$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/A5E6E422A8E511F0A46A7729C4F9AE02.roa File: A5E6E422A8E511F0A46A7729C4F9AE02.roa (raw, json) Hash identifier: VOEGBBPwOHH7RWSeFdVb+qSkT0fmCuL9yLhrNNsYEBw= Subject key identifier: 71:A4:8E:1F:20:F5:D6:04:52:96:5F:CC:36:BA:AC:F4:FD:E6:BE:0D Certificate issuer: /CN=A91E33AA/serialNumber=574DB3D625DE84202E3AC9C1C3D5B0774D6B78E3 Certificate serial: E8 Authority key identifier: 57:4D:B3:D6:25:DE:84:20:2E:3A:C9:C1:C3:D5:B0:77:4D:6B:78:E3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V02z1iXehCAuOsnBw9Wwd01reOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/A5E6E422A8E511F0A46A7729C4F9AE02.roa Signing time: Thu 03 Sep 2026 06:57:02 +0000 ROA not before: Thu 03 Sep 2026 06:57:02 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 134732 IP address blocks: 165.101.132.0/23 maxlen: 23 165.101.132.0/24 maxlen: 24 165.101.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.crl rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V02z1iXehCAuOsnBw9Wwd01reOM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 06:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E33AA, serialNumber=574DB3D625DE84202E3AC9C1C3D5B0774D6B78E3 Validity Not Before: Sep 3 06:57:02 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a991a3e-1c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:44:9f:15:e8:35:3f:09:28:6f:93:de:e9:a6: a0:ca:9d:16:85:e4:0a:85:dd:32:9c:02:b4:13:79: 7e:00:80:4a:b4:b1:f2:fe:a6:19:6c:06:d0:01:5c: cb:45:9c:98:a1:f3:b6:92:5b:e1:9a:6d:f2:7f:c2: 99:ee:65:94:7e:18:5e:9f:6c:59:79:82:df:79:70: ff:0e:f7:ec:0b:9b:b1:0d:da:85:ee:d4:26:e5:a2: 47:81:3d:c2:b1:72:96:ce:56:ef:7c:2a:b6:fe:16: 73:31:1c:3a:83:cc:62:90:2d:08:c3:e6:f3:2f:c6: 26:fd:92:da:4d:5d:88:0d:6c:01:a6:1d:b6:71:f0: 97:28:a3:4a:74:a1:05:59:94:ea:c1:60:01:f6:fb: cb:e3:13:a0:3a:55:4c:d8:a9:98:a5:77:84:84:43: 6e:fd:8a:b2:9a:5e:61:ce:ba:7a:a5:74:54:b1:f6: 69:a3:e2:9d:9d:a1:f5:67:26:05:e7:2a:f0:e0:e7: 8a:23:17:24:5a:56:bf:c6:4c:2a:59:f9:96:1d:0e: d2:96:f9:4f:ba:88:b9:7d:b0:3a:0b:e5:38:9f:59: 8f:bb:3c:1f:4b:11:99:07:92:30:a6:21:7f:8d:e9: 1c:02:d3:dc:af:11:fd:75:e9:66:ca:e0:1f:88:3b: 81:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A4:8E:1F:20:F5:D6:04:52:96:5F:CC:36:BA:AC:F4:FD:E6:BE:0D X509v3 Authority Key Identifier: keyid:57:4D:B3:D6:25:DE:84:20:2E:3A:C9:C1:C3:D5:B0:77:4D:6B:78:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V02z1iXehCAuOsnBw9Wwd01reOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/A5E6E422A8E511F0A46A7729C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 