$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/2ED1150C561D11E7B003DF26C4F9AE02.roa File: 2ED1150C561D11E7B003DF26C4F9AE02.roa (raw, json) Hash identifier: DKrVzYdeoJ2Uw8nY+dPJdQx3xq+jVramwiuMndJg2Yg= Subject key identifier: 9A:F0:41:4D:54:73:D5:D7:4A:16:3C:02:9F:20:FB:DB:F8:A4:88:FD Certificate issuer: /CN=A91C83EA/serialNumber=F76750515BB762D1800C5AE6C6C2DB24FE952D02 Certificate serial: 2B7A Authority key identifier: F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/2ED1150C561D11E7B003DF26C4F9AE02.roa Signing time: Thu 20 Aug 2026 16:22:13 +0000 ROA not before: Thu 20 Aug 2026 16:22:13 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 45177 IP address blocks: 45.64.48.0/22 maxlen: 24 103.233.220.0/22 maxlen: 24 2401:1880::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.crl rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11130 (0x2b7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C83EA, serialNumber=F76750515BB762D1800C5AE6C6C2DB24FE952D02 Validity Not Before: Aug 20 16:22:13 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a8729b5-12e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6e:5f:01:32:45:1f:76:30:36:96:9f:d3:9f: a3:7e:70:7e:02:a3:07:97:d1:fa:7c:8e:6d:c0:07: 73:01:56:18:b0:65:2a:27:86:dd:33:4f:c5:5d:2a: 25:9b:c5:b8:e1:d3:a0:2f:50:a1:5f:64:95:53:8f: 11:e5:9e:ac:90:f4:25:31:2b:b2:0a:bf:7b:1e:8d: d7:00:b1:93:ac:e6:e8:f1:ab:78:fd:fe:59:51:99: 2e:1b:ba:a1:ac:57:85:3f:e2:71:ca:c0:e2:6a:9d: be:67:e6:9d:d9:20:51:b9:e9:03:d4:b7:ee:83:c2: 52:95:6f:81:71:35:35:b6:89:c9:6f:fb:7b:8e:e3: 01:88:44:0e:da:8d:e1:be:4c:d3:ad:7d:d5:88:af: 9a:78:33:f2:00:28:eb:78:aa:0f:4c:cd:0d:78:12: 0f:3e:26:d1:dc:bb:55:9d:de:f8:69:62:4d:7e:65: ef:43:eb:2e:9b:06:f8:6e:63:72:14:d6:e8:c2:ed: fe:f8:ba:3c:3f:ac:45:b3:91:2b:49:47:63:8a:6e: 88:36:6b:87:02:91:b2:7b:dc:b5:34:2e:dc:f1:f9: aa:f7:89:51:96:94:ca:e5:b8:f6:e6:0b:fd:5a:bd: e2:d2:9e:68:62:07:50:e3:6d:92:8a:1d:06:ca:66: 39:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F0:41:4D:54:73:D5:D7:4A:16:3C:02:9F:20:FB:DB:F8:A4:88:FD X509v3 Authority Key Identifier: keyid:F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/2ED1150C561D11E7B003DF26C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.64.48.0/22 103.233.220.0/22 IPv6: 2401:1880::/32 Signature Algorithm: sha256WithRSAEncryption 93:98:93:e1:07:20:d4:92:86:8c:4b:f7:b0:96:df:e8:9d:60: 30:de:11:e4:25:0b:be:a6:44:8e:17:4f:24:45:fe:70:86:90: 