$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/0997A5828A1511F09F6EBD2BC4F9AE02.roa File: 0997A5828A1511F09F6EBD2BC4F9AE02.roa (raw, json) Hash identifier: fh/tVUPGS+UXg+acYtuJo5G4hja8nzeWl7IkiWlXYc0= Subject key identifier: 60:EC:7D:6B:D6:F5:EC:6E:7B:27:4D:11:16:8B:F3:18:84:3E:A4:0C Certificate issuer: /CN=A91C9D76/serialNumber=1E5A6321B11AA0846FA89BF139BCECDBAD38BE37 Certificate serial: 362F Authority key identifier: 1E:5A:63:21:B1:1A:A0:84:6F:A8:9B:F1:39:BC:EC:DB:AD:38:BE:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/0997A5828A1511F09F6EBD2BC4F9AE02.roa Signing time: Wed 16 Sep 2026 15:10:19 +0000 ROA not before: Wed 16 Sep 2026 15:10:19 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 9732 IP address blocks: 45.119.92.0/22 maxlen: 24 45.127.0.0/22 maxlen: 24 103.85.200.0/22 maxlen: 24 103.214.76.0/22 maxlen: 24 202.128.224.0/19 maxlen: 24 202.181.252.0/22 maxlen: 24 220.232.128.0/22 maxlen: 24 220.232.176.0/22 maxlen: 24 2406::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.crl rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 14:16:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13871 (0x362f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9D76, serialNumber=1E5A6321B11AA0846FA89BF139BCECDBAD38BE37 Validity Not Before: Sep 16 15:10:19 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6aaab15b-6f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4d:fe:04:02:c6:ed:b6:45:92:a5:11:94:ff: 6b:c0:43:81:87:8c:0c:7f:1e:4e:5a:85:75:f4:74: eb:89:54:55:bb:c3:e3:96:76:ae:ca:81:22:82:35: 12:1a:e0:12:c6:83:34:3f:50:33:f2:58:d9:3d:ef: f3:a0:34:4a:0e:e2:d6:c6:ff:f6:52:32:2d:be:7e: 94:5a:f0:04:89:2d:f3:67:c8:e3:91:ab:6c:1e:e2: b0:b4:df:a2:73:8c:a5:77:fc:21:99:da:42:3f:10: 65:d8:41:f8:90:b7:d1:e2:e7:c5:2b:80:59:be:82: b7:5e:99:f2:c0:c0:40:29:6a:04:26:2e:9d:69:17: a5:8a:e2:90:32:88:d3:1b:00:39:ee:c8:57:10:cc: 32:19:b7:88:39:65:13:e5:48:88:4e:0c:0f:91:cd: f3:f2:0e:63:9e:58:c0:2d:0f:f3:d7:b1:71:86:f1: a6:f3:91:64:1c:d4:a3:2c:6e:d8:9b:91:c8:fb:9f: 5e:06:c3:b5:78:e4:31:40:33:40:05:51:ec:3e:99: 1b:38:aa:0a:d6:4d:75:31:36:cc:f8:a0:8e:7f:87: 32:07:75:94:d0:e3:da:f3:1c:4b:3c:ef:1f:6c:32: f5:6f:09:17:dd:8f:e0:1f:e2:f9:e0:3d:4b:e6:b6: 0f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:EC:7D:6B:D6:F5:EC:6E:7B:27:4D:11:16:8B:F3:18:84:3E:A4:0C X509v3 Authority Key Identifier: keyid:1E:5A:63:21:B1:1A:A0:84:6F:A8:9B:F1:39:BC:EC:DB:AD:38:BE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/0997A5828A1511F09F6EBD2BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.119.92.0/22 45.127.0.0/22 103.85.200.0/22 103.214.76.0/22 202.128.224.0/19 