$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/340564B2BBC411F1B287B5196011F970.roa File: 340564B2BBC411F1B287B5196011F970.roa (raw, json) Hash identifier: eWGDq+cj/s6w5zBpcqtAtz8TMY+lW8i5TMmIhsOXrRQ= Subject key identifier: CE:F4:9F:D7:F0:DA:24:46:CB:E6:06:42:90:59:0C:90:6B:EC:51:F8 Certificate issuer: /CN=A91F5972/serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B Certificate serial: 06A2 Authority key identifier: AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/340564B2BBC411F1B287B5196011F970.roa Signing time: Tue 29 Sep 2026 05:11:19 +0000 ROA not before: Tue 29 Sep 2026 05:11:19 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 45237 IP address blocks: 202.170.64.0/24 maxlen: 24 202.170.65.0/24 maxlen: 24 202.170.66.0/24 maxlen: 24 202.170.67.0/24 maxlen: 24 202.170.68.0/24 maxlen: 24 202.170.69.0/24 maxlen: 24 202.170.70.0/24 maxlen: 24 202.170.71.0/24 maxlen: 24 202.170.73.0/24 maxlen: 24 202.170.74.0/24 maxlen: 24 202.170.77.0/24 maxlen: 24 202.170.78.0/24 maxlen: 24 202.170.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 22:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1698 (0x6a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5972, serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B Validity Not Before: Sep 29 05:11:19 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abb4876-9dff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c2:d5:20:df:e2:0e:10:c9:e2:3f:d7:99:57: ed:73:38:a1:35:3a:23:df:99:ba:46:89:72:83:02: c6:b7:74:5b:d8:5f:36:e1:47:7e:03:36:88:cb:aa: 35:f2:6b:11:56:d7:7c:71:f4:fe:e1:31:fa:f3:b3: d9:97:a3:77:c5:26:5b:f5:55:d5:8f:2c:56:da:9e: 1c:43:06:b2:e9:e3:bb:13:94:e1:03:d4:f9:5d:02: e9:e8:9f:ff:bc:97:fa:29:8f:52:e5:40:2f:93:01: 88:f1:c3:05:96:c0:ef:4f:72:d3:79:de:8a:53:fd: 7e:0f:95:7a:f4:13:db:58:02:12:c4:35:27:db:dd: f3:1e:b9:67:63:02:16:8c:7d:79:d0:47:85:44:20: a4:1a:19:a5:6f:56:51:30:0f:9d:6c:fa:d1:57:43: 50:e0:b4:95:7e:70:bb:0b:25:ae:7e:1b:f7:c8:88: 04:a4:ca:0d:54:cf:ed:64:a7:ab:45:45:2f:e0:27: 08:25:4a:fc:36:61:62:aa:c9:b3:1c:77:f5:1f:ee: c1:aa:ce:6d:37:a3:c7:14:8f:74:d7:6b:07:02:6e: 34:3a:9b:97:e3:c5:62:0f:b9:b9:1b:c0:62:18:81: 38:69:47:95:b1:e5:c9:99:34:df:20:1a:52:3d:66: 8a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F4:9F:D7:F0:DA:24:46:CB:E6:06:42:90:59:0C:90:6B:EC:51:F8 X509v3 Authority Key Identifier: keyid:AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/340564B2BBC411F1B287B5196011F970.roa sbgp-ipAddrBlock: critical IPv4: 202.170.64.0/21 202.170.73.0-202.170.74.255 202.170.77.0-202.170.79.255 