$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/F8E5E56ABA3311F097F3633AC4F9AE02.roa File: F8E5E56ABA3311F097F3633AC4F9AE02.roa (raw, json) Hash identifier: udn4eBh21wbWvA3PUlcf3X1YF6+WWkuNeKG2Vrqmh9s= Subject key identifier: D0:73:22:8D:AA:98:35:EA:4A:5D:E9:FA:D2:19:CD:28:C6:A4:5F:EF Certificate issuer: /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Certificate serial: 098F Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/F8E5E56ABA3311F097F3633AC4F9AE02.roa Signing time: Fri 16 Oct 2026 20:40:41 +0000 ROA not before: Fri 16 Oct 2026 20:40:41 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 24435 IP address blocks: 116.0.35.0/24 maxlen: 24 116.0.36.0/24 maxlen: 24 116.0.37.0/24 maxlen: 24 116.0.39.0/24 maxlen: 24 116.0.45.0/24 maxlen: 24 116.0.48.0/24 maxlen: 24 116.0.49.0/24 maxlen: 24 116.0.50.0/24 maxlen: 24 116.0.51.0/24 maxlen: 24 116.0.52.0/24 maxlen: 24 116.0.53.0/24 maxlen: 24 116.0.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 20:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2447 (0x98f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Validity Not Before: Oct 16 20:40:41 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ad28bc8-0130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9c:e7:24:91:9b:30:db:66:fb:d6:1d:0f:b1: 57:f6:4d:33:e4:cf:f0:92:e2:f1:15:83:34:53:65: 7b:55:e4:fa:b1:f0:5e:90:16:88:c2:a5:6c:c0:e8: 15:e4:f0:56:ea:98:00:f2:45:57:8a:b5:a3:ff:10: 97:8d:3b:48:8a:3a:86:6f:91:3d:93:64:6a:f1:6f: 19:40:04:8f:a4:5b:32:83:ae:dc:59:af:a8:cc:5d: 3c:c3:d5:f9:75:36:f0:79:b6:68:4e:0f:38:61:d4: c4:2b:36:29:73:12:f7:90:b5:74:5b:6f:7f:8a:15: b1:85:d0:27:18:73:53:90:30:ac:bd:0c:df:ab:fb: a4:44:3d:0b:19:56:69:bb:a1:bf:a6:b2:4c:4e:85: 9b:a3:43:44:45:73:84:ee:61:95:54:a6:ff:46:d9: b6:ca:fb:e6:4e:8e:4a:b9:e9:6f:56:18:3e:6a:aa: 14:03:a5:49:08:81:f0:aa:3c:f0:59:77:de:67:ac: 74:fa:b8:ca:f3:51:31:ff:84:55:94:0d:07:ea:67: d8:e8:fb:1e:b6:09:c7:8c:f2:93:79:69:40:bf:ba: 59:8e:1e:cc:56:fd:ac:50:9f:6d:6f:bf:1f:0b:63: ce:3a:44:87:b1:a2:a9:08:b5:d4:08:82:33:96:eb: d6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:73:22:8D:AA:98:35:EA:4A:5D:E9:FA:D2:19:CD:28:C6:A4:5F:EF X509v3 Authority Key Identifier: keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/F8E5E56ABA3311F097F3633AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 116.0.35.0-116.0.37.255 116.0.39.0/24 116.0.45.0/24 116.0.48.0-116.0.54.255 Signature Algorithm: sha256WithRSAEncryption 14:53:66:2f:00:29:73:7c:6a:61:2d:4f:d7:5f:cd:1c:b4:45: