$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/581240AAA04511F0BECA9449C4F9AE02.roa File: 581240AAA04511F0BECA9449C4F9AE02.roa (raw, json) Hash identifier: +oOWaz5+puMsV9knRaxvNPItkQ6Wk8WkynSxoQb5q8Y= Subject key identifier: FA:B6:CC:2E:B3:E3:CB:F7:C9:B0:6F:7D:31:AB:93:8F:05:2E:8C:62 Certificate issuer: /CN=A91E4FB7/serialNumber=F6B14510205247CE58332591B9A297A15D2AEA3F Certificate serial: CA Authority key identifier: F6:B1:45:10:20:52:47:CE:58:33:25:91:B9:A2:97:A1:5D:2A:EA:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/581240AAA04511F0BECA9449C4F9AE02.roa Signing time: Thu 15 Oct 2026 07:56:30 +0000 ROA not before: Thu 15 Oct 2026 07:56:30 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 154117 IP address blocks: 202.157.149.0/24 maxlen: 24 202.157.150.0/24 maxlen: 24 2402:6c20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.crl rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 07:43:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4FB7, serialNumber=F6B14510205247CE58332591B9A297A15D2AEA3F Validity Not Before: Oct 15 07:56:30 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ad0872e-640d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:60:7f:6e:cd:0c:0e:3f:41:81:87:23:ee:33: cf:be:d3:f6:10:6e:7a:b7:78:37:75:dc:99:55:0d: 19:8b:21:89:af:91:17:bb:09:1c:ec:43:a0:02:1c: 05:a3:dd:88:5e:2f:46:70:32:87:b0:ab:ac:61:18: 8d:41:56:f3:73:ab:6e:d3:52:a9:37:3c:30:90:23: ee:75:07:8f:b9:ad:89:40:fd:95:ec:9d:1f:50:3c: 4c:30:0e:53:58:8d:ab:2b:c0:8d:11:59:07:bf:e8: 4a:30:e2:de:d5:f2:f2:96:11:3d:1d:2a:47:f8:57: 3f:93:88:2c:c3:0d:6a:0a:c1:ac:bc:5d:1c:7c:3c: ed:56:8b:96:b8:2b:e0:81:cc:f0:de:8d:1a:53:fe: a6:96:de:dd:4d:86:11:fe:aa:07:50:34:0f:d4:da: 6a:3f:74:95:cb:9c:9a:ab:ca:0f:5d:65:fb:b8:5c: 97:ea:67:17:04:e2:37:4c:12:72:19:ab:9a:b0:83: 66:14:fe:f1:58:ab:d4:24:4a:98:3b:1f:26:74:a4: 19:d8:57:e1:86:dd:10:e1:f6:d2:cc:32:72:fd:9d: 45:6b:76:72:58:1b:96:fe:d9:30:4f:5f:2c:5d:3b: c0:6f:81:43:3f:61:b4:35:4a:8d:93:d6:68:d0:9d: e5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B6:CC:2E:B3:E3:CB:F7:C9:B0:6F:7D:31:AB:93:8F:05:2E:8C:62 X509v3 Authority Key Identifier: keyid:F6:B1:45:10:20:52:47:CE:58:33:25:91:B9:A2:97:A1:5D:2A:EA:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/581240AAA04511F0BECA9449C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.157.149.0-202.157.150.255 IPv6: 2402:6c20::/32 Signature Algorithm: sha256WithRSAEncryption 