwmFYgvHybS7TIJ/oCKrMnlej8rHIniu4FRP7O66yP2Y/Lr0CdZ/G7EBi4ILxB0X n41i98GSB8jdHOXUUIOBjonEkwIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFAgeWgk7 8EZAxSnhhwt4HuXYAvFVMB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QURCOTgvRDkzRTkzREM0OTIxMTFFREFCRDU5QzUzQzRGOUFFMDIvNENCNkZBRDQ4 MkU1MTFGMEI1N0VFNDM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBowDAMEBoyoQAMEBoyogAMEAoyo7AMEAYyo+jANBgkqhkiG9w0B AQsFAAOCAQEAGSNFG1fLZ5A9fPZfNRNtZyTqXlrRIPJk21QMRvS2FkbEbprCUZrs k8k4ehKYZO4ikkGtsI/DxpEm4wFmsGVT+tN8UGVGZk0dyBT56DflYHXJ1HB8XorU e+QTPeI9zV8EdhTBHAwL4p6pFQ7syCgpFA6NFbKekC+tn3wT0cazZ7F0VZOErjIk i8fv6RH3TWgUWus4Trw+wwB1DxfukHzAdyhoYD5EcQ9JPJkLLc3HF6Hd32pkIrK4 0CUIgmOZUdqU2IUVg5uLIanhc3Igmt25B/6qFEwET6gE+aBQ0QBDogWahRlFC416 wEhy+Uq368I7B34/kdhpZGren3AD11YJaQ== -----END CERTIFICATE-----Generated at Fri Feb 20 01:31:11 2026 by rpki-client