Signature Algorithm: sha256WithRSAEncryption 0f:07:23:40:6a:ec:c5:b5:15:bc:dd:bc:6f:db:97:63:83:fe: c8:43:0c:27:b2:91:ad:e2:31:c8:d1:37:ed:2b:21:9a:a5:86: 9c:a3:b4:5e:17:f6:11:1f:c4:3d:60:9a:4d:8f:70:0d:b3:e5: 38:bd:e6:60:cb:b0:fe:b4:1e:26:d8:ea:f2:aa:a0:a9:2f:a1: 96:f1:e1:98:50:bf:d1:b6:97:26:d1:79:c4:36:40:41:23:a9: 17:23:6c:cf:b3:ca:09:37:59:6b:3c:b1:45:a5:b9:63:58:27: 9e:d6:9b:5b:0e:94:cf:4b:cd:bc:0c:f8:db:a2:90:03:0c:67: f4:1a:9a:8d:e5:d8:ef:08:d0:74:60:02:75:bd:61:48:1f:1a: cc:2c:1b:4d:60:fa:4a:04:2c:6d:db:c1:4b:ff:b8:84:c4:47: 58:de:35:47:83:45:d2:57:fb:ed:92:06:8c:49:b1:44:d0:67: 2c:3f:3e:44:02:fc:d0:9a:05:2b:70:4e:fe:c2:c8:d7:3b:56: 2a:64:8f:8c:db:cc:67:02:16:b5:80:1a:ba:a6:8f:5d:c3:dc: 26:81:32:99:c2:79:f7:44:15:7a:91:24:3f:7a:1a:3c:df:d8: 26:e1:7a:24:aa:80:d0:c8:05:de:7b:37:c4:a0:ec:9d:48:da: dc:15:15:8a -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgICBqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5NzIxMTAvBgNVBAUTKEFGNzk4NzQzREFCNjQ3ODY4QUI2NjY3M0FGN0ExMzZD MkVBMEVBNUIwHhcNMjYwOTI5MDUxMTE5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJiNDg3Ni05ZGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8LVIN/iDhDJ4j/XmVftczihNToj35m6RolygwLGt3Rb2F824Ud+AzaIy6o1 8msRVtd8cfT+4TH687PZl6N3xSZb9VXVjyxW2p4cQway6eO7E5ThA9T5XQLp6J// vJf6KY9S5UAvkwGI8cMFlsDvT3LTed6KU/1+D5V69BPbWAISxDUn293zHrlnYwIW jH150EeFRCCkGhmlb1ZRMA+dbPrRV0NQ4LSVfnC7CyWufhv3yIgEpMoNVM/tZKer RUUv4CcIJUr8NmFiqsmzHHf1H+7Bqs5tN6PHFI9012sHAm40OpuX48ViD7m5G8Bi GIE4aUeVseXJmTTfIBpSPWaKowIDAQABo4ICfDCCAngwHQYDVR0OBBYEFM70n9fw 2iRGy+YGQpBZDJBr7FH4MB8GA1UdIwQYMBaAFK95h0PatkeGirZmc696E2wuoOpb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTk3Mi85QkY2QzQ0RUYw MzExMUVCOTVGNzY3NDhDNEY5QUUwMi9yM21IUTlxMlI0YUt0bVp6cjNvVGJDNmc2 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IzbUhROXEyUjRhS3RtWnpyM29UYkM2ZzZscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjU5NzIvOUJGNkM0NEVGMDMxMTFFQjk1Rjc2NzQ4QzRGOUFFMDIvMzQwNTY0QjJC QkM0MTFGMUIyODdCNTE5NjAxMUY5NzAucm9hMDsGCCsGAQUFBwEHAQH/BCwwKjAo BAIAATAiAwQDyqpAMAwDBADKqkkDBADKqkowDAMEAMqqTQMEBMqqQDANBgkqhkiG 9w0BAQsFAAOCAQEADwcjQGrsxbUVvN28b9uXY4P+yEMMJ7KRreIxyNE37SshmqWG nKO0Xhf2ER/EPWCaTY9wDbPlOL3mYMuw/rQeJtjq8qqgqS+hlvHhmFC/0baXJtF5 xDZAQSOpFyNsz7PKCTdZazyxRaW5Y1gnntabWw6Uz0vNvAz426KQAwxn9BqajeXY 7wjQdGACdb1hSB8azCwbTWD6SgQsbdvBS/+4hMRHWN41R4NF0lf77ZIGjEmxRNBn LD8+RAL80JoFK3BO/sLI1ztWKmSPjNvMZwIWtYAauqaPXcPcJoEymcJ590QVepEk P3oaPN/YJuF6JKqA0MgF3ns3xKDsnUja3BUVig== -----END CERTIFICATE-----Generated at Mon Oct 26 02:12:44 2026 by rpki-client