$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/4A06FF10FF2711EAB7D5F235C4F9AE02.roa File: 4A06FF10FF2711EAB7D5F235C4F9AE02.roa (raw, json) Hash identifier: lNJfisOx2yyqndWSGlLvfWONmZuySdnNBl5mU0lp3oU= Subject key identifier: 62:46:44:44:3E:30:6C:FA:85:C7:FF:21:5C:F6:D4:8D:BE:18:3F:5E Certificate issuer: /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Certificate serial: 0991 Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/4A06FF10FF2711EAB7D5F235C4F9AE02.roa Signing time: Fri 16 Oct 2026 20:40:45 +0000 ROA not before: Fri 16 Oct 2026 20:40:45 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 55340 IP address blocks: 116.0.33.0/24 maxlen: 24 116.0.34.0/24 maxlen: 24 116.0.40.0/24 maxlen: 24 116.0.41.0/24 maxlen: 24 116.0.43.0/24 maxlen: 24 116.0.44.0/24 maxlen: 24 116.0.46.0/24 maxlen: 24 116.0.55.0/24 maxlen: 24 116.0.56.0/24 maxlen: 24 116.0.57.0/24 maxlen: 24 116.0.58.0/24 maxlen: 24 116.0.59.0/24 maxlen: 24 116.0.61.0/24 maxlen: 24 116.0.62.0/24 maxlen: 24 116.0.63.0/24 maxlen: 24 2400:a960:6::/48 maxlen: 48 2400:a960:8::/48 maxlen: 48 2400:a960:9::/48 maxlen: 48 2400:a960:a::/48 maxlen: 48 2400:a960:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 20:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2449 (0x991) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Validity Not Before: Oct 16 20:40:45 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ad28bcd-3756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cb:c7:8f:b2:69:5c:fd:23:a4:15:73:07:a1: 8b:ae:2d:bb:f3:68:1f:d6:0b:d4:18:de:00:31:cd: da:1e:9e:c5:63:90:b8:8f:24:0c:cb:b7:a4:72:82: 58:8e:0f:4f:6e:75:3f:7e:aa:be:e9:48:78:d7:0d: 2e:0e:c5:d0:cd:38:ab:5c:8a:4b:34:cd:74:13:4d: 21:9b:6f:55:31:48:42:02:40:e3:6a:87:d9:6b:81: d1:78:80:ce:5f:4a:af:93:82:bb:ec:d1:3f:d9:99: 3c:2e:ea:65:a6:e7:d7:a0:d7:40:03:23:f7:3a:35: c6:cc:42:3a:50:1d:28:b5:4c:bd:a6:b2:45:95:76: 24:54:15:52:b1:cf:08:f6:02:26:29:37:0a:e8:df: 72:f2:56:de:91:e3:cf:2d:cb:03:bf:60:07:74:5c: c6:be:2c:86:10:e6:cf:56:24:ea:9e:68:be:59:1b: c7:12:73:56:91:98:3c:ad:21:6f:7d:06:4e:07:a8: 84:f9:d0:d4:da:d1:b8:53:7c:db:b9:56:02:91:d0: 58:67:18:c9:ae:86:ba:31:d2:2d:a1:32:e5:f9:a9: 62:f7:6d:e2:12:d9:fc:a9:b5:a4:59:c1:52:b6:00: 30:65:a2:e1:b6:74:d0:34:72:97:2a:2b:75:e4:65: da:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:46:44:44:3E:30:6C:FA:85:C7:FF:21:5C:F6:D4:8D:BE:18:3F:5E X509v3 Authority Key Identifier: keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/4A06FF10FF2711EAB7D5F235C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 116.0.33.0-116.0.34.255 116.0.40.0/23 116.0.43.0-116.0.44.255 116.0.46.0/24 116.0.55.0-116.0.59.255 116.0.61.0-116.0.63.255 