202.181.252.0/22 220.232.128.0/22 220.232.176.0/22 IPv6: 2406::/32 Signature Algorithm: sha256WithRSAEncryption 85:73:06:76:53:0a:16:46:a4:5d:19:a5:5a:63:1d:b6:2b:35: e4:18:27:c0:d4:43:51:b4:88:ad:2e:1c:7a:29:1b:8d:c1:b8: 18:f2:7d:ac:ee:90:64:16:8e:05:8c:e7:0d:1f:91:0e:d3:c9: 91:0d:3e:0c:17:7a:fc:3d:57:b6:30:84:d9:42:49:a2:55:7e: 16:f0:f6:f2:39:08:0f:e0:96:0d:e6:c7:6a:da:c2:ec:ed:f0: e8:2c:02:3e:ac:25:53:9f:b3:2a:24:2b:d4:49:f7:b8:16:b0: 11:fc:27:10:2e:64:59:b5:b2:bd:d9:96:1f:d7:32:13:28:c3: 7e:c9:b4:40:80:8b:dc:c9:b8:70:89:ce:ac:d9:57:96:50:e9: c4:6d:30:26:fe:f6:a9:89:5a:8a:e9:e2:05:df:31:4d:e8:3f: 4e:c7:ed:69:8f:8d:5a:fd:3a:42:80:2b:87:d3:d7:91:42:0c: 04:f5:84:f5:68:69:24:80:93:aa:bb:ca:67:2f:59:60:98:6c: bc:ca:08:8f:c9:af:bb:b7:a0:ca:58:10:91:29:95:be:f8:84: a9:92:e9:e2:2e:57:ac:09:56:10:ac:c5:4b:a7:ec:e4:74:9e: de:40:38:5f:2d:62:01:94:b8:34:c4:cb:14:84:ad:94:a1:ac: 6a:4a:14:8c -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgICNi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlENzYxMTAvBgNVBAUTKDFFNUE2MzIxQjExQUEwODQ2RkE4OUJGMTM5QkNFQ0RC QUQzOEJFMzcwHhcNMjYwOTE2MTUxMDE5WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFhYjE1Yi02ZjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt03+BALG7bZFkqURlP9rwEOBh4wMfx5OWoV19HTriVRVu8PjlnauyoEigjUS GuASxoM0P1Az8ljZPe/zoDRKDuLWxv/2UjItvn6UWvAEiS3zZ8jjkatsHuKwtN+i c4yld/whmdpCPxBl2EH4kLfR4ufFK4BZvoK3XpnywMBAKWoEJi6daReliuKQMojT GwA57shXEMwyGbeIOWUT5UiITgwPkc3z8g5jnljALQ/z17FxhvGm85FkHNSjLG7Y m5HI+59eBsO1eOQxQDNABVHsPpkbOKoK1k11MTbM+KCOf4cyB3WU0OPa8xxLPO8f bDL1bwkX3Y/gH+L54D1L5rYPgQIDAQABo4ICmTCCApUwHQYDVR0OBBYEFGDsfWvW 9exueydNERaL8xiEPqQMMB8GA1UdIwQYMBaAFB5aYyGxGqCEb6ib8Tm87NutOL43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQ3Ni82Mjg3QTExNDFE NjkxMUUyODhBQkE5QTYwOEIwMkNEMi9IbHBqSWJFYW9JUnZxSnZ4T2J6czI2MDR2 amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hscGpJYkVhb0lSdnFKdnhPYnpzMjYwNHZqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzlENzYvNjI4N0ExMTQxRDY5MTFFMjg4QUJBOUE2MDhCMDJDRDIvMDk5N0E1ODI4 QTE1MTFGMDlGNkVCRDJCQzRGOUFFMDIucm9hMFgGCCsGAQUFBwEHAQH/BEkwRzA2 BAIAATAwAwQCLXdcAwQCLX8AAwQCZ1XIAwQCZ9ZMAwQFyoDgAwQCyrX8AwQC3OiA AwQC3OiwMA0EAgACMAcDBQAkBgAAMA0GCSqGSIb3DQEBCwUAA4IBAQCFcwZ2UwoW RqRdGaVaYx22KzXkGCfA1ENRtIitLhx6KRuNwbgY8n2s7pBkFo4FjOcNH5EO08mR DT4MF3r8PVe2MITZQkmiVX4W8PbyOQgP4JYN5sdq2sLs7fDoLAI+rCVTn7MqJCvU Sfe4FrAR/CcQLmRZtbK92ZYf1zITKMN+ybRAgIvcybhwic6s2VeWUOnEbTAm/vap iVqK6eIF3zFN6D9Ox+1pj41a/TpCgCuH09eRQgwE9YT1aGkkgJOqu8pnL1lgmGy8 ygiPya+7t6DKWBCRKZW++ISpkuniLlesCVYQrMVLp+zkdJ7eQDhfLWIBlLg0xMsU hK2UoaxqShSM -----END CERTIFICATE-----Generated at Tue Oct 6 17:56:44 2026 by rpki-client