165.101.132.0/23 Signature Algorithm: sha256WithRSAEncryption 17:1f:71:7c:7c:67:d9:79:ea:5e:fd:27:56:22:e0:68:77:e6: 94:92:b7:57:2e:27:4b:bd:10:36:af:e0:4f:9e:70:b6:08:d2: 3c:ba:4c:be:75:3d:9a:6c:99:9a:71:09:af:5c:93:bf:99:b0: 30:b3:f6:71:b7:2d:4a:40:7a:6b:a0:d1:f3:bd:79:4f:a0:f8: cd:a9:dc:9b:bb:27:b1:66:32:e6:c4:6e:d1:7e:ff:88:2e:4c: cc:21:f4:f6:de:64:6a:fd:2a:00:d9:86:70:b5:b8:df:ce:d9: 2b:eb:a6:0e:9c:b6:2a:83:09:12:49:9f:9f:fe:a1:84:75:03: 4b:11:6f:2f:72:40:76:1b:28:48:60:84:52:1b:f7:93:4f:72: c5:ab:26:3a:c2:0f:70:6d:ec:a1:4d:2d:62:be:8f:d4:f9:8e: 2c:a8:20:91:c6:db:54:45:89:41:8d:95:d1:22:af:b4:3f:2f: 9b:94:3f:70:76:73:9c:36:35:f0:53:d6:b3:62:58:7c:f2:ab: 92:71:35:63:37:eb:33:7a:cf:67:30:4e:0e:a0:27:1d:38:a3: 45:97:e7:0c:62:c2:dc:a7:44:43:50:74:34:82:43:05:3c:fd: 7e:e2:38:bb:79:0f:ac:e2:79:de:43:91:f0:ad:e5:3e:ef:57: 90:63:76:13 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMzQUExMTAvBgNVBAUTKDU3NERCM0Q2MjVERTg0MjAyRTNBQzlDMUMzRDVCMDc3 NEQ2Qjc4RTMwHhcNMjYwOTAzMDY1NzAyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk5MWEzZS0xYzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk0SfFeg1Pwkob5Pe6aagyp0WheQKhd0ynAK0E3l+AIBKtLHy/qYZbAbQAVzL RZyYofO2klvhmm3yf8KZ7mWUfhhen2xZeYLfeXD/DvfsC5uxDdqF7tQm5aJHgT3C sXKWzlbvfCq2/hZzMRw6g8xikC0Iw+bzL8Ym/ZLaTV2IDWwBph22cfCXKKNKdKEF WZTqwWAB9vvL4xOgOlVM2KmYpXeEhENu/Yqyml5hzrp6pXRUsfZpo+KdnaH1ZyYF 5yrw4OeKIxckWla/xkwqWfmWHQ7SlvlPuoi5fbA6C+U4n1mPuzwfSxGZB5IwpiF/ jekcAtPcrxH9delmyuAfiDuB1QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHGkjh8g 9dYEUpZfzDa6rPT95r4NMB8GA1UdIwQYMBaAFFdNs9Yl3oQgLjrJwcPVsHdNa3jj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzNBQS80OUExQTg3ODU5 NjcxMUYwOEM0MDc5MkNDNEY5QUUwMi9WMDJ6MWlYZWhDQXVPc25CdzlXd2QwMXJl T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1YwMnoxaVhlaENBdU9zbkJ3OVd3ZDAxcmVPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTMzQUEvNDlBMUE4Nzg1OTY3MTFGMDhDNDA3OTJDQzRGOUFFMDIvQTVFNkU0MjJB OEU1MTFGMEE0NkE3NzI5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBpWWEMA0GCSqGSIb3DQEBCwUAA4IBAQAXH3F8fGfZeepe/SdWIuBo d+aUkrdXLidLvRA2r+BPnnC2CNI8uky+dT2abJmacQmvXJO/mbAws/Zxty1KQHpr oNHzvXlPoPjNqdybuyexZjLmxG7Rfv+ILkzMIfT23mRq/SoA2YZwtbjfztkr66YO nLYqgwkSSZ+f/qGEdQNLEW8vckB2GyhIYIRSG/eTT3LFqyY6wg9wbeyhTS1ivo/U +Y4sqCCRxttURYlBjZXRIq+0Py+blD9wdnOcNjXwU9azYlh88quScTVjN+szes9n ME4OoCcdOKNFl+cMYsLcp0RDUHQ0gkMFPP1+4ji7eQ+s4nneQ5HwreU+71eQY3YT -----END CERTIFICATE-----Generated at Sat Sep 5 04:22:09 2026 by rpki-client