$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/C8C64A4AED4D11EA895BC037C4F9AE02.roa File: C8C64A4AED4D11EA895BC037C4F9AE02.roa (raw, json) Hash identifier: Nf7FJL+b44IOQDDjWRkAHX1Xp6A2lQIyHPbKkpbjE+s= Subject key identifier: 57:DE:A0:99:CA:3E:B5:F5:9F:0E:30:25:E2:3E:42:AE:D9:2E:8C:D1 Certificate issuer: /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Certificate serial: 0990 Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/C8C64A4AED4D11EA895BC037C4F9AE02.roa Signing time: Fri 16 Oct 2026 20:40:43 +0000 ROA not before: Fri 16 Oct 2026 20:40:43 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 38488 IP address blocks: 116.0.42.0/24 maxlen: 24 202.123.240.0/24 maxlen: 24 202.123.242.0/24 maxlen: 24 202.123.243.0/24 maxlen: 24 202.123.244.0/24 maxlen: 24 202.123.245.0/24 maxlen: 24 202.123.246.0/24 maxlen: 24 2400:a960::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 20:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2448 (0x990) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Validity Not Before: Oct 16 20:40:43 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ad28bcb-3724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c4:d7:ff:90:82:4c:44:90:2f:c8:c6:77:43: 0a:2e:e0:05:fe:65:41:6e:1f:ca:0f:0d:95:13:fa: 2a:4e:4b:10:82:b8:9d:c4:41:1c:4a:af:fb:a7:e1: 60:07:8f:17:51:c4:98:8e:b3:cd:66:29:74:8a:86: 66:2f:91:47:ed:1d:35:2f:6a:d0:fa:0c:6a:b5:f8: a7:ee:d6:c0:08:87:68:71:31:1b:10:42:d3:46:ae: c6:cc:d5:07:53:92:2a:eb:20:e8:1a:1d:1d:55:08: ca:f3:72:f4:93:41:40:48:e3:64:ce:2d:b3:36:e3: 80:9b:bf:04:5d:2f:25:96:e7:98:de:2b:31:58:28: b0:f2:3d:15:2e:e8:04:f5:72:29:d0:44:6c:f6:a1: 6d:e2:b7:9f:25:47:ea:65:ce:d0:6c:c0:21:b0:07: f0:87:b7:bb:57:ce:e1:b8:36:a0:b5:fd:12:b0:b3: 71:82:39:2e:1b:05:c2:78:6b:b5:7b:bc:cd:0a:cf: c7:e3:77:13:68:4b:1d:1b:a9:2d:99:8b:e5:c4:ee: a3:d2:0a:7a:84:c1:9a:e6:ab:04:a7:6a:c2:42:35: d2:8e:56:0d:7c:b2:a1:27:06:c5:8e:7d:a8:ca:7b: 80:36:25:5d:13:61:0d:38:27:8d:b3:82:f3:85:b0: 88:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DE:A0:99:CA:3E:B5:F5:9F:0E:30:25:E2:3E:42:AE:D9:2E:8C:D1 X509v3 Authority Key Identifier: keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/C8C64A4AED4D11EA895BC037C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 116.0.42.0/24 202.123.240.0/24 202.123.242.0-202.123.246.255 IPv6: 2400:a960::/48 Signature Algorithm: sha256WithRSAEncryption 78:37:07:5c:0a:5b:3c:49:be:45:20:af:4d:9f:94:a8:66:e0: a8:42:4a:e1:f0:20:e3:91:84:51:de:65:94:d7:dd:02:ba:8a: d8:4b:92:08:4e:81:45:90:4f:86:01:a2:9b:bb:6f:3d:b9:95: 12:96:a4:e0:aa:36:10:df:68:86:0d:80:02:f7:7d:d4:22:a7: 06:2e:28:f7:4a:95:b1:ad:08:84:60:4f:72:d4:55:26:e0:a8: 2d:35:45:68:13:28:50:9a:ab:ce:d2:81:e9:b7:60:b7:52:66: aa:5f:a1:26:da:69:a3:d9:7d:5a:b1:0d:0b:76:f0:eb:2e:7a: ce:74:b9:84:1a:79:52:a9:1c:d4:87:33:1b:ae:7e:a9:0c:12: a8:c3:38:c5:3f:81:df:03:9c:47:eb:b7:60:1b:7e:df:3f:04: 6e:c8:f0:40:ac:d6:5e:71:c7:21:4b:0e:cf:71:64:69:7e:3c: 81:d2:b0:40:84:bf:a5:03:7d:87:65:1f:db:56:2a:00:b4:6c: fc:dd:42:f1:a4:ed:7e:fd:e3:77:4d:74:78:fd:c7:61:45:b3: c7:fe:9e:2f:dd:46:82:40:6c:9f:1a:74:1b:6b:3d:8b:be:c9: c1:ad:6d:e8:64:26:09:be:ed:37:70:d2:33:eb:05:22:b9:30: e6:ce:8a:8e -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgICCZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2RDkxMTAvBgNVBAUTKDIxOUVBNjNDNkFDOTY2RERCMjg1ODg2QkQ3MTFDNzhB MTRERjUxMkIwHhcNMjYxMDE2MjA0MDQzWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWQyOGJjYi0zNzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMTX/5CCTESQL8jGd0MKLuAF/mVBbh/KDw2VE/oqTksQgridxEEcSq/7p+Fg B48XUcSYjrPNZil0ioZmL5FH7R01L2rQ+gxqtfin7tbACIdocTEbEELTRq7GzNUH U5Iq6yDoGh0dVQjK83L0k0FASONkzi2zNuOAm78EXS8llueY3isxWCiw8j0VLugE 9XIp0ERs9qFt4refJUfqZc7QbMAhsAfwh7e7V87huDagtf0SsLNxgjkuGwXCeGu1 e7zNCs/H43cTaEsdG6ktmYvlxO6j0gp6hMGa5qsEp2rCQjXSjlYNfLKhJwbFjn2o ynuANiVdE2ENOCeNs4LzhbCI8wIDAQABo4IChTCCAoEwHQYDVR0OBBYEFFfeoJnK PrX1nw4wJeI+Qq7ZLozRMB8GA1UdIwQYMBaAFCGepjxqyWbdsoWIa9cRx4oU31Er MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTZEOS84MERGREVDMEU1 REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0MnloWWhyMXhISGloVGZV U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0laNm1QR3JKWnQyeWhZaHIxeEhIaWhUZlVTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTk2RDkvODBERkRFQzBFNUREMTFFQUIyNDY4RDY1QzRGOUFFMDIvQzhDNjRBNEFF RDREMTFFQTg5NUJDMDM3QzRGOUFFMDIucm9hMEQGCCsGAQUFBwEHAQH/BDUwMzAg BAIAATAaAwQAdAAqAwQAynvwMAwDBAHKe/IDBADKe/YwDwQCAAIwCQMHACQAqWAA ADANBgkqhkiG9w0BAQsFAAOCAQEAeDcHXApbPEm+RSCvTZ+UqGbgqEJK4fAg45GE Ud5llNfdArqK2EuSCE6BRZBPhgGim7tvPbmVEpak4Ko2EN9ohg2AAvd91CKnBi4o 90qVsa0IhGBPctRVJuCoLTVFaBMoUJqrztKB6bdgt1Jmql+hJtppo9l9WrENC3bw 6y56znS5hBp5Uqkc1IczG65+qQwSqMM4xT+B3wOcR+u3YBt+3z8EbsjwQKzWXnHH IUsOz3FkaX48gdKwQIS/pQN9h2Uf21YqALRs/N1C8aTtfv3jd010eP3HYUWzx/6e L91GgkBsnxp0G2s9i77Jwa1t6GQmCb7tN3DSM+sFIrkw5s6Kjg== -----END CERTIFICATE-----Generated at Tue Oct 27 15:49:01 2026 by rpki-client