$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/E73BBF76957811F1B4216A726F11F970.roa File: E73BBF76957811F1B4216A726F11F970.roa (raw, json) Hash identifier: sGezONrhPqvpv1z4vFJElu1iyeEpn1z3ruGDa1oLp5I= Subject key identifier: 7A:22:8C:A1:56:BE:D7:DD:CB:F8:4C:9B:55:64:9F:90:B1:F9:74:E4 Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Certificate serial: 376D Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/E73BBF76957811F1B4216A726F11F970.roa Signing time: Tue 11 Aug 2026 11:36:33 +0000 ROA not before: Tue 11 Aug 2026 11:36:33 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 45814 IP address blocks: 116.90.106.0/24 maxlen: 24 116.90.107.0/24 maxlen: 24 116.90.108.0/24 maxlen: 24 116.90.109.0/24 maxlen: 24 116.90.110.0/24 maxlen: 24 202.69.33.0/24 maxlen: 24 202.69.36.0/24 maxlen: 24 202.69.42.0/24 maxlen: 24 202.69.54.0/24 maxlen: 24 202.69.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 14:29:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14189 (0x376d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Validity Not Before: Aug 11 11:36:33 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6a7b0941-0701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:df:7d:15:fa:e9:d2:e5:2e:45:8d:67:1e:35: 2a:99:2d:27:90:78:b7:19:35:38:a7:7f:db:26:79: e7:2e:46:9b:b0:96:66:f6:7e:a5:80:72:0f:c3:4c: 51:5a:a4:2a:36:db:bd:d7:5f:0a:ee:51:11:3b:62: ef:51:ee:81:5d:ed:c2:9b:00:92:bb:80:5a:89:46: 5b:05:37:2c:23:54:4c:e7:1a:68:f3:95:a2:98:ee: d0:bc:b6:b5:80:a5:24:de:20:1f:2e:6d:78:46:6d: 2a:93:dc:94:8f:fa:0a:e4:af:2c:3c:81:73:2f:bd: ce:42:f1:9e:cc:75:6f:36:8a:ae:6a:03:d2:5c:4d: b0:80:1c:14:73:78:8a:e1:28:ae:1c:08:e2:d9:cb: 2a:5a:a1:12:8d:29:40:09:ef:e5:23:d6:f8:24:45: df:4f:52:7c:31:95:5b:27:a6:1f:2e:cb:ef:f4:9f: a2:02:11:c2:2e:df:b0:63:7d:47:e1:15:99:9c:2a: e6:77:54:a0:19:a4:cc:0e:0a:cb:fb:2a:e1:88:ec: aa:da:9c:8b:a7:ec:66:b9:ba:49:a5:5c:d4:4f:67: fc:29:0f:e4:e2:f0:a5:5d:6b:f3:aa:0b:aa:64:96: 50:4b:f9:7e:69:ce:79:16:68:8a:32:9a:6e:fc:f2: c2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:22:8C:A1:56:BE:D7:DD:CB:F8:4C:9B:55:64:9F:90:B1:F9:74:E4 X509v3 Authority Key Identifier: keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/E73BBF76957811F1B4216A726F11F970.roa sbgp-ipAddrBlock: critical IPv4: 116.90.106.0-116.90.110.255 202.69.33.0/24 202.69.36.0/24 202.69.42.0/24 202.69.54.0/23 Signature Algorithm: sha256WithRSAEncryption 32:bd:3c:53:65:17:78:61:31:5d:d5:14:ad:80:4b:66:04:2c: 7a:ee:b3:86:f9:1e:87:d4:a7:ad:ba:29:a3:dd:d7:a4:66:f9: 85:ef:c1:11:4c:ea:e2:8b:56:82:b7:9e:93:19:81:c2:f0:b8: 57:f4:55:7a:4e:79:5b:fc:a7:13:2a:fe:7f:23:85:33:49:75: 05:85:06:5b:b3:0e:2b:a7:a3:32:91:a8:ec:65:be:e1:48:88: 7e:ea:1c:e3:cf:84:05:ac:55:38:5f:89:44:2c:1c:df:57:74: f7:f1:95:ad:69:17:b2:8b:81:e9:7e:e9:22:d3:5d:88:4d:cb: d8:d5:3c:b6:a4:f5:42:dd:60:87:69:c0:c2:be:50:11:7a:34: 52:d9:1e:4e:83:27:a2:34:8c:a1:a5:ec:b7:e0:f9:da:b4:b6: 86:39:40:f2:9f:a2:8d:e1:0b:7d:83:91:50:bc:5f:ca:b1:17: 93:6c:3b:2e:21:29:9f:d8:03:0d:7f:9c:06:9a:f9:66:81:fa: 2c:a4:85:3a:b9:19:58:85:a7:b6:f4:43:a3:5b:fe:cd:05:e4: 8b:e3:39:1f:83:f3:d3:a4:2a:cb:a7:bc:80:12:2b:5d:0e:5a: fb:83:37:89:21:7f:4a:a6:db:f2:88:61:0c:c1:b4:74:71:f1: 2f:11:d8:3c -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICN20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx NkQxNTdCMzQwHhcNMjYwODExMTEzNjMzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YTdiMDk0MS0wNzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAld99Ffrp0uUuRY1nHjUqmS0nkHi3GTU4p3/bJnnnLkabsJZm9n6lgHIPw0xR WqQqNtu9118K7lERO2LvUe6BXe3CmwCSu4BaiUZbBTcsI1RM5xpo85WimO7QvLa1 gKUk3iAfLm14Rm0qk9yUj/oK5K8sPIFzL73OQvGezHVvNoquagPSXE2wgBwUc3iK 4SiuHAji2csqWqESjSlACe/lI9b4JEXfT1J8MZVbJ6YfLsvv9J+iAhHCLt+wY31H 4RWZnCrmd1SgGaTMDgrL+yrhiOyq2pyLp+xmubpJpVzUT2f8KQ/k4vClXWvzqguq ZJZQS/l+ac55FmiKMppu/PLCJQIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFHoijKFW vtfdy/hMm1Vkn5Cx+XTkMB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjVEN0UvRUNBNjgyMzQxRDg3MTFFMjk4MzIyREUwMDhCMDJDRDIvRTczQkJGNzY5 NTc4MTFGMUI0MjE2QTcyNkYxMUY5NzAucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAs BAIAATAmMAwDBAF0WmoDBAB0Wm4DBADKRSEDBADKRSQDBADKRSoDBAHKRTYwDQYJ KoZIhvcNAQELBQADggEBADK9PFNlF3hhMV3VFK2AS2YELHrus4b5HofUp626KaPd 16Rm+YXvwRFM6uKLVoK3npMZgcLwuFf0VXpOeVv8pxMq/n8jhTNJdQWFBluzDiun ozKRqOxlvuFIiH7qHOPPhAWsVThfiUQsHN9XdPfxla1pF7KLgel+6SLTXYhNy9jV PLak9ULdYIdpwMK+UBF6NFLZHk6DJ6I0jKGl7Lfg+dq0toY5QPKfoo3hC32DkVC8 X8qxF5NsOy4hKZ/YAw1/nAaa+WaB+iykhTq5GViFp7b0Q6Nb/s0F5IvjOR+D89Ok KsunvIASK10OWvuDN4khf0qm2/KIYQzBtHRx8S8R2Dw= -----END CERTIFICATE-----Generated at Fri Sep 11 10:07:14 2026 by rpki-client