$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D647B/5E98C650B0C111F1952BC1816811F970/8498DE98B0C211F18244069E6811F970.roa File: 8498DE98B0C211F18244069E6811F970.roa (raw, json) Hash identifier: lPsiELhqwRzeL8uTV1pZyDDd+w4t+qrBvLie84QZhfI= Subject key identifier: A3:9E:EF:4B:06:E4:E4:F3:86:AD:2A:C1:04:15:4A:A0:19:39:23:4F Certificate issuer: /CN=A91D647B/serialNumber=FEB6D638ECA3D980FD3E98020A25849F36FE4D37 Certificate serial: 02 Authority key identifier: FE:B6:D6:38:EC:A3:D9:80:FD:3E:98:02:0A:25:84:9F:36:FE:4D:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rbWOOyj2YD9PpgCCiWEnzb-TTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D647B/5E98C650B0C111F1952BC1816811F970/8498DE98B0C211F18244069E6811F970.roa Signing time: Tue 15 Sep 2026 05:01:32 +0000 ROA not before: Tue 15 Sep 2026 05:01:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 152670 IP address blocks: 163.223.218.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D647B/5E98C650B0C111F1952BC1816811F970/_rbWOOyj2YD9PpgCCiWEnzb-TTc.crl rsync://rpki.apnic.net/member_repository/A91D647B/5E98C650B0C111F1952BC1816811F970/_rbWOOyj2YD9PpgCCiWEnzb-TTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rbWOOyj2YD9PpgCCiWEnzb-TTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 09:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D647B, serialNumber=FEB6D638ECA3D980FD3E98020A25849F36FE4D37 Validity Not Before: Sep 15 05:01:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6aa8d12c-e65e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:12:e6:22:04:8a:54:04:a9:42:e4:22:31:b6: ac:d6:c2:4b:17:d8:5c:6d:d1:4c:cf:81:ef:87:01: fa:78:1d:79:8e:a2:db:2d:98:c1:9f:be:16:fa:84: cd:91:24:af:1b:17:0d:5e:0e:93:5e:35:31:55:02: 76:01:59:57:b7:7d:d4:df:1f:ff:ba:89:9c:ab:15: 09:9c:81:53:9f:f3:ef:67:58:d8:2b:12:a1:ae:2c: 93:b9:d4:3e:10:d9:63:4a:90:89:37:b1:b5:58:0b: ad:d2:08:d3:f4:98:db:58:b2:8c:67:d8:62:34:73: 17:3e:41:5f:cd:0e:a3:d4:13:32:fa:3d:4b:be:b4: e8:78:71:aa:21:46:dd:a0:ce:38:98:c7:9c:b1:9e: fd:97:5f:4d:20:77:ba:29:80:11:2a:4d:21:97:6e: cd:09:53:b8:13:8e:4d:c7:b7:36:eb:e8:4a:4c:ec: 15:2d:e4:b1:5f:26:56:d9:ea:5f:ce:ae:58:bb:40: 39:da:a9:90:11:5b:05:90:61:45:71:63:ea:aa:8b: fe:79:13:af:e8:1a:4d:bb:16:10:92:46:ab:69:60: 26:e4:d7:e2:b9:f3:d3:62:8d:27:fe:17:f9:e5:5c: 19:05:50:ab:fc:f4:99:c4:32:42:a4:c7:45:23:c5: 60:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9E:EF:4B:06:E4:E4:F3:86:AD:2A:C1:04:15:4A:A0:19:39:23:4F X509v3 Authority Key Identifier: keyid:FE:B6:D6:38:EC:A3:D9:80:FD:3E:98:02:0A:25:84:9F:36:FE:4D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D647B/5E98C650B0C111F1952BC1816811F970/_rbWOOyj2YD9PpgCCiWEnzb-TTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rbWOOyj2YD9PpgCCiWEnzb-TTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D647B/5E98C650B0C111F1952BC1816811F970/8498DE98B0C211F18244069E6811F970.roa sbgp-ipAddrBlock: critical IPv4: 163.223.218.