$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/CE99A9F2D33811EDAAE97C1BC4F9AE02.roa File: CE99A9F2D33811EDAAE97C1BC4F9AE02.roa (raw, json) Hash identifier: dd7meKv/ADGBb06PlyVAgXVbEhoDrwm3znm6AoIx0pY= Subject key identifier: 67:2E:18:1F:5C:4F:D5:ED:F5:2C:6B:61:15:9F:27:B7:63:3F:E4:E3 Certificate issuer: /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Certificate serial: 0673 Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/CE99A9F2D33811EDAAE97C1BC4F9AE02.roa Signing time: Thu 08 Oct 2026 16:29:30 +0000 ROA not before: Thu 08 Oct 2026 16:29:30 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 14618 IP address blocks: 213.170.156.0/24 maxlen: 24 213.170.157.0/24 maxlen: 24 213.170.158.0/24 maxlen: 24 213.170.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 16:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1651 (0x673) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Validity Not Before: Oct 8 16:29:30 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ac7c4ea-babd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:aa:75:98:48:fc:56:ef:da:7e:ae:98:d0:7d: fa:97:fd:a0:cf:bd:18:70:36:02:60:31:d6:c1:5d: d9:52:77:1d:a0:28:75:f2:3d:68:9a:4f:c1:dc:44: 3c:f2:01:17:67:38:3f:a3:b3:ba:73:bf:f3:59:94: 6b:93:2f:e7:0f:a1:28:a0:21:6e:2c:e6:79:a5:27: e9:4c:62:ae:37:bd:04:d4:64:34:7c:03:a6:e6:20: 9b:1f:f5:85:d5:2c:34:91:6c:97:69:3c:88:e1:a3: 7d:e8:fc:af:ae:ac:04:98:7c:11:9e:a2:c8:88:e4: dd:9b:b8:d4:45:76:c7:17:bc:5c:a7:bf:ba:79:1c: 25:1a:4d:dc:fe:19:2d:9b:8d:19:07:13:84:ad:a1: 8d:21:5b:61:32:90:bd:a2:15:73:8a:a2:45:06:5c: 3e:c8:65:51:cb:d4:7b:79:eb:97:e6:48:6c:3b:40: 29:89:cd:52:98:a3:c9:a1:27:51:41:1d:1f:8b:c2: ac:1a:86:44:a0:18:17:e2:37:a6:de:e2:3f:8d:d2: cf:e4:ba:42:56:e0:ec:c8:e4:7f:7c:26:8a:a0:2a: 4a:16:47:04:dd:96:86:3e:dd:95:75:b3:b8:fd:3e: 6b:71:99:50:69:ba:1b:d6:8e:d7:9e:01:00:1a:76: b5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2E:18:1F:5C:4F:D5:ED:F5:2C:6B:61:15:9F:27:B7:63:3F:E4:E3 X509v3 Authority Key Identifier: keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/CE99A9F2D33811EDAAE97C1BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 213.170.156.0/22 Signature Algorithm: sha256WithRSAEncryption c0:fa:28:75:16:38:bc:ce:63:05:98:2a:ff:ee:69:d6:a2:c5: 84:e7:b5:2a:a0:5c:9c:0e:df:a7:4f:96:48:04:6d:81:43:f3: ff:8e:10:4a:00:03:6c:80:24:a2:c4:04:ef:e5:1f:12:b8:a8: b2:62:08:2e:13:2e:e2:ee:60:9b:18:54:b8:1a:69:4d:5c:06: 19:51:e5:07:ba:85:bb:bb:d9:28:31:20:44:63:39:01:bf:b0: 32:6c:f6:dc:dd:af:e1:a8:a1:d8:2c:9d:ec:53:0a:a1:51:c6: a2:b2:6a:88:4d:73:13:d3:b9:0e:9a:d5:94:4d:28:96:cd:11: 57:21:48:bf:ad:29:5c:25:00:64:5c:05:ae:c2:c3:fa:f9:9f: a7:d1:41:fd:4e:be:08:f0:10:10:63:f7:3c:54:06:79:61:b6: 72:29:e7:09:39:f4:04:88:82:e3:d5:8d:bb:89:f6:a8:40:46: 01:6d:00:e9:54:e4:fb:d7:db:0a:b3:f4:56:9b:ce:fc:90:c9: 72:4a:c3:a4:ee:42:8e:2e:35:c6:80:5f:31:6e:ef:c7:c8:67: 19:82:b6:c0:3e:88:47:b9:b0:27:b0:84:95:69:95:92:70:14: ae:60:a5:cd:1e:be:84:d6:2c:c3:57:6e:48:52:bd:15:4f:3f: 4c:c7:0f:4b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKEFEQjk4OTc4RkQ3NTFGOTlEOUE4RUIyQUU3MkQzQzBD NTUwNDUzQTQwHhcNMjYxMDA4MTYyOTMwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWM3YzRlYS1iYWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiqp1mEj8Vu/afq6Y0H36l/2gz70YcDYCYDHWwV3ZUncdoCh18j1omk/B3EQ8 8gEXZzg/o7O6c7/zWZRrky/nD6EooCFuLOZ5pSfpTGKuN70E1GQ0fAOm5iCbH/WF 1Sw0kWyXaTyI4aN96PyvrqwEmHwRnqLIiOTdm7jURXbHF7xcp7+6eRwlGk3c/hkt m40ZBxOEraGNIVthMpC9ohVziqJFBlw+yGVRy9R7eeuX5khsO0Apic1SmKPJoSdR QR0fi8KsGoZEoBgX4jem3uI/jdLP5LpCVuDsyOR/fCaKoCpKFkcE3ZaGPt2VdbO4 /T5rcZlQabob1o7XngEAGna16wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGcuGB9c T9Xt9SxrYRWfJ7djP+TjMB8GA1UdIwQYMBaAFK25iXj9dR+Z2ajrKuctPAxVBFOk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS9FQUM3RUVBMDEx MkQxMUVDOEQ4NzA1N0RDNEY5QUUwMi9yYm1KZVAxMUg1blpxT3NxNXkwOERGVUVV NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3JibUplUDExSDVuWnFPc3E1eTA4REZVRVU2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RENEMDkvRUFDN0VFQTAxMTJEMTFFQzhEODcwNTdEQzRGOUFFMDIvQ0U5OUE5RjJE MzM4MTFFREFBRTk3QzFCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQC1aqcMA0GCSqGSIb3DQEBCwUAA4IBAQDA+ih1Fji8zmMFmCr/7mnW osWE57UqoFycDt+nT5ZIBG2BQ/P/jhBKAANsgCSixATv5R8SuKiyYgguEy7i7mCb GFS4GmlNXAYZUeUHuoW7u9koMSBEYzkBv7AybPbc3a/hqKHYLJ3sUwqhUcaismqI TXMT07kOmtWUTSiWzRFXIUi/rSlcJQBkXAWuwsP6+Z+n0UH9Tr4I8BAQY/c8VAZ5 YbZyKecJOfQEiILj1Y27ifaoQEYBbQDpVOT719sKs/RWm878kMlySsOk7kKOLjXG gF8xbu/HyGcZgrbAPohHubAnsISVaZWScBSuYKXNHr6E1izDV25IUr0VTz9Mxw9L -----END CERTIFICATE-----Generated at Sat Oct 24 10:10:44 2026 by rpki-client