46:b4:23:7f:1f:e4:af:7a:2c:d0:ed:d6:71:3b:47:c6:ea:ac: 1d:78:84:f1:6a:00:5c:0e:62:7a:db:b0:90:29:19:c6:34:b5: 9a:ad:a4:64:b0:ac:6a:ea:ee:bd:ea:f1:fd:15:5d:49:d4:55: 35:db:8b:00:39:95:e8:b3:c8:06:46:03:80:d6:d3:00:1f:5b: f2:96:5a:b1:8d:f1:27:42:35:05:b0:44:1f:54:91:3b:27:ac: 0d:e1:7a:b6:41:cc:27:42:d6:cc:6b:27:db:b8:d5:18:2a:b3: 43:10:fc:83:b9:f3:d7:d8:cd:be:28:df:e0:b0:f1:65:e9:66: 8f:5f:62:e2:a8:ec:21:a7:df:77:db:c4:e6:f7:af:af:f7:bb: af:35:c4:33:fb:89:6d:59:df:e7:94:2a:59:19:0f:4d:b2:56: fa:20:4f:b7:f9:e5:26:79:a6:db:5c:c8:61:66:3d:99:bd:fb: df:9a:91:1a:9b:b8:39:54:73:d4:a6:de:87:7d:96:3b:3a:66: 96:4d:38:9d:e0:31:b9:8a:71:a0:a1:99:a5:e5:c8:e5:1c:cb: be:f9:d7:c5:56:20:39:20:2f:d7:5d:af:da:db:27:3b:ee:01: 40:b4:4a:4d:fe:a3:15:d7:f1:b6:c8:95:fd:a4:1d:73:f4:f3: 3b:24:66:54 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRGQjcxMTAvBgNVBAUTKEY2QjE0NTEwMjA1MjQ3Q0U1ODMzMjU5MUI5QTI5N0Ex NUQyQUVBM0YwHhcNMjYxMDE1MDc1NjMwWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWQwODcyZS02NDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GB/bs0MDj9BgYcj7jPPvtP2EG56t3g3ddyZVQ0ZiyGJr5EXuwkc7EOgAhwF o92IXi9GcDKHsKusYRiNQVbzc6tu01KpNzwwkCPudQePua2JQP2V7J0fUDxMMA5T WI2rK8CNEVkHv+hKMOLe1fLylhE9HSpH+Fc/k4gsww1qCsGsvF0cfDztVouWuCvg gczw3o0aU/6mlt7dTYYR/qoHUDQP1NpqP3SVy5yaq8oPXWX7uFyX6mcXBOI3TBJy GauasINmFP7xWKvUJEqYOx8mdKQZ2Ffhht0Q4fbSzDJy/Z1Fa3ZyWBuW/tkwT18s XTvAb4FDP2G0NUqNk9Zo0J3lFQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFPq2zC6z 48v3ybBvfTGrk48FLoxiMB8GA1UdIwQYMBaAFPaxRRAgUkfOWDMlkbmil6FdKuo/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEZCNy83RUM2NjFDOEEw NDQxMUYwQkM1Q0Y5NDdDNEY5QUUwMi85ckZGRUNCU1I4NVlNeVdSdWFLWG9WMHE2 ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlyRkZFQ0JTUjg1WU15V1J1YUtYb1YwcTZqOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTRGQjcvN0VDNjYxQzhBMDQ0MTFGMEJDNUNGOTQ3QzRGOUFFMDIvNTgxMjQwQUFB MDQ1MTFGMEJFQ0E5NDQ5QzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAU BAIAATAOMAwDBADKnZUDBADKnZYwDQQCAAIwBwMFACQCbCAwDQYJKoZIhvcNAQEL BQADggEBAEa0I38f5K96LNDt1nE7R8bqrB14hPFqAFwOYnrbsJApGcY0tZqtpGSw rGrq7r3q8f0VXUnUVTXbiwA5leizyAZGA4DW0wAfW/KWWrGN8SdCNQWwRB9UkTsn rA3herZBzCdC1sxrJ9u41Rgqs0MQ/IO589fYzb4o3+Cw8WXpZo9fYuKo7CGn33fb xOb3r6/3u681xDP7iW1Z3+eUKlkZD02yVvogT7f55SZ5pttcyGFmPZm9+9+akRqb uDlUc9Sm3od9ljs6ZpZNOJ3gMbmKcaChmaXlyOUcy77518VWIDkgL9ddr9rbJzvu AUC0Sk3+oxXX8bbIlf2kHXP08zskZlQ= -----END CERTIFICATE-----Generated at Thu Nov 5 01:44:03 2026 by rpki-client