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:ff:71:f9:12:ef:47:d1:39:9e:f7:23:06:9e:40:66:00:81: fe:0a:d3:94:1c:d1:64:45:8e:e2:82:e8:8f:fb:d8:3d:0d:ab: 41:f7:a0:4f:7c:92:da:01:1a:65:17:e6:03:2c:f3:9e:81:64: 0f:2c:90:c8:20:88:97:6c:c9:f6:66:68:4f:de:0c:61:e8:54: e2:db:b5:69:73:e7:f1:2d:10:09:2e:0d:da:ec:57:36:19:52: 15:77:d9:c4:0b:fd:e0:fe:fc:ae:5d:7a:2d:63:f2:eb:90:ad: a1:5d:58:fb:e7:2a:6c:61:24:ea:51:9d:db:b4:9e:6b:66:fa: 08:ab:95:77:57:6b:6d:01:66:ed:4a:82:06:c3:7b:e7:fe:fe: 7c:e6:bc:84:6e:3f:9e:6c:4c:06:38:b0:b1:3c:d9:51:ee:5a: 06:b0:a7:b7:ee:12:a8:54:38:0d:6d:a3:0d:02:7f:dc:08:3b: ce:77:77:52:51:c8:87:0c:02:9a:36:8d:c2:d0:ec:74:ee:ea: d8:7b:32:d5:72:3c:2e:a9:3e:f2:55:4f:62:9c:a3:6e:6b:09: db:99:ea:4d:4e:41:27:d2:e3:d7:c2:da:ff:b0:99:8f:5b:f6: fd:0f:3c:bd:cd:d3:ff:71:5c:de:58:df:2b:41:c3:bb:04:08: f8:64:6b:8c -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NjQ3QjExMC8GA1UEBRMoRkVCNkQ2MzhFQ0EzRDk4MEZEM0U5ODAyMEEyNTg0OUYz NkZFNEQzNzAeFw0yNjA5MTUwNTAxMzJaFw0yNzA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYThkMTJjLWU2NWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsEuYiBIpUBKlC5CIxtqzWwksX2Fxt0UzPge+HAfp4HXmOotstmMGfvhb6hM2R JK8bFw1eDpNeNTFVAnYBWVe3fdTfH/+6iZyrFQmcgVOf8+9nWNgrEqGuLJO51D4Q 2WNKkIk3sbVYC63SCNP0mNtYsoxn2GI0cxc+QV/NDqPUEzL6PUu+tOh4caohRt2g zjiYx5yxnv2XX00gd7opgBEqTSGXbs0JU7gTjk3Htzbr6EpM7BUt5LFfJlbZ6l/O rli7QDnaqZARWwWQYUVxY+qqi/55E6/oGk27FhCSRqtpYCbk1+K589NijSf+F/nl XBkFUKv89JnEMkKkx0UjxWANAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUo57vSwbk 5POGrSrBBBVKoBk5I08wHwYDVR0jBBgwFoAU/rbWOOyj2YD9PpgCCiWEnzb+TTcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2NDdCLzVFOThDNjUwQjBD MTExRjE5NTJCQzE4MTY4MTFGOTcwL19yYldPT3lqMllEOVBwZ0NDaVdFbnpiLVRU Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX3JiV09PeWoyWUQ5UHBnQ0NpV0VuemItVFRjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjQ3Qi81RTk4QzY1MEIwQzExMUYxOTUyQkMxODE2ODExRjk3MC84NDk4REU5OEIw QzIxMUYxODI0NDA2OUU2ODExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGj39owDQYJKoZIhvcNAQELBQADggEBAC3/cfkS70fROZ73IwaeQGYA gf4K05Qc0WRFjuKC6I/72D0Nq0H3oE98ktoBGmUX5gMs856BZA8skMggiJdsyfZm aE/eDGHoVOLbtWlz5/EtEAkuDdrsVzYZUhV32cQL/eD+/K5dei1j8uuQraFdWPvn KmxhJOpRndu0nmtm+girlXdXa20BZu1KggbDe+f+/nzmvIRuP55sTAY4sLE82VHu Wgawp7fuEqhUOA1tow0Cf9wIO853d1JRyIcMApo2jcLQ7HTu6th7MtVyPC6pPvJV T2Kco25rCduZ6k1OQSfS49fC2v+wmY9b9v0PPL3N0/9xXN5Y3ytBw7sECPhka4w= -----END CERTIFICATE-----Generated at Wed Oct 7 06:09:25 2026 by rpki-client