$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/C24FF4C8050D11EA8626AD5DC4F9AE02.roa File: C24FF4C8050D11EA8626AD5DC4F9AE02.roa (raw, json) Hash identifier: dt+5NsmG0LsiiIAJ/456zoXI0G21LcrsXLB6GoxpBf0= Subject key identifier: 79:22:42:93:5B:45:DB:79:23:5D:E6:B5:B4:BD:E5:7F:F4:40:23:6B Certificate issuer: /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Certificate serial: 1524 Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/C24FF4C8050D11EA8626AD5DC4F9AE02.roa Signing time: Fri 16 Oct 2026 17:32:50 +0000 ROA not before: Fri 16 Oct 2026 17:32:50 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 45588 IP address blocks: 114.130.128.0/18 maxlen: 24 114.130.224.0/20 maxlen: 24 123.49.0.0/18 maxlen: 24 180.211.128.0/17 maxlen: 24 203.112.192.0/19 maxlen: 24 2407:5000::/32 maxlen: 40 2407:5000:1::/48 maxlen: 48 2407:5000:2::/48 maxlen: 48 2407:5000:3::/48 maxlen: 48 2407:5000:88::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 16:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5412 (0x1524) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC847, serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Validity Not Before: Oct 16 17:32:50 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6ad25fc2-7bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:aa:c8:1d:f7:4c:07:f9:87:9c:96:68:e5:6d: 7a:4a:73:19:fe:4d:0d:f5:fa:83:8e:5c:b1:d7:0c: f9:24:e1:53:95:fc:92:be:46:20:10:34:28:75:3c: 87:6d:f6:89:3e:c3:2e:7c:7b:65:29:19:24:43:cc: 9a:b4:86:38:66:eb:45:f2:6f:ef:93:a1:f2:9d:ce: b4:cf:05:3a:66:3e:fd:be:4d:3a:61:4b:47:d5:24: 47:8e:91:fe:e7:9d:28:b3:87:a0:b1:d4:fe:1d:da: e1:06:4b:9c:7b:ea:27:34:13:ac:6c:3b:a3:bb:37: a7:a6:cd:39:f6:15:ef:b9:24:8d:53:9a:d7:9a:e1: e3:b5:3b:dc:fd:f1:cf:08:4d:50:25:14:67:84:68: 0f:32:02:5f:56:5c:9f:dd:46:46:7b:08:72:01:f3: d5:1f:75:8a:8e:00:69:61:00:69:c9:f5:48:c1:ac: f0:97:99:f7:b5:de:dc:1d:ae:e5:49:37:bf:bb:7b: 8c:93:b5:e5:e5:bb:61:d2:9f:d4:e7:7d:52:68:f3: 7c:49:10:36:2d:cd:d0:c0:5d:72:77:39:c9:e7:05: 11:98:89:3e:36:d0:76:06:e5:6a:80:27:53:b9:14: a7:24:ec:a3:11:86:bb:dd:ca:ba:8a:b1:81:1f:1c: aa:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:22:42:93:5B:45:DB:79:23:5D:E6:B5:B4:BD:E5:7F:F4:40:23:6B X509v3 Authority Key Identifier: keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/C24FF4C8050D11EA8626AD5DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 114.130.128.0/18 114.130.224.0/20 123.49.0.0/18 180.211.128.0/17 203.112.192.0/19 IPv6: 2407:5000::/32 Signature Algorithm: sha256WithRSAEncryption