$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/06F011A2134B11F0AA41F90AC4F9AE02.roa File: 06F011A2134B11F0AA41F90AC4F9AE02.roa (raw, json) Hash identifier: 7l8WCyK2qB5Ax8El2bn7f20GEIYhxxt3GqqtbVDOp/I= Subject key identifier: 2B:2A:83:4F:34:57:F0:ED:20:75:92:B5:6F:DF:30:B4:09:D6:8C:99 Certificate issuer: /CN=A91FDBE8/serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E Certificate serial: 08A4 Authority key identifier: F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/06F011A2134B11F0AA41F90AC4F9AE02.roa Signing time: Tue 08 Sep 2026 21:41:44 +0000 ROA not before: Tue 08 Sep 2026 21:41:44 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 38880 IP address blocks: 45.65.60.0/22 maxlen: 22 45.65.60.0/24 maxlen: 24 45.65.61.0/24 maxlen: 24 45.65.62.0/24 maxlen: 24 45.65.63.0/24 maxlen: 24 45.114.204.0/22 maxlen: 22 45.114.204.0/24 maxlen: 24 45.114.205.0/24 maxlen: 24 45.114.206.0/24 maxlen: 24 45.114.207.0/24 maxlen: 24 103.37.8.0/23 maxlen: 23 103.37.8.0/24 maxlen: 24 103.37.9.0/24 maxlen: 24 103.52.168.0/23 maxlen: 23 103.52.168.0/24 maxlen: 24 103.52.169.0/24 maxlen: 24 103.80.136.0/22 maxlen: 22 103.80.136.0/24 maxlen: 24 103.80.137.0/24 maxlen: 24 103.80.138.0/24 maxlen: 24 103.80.139.0/24 maxlen: 24 2402:3680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Sep 2026 21:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2212 (0x8a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDBE8, serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E Validity Not Before: Sep 8 21:41:44 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aa08118-7009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:de:fa:d7:1e:fd:ee:35:81:30:4d:d3:20:7c: ca:bd:ff:a8:f3:3b:2e:9b:aa:5d:58:22:60:91:9f: f4:76:29:ec:35:eb:99:1e:02:68:15:6a:85:5f:ea: f9:08:40:91:63:34:7d:45:52:ef:00:2d:eb:3e:6b: 29:20:cc:4a:df:40:aa:a7:4e:f5:7c:72:b6:ef:13: 71:4b:01:2a:e6:df:4b:25:f8:27:10:d3:9b:e3:b9: d6:a6:de:35:74:31:63:5c:ea:3f:de:3b:aa:84:5c: 80:a9:bd:05:60:2a:55:44:bd:aa:04:46:05:50:46: 76:cf:1b:81:4c:2a:8f:e7:f8:90:28:d9:d3:27:16: 30:75:47:93:a0:61:e7:0d:1d:f0:88:9e:e1:29:77: d9:3d:47:5f:e7:fb:d8:0c:b4:eb:db:cb:57:da:91: 3d:84:0a:ec:dc:11:22:c6:b3:9a:e8:b1:96:bc:72: a2:aa:80:cf:14:8d:97:bc:2c:da:3f:eb:33:11:33: d2:e7:f8:da:c8:81:2a:e9:be:b6:eb:87:45:7b:78: 59:2d:0b:bd:4d:32:cd:24:e8:45:fe:ea:a8:74:aa: 53:9a:7b:19:ca:14:44:ce:f1:c9:b0:3e:f4:96:3b: 47:69:ac:56:e5:44:11:3f:e1:de:92:a8:40:6c:02: 81:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:2A:83:4F:34:57:F0:ED:20:75:92:B5:6F:DF:30:B4:09:D6:8C:99 X509v3 Authority Key Identifier: keyid:F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/06F011A2134B11F0AA41F90AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.65.60.0/22 