$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/43AB9FC641A311ECA73C8C0EC4F9AE02.roa File: 43AB9FC641A311ECA73C8C0EC4F9AE02.roa (raw, json) Hash identifier: oBgfP54aD9HhUPqc1HdORpbeKAMDVILuaJ39uAIvlZw= Subject key identifier: A1:59:87:15:8E:61:34:0B:AC:C1:F9:3A:1A:89:98:C9:CE:9D:51:33 Certificate issuer: /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Certificate serial: 0674 Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/43AB9FC641A311ECA73C8C0EC4F9AE02.roa Signing time: Thu 08 Oct 2026 16:29:33 +0000 ROA not before: Thu 08 Oct 2026 16:29:33 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 16509 IP address blocks: 213.170.156.0/24 maxlen: 24 213.170.157.0/24 maxlen: 24 213.170.158.0/24 maxlen: 24 213.170.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 16:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1652 (0x674) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Validity Not Before: Oct 8 16:29:33 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ac7c4ed-510b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bf:77:e1:a8:fc:c3:f3:b7:81:53:5a:db:fb: 84:20:30:3a:4e:df:a5:05:c5:71:38:4e:6d:32:2c: a9:6a:4f:fb:73:7a:e9:18:2b:da:83:e8:f8:08:bb: 89:f2:11:1c:86:40:47:02:31:31:e7:14:fa:28:d5: 77:a7:0c:d1:f2:37:10:cb:72:e5:7a:fd:db:a9:65: 23:6c:6b:75:8a:f3:49:ac:f2:03:fa:1f:17:b7:b0: 05:9f:1c:f1:52:59:ef:67:44:da:0c:f8:cf:1e:3b: a3:0a:6d:d4:a7:e6:97:e5:03:15:bc:c9:c2:c0:f1: 39:7b:bb:4f:92:ef:d7:41:b6:51:7a:73:5f:98:f3: bc:d5:6b:89:43:00:f2:40:e5:39:ba:f9:01:81:32: 77:09:e9:e1:43:7b:ee:77:4c:7e:c2:6e:bf:b2:08: 07:67:70:18:17:cc:aa:ec:48:5f:42:87:a7:45:d3: 9f:28:b5:82:c5:58:18:92:3d:a2:23:54:3c:4f:ca: 7d:8c:8b:e9:1a:f4:c0:69:32:b6:e6:f6:53:2e:83: 6d:a8:02:b8:d4:f1:fa:c0:e6:a5:65:b7:21:41:4b: b4:2a:8d:00:c2:75:a5:c2:da:04:ad:c6:e4:9d:4b: 7b:6b:cd:d4:a7:2b:05:1e:64:b0:32:cd:55:52:84: 10:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:59:87:15:8E:61:34:0B:AC:C1:F9:3A:1A:89:98:C9:CE:9D:51:33 X509v3 Authority Key Identifier: keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/43AB9FC641A311ECA73C8C0EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 213.170.156.0/22 Signature Algorithm: sha256WithRSAEncryption ab:26:8d:0c:a7:1d:93:60:e1:89:32:03:45:44:a7:f4:3c:ee: c1:a0:a6:53:83:d9:b4:62:d9:85:96:ae:38:4a:5c:b0:52:5e: 81:e2:7d:99:ed:c4:99:2f:3d:22:9b:89:60:ba:39:a0:3e:ca: ae:b1:f8:88:7d:48:1a:1b:29:1a:61:20:fc:ea:eb:e4:f1:92: 1a:d1:c0:3c:dc:10:11:8f:a7:dc:a6:6b:6b:bb:50:6d:d2:6e: 19:48:ea:aa:e7:bb:9d:f9:c0:bc:4d:ff:8f:10:ad:57:7f:48: 38:c0:13:10:1b:6b:3a:66:28:fc:58:67:92:e0:09:76:9d:3b: a9:6b:41:71:38:e3:4e:31:a0:7d:f0:1c:87:7d:85:8c:39:ee: 64:a4:0e:67:23:08:9c:e3:00:5c:e0:92:1c:6d:88:4e:82:3b: b7:44:87:e6:f4:c7:d4:b9:cf:23:90:b7:85:95:61:06:b6:60: da:3c:35:06:f5:46:6a:8c:f7:ab:12:cd:ed:b7:55:0c:70:f3: 0a:61:9c:82:0b:5a:b7:e5:36:e4:f4:2c:58:f3:af:42:db:df: a8:58:bf:ed:3c:90:8a:01:71:2d:c4:92:27:28:14:f2:23:30: 28:da:4f:e0:f0:89:35:fc:a5:c1:6a:b4:ed:e9:d0:a6:25:41: 30:13:f9:59 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKEFEQjk4OTc4RkQ3NTFGOTlEOUE4RUIyQUU3MkQzQzBD NTUwNDUzQTQwHhcNMjYxMDA4MTYyOTMzWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWM3YzRlZC01MTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnr934aj8w/O3gVNa2/uEIDA6Tt+lBcVxOE5tMiypak/7c3rpGCvag+j4CLuJ 8hEchkBHAjEx5xT6KNV3pwzR8jcQy3Llev3bqWUjbGt1ivNJrPID+h8Xt7AFnxzx UlnvZ0TaDPjPHjujCm3Up+aX5QMVvMnCwPE5e7tPku/XQbZRenNfmPO81WuJQwDy QOU5uvkBgTJ3CenhQ3vud0x+wm6/sggHZ3AYF8yq7EhfQoenRdOfKLWCxVgYkj2i I1Q8T8p9jIvpGvTAaTK25vZTLoNtqAK41PH6wOalZbchQUu0Ko0AwnWlwtoErcbk nUt7a83UpysFHmSwMs1VUoQQmQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKFZhxWO YTQLrMH5OhqJmMnOnVEzMB8GA1UdIwQYMBaAFK25iXj9dR+Z2ajrKuctPAxVBFOk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS9FQUM3RUVBMDEx MkQxMUVDOEQ4NzA1N0RDNEY5QUUwMi9yYm1KZVAxMUg1blpxT3NxNXkwOERGVUVV NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3JibUplUDExSDVuWnFPc3E1eTA4REZVRVU2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RENEMDkvRUFDN0VFQTAxMTJEMTFFQzhEODcwNTdEQzRGOUFFMDIvNDNBQjlGQzY0 MUEzMTFFQ0E3M0M4QzBFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQC1aqcMA0GCSqGSIb3DQEBCwUAA4IBAQCrJo0Mpx2TYOGJMgNFRKf0 PO7BoKZTg9m0YtmFlq44SlywUl6B4n2Z7cSZLz0im4lgujmgPsqusfiIfUgaGyka YSD86uvk8ZIa0cA83BARj6fcpmtru1Bt0m4ZSOqq57ud+cC8Tf+PEK1Xf0g4wBMQ G2s6Zij8WGeS4Al2nTupa0FxOONOMaB98ByHfYWMOe5kpA5nIwic4wBc4JIcbYhO gju3RIfm9MfUuc8jkLeFlWEGtmDaPDUG9UZqjPerEs3tt1UMcPMKYZyCC1q35Tbk 9CxY869C29+oWL/tPJCKAXEtxJInKBTyIzAo2k/g8Ik1/KXBarTt6dCmJUEwE/lZ -----END CERTIFICATE-----Generated at Thu Oct 22 17:39:37 2026 by rpki-client