c1:57:dd:b6:66:27:bb:8e:86:8e:d7:b9:28:a4:d7:69:86:ae: 7d:08:75:9f:55:57:f8:32:40:b8:19:23:be:ab:d9:ec:7e:29: d9:2e:b0:88:45:75:45:f2:04:7b:4a:3d:46:19:a1:f0:52:54: 1f:0e:f5:cb:5f:11:24:46:c0:33:50:05:28:00:05:8b:d9:64: d4:54:0b:fb:36:32:18:7c:1c:09:0e:87:ae:34:af:0d:7f:91: 19:a9:31:69:bb:e4:7e:d3:17:06:49:30:62:76:e6:e1:77:fc: 68:d9:d8:17:97:23:6f:e9:6a:7d:cc:01:ca:51:f1:78:e3:84: 40:87:75:e6:42:a7:f3:81:1d:2a:be:32:64:5f:e5:91:cf:6d: 52:e5:8c:22:aa:c8:0e:16:25:45:62:4c:6e:a4:13:a1:fb:2b: a9:06:8a:8f:9c:c6:16:67:00:b4:36:6a:bd:61:64:ee:61:31: c9:f8:5b:c4:c7:25:f5:5a:c2:a7:d6:d9:a5:6f:84:ff:fd:46: b0:74:28:44:58:69:6d:6d:b2:5d:41:9c:aa:eb:50:8f:1c:ae: 8b:cd:96:33:83:42:26:7f:e7:93:fb:a1:64:c2:19:bc:ce:27: 5f:e8:c1:a1:94:51:27:d5:c4:b6:2d:e0:89:b5:fe:7e:4a:c6: 43:6a:51:60 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgICFSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM4NDcxMTAvBgNVBAUTKDc5RDY2QzY0QTYxNjVBMkU0Q0IzN0Q0OTcwMEU2Qzc2 MTg0MUMzOUEwHhcNMjYxMDE2MTczMjUwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWQyNWZjMi03YmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA06rIHfdMB/mHnJZo5W16SnMZ/k0N9fqDjlyx1wz5JOFTlfySvkYgEDQodTyH bfaJPsMufHtlKRkkQ8yatIY4ZutF8m/vk6Hync60zwU6Zj79vk06YUtH1SRHjpH+ 550os4egsdT+HdrhBkuce+onNBOsbDujuzenps059hXvuSSNU5rXmuHjtTvc/fHP CE1QJRRnhGgPMgJfVlyf3UZGewhyAfPVH3WKjgBpYQBpyfVIwazwl5n3td7cHa7l STe/u3uMk7Xl5bth0p/U531SaPN8SRA2Lc3QwF1ydznJ5wURmIk+NtB2BuVqgCdT uRSnJOyjEYa73cq6irGBHxyqjQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFHkiQpNb Rdt5I13mtbS95X/0QCNrMB8GA1UdIwQYMBaAFHnWbGSmFlouTLN9SXAObHYYQcOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzg0Ny9BQ0Y5NDM1MjlB RjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dpNU1zMzFKY0E1c2RoaEJ3 NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VkWnNaS1lXV2k1TXMzMUpjQTVzZGhoQnc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkM4NDcvQUNGOTQzNTI5QUYzMTFFOEFBQjRENTVEQzRGOUFFMDIvQzI0RkY0Qzgw NTBEMTFFQTg2MjZBRDVEQzRGOUFFMDIucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAk BAIAATAeAwQGcoKAAwQEcoLgAwQGezEAAwQHtNOAAwQFy3DAMA0EAgACMAcDBQAk B1AAMA0GCSqGSIb3DQEBCwUAA4IBAQDBV922Zie7joaO17kopNdphq59CHWfVVf4 MkC4GSO+q9nsfinZLrCIRXVF8gR7Sj1GGaHwUlQfDvXLXxEkRsAzUAUoAAWL2WTU VAv7NjIYfBwJDoeuNK8Nf5EZqTFpu+R+0xcGSTBidubhd/xo2dgXlyNv6Wp9zAHK UfF444RAh3XmQqfzgR0qvjJkX+WRz21S5YwiqsgOFiVFYkxupBOh+yupBoqPnMYW ZwC0Nmq9YWTuYTHJ+FvExyX1WsKn1tmlb4T//UawdChEWGltbbJdQZyq61CPHK6L zZYzg0Imf+eT+6Fkwhm8zidf6MGhlFEn1cS2LeCJtf5+SsZDalFg -----END CERTIFICATE-----Generated at Thu Nov 5 02:40:22 2026 by rpki-client