$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/0ECA9B023D9F11EC9EC18739C4F9AE02.roa File: 0ECA9B023D9F11EC9EC18739C4F9AE02.roa (raw, json) Hash identifier: +cyf1mDAGTd2aVKxKqf7EL/GchLjgK78hZeJAK5X08U= Subject key identifier: 92:43:61:26:42:4E:BB:54:F6:57:BD:BD:9B:EA:4E:31:83:30:3A:6F Certificate issuer: /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Certificate serial: 0672 Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/0ECA9B023D9F11EC9EC18739C4F9AE02.roa Signing time: Thu 08 Oct 2026 16:29:28 +0000 ROA not before: Thu 08 Oct 2026 16:29:28 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 134433 IP address blocks: 213.170.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 16:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1650 (0x672) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Validity Not Before: Oct 8 16:29:28 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ac7c4e8-dccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d5:97:3d:10:36:d2:67:d6:0c:c9:98:7b:8e: ac:5b:a5:d1:e1:32:e3:8c:ec:36:82:e1:e3:73:b5: a2:72:7b:e6:0e:1b:4e:d3:ce:e7:f2:4d:9a:c4:02: 2a:ab:f1:62:a6:ee:4a:da:f2:ae:62:8e:d8:ee:09: fd:64:a0:ab:c1:cb:f5:1f:7b:50:73:60:2a:9b:a6: 21:68:53:af:07:6c:b3:7b:3f:ee:ce:9d:80:ac:f7: 2e:fb:f1:2e:00:4c:cc:a6:69:cb:7c:af:49:e0:31: 3b:67:9c:50:89:8d:d9:1d:3e:0c:d9:5c:3c:53:85: 05:55:78:3c:50:e4:4b:0a:c1:18:05:a9:b3:e4:3e: 6d:e5:d7:cc:6a:fb:f8:52:90:be:ad:52:cc:5e:54: 17:b4:ac:f5:fd:df:6d:ad:d1:89:c1:18:95:67:88: a3:09:ad:4b:80:5e:a3:d0:2b:67:ea:72:03:d1:1c: 4f:c1:8b:e1:3a:ad:e0:52:71:a0:10:61:0a:30:f4: 46:6f:b6:91:f7:f6:3f:95:19:40:d1:49:c0:74:25: 37:c2:d1:23:68:2a:f7:cd:39:51:81:4a:29:69:64: 33:a5:a0:4b:51:fc:f2:bb:56:d2:79:fe:fb:24:ce: 02:01:5c:df:f5:0a:c0:12:2c:90:cc:47:b7:0c:68: be:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:43:61:26:42:4E:BB:54:F6:57:BD:BD:9B:EA:4E:31:83:30:3A:6F X509v3 Authority Key Identifier: keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/0ECA9B023D9F11EC9EC18739C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 213.170.156.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:c5:f3:99:40:0f:85:2d:cc:c8:ef:55:e7:76:08:41:42:80: 19:ed:83:0d:9a:ee:f3:e0:58:f8:d0:15:39:f1:09:4c:b9:da: 1d:21:33:da:d4:32:20:0b:dc:91:08:0f:b3:65:54:f0:dc:67: 93:f9:25:f4:76:1d:2d:e5:06:35:c7:81:70:49:61:ef:d1:34: 4d:cd:b3:3e:a5:3c:e7:aa:c1:af:3a:47:9c:28:79:4e:d1:57: 94:49:ff:e9:85:e8:f1:8a:27:2c:5b:6d:d5:61:c5:13:36:52: 09:e5:7d:5b:39:96:58:77:9e:08:e2:73:0a:09:cc:6c:2a:ff: 9b:e5:81:39:04:36:47:c3:88:72:ff:0c:bc:4a:34:72:bc:56: 5b:27:42:10:3c:39:a7:28:92:fa:8b:92:d7:88:8e:a0:22:f8: e9:5f:f5:e1:92:3f:f8:c5:d2:eb:d2:c8:6e:bb:7e:14:02:a6: 20:ee:67:1d:8f:2a:e4:81:95:e7:a1:02:44:5d:b2:7b:30:72: d4:aa:fa:10:73:dd:ce:2e:c8:02:d7:d6:44:64:65:80:80:95: 69:72:d8:a1:aa:74:07:c3:e9:e4:8b:76:1b:0d:67:35:17:d6: af:19:df:8b:f6:0c:a4:12:d6:a1:83:7b:03:d8:78:45:74:71: c1:fe:fd:b0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKEFEQjk4OTc4RkQ3NTFGOTlEOUE4RUIyQUU3MkQzQzBD NTUwNDUzQTQwHhcNMjYxMDA4MTYyOTI4WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWM3YzRlOC1kY2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAltWXPRA20mfWDMmYe46sW6XR4TLjjOw2guHjc7WicnvmDhtO087n8k2axAIq q/Fipu5K2vKuYo7Y7gn9ZKCrwcv1H3tQc2Aqm6YhaFOvB2yzez/uzp2ArPcu+/Eu AEzMpmnLfK9J4DE7Z5xQiY3ZHT4M2Vw8U4UFVXg8UORLCsEYBamz5D5t5dfMavv4 UpC+rVLMXlQXtKz1/d9trdGJwRiVZ4ijCa1LgF6j0Ctn6nID0RxPwYvhOq3gUnGg EGEKMPRGb7aR9/Y/lRlA0UnAdCU3wtEjaCr3zTlRgUopaWQzpaBLUfzyu1bSef77 JM4CAVzf9QrAEiyQzEe3DGi+xwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJJDYSZC TrtU9le9vZvqTjGDMDpvMB8GA1UdIwQYMBaAFK25iXj9dR+Z2ajrKuctPAxVBFOk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS9FQUM3RUVBMDEx MkQxMUVDOEQ4NzA1N0RDNEY5QUUwMi9yYm1KZVAxMUg1blpxT3NxNXkwOERGVUVV NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3JibUplUDExSDVuWnFPc3E1eTA4REZVRVU2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RENEMDkvRUFDN0VFQTAxMTJEMTFFQzhEODcwNTdEQzRGOUFFMDIvMEVDQTlCMDIz RDlGMTFFQzlFQzE4NzM5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQC1aqcMA0GCSqGSIb3DQEBCwUAA4IBAQAaxfOZQA+FLczI71XndghB QoAZ7YMNmu7z4Fj40BU58QlMudodITPa1DIgC9yRCA+zZVTw3GeT+SX0dh0t5QY1 x4FwSWHv0TRNzbM+pTznqsGvOkecKHlO0VeUSf/phejxiicsW23VYcUTNlIJ5X1b OZZYd54I4nMKCcxsKv+b5YE5BDZHw4hy/wy8SjRyvFZbJ0IQPDmnKJL6i5LXiI6g IvjpX/Xhkj/4xdLr0shuu34UAqYg7mcdjyrkgZXnoQJEXbJ7MHLUqvoQc93OLsgC 19ZEZGWAgJVpctihqnQHw+nki3YbDWc1F9avGd+L9gykEtahg3sD2HhFdHHB/v2w -----END CERTIFICATE-----Generated at Thu Oct 22 08:16:43 2026 by rpki-client