48:fa:90:ee:8c:3f:a9:0c:5a:6b:fd:f6:b4:b1:c6:a4:c6:e6: 4a:e1:08:41:26:f9:25:97:77:76:fa:d7:a0:c1:00:22:81:7a: db:57:ac:8e:a6:88:aa:5c:53:2a:90:50:ed:b5:5c:90:b0:3d: 8b:a0:46:0e:85:9e:bf:5f:4c:43:f2:26:d0:ec:99:e2:c7:c6: 7a:39:7c:a0:39:05:74:a9:53:fc:b6:79:be:d8:22:7f:6e:8c: 77:e1:08:57:eb:fc:36:62:74:fc:a9:aa:48:35:57:95:ad:27: f2:f6:7c:0b:8a:93:97:1a:34:79:e4:77:2a:9e:d2:03:e9:94: 8f:b9:cf:a6:16:7d:12:92:1c:10:bc:ea:8c:05:c5:62:20:e2: 93:ac:8f:3a:08:b8:8b:d4:b4:ac:64:34:f4:aa:d1:e4:a8:55: 77:2c:0c:cd:fe:1a:20:81:6b:d1:f4:c6:b3:1f:f2:ec:8a:61: f9:54:dc:49:d1:52:0f:cf:ab:41:43:a6:6d:6c:b3:5f:a7:fc: 71:ce:25:75:19:d5:f3:fb:b7:56:5e:2d:bb:e9:9f:cc:96:9f: 2a:92:49:dc -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICK3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgzRUExMTAvBgNVBAUTKEY3Njc1MDUxNUJCNzYyRDE4MDBDNUFFNkM2QzJEQjI0 RkU5NTJEMDIwHhcNMjYwODIwMTYyMjEzWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTg3MjliNS0xMmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxG5fATJFH3YwNpaf05+jfnB+AqMHl9H6fI5twAdzAVYYsGUqJ4bdM0/FXSol m8W44dOgL1ChX2SVU48R5Z6skPQlMSuyCr97Ho3XALGTrObo8at4/f5ZUZkuG7qh rFeFP+JxysDiap2+Z+ad2SBRuekD1Lfug8JSlW+BcTU1tonJb/t7juMBiEQO2o3h vkzTrX3ViK+aeDPyACjreKoPTM0NeBIPPibR3LtVnd74aWJNfmXvQ+sumwb4bmNy FNbowu3++Lo8P6xFs5ErSUdjim6INmuHApGye9y1NC7c8fmq94lRlpTK5bj25gv9 Wr3i0p5oYgdQ422Sih0GymY58wIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFJrwQU1U c9XXShY8Ap8g+9v4pIj9MB8GA1UdIwQYMBaAFPdnUFFbt2LRgAxa5sbC2yT+lS0C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODNFQS9EODJDNjFFODFD NDUxMUU0OTRBNzZGMUJDNEY5QUUwMi85MmRRVVZ1M1l0R0FERnJteHNMYkpQNlZM UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkyZFFVVnUzWXRHQURGcm14c0xiSlA2VkxRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzgzRUEvRDgyQzYxRTgxQzQ1MTFFNDk0QTc2RjFCQzRGOUFFMDIvMkVEMTE1MEM1 NjFEMTFFN0IwMDNERjI2QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCLUAwAwQCZ+ncMA0EAgACMAcDBQAkARiAMA0GCSqGSIb3DQEBCwUA A4IBAQCTmJPhByDUkoaMS/ewlt/onWAw3hHkJQu+pkSOF08kRf5whpBI+pDujD+p DFpr/fa0scakxuZK4QhBJvkll3d2+tegwQAigXrbV6yOpoiqXFMqkFDttVyQsD2L oEYOhZ6/X0xD8ibQ7Jnix8Z6OXygOQV0qVP8tnm+2CJ/box34QhX6/w2YnT8qapI NVeVrSfy9nwLipOXGjR55HcqntID6ZSPuc+mFn0SkhwQvOqMBcViIOKTrI86CLiL 1LSsZDT0qtHkqFV3LAzN/hoggWvR9MazH/LsimH5VNxJ0VIPz6tBQ6ZtbLNfp/xx ziV1GdXz+7dWXi276Z/Mlp8qkknc -----END CERTIFICATE-----Generated at Sat Sep 19 15:22:25 2026 by rpki-client