$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/F6FAB490BB5811EF8C37CB81C4F9AE02.roa File: F6FAB490BB5811EF8C37CB81C4F9AE02.roa (raw, json) Hash identifier: KmrmvAFX3BTDWk59dNTGnglJUjuw4X1fTptZ/iswC68= Subject key identifier: 3F:C8:2A:2A:84:A5:21:33:58:1B:C8:11:24:B5:1E:60:B2:49:08:FD Certificate issuer: /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Certificate serial: 369D Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/F6FAB490BB5811EF8C37CB81C4F9AE02.roa Signing time: Sun 30 Aug 2026 15:14:53 +0000 ROA not before: Sun 30 Aug 2026 15:14:53 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 23974 IP address blocks: 1.0.197.0/24 maxlen: 24 1.10.135.0/24 maxlen: 24 101.51.0.0/20 maxlen: 20 101.51.16.0/21 maxlen: 21 101.51.64.0/22 maxlen: 22 101.51.152.0/21 maxlen: 21 101.51.176.0/21 maxlen: 21 101.108.48.0/21 maxlen: 21 113.53.1.0/24 maxlen: 24 113.53.64.0/20 maxlen: 20 118.172.153.0/24 maxlen: 24 125.27.24.0/21 maxlen: 21 125.27.192.0/21 maxlen: 21 125.27.208.0/20 maxlen: 20 125.27.240.0/22 maxlen: 22 182.52.160.0/20 maxlen: 20 182.52.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13981 (0x369d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF4FE, serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Validity Not Before: Aug 30 15:14:53 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a9448ed-7746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:be:3a:25:d4:4a:28:14:3e:24:f4:20:a1:96: 1d:c8:31:99:83:88:a5:74:31:96:ce:cb:1e:e4:38: f6:c4:17:ee:24:16:d3:bd:3e:03:07:9b:45:4c:a2: 04:fc:0c:c2:f6:2d:16:94:4e:c2:a1:19:6f:ce:7d: 56:ee:07:54:e0:24:20:55:7b:60:e1:eb:a1:75:d5: 54:ea:b7:32:80:f4:cb:e7:e0:35:71:01:3a:3c:02: 55:c3:c2:58:95:17:8e:c5:66:b6:e4:5e:4b:76:f0: 59:8a:80:5d:17:d0:e6:9b:28:12:93:05:58:56:d1: d3:16:3c:01:0d:04:82:b0:a7:67:c6:8f:c2:82:ad: 0d:af:9c:8d:9e:78:6e:de:e5:56:42:a3:3b:ec:9b: 28:05:9e:e0:ee:ca:9c:e6:9d:10:89:da:f0:00:32: cb:17:1a:17:a6:b7:7c:b4:33:81:1b:41:5f:3f:69: 7c:ca:e3:14:61:53:6f:5f:c6:18:52:3a:ea:67:42: a0:26:9b:f0:f4:0d:f7:d9:6d:3c:a9:e1:d0:61:7b: bb:9b:be:2f:e8:68:7e:70:bf:76:a0:45:5b:2a:9e: c0:ce:38:ec:86:53:fc:c1:a5:f7:d3:a2:f1:6f:5c: 16:aa:18:4f:81:6c:b9:b0:07:a4:18:d5:7e:47:7a: e6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C8:2A:2A:84:A5:21:33:58:1B:C8:11:24:B5:1E:60:B2:49:08:FD X509v3 Authority Key Identifier: keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/F6FAB490BB5811EF8C37CB81C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 1.0.197.0/24 1.10.135.0/24 101.51.0.0-101.51.23.255 101.51.64.0/22 101.51.152.0/21 101.51.176.0/21 101.108.48.0/21 113.53.1.0/24 113.53.64.0/20 118.172.153.0/24 125.27.24.0/21 125.27.192.0/21 125.27.208.0/20 125.27.240.0/22 