$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/A8ED74B2677F11F0A8B65370C4F9AE02.roa File: A8ED74B2677F11F0A8B65370C4F9AE02.roa (raw, json) Hash identifier: +Ess6UwDczJQfPwe7MZtIEzK7JKUQbyZj8nSvdtJAM8= Subject key identifier: C6:3A:86:2E:73:5F:99:37:E6:A4:6B:A7:8B:FF:F1:5C:A2:50:39:BC Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Certificate serial: 2789 Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/A8ED74B2677F11F0A8B65370C4F9AE02.roa Signing time: Mon 28 Sep 2026 16:23:33 +0000 ROA not before: Mon 28 Sep 2026 16:23:33 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 7470 IP address blocks: 111.84.0.0/16 maxlen: 24 115.67.0.0/16 maxlen: 24 2404:8d00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 15:44:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10121 (0x2789) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1136, serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Validity Not Before: Sep 28 16:23:33 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aba9485-572c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:54:85:79:63:2f:ab:bd:00:c8:73:28:5b:f4: 82:e1:aa:31:39:3c:d7:6a:be:e6:1c:6f:0a:51:a6: 21:6d:92:03:d9:12:a7:4b:29:2b:1a:91:d3:d4:64: 5e:63:03:62:70:43:be:0f:d3:02:d5:a3:e7:03:e9: a5:82:23:c1:02:7d:0e:99:55:00:63:f0:8b:83:ed: 1a:2b:9d:0f:c7:db:59:1d:7f:d7:62:bb:b0:b6:cb: 94:cd:a7:b0:59:70:bb:99:a0:2f:b4:bf:ae:47:da: 7a:f5:6a:f5:64:e9:dd:46:69:06:55:f1:5e:4f:07: 8a:26:76:c8:77:a9:31:3d:ed:e1:e6:77:51:2a:5c: 71:7b:7e:25:20:1a:31:48:a4:b3:af:53:23:17:aa: 7a:1a:2d:48:82:d0:de:6f:06:23:78:d7:48:f9:b4: 61:06:af:73:5d:9a:c2:f0:c1:5e:95:b9:e6:7a:a5: db:db:1d:5e:1e:6d:25:08:6d:64:02:57:b9:f9:be: 73:5c:2a:42:a5:73:57:1e:fd:86:d4:40:f2:46:6c: 1f:7b:65:8c:e8:40:fa:62:c2:a6:d2:7a:9c:17:c7: 4a:26:f0:07:ec:7b:8b:84:ff:11:96:ac:9c:91:53: 9d:65:0d:5a:74:c4:a7:ab:92:76:93:87:38:1a:99: 0b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3A:86:2E:73:5F:99:37:E6:A4:6B:A7:8B:FF:F1:5C:A2:50:39:BC X509v3 Authority Key Identifier: keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/A8ED74B2677F11F0A8B65370C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 111.84.0.0/16 115.67.0.0/16 IPv6: 2404:8d00::/29 Signature Algorithm: sha256WithRSAEncryption 4f:eb:36:41:51:cb:2d:69:e0:57:49:4f:18:61:fc:90:0e:6e: d3:3c:48:c7:75:1d:cd:fb:7f:99:97:00:b8:70:03:4a:95:7d: 7c:6e:26:d6:c8:31:14:9d:43:0c:70:a6:81:71:2c:2f:03:5e: 40:b3:ae:29:a6:0d:05:21:1d:12:61:30:fb:b1:16:34:2c:a2: 1c:af:0e:31:97:42:d1:c2:ba:15:16:c3:86:7f:38:25:d3:c7: a9:10:fe:1f:2d:b7:bf:a3:3b:50:61:49:e0:ad:2c:96:ce:e9: 6a:1c:d2:3e:92:c3:7f:11:1e:88:2f:09:84:e1:b5:d7:8d:56: 88:11:18:20:ce:03:e5:fb:11:aa:1f:35:ce:c6:bb:9b:51:e9: d1:a7:fc:77:0a:a6:c3:43:ff:d4:ae:de:4e:8a:7f:7c:12:b6: d5:ca:5f:76:fe:03:b7:59:af:54:11:6e:13:ce:bc:66:fb:98: c1:ae:24:ce:d7:bd:e5:d9:1a:3a:30:6f:1b:45:c7:68:60:1d: 4e:b0:79:33:7a:a5:f9:36:8a:6f:7b:a4:6a:75:24:79:18:47: 8e:8b:ce:3a:87:e7:3c:7f:e0:4c:14:0b:2c:00:58:fa:de:10: fd:9a:a5:1d:61:0f:0c:0e:30:b7:82:70:d7:27:21:95:a4:14: 8b:ef:94:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJ4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMzYxMTAvBgNVBAUTKEI3QjczRTg5QjYyMTA4MTYwOUNENjg5QUIwQUVGN0ZB RjE0ODkyNkMwHhcNMjYwOTI4MTYyMzMzWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJhOTQ4NS01NzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlSFeWMvq70AyHMoW/SC4aoxOTzXar7mHG8KUaYhbZID2RKnSykrGpHT1GRe YwNicEO+D9MC1aPnA+mlgiPBAn0OmVUAY/CLg+0aK50Px9tZHX/XYruwtsuUzaew WXC7maAvtL+uR9p69Wr1ZOndRmkGVfFeTweKJnbId6kxPe3h5ndRKlxxe34lIBox SKSzr1MjF6p6Gi1IgtDebwYjeNdI+bRhBq9zXZrC8MFelbnmeqXb2x1eHm0lCG1k Ale5+b5zXCpCpXNXHv2G1EDyRmwfe2WM6ED6YsKm0nqcF8dKJvAH7HuLhP8Rlqyc kVOdZQ1adMSnq5J2k4c4GpkLwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMY6hi5z X5k35qRrp4v/8VyiUDm8MB8GA1UdIwQYMBaAFLe3Pom2IQgWCc1omrCu9/rxSJJs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEzNi9DRjMyODFDODIx NUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENCWUp6V2lhc0s3My12Rklr bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q3Yy1pYlloQ0JZSnpXaWFzSzczLXZGSWttdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDExMzYvQ0YzMjgxQzgyMTVCMTFFNUE3QkY4OTBFQzRGOUFFMDIvQThFRDc0QjI2 NzdGMTFGMEE4QjY1MzcwQzRGOUFFMDIucm9hMDIGCCsGAQUFBwEHAQH/BCMwITAQ BAIAATAKAwMAb1QDAwBzQzANBAIAAjAHAwUDJASNADANBgkqhkiG9w0BAQsFAAOC AQEAT+s2QVHLLWngV0lPGGH8kA5u0zxIx3Udzft/mZcAuHADSpV9fG4m1sgxFJ1D DHCmgXEsLwNeQLOuKaYNBSEdEmEw+7EWNCyiHK8OMZdC0cK6FRbDhn84JdPHqRD+ Hy23v6M7UGFJ4K0sls7pahzSPpLDfxEeiC8JhOG1141WiBEYIM4D5fsRqh81zsa7 m1Hp0af8dwqmw0P/1K7eTop/fBK21cpfdv4Dt1mvVBFuE868ZvuYwa4kzte95dka OjBvG0XHaGAdTrB5M3ql+TaKb3ukanUkeRhHjovOOofnPH/gTBQLLABY+t4Q/Zql HWEPDA4wt4Jw1ychlaQUi++UUw== -----END CERTIFICATE-----Generated at Tue Oct 13 22:47:38 2026 by rpki-client