$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/665497A2AC1011ED8592693FC4F9AE02.roa File: 665497A2AC1011ED8592693FC4F9AE02.roa (raw, json) Hash identifier: HMh0PudeObId9zudYejPSA5f+N2qiPXxo4G9qeOgkD8= Subject key identifier: FD:80:11:98:52:CC:7A:EC:C3:B5:FC:27:60:A1:61:F3:89:86:B0:E6 Certificate issuer: /CN=A91F8E9B/serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9 Certificate serial: 02C5 Authority key identifier: 44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/665497A2AC1011ED8592693FC4F9AE02.roa Signing time: Sat 05 Sep 2026 01:51:10 +0000 ROA not before: Sat 05 Sep 2026 01:51:10 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 24006 IP address blocks: 202.160.48.0/21 maxlen: 21 202.160.56.0/21 maxlen: 21 2400:b400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 01:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 709 (0x2c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8E9B, serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9 Validity Not Before: Sep 5 01:51:10 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a9b758e-56ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:cd:12:b5:7c:c3:9b:53:09:d0:87:38:56:22: b0:d1:5b:2b:b0:a9:9d:45:6f:f5:e9:7a:58:ca:a7: 3e:2d:22:47:b4:b5:73:4a:42:f8:ea:1f:41:03:2a: 9a:c3:4c:b2:1a:87:eb:97:80:25:69:87:cb:ba:6e: c4:c2:06:61:04:72:d1:a9:26:56:73:23:ec:2e:af: 2f:f0:a5:5b:eb:3e:9e:c5:12:b4:a2:0b:3c:ef:d1: 27:12:ad:16:9f:9f:fc:5a:01:c7:6e:f3:9e:2c:c9: a9:7d:5f:b8:42:91:0a:0d:32:77:37:2e:9e:6b:a0: c6:31:40:5a:72:bf:60:4a:fd:6b:dc:85:be:0b:d7: 02:51:95:1d:45:3f:89:5e:2d:06:0a:42:92:f9:ab: c0:62:7f:3e:82:a9:bc:94:75:60:73:85:8a:85:9a: 8e:e5:f1:6e:a9:b7:ea:5f:4c:b4:5c:87:88:2b:5e: f8:1e:a5:aa:e2:49:e7:51:e0:48:8e:ba:63:37:55: a1:9c:6e:2f:2c:da:ae:3d:56:c2:66:02:9e:14:4a: 2b:45:59:53:7c:09:d1:42:0a:67:31:bc:3a:6d:c9: 8c:af:20:7d:d0:ee:08:21:83:2a:56:b9:e9:5c:25: 64:55:d6:20:c8:db:08:d2:62:59:83:1b:63:d4:80: 90:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:80:11:98:52:CC:7A:EC:C3:B5:FC:27:60:A1:61:F3:89:86:B0:E6 X509v3 Authority Key Identifier: keyid:44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/665497A2AC1011ED8592693FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.160.48.0/20 IPv6: 2400:b400::/32 Signature Algorithm: sha256WithRSAEncryption 75:30:48:40:73:e9:1e:d2:28:4a:d2:bb:75:32:2e:73:d2:c0: da:18:e7:7a:19:fc:b5:c4:0d:c8:47:13:e3:1f:12:45:f8:9d: 58:83:e5:c7:e5:08:5a:0c:09:9c:c3:3b:46:e7:c5:9c:1b:2a: 6f:b2:ff:7c:63:07:2b:2f:7f:5c:3b:28:a8:39:57:34:7e:f1: e9:22:2a:04:28:02:3d:76:38:10:f7:f7:65:57:0f:d0:f2:af: ef:bd:f1:39:1f:53:0a:ff:99:4e:8b:0d:04:88:06:a3:d6:b3: 83:cf:c6:b3:23:e3:d9:17:3e:45:00:a4:b5:cf:5e:04:9e:62: 4b:5d:f0:07:4b:ab:e5:3c:64:d1:87:67:b3:fe:d6:86:6b:f5: a2:9a:b2:79:58:61:ca:91:b4:5c:61:41:44:01:31:b9:67:21: a1:52:a1:c8:48:93:37:63:a3:f5:a6:0b:1d:d8:42:7c:4c:06: f2:f8:a8:81:79:a5:c3:2e:50:61:40:e7:5c:95:91:87:87:48: 9e:dd:04:90:0d:31:b3:0d:ce:87:8f:33:68:b0:ce:a7:a3:a5: 51:40:08:8b:11:ae:c6:81:f6:d2:3c:e5:e7:af:9a:09:35:80: 72:0c:80:9e:38:c0:f9:8e:00:41:9f:a9:c3:db:d9:71:fe:81: 78:e9:f9:6d -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhFOUIxMTAvBgNVBAUTKDQ0Njc5MjQzOTI1ODE4MkE3QTFFNERBNEIyQzA2RkFE MkFBRUU0QjkwHhcNMjYwOTA1MDE1MTEwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTliNzU4ZS01NmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3s0StXzDm1MJ0Ic4ViKw0VsrsKmdRW/16XpYyqc+LSJHtLVzSkL46h9BAyqa w0yyGofrl4AlaYfLum7EwgZhBHLRqSZWcyPsLq8v8KVb6z6exRK0ogs879EnEq0W n5/8WgHHbvOeLMmpfV+4QpEKDTJ3Ny6ea6DGMUBacr9gSv1r3IW+C9cCUZUdRT+J Xi0GCkKS+avAYn8+gqm8lHVgc4WKhZqO5fFuqbfqX0y0XIeIK174HqWq4knnUeBI jrpjN1WhnG4vLNquPVbCZgKeFEorRVlTfAnRQgpnMbw6bcmMryB90O4IIYMqVrnp XCVkVdYgyNsI0mJZgxtj1ICQiwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFP2AEZhS zHrsw7X8J2ChYfOJhrDmMB8GA1UdIwQYMBaAFERnkkOSWBgqeh5NpLLAb60qruS5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEU5Qi82OUVCNDJDMDk2 MEUxMUVEOUE0Q0VBNjVDNEY5QUUwMi9SR2VTUTVKWUdDcDZIazJrc3NCdnJTcXU1 TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JHZVNRNUpZR0NwNkhrMmtzc0J2clNxdTVMay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjhFOUIvNjlFQjQyQzA5NjBFMTFFRDlBNENFQTY1QzRGOUFFMDIvNjY1NDk3QTJB QzEwMTFFRDg1OTI2OTNGQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQEyqAwMA0EAgACMAcDBQAkALQAMA0GCSqGSIb3DQEBCwUAA4IBAQB1 MEhAc+ke0ihK0rt1Mi5z0sDaGOd6Gfy1xA3IRxPjHxJF+J1Yg+XH5QhaDAmcwztG 58WcGypvsv98YwcrL39cOyioOVc0fvHpIioEKAI9djgQ9/dlVw/Q8q/vvfE5H1MK /5lOiw0EiAaj1rODz8azI+PZFz5FAKS1z14EnmJLXfAHS6vlPGTRh2ez/taGa/Wi mrJ5WGHKkbRcYUFEATG5ZyGhUqHISJM3Y6P1pgsd2EJ8TAby+KiBeaXDLlBhQOdc lZGHh0ie3QSQDTGzDc6HjzNosM6no6VRQAiLEa7GgfbSPOXnr5oJNYByDICeOMD5 jgBBn6nD29lx/oF46flt -----END CERTIFICATE-----Generated at Sat Sep 5 04:45:07 2026 by rpki-client