45.114.204.0/22 103.37.8.0/23 103.52.168.0/23 103.80.136.0/22 IPv6: 2402:3680::/32 Signature Algorithm: sha256WithRSAEncryption 76:3d:81:5e:69:54:bf:63:0e:4a:37:57:bc:08:81:de:69:51: f0:4e:f5:ef:6c:95:19:37:58:84:a9:5c:4a:1b:a9:f5:83:e8: 19:52:6b:30:85:68:6c:3d:aa:cc:79:77:bc:06:89:f5:8f:ad: 63:1d:5e:d8:1b:98:69:ff:0b:7c:56:63:74:a1:a5:f9:c6:4c: 55:d4:fc:16:69:d5:fa:00:b0:27:d5:96:6e:81:78:f8:b9:29: 73:36:be:5f:8c:3c:c1:a8:e9:26:23:68:04:e3:99:b1:d6:c9: 8c:01:94:c3:fd:f8:e8:8e:00:4b:9c:3e:cb:bb:50:53:d3:79: 34:f9:b8:11:90:7c:78:37:eb:25:71:72:c6:f8:7b:f6:d2:86: ad:96:dd:ee:68:a0:4a:3c:c0:5e:7c:c0:78:89:cd:e1:d0:0e: 0e:93:e0:57:e5:d1:a7:b6:c4:68:7e:1c:d3:9a:ba:30:e9:2e: 91:8b:e7:81:a4:1f:ed:76:ea:ec:7c:f8:1f:68:11:d6:39:33: c5:16:a3:fe:6f:ac:04:6f:19:e6:70:8a:16:e1:e6:95:b0:9c: ec:6e:c7:1f:51:41:6d:45:cd:de:9c:2d:70:39:fe:50:de:7f: 71:ee:4e:dc:ac:3e:9f:35:db:54:3d:e7:2a:0e:ab:f7:aa:ae: c5:2a:2b:89 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgICCKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRCRTgxMTAvBgNVBAUTKEYzNTQwOTM5NDg2NkZCNDA4QTBEMTg4RTBCN0QwMEND NUE3Mzk0OEUwHhcNMjYwOTA4MjE0MTQ0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEwODExOC03MDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzt761x797jWBME3TIHzKvf+o8zsum6pdWCJgkZ/0dinsNeuZHgJoFWqFX+r5 CECRYzR9RVLvAC3rPmspIMxK30Cqp071fHK27xNxSwEq5t9LJfgnENOb47nWpt41 dDFjXOo/3juqhFyAqb0FYCpVRL2qBEYFUEZ2zxuBTCqP5/iQKNnTJxYwdUeToGHn DR3wiJ7hKXfZPUdf5/vYDLTr28tX2pE9hArs3BEixrOa6LGWvHKiqoDPFI2XvCza P+szETPS5/jayIEq6b6264dFe3hZLQu9TTLNJOhF/uqodKpTmnsZyhREzvHJsD70 ljtHaaxW5UQRP+HekqhAbAKBbwIDAQABo4IChzCCAoMwHQYDVR0OBBYEFCsqg080 V/DtIHWStW/fMLQJ1oyZMB8GA1UdIwQYMBaAFPNUCTlIZvtAig0Yjgt9AMxac5SO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREJFOC85RDM2MzE3ODE1 MkIxMUVCOUJENEVCNDZDNEY5QUUwMi84MVFKT1VobS0wQ0tEUmlPQzMwQXpGcHps STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgxUUpPVWhtLTBDS0RSaU9DMzBBekZwemxJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkRCRTgvOUQzNjMxNzgxNTJCMTFFQjlCRDRFQjQ2QzRGOUFFMDIvMDZGMDExQTIx MzRCMTFGMEFBNDFGOTBBQzRGOUFFMDIucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAk BAIAATAeAwQCLUE8AwQCLXLMAwQBZyUIAwQBZzSoAwQCZ1CIMA0EAgACMAcDBQAk AjaAMA0GCSqGSIb3DQEBCwUAA4IBAQB2PYFeaVS/Yw5KN1e8CIHeaVHwTvXvbJUZ N1iEqVxKG6n1g+gZUmswhWhsParMeXe8Bon1j61jHV7YG5hp/wt8VmN0oaX5xkxV 1PwWadX6ALAn1ZZugXj4uSlzNr5fjDzBqOkmI2gE45mx1smMAZTD/fjojgBLnD7L u1BT03k0+bgRkHx4N+slcXLG+Hv20oatlt3uaKBKPMBefMB4ic3h0A4Ok+BX5dGn tsRofhzTmrow6S6Ri+eBpB/tdursfPgfaBHWOTPFFqP+b6wEbxnmcIoW4eaVsJzs bscfUUFtRc3enC1wOf5Q3n9x7k7crD6fNdtUPecqDqv3qq7FKiuJ -----END CERTIFICATE-----Generated at Thu Sep 10 19:08:27 2026 by rpki-client