b6:f1:94:18:e0:ee:85:ae:8a:29:a7:d2:1c:59:d0:f3:0f:64: ae:6e:67:2f:3d:19:99:9b:c9:ac:e7:70:2f:21:3d:35:b9:e4: 20:a6:cb:26:87:f6:74:47:3b:0b:5e:ae:a6:fa:fc:05:57:44: c5:76:38:96:0e:eb:58:e8:aa:77:62:2c:0d:71:f8:e5:c8:c4: 85:58:c1:ff:a9:f7:2c:42:4c:28:f5:a8:7f:d1:6b:20:87:4b: 69:2a:df:97:64:31:fc:c0:aa:6a:08:50:79:b6:9c:d3:38:1a: c8:4c:6e:5a:89:e9:37:e8:4f:4f:a2:b3:0f:e8:0e:84:bc:f8: 0d:ad:59:71:b1:f2:93:8e:16:7b:36:6e:65:95:2d:2b:b1:d2: 77:c5:e7:c2:6f:8c:cb:a3:8f:b0:75:99:53:83:ca:69:70:7f: ef:82:b4:06:c5:ac:ff:7f:9f:4c:9f:8c:16:10:36:37:6e:9d: 43:bc:05:11:b9:c8:12:e7:12:6e:9f:9e:af:b9:92:ac:dd:c1: 08:88:fc:61:bb:40:d5:67:fc:2e:c0:60:37:9d:ef:f6:30:a9: 71:27:ce:23:f7:47:26:af:f2:1b:ed:cf:0a:3f:9e:9f:1a:77: ab:d6:ca:b3 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgICCY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2RDkxMTAvBgNVBAUTKDIxOUVBNjNDNkFDOTY2RERCMjg1ODg2QkQ3MTFDNzhB MTRERjUxMkIwHhcNMjYxMDE2MjA0MDQxWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWQyOGJjOC0wMTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ZznJJGbMNtm+9YdD7FX9k0z5M/wkuLxFYM0U2V7VeT6sfBekBaIwqVswOgV 5PBW6pgA8kVXirWj/xCXjTtIijqGb5E9k2Rq8W8ZQASPpFsyg67cWa+ozF08w9X5 dTbwebZoTg84YdTEKzYpcxL3kLV0W29/ihWxhdAnGHNTkDCsvQzfq/ukRD0LGVZp u6G/prJMToWbo0NERXOE7mGVVKb/Rtm2yvvmTo5KuelvVhg+aqoUA6VJCIHwqjzw WXfeZ6x0+rjK81Ex/4RVlA0H6mfY6PsetgnHjPKTeWlAv7pZjh7MVv2sUJ9tb78f C2POOkSHsaKpCLXUCIIzluvWiQIDAQABo4ICgjCCAn4wHQYDVR0OBBYEFNBzIo2q mDXqSl3p+tIZzSjGpF/vMB8GA1UdIwQYMBaAFCGepjxqyWbdsoWIa9cRx4oU31Er MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTZEOS84MERGREVDMEU1 REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0MnloWWhyMXhISGloVGZV U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0laNm1QR3JKWnQyeWhZaHIxeEhIaWhUZlVTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTk2RDkvODBERkRFQzBFNUREMTFFQUIyNDY4RDY1QzRGOUFFMDIvRjhFNUU1NkFC QTMzMTFGMDk3RjM2MzNBQzRGOUFFMDIucm9hMEEGCCsGAQUFBwEHAQH/BDIwMDAu BAIAATAoMAwDBAB0ACMDBAF0ACQDBAB0ACcDBAB0AC0wDAMEBHQAMAMEAHQANjAN BgkqhkiG9w0BAQsFAAOCAQEAFFNmLwApc3xqYS1P11/NHLRFtvGUGODuha6KKafS HFnQ8w9krm5nLz0ZmZvJrOdwLyE9NbnkIKbLJof2dEc7C16upvr8BVdExXY4lg7r WOiqd2IsDXH45cjEhVjB/6n3LEJMKPWof9FrIIdLaSrfl2Qx/MCqaghQebac0zga yExuWonpN+hPT6KzD+gOhLz4Da1ZcbHyk44WezZuZZUtK7HSd8Xnwm+My6OPsHWZ U4PKaXB/74K0BsWs/3+fTJ+MFhA2N26dQ7wFEbnIEucSbp+er7mSrN3BCIj8YbtA 1Wf8LsBgN53v9jCpcSfOI/dHJq/yG+3PCj+enxp3q9bKsw== -----END CERTIFICATE-----Generated at Wed Oct 28 06:14:00 2026 by rpki-client