$ rpki-client -vvvf rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/2A67A9D2A9E111F19CA38F343711F970.roa File: 2A67A9D2A9E111F19CA38F343711F970.roa (raw, json) Hash identifier: /KQ5zKgAQHWaOA/R3xZj3OBEeENaPkswQbSqrAltyps= Subject key identifier: 5A:40:A3:8C:7F:65:D9:0E:1F:96:43:97:40:80:2E:96:C0:E0:8A:5D Certificate issuer: /CN=A91430D6/serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523 Certificate serial: E6 Authority key identifier: AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/2A67A9D2A9E111F19CA38F343711F970.roa Signing time: Mon 07 Sep 2026 06:57:07 +0000 ROA not before: Mon 07 Sep 2026 06:57:07 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 140244 IP address blocks: 165.101.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91430D6, serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523 Validity Not Before: Sep 7 06:57:07 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a9e6043-52fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a9:18:1b:72:8b:7b:60:8a:a2:f0:f1:9c:1d: 68:72:3a:88:15:74:b1:42:a8:50:ff:73:dc:2f:d5: d5:8e:11:3d:1a:21:c5:e2:3b:75:4c:30:c7:1e:a5: 4b:2c:7c:1f:f9:49:56:4e:b5:50:5b:65:7b:75:9e: de:a8:f8:8e:ea:02:56:76:c6:50:5f:18:53:d2:de: df:f6:62:94:b1:dd:9a:ac:37:af:b4:a4:82:f8:04: 12:6b:f7:b4:b9:72:59:0c:91:4e:f9:84:a4:68:86: 75:27:11:98:1a:b6:18:34:14:2e:0e:bf:9b:01:22: 86:6e:01:10:41:6d:50:54:00:88:29:04:92:db:c0: c6:b4:1e:29:60:8f:1d:da:a2:c7:ef:80:5f:66:e5: fb:4c:7a:e5:12:fb:52:72:c1:8c:b6:b2:30:79:60: 8e:69:69:d4:17:8b:f3:45:0b:30:1d:84:78:04:39: 96:68:83:0f:91:c4:3b:79:63:90:b3:e7:87:cd:df: f9:7e:76:4e:14:18:7c:66:10:15:34:df:70:6f:f3: db:44:1d:5d:7c:c7:41:06:45:20:2c:32:6f:9d:45: 3c:16:4f:2c:98:f6:aa:a2:6b:4c:3e:0f:a8:34:ee: 75:8d:17:26:26:88:83:2a:d5:dd:55:0e:c0:76:d7: bd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:40:A3:8C:7F:65:D9:0E:1F:96:43:97:40:80:2E:96:C0:E0:8A:5D X509v3 Authority Key Identifier: keyid:AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/2A67A9D2A9E111F19CA38F343711F970.roa sbgp-ipAddrBlock: critical IPv4: 165.101.168.0/24 Signature Algorithm: sha256WithRSAEncryption c5:04:8e:2d:74:1c:e3:20:1e:ea:d4:a2:d7:48:64:c4:47:43: 08:2f:0a:e2:e0:98:50:92:bd:09:04:a7:49:cd:f9:79:db:9f: 34:6e:6c:40:6a:1f:03:65:ed:4a:51:9b:b1:f9:51:90:74:3b: 46:92:60:36:b1:79:12:61:57:eb:c0:b2:32:72:ae:49:a3:7b: 46:16:92:45:34:20:89:c6:e5:3d:ee:4e:c5:f8:fe:85:f3:5a: 0b:38:fc:57:b4:05:5d:14:53:46:22:8e:70:cf:b5:9b:14:4c: 13:4f:51:dc:80:45:30:e3:4a:c1:cb:ea:9b:07:4d:cf:8c:ff: 2e:ea:d0:8e:b2:d5:7a:aa:73:b8:2f:cb:ab:dc:a2:e6:2e:d7: ac:e4:28:3a:32:bf:38:5c:88:63:c7:12:27:d6:42:ae:93:9e: 6c:49:e1:90:08:e7:72:8f:db:6c:c7:d7:2b:bd:89:92:ce:41: 6e:53:19:a1:16:ca:f9:4f:af:45:79:42:3f:f6:02:41:bd:a2: 4a:5a:a9:93:21:0c:37:21:ce:2a:c8:b3:7f:bd:37:20:43:da: 48:a7:5b:18:7e:e4:2a:67:9b:d6:70:44:f5:df:6b:e4:1a:0e: 29:98:d5:5f:77:16:3b:7e:b6:27:45:03:68:b7:ef:e7:79:f1: 43:78:3b:63 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMwRDYxMTAvBgNVBAUTKEFBQzM5RkQ5NjNERTE3MzFEMERBM0Q0MTQxRTRBMUU0 NjlFOTg1MjMwHhcNMjYwOTA3MDY1NzA3WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTllNjA0My01MmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqkYG3KLe2CKovDxnB1ocjqIFXSxQqhQ/3PcL9XVjhE9GiHF4jt1TDDHHqVL LHwf+UlWTrVQW2V7dZ7eqPiO6gJWdsZQXxhT0t7f9mKUsd2arDevtKSC+AQSa/e0 uXJZDJFO+YSkaIZ1JxGYGrYYNBQuDr+bASKGbgEQQW1QVACIKQSS28DGtB4pYI8d 2qLH74BfZuX7THrlEvtScsGMtrIweWCOaWnUF4vzRQswHYR4BDmWaIMPkcQ7eWOQ s+eHzd/5fnZOFBh8ZhAVNN9wb/PbRB1dfMdBBkUgLDJvnUU8Fk8smPaqomtMPg+o NO51jRcmJoiDKtXdVQ7Adte9JQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFpAo4x/ ZdkOH5ZDl0CALpbA4IpdMB8GA1UdIwQYMBaAFKrDn9lj3hcx0No9QUHkoeRp6YUj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzBENi8xN0YwNkEyNDVG RTAxMUYwQjJGRDhGNTdDNEY5QUUwMi9xc09mMldQZUZ6SFEyajFCUWVTaDVHbnBo U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FzT2YyV1BlRnpIUTJqMUJRZVNoNUducGhTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDMwRDYvMTdGMDZBMjQ1RkUwMTFGMEIyRkQ4RjU3QzRGOUFFMDIvMkE2N0E5RDJB OUUxMTFGMTlDQTM4RjM0MzcxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQApWWoMA0GCSqGSIb3DQEBCwUAA4IBAQDFBI4tdBzjIB7q1KLXSGTE R0MILwri4JhQkr0JBKdJzfl52580bmxAah8DZe1KUZux+VGQdDtGkmA2sXkSYVfr wLIycq5Jo3tGFpJFNCCJxuU97k7F+P6F81oLOPxXtAVdFFNGIo5wz7WbFEwTT1Hc gEUw40rBy+qbB03PjP8u6tCOstV6qnO4L8ur3KLmLtes5Cg6Mr84XIhjxxIn1kKu k55sSeGQCOdyj9tsx9crvYmSzkFuUxmhFsr5T69FeUI/9gJBvaJKWqmTIQw3Ic4q yLN/vTcgQ9pIp1sYfuQqZ5vWcET132vkGg4pmNVfdxY7frYnRQNot+/nefFDeDtj -----END CERTIFICATE-----Generated at Wed Sep 23 00:52:15 2026 by rpki-client