IPv6: 2400:a960:6::/48 2400:a960:8::/46 Signature Algorithm: sha256WithRSAEncryption af:ab:57:ab:49:c7:fb:18:77:81:77:d4:18:29:2d:e8:7e:db: 67:a1:d2:63:e7:d8:78:5d:14:32:b1:36:79:50:c4:30:79:7b: 0c:69:96:ea:66:76:73:33:81:d9:4d:29:84:9b:8d:c9:82:c7: 1b:74:f1:dc:9d:05:1b:da:d5:03:19:7b:89:52:85:07:03:55: 71:de:ec:da:c5:3a:19:de:24:4b:80:a6:b3:8c:19:62:c0:87: 22:34:4e:1a:c0:ce:9a:0d:63:40:53:ee:08:f1:7f:ba:fe:a0: 32:30:83:d8:1c:c4:85:68:b1:ce:2a:2c:13:7e:14:1f:38:39: 98:18:f4:3b:95:26:66:dd:a9:0b:82:00:67:a1:f4:ae:97:cb: 87:a2:bb:4d:79:2c:d3:99:e6:1c:3e:3e:1b:8d:69:4e:ee:5d: 98:33:71:7c:9f:5a:2c:7b:0a:58:11:b8:7e:57:f4:11:91:d0: 1e:14:76:11:49:d3:70:e1:ee:2c:5f:04:47:27:19:90:e5:4d: 8a:7b:62:c6:1a:f3:05:6e:2a:59:2b:bb:5d:90:c4:0c:25:a4: 3b:6b:fa:9f:d1:e8:9a:79:a3:c7:2a:8a:f3:a5:de:b1:de:31: c3:b8:b8:e8:e7:cb:81:d4:cd:33:30:85:14:8e:69:75:ef:eb: 65:48:9c:33 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICCZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2RDkxMTAvBgNVBAUTKDIxOUVBNjNDNkFDOTY2RERCMjg1ODg2QkQ3MTFDNzhB MTRERjUxMkIwHhcNMjYxMDE2MjA0MDQ1WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWQyOGJjZC0zNzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMvHj7JpXP0jpBVzB6GLri2782gf1gvUGN4AMc3aHp7FY5C4jyQMy7ekcoJY jg9PbnU/fqq+6Uh41w0uDsXQzTirXIpLNM10E00hm29VMUhCAkDjaofZa4HReIDO X0qvk4K77NE/2Zk8LuplpufXoNdAAyP3OjXGzEI6UB0otUy9prJFlXYkVBVSsc8I 9gImKTcK6N9y8lbekePPLcsDv2AHdFzGviyGEObPViTqnmi+WRvHEnNWkZg8rSFv fQZOB6iE+dDU2tG4U3zbuVYCkdBYZxjJroa6MdItoTLl+ali923iEtn8qbWkWcFS tgAwZaLhtnTQNHKXKit15GXaGwIDAQABo4ICuDCCArQwHQYDVR0OBBYEFGJGREQ+ MGz6hcf/IVz21I2+GD9eMB8GA1UdIwQYMBaAFCGepjxqyWbdsoWIa9cRx4oU31Er MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTZEOS84MERGREVDMEU1 REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0MnloWWhyMXhISGloVGZV U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0laNm1QR3JKWnQyeWhZaHIxeEhIaWhUZlVTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTk2RDkvODBERkRFQzBFNUREMTFFQUIyNDY4RDY1QzRGOUFFMDIvNEEwNkZGMTBG RjI3MTFFQUI3RDVGMjM1QzRGOUFFMDIucm9hMHcGCCsGAQUFBwEHAQH/BGgwZjBK BAIAATBEMAwDBAB0ACEDBAB0ACIDBAF0ACgwDAMEAHQAKwMEAHQALAMEAHQALjAM AwQAdAA3AwQCdAA4MAwDBAB0AD0DBAZ0AAAwGAQCAAIwEgMHACQAqWAABgMHAiQA qWAACDANBgkqhkiG9w0BAQsFAAOCAQEAr6tXq0nH+xh3gXfUGCkt6H7bZ6HSY+fY eF0UMrE2eVDEMHl7DGmW6mZ2czOB2U0phJuNyYLHG3Tx3J0FG9rVAxl7iVKFBwNV cd7s2sU6Gd4kS4Cms4wZYsCHIjROGsDOmg1jQFPuCPF/uv6gMjCD2BzEhWixzios E34UHzg5mBj0O5UmZt2pC4IAZ6H0rpfLh6K7TXks05nmHD4+G41pTu5dmDNxfJ9a LHsKWBG4flf0EZHQHhR2EUnTcOHuLF8ERycZkOVNintixhrzBW4qWSu7XZDEDCWk O2v6n9HomnmjxyqK86Xesd4xw7i46OfLgdTNMzCFFI5pde/rZUicMw== -----END CERTIFICATE-----Generated at Tue Oct 27 11:18:41 2026 by rpki-client