182.52.160.0/20 182.52.230.0/24 Signature Algorithm: sha256WithRSAEncryption 10:fd:63:2c:05:f3:35:3a:f7:d2:31:0f:c2:02:19:60:70:f1: f5:09:33:a7:ba:80:43:6d:24:a0:39:11:f3:ec:84:e1:41:4c: 52:22:f5:1c:68:fa:a2:40:32:5e:f6:f7:97:9e:a5:40:12:65: 9d:92:5d:63:d2:b1:1d:67:26:77:b3:f7:8b:ef:4a:e2:91:54: 24:4f:7c:56:da:c7:a3:f4:5a:5e:72:47:c5:96:89:b2:97:81: d4:6a:7d:ef:80:b7:7a:ca:aa:d4:ca:8f:e0:2d:fc:a8:9d:eb: 3c:35:ec:94:20:61:50:83:28:7f:0a:a3:97:65:1c:05:8a:ba: 7b:27:d4:38:80:3b:0d:e2:18:cd:83:64:31:b2:a8:b0:13:06: 0e:53:56:19:f9:53:1d:d4:f5:c7:bd:73:cc:21:52:a0:4b:af: d2:6e:87:06:35:63:12:78:bd:9a:5a:ff:70:af:c0:3a:1b:2c: 56:08:58:28:a1:ab:d3:5e:60:58:33:38:b9:94:04:a8:70:b7: 2d:8a:4a:9b:3d:c6:0c:77:d3:04:24:2c:6c:e3:29:34:8a:81: 9c:3c:ec:58:e8:b8:fd:42:6c:4c:36:52:b9:3d:30:72:60:d0: 7a:2b:35:f2:c3:26:4d:fd:d1:d6:c3:4f:38:81:6f:11:66:2c: 0e:8e:6f:13 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgICNp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y0RkUxMTAvBgNVBAUTKDE2QjU2NEI3NThERkNENTJDNUNFODkxMTkyRTMxQjcx NUIxQ0JGRTgwHhcNMjYwODMwMTUxNDUzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk0NDhlZC03NzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm746JdRKKBQ+JPQgoZYdyDGZg4ildDGWzsse5Dj2xBfuJBbTvT4DB5tFTKIE /AzC9i0WlE7CoRlvzn1W7gdU4CQgVXtg4euhddVU6rcygPTL5+A1cQE6PAJVw8JY lReOxWa25F5LdvBZioBdF9DmmygSkwVYVtHTFjwBDQSCsKdnxo/Cgq0Nr5yNnnhu 3uVWQqM77JsoBZ7g7sqc5p0QidrwADLLFxoXprd8tDOBG0FfP2l8yuMUYVNvX8YY UjrqZ0KgJpvw9A332W08qeHQYXu7m74v6Gh+cL92oEVbKp7AzjjshlP8waX306Lx b1wWqhhPgWy5sAekGNV+R3rmwwIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFD/IKiqE pSEzWBvIESS1HmCySQj9MB8GA1UdIwQYMBaAFBa1ZLdY381Sxc6JEZLjG3FbHL/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjRGRS9CQTEzMTI0RTFE ODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpWTEZ6b2tSa3VNYmNWc2N2 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyVmt0MWpmelZMRnpva1JrdU1iY1ZzY3YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0Y0RkUvQkExMzEyNEUxRDg1MTFFMkE3Nzk5OURDMDhCMDJDRDIvRjZGQUI0OTBC QjU4MTFFRjhDMzdDQjgxQzRGOUFFMDIucm9hMIGABggrBgEFBQcBBwEB/wRxMG8w bQQCAAEwZwMEAAEAxQMEAAEKhzALAwMAZTMDBANlMxADBAJlM0ADBANlM5gDBANl M7ADBANlbDADBABxNQEDBARxNUADBAB2rJkDBAN9GxgDBAN9G8ADBAR9G9ADBAJ9 G/ADBAS2NKADBAC2NOYwDQYJKoZIhvcNAQELBQADggEBABD9YywF8zU699IxD8IC GWBw8fUJM6e6gENtJKA5EfPshOFBTFIi9Rxo+qJAMl7295eepUASZZ2SXWPSsR1n Jnez94vvSuKRVCRPfFbax6P0Wl5yR8WWibKXgdRqfe+At3rKqtTKj+At/Kid6zw1 7JQgYVCDKH8Ko5dlHAWKunsn1DiAOw3iGM2DZDGyqLATBg5TVhn5Ux3U9ce9c8wh UqBLr9JuhwY1YxJ4vZpa/3CvwDobLFYIWCihq9NeYFgzOLmUBKhwty2KSps9xgx3 0wQkLGzjKTSKgZw87FjouP1CbEw2Urk9MHJg0HorNfLDJk390dbDTziBbxFmLA6O bxM= -----END CERTIFICATE-----Generated at Sat Sep 19 09:28:18 2026 by rpki-client