$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/EB9F5762EE8F11EF98C58C75C4F9AE02.roa File: EB9F5762EE8F11EF98C58C75C4F9AE02.roa (raw, json) Hash identifier: Ku7wh/FXUDEKCtxHBTnryzbdhpHXAj2OJ29W3aNaNTI= Subject key identifier: 5C:AA:75:76:91:9B:14:7D:2B:88:53:00:23:2B:41:DA:76:42:56:58 Certificate issuer: /CN=A91B7691/serialNumber=EC0C9A58CB0ACD4273B45E1B91813BFFFFD08140 Certificate serial: 02E7 Authority key identifier: EC:0C:9A:58:CB:0A:CD:42:73:B4:5E:1B:91:81:3B:FF:FF:D0:81:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/EB9F5762EE8F11EF98C58C75C4F9AE02.roa Signing time: Fri 09 Oct 2026 07:55:51 +0000 ROA not before: Fri 09 Oct 2026 07:55:51 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 135772 IP address blocks: 14.192.52.0/22 maxlen: 24 45.127.232.0/22 maxlen: 24 103.54.230.0/23 maxlen: 24 103.68.216.0/22 maxlen: 24 103.196.220.0/22 maxlen: 24 2001:df6:6b00::/48 maxlen: 48 2400:cc60::/32 maxlen: 36 2403:67c0::/32 maxlen: 36 2407:a8c0::/32 maxlen: 36 2407:a8c0::/33 maxlen: 39 2407:a8c0::/34 maxlen: 40 2407:a8c0:4000::/36 maxlen: 40 2407:a8c0:5000::/39 maxlen: 40 2407:a8c0:5300::/40 maxlen: 40 2407:a8c0:5400::/38 maxlen: 40 2407:a8c0:5800::/37 maxlen: 40 2407:a8c0:6000::/35 maxlen: 40 2407:a8c0:8000::/34 maxlen: 40 2407:a8c0:c000::/35 maxlen: 40 2407:a8c0:e000::/36 maxlen: 40 2407:a8c0:f000::/37 maxlen: 37 2407:a8c0:f000::/38 maxlen: 38 2407:a8c0:f000::/39 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.crl rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 01:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 743 (0x2e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7691, serialNumber=EC0C9A58CB0ACD4273B45E1B91813BFFFFD08140 Validity Not Before: Oct 9 07:55:51 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6ac89e06-d1f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3c:7b:c2:e8:44:24:6e:59:8c:68:50:a9:97: 87:cb:02:95:03:6d:a6:99:e3:f3:83:e3:94:f2:3e: 0f:81:d4:1e:e8:6f:43:3e:6e:e5:01:57:88:c8:6a: 9f:aa:60:f1:3a:5e:dc:e0:45:51:57:42:12:3b:9e: 23:6a:29:15:c4:ca:90:7c:1d:cc:91:7c:08:af:13: d5:32:b6:c9:66:ec:32:ae:8b:48:a7:e7:ba:7a:15: 53:9c:66:37:f2:df:28:e2:b7:14:76:41:be:c1:03: d6:23:41:c5:f8:17:16:7a:07:63:62:25:81:ed:78: 97:87:ca:e4:56:0d:67:7e:8f:15:12:a2:88:b8:25: e8:98:7a:55:e6:6e:f8:ab:c5:58:e3:5f:4f:14:26: bb:0d:d5:87:eb:ad:ca:99:a0:09:be:9b:d8:37:35: 67:09:ff:66:2c:85:a6:63:7f:37:b6:2b:de:3a:60: 64:3b:06:86:df:dd:c2:2f:64:2c:6f:a7:56:24:45: c3:16:9f:f3:81:16:2e:e6:7f:23:52:cd:4e:4a:bc: 65:7d:ee:75:00:33:30:84:e6:8b:50:e5:d6:e6:fb: 91:04:b7:f9:5e:09:b9:8d:44:73:4f:61:13:d7:79: f3:37:76:87:9d:84:17:27:3c:53:6f:03:f0:ef:70: dd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:AA:75:76:91:9B:14:7D:2B:88:53:00:23:2B:41:DA:76:42:56:58 X509v3 Authority Key Identifier: keyid:EC:0C:9A:58:CB:0A:CD:42:73:B4:5E:1B:91:81:3B:FF:FF:D0:81:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/EB9F5762EE8F11EF98C58C75C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 14.192.52.0/22 45.127.232.0/22 103.54.230.0/23 103.68.216.0/22 103.196.220.0/22 IPv6: 2001:df6:6b00::/48 2400:cc60::/32 2403:67c0::/32 2407:a8c0::/32 Signature Algorithm: sha256WithRSAEncryption 66:00:5e:e8:8c:b9:0c:87:52:8c:11:f7:56:84:7b:e5:9d:0f: 3f:8b:97:09:7a:be:74:a9:52:72:c8:25:a7:22:67:3d:83:b0: 1c:91:9a:73:aa:a3:17:70:3b:b9:9b:ac:ef:0e:27:d1:7d:67: f6:fb:9f:b7:55:9d:d2:3a:41:a4:ee:29:79:a9:67:31:8d:6b: 25:6d:e6:68:e5:82:4e:0d:9c:ab:3c:b7:94:57:39:5e:e0:e7: 1b:da:7f:da:6e:1c:43:66:e3:16:7d:bf:58:0a:ba:aa:bc:09: eb:c5:2d:3a:a3:92:82:93:43:e7:d8:02:74:79:0a:d6:0b:a7: c1:9d:c2:ba:ab:62:b2:26:74:34:d9:05:da:2c:ad:ca:83:af: e9:49:6a:66:05:d7:ec:c0:7c:43:f1:b7:58:5e:08:e6:04:56: b9:d0:0f:d7:d4:79:1a:f7:fa:4e:83:12:4a:ba:39:63:1b:83: 2c:42:f6:0d:5b:47:a2:03:c3:8b:03:e2:f2:ff:c4:6d:72:e1: 3e:a5:68:22:23:e9:f4:57:b7:d7:42:5d:ed:b1:fd:d7:6a:79: 56:97:71:ea:24:86:32:e5:ac:f2:c9:65:86:3f:05:d0:a6:af: db:29:f4:ca:94:3c:da:44:cc:67:7d:d7:91:f8:ae:1d:ea:02: c4:17:c0:4f -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgICAucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc2OTExMTAvBgNVBAUTKEVDMEM5QTU4Q0IwQUNENDI3M0I0NUUxQjkxODEzQkZG RkZEMDgxNDAwHhcNMjYxMDA5MDc1NTUxWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWM4OWUwNi1kMWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyzx7wuhEJG5ZjGhQqZeHywKVA22mmePzg+OU8j4PgdQe6G9DPm7lAVeIyGqf qmDxOl7c4EVRV0ISO54jaikVxMqQfB3MkXwIrxPVMrbJZuwyrotIp+e6ehVTnGY3 8t8o4rcUdkG+wQPWI0HF+BcWegdjYiWB7XiXh8rkVg1nfo8VEqKIuCXomHpV5m74 q8VY419PFCa7DdWH663KmaAJvpvYNzVnCf9mLIWmY383tiveOmBkOwaG393CL2Qs b6dWJEXDFp/zgRYu5n8jUs1OSrxlfe51ADMwhOaLUOXW5vuRBLf5Xgm5jURzT2ET 13nzN3aHnYQXJzxTbwPw73DdSwIDAQABo4ICnjCCApowHQYDVR0OBBYEFFyqdXaR mxR9K4hTACMrQdp2QlZYMB8GA1UdIwQYMBaAFOwMmljLCs1Cc7ReG5GBO///0IFA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzY5MS84MjE2NEQwNDdE NTkxMUVEQkVCNTVEMEFDNEY5QUUwMi83QXlhV01zS3pVSnp0RjRia1lFN19fX1Fn VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdBeWFXTXNLelVKenRGNGJrWUU3X19fUWdVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qjc2OTEvODIxNjREMDQ3RDU5MTFFREJFQjU1RDBBQzRGOUFFMDIvRUI5RjU3NjJF RThGMTFFRjk4QzU4Qzc1QzRGOUFFMDIucm9hMF0GCCsGAQUFBwEHAQH/BE4wTDAk BAIAATAeAwQCDsA0AwQCLX/oAwQBZzbmAwQCZ0TYAwQCZ8TcMCQEAgACMB4DBwAg AQ32awADBQAkAMxgAwUAJANnwAMFACQHqMAwDQYJKoZIhvcNAQELBQADggEBAGYA XuiMuQyHUowR91aEe+WdDz+Llwl6vnSpUnLIJaciZz2DsByRmnOqoxdwO7mbrO8O J9F9Z/b7n7dVndI6QaTuKXmpZzGNayVt5mjlgk4NnKs8t5RXOV7g5xvaf9puHENm 4xZ9v1gKuqq8CevFLTqjkoKTQ+fYAnR5CtYLp8GdwrqrYrImdDTZBdosrcqDr+lJ amYF1+zAfEPxt1heCOYEVrnQD9fUeRr3+k6DEkq6OWMbgyxC9g1bR6IDw4sD4vL/ xG1y4T6laCIj6fRXt9dCXe2x/ddqeVaXceokhjLlrPLJZYY/BdCmr9sp9MqUPNpE zGd915H4rh3qAsQXwE8= -----END CERTIFICATE-----Generated at Sun Oct 25 14:24:57 2026 by rpki-client