$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0CB3549EA01011F086F7E872C4F9AE02.roa File: 0CB3549EA01011F086F7E872C4F9AE02.roa (raw, json) Hash identifier: izpFARPpaKvDPxpusEDGPWKKxm2iX7zQPZjgOmHb30s= Subject key identifier: 53:59:07:71:E3:94:2E:F9:61:AB:39:7E:85:78:C2:15:D7:93:81:73 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6EDF Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0CB3549EA01011F086F7E872C4F9AE02.roa Signing time: Fri 02 Oct 2026 15:34:10 +0000 ROA not before: Fri 02 Oct 2026 15:34:10 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 154247 IP address blocks: 121.200.216.0/24 maxlen: 24 121.200.217.0/24 maxlen: 24 2001:df6:22c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 15:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28383 (0x6edf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 2 15:34:10 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcef2-da23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9e:d3:ee:e2:a4:2b:f0:e1:51:d8:93:a9:e5: ff:75:66:80:8f:85:e4:1c:d0:61:7a:f2:74:17:8b: 96:c9:63:0d:a6:13:69:2d:30:bc:92:b2:ce:86:d3: 1f:e9:e7:77:b0:d9:ae:fe:d9:89:93:ae:09:69:7b: 3c:a6:71:de:8d:f4:0a:9c:70:82:43:b3:c2:e9:39: 71:b3:54:b6:48:d2:89:64:76:1a:9e:80:24:2a:f6: 78:cf:00:da:9a:71:57:9e:4a:80:0d:71:ff:fb:30: c3:bb:cb:81:db:4d:68:48:08:8a:c0:b2:89:f1:35: 60:54:3e:0b:e0:b8:71:da:6b:cb:04:be:7c:b9:90: aa:6f:d8:04:a6:c6:05:12:b6:9d:a1:64:c0:d4:80: af:1c:41:a8:b4:6e:4f:0a:e4:e8:17:02:79:74:72: e4:db:1e:31:8a:90:93:b9:09:c7:48:21:b0:4b:89: 09:be:ad:b3:6e:78:6f:22:1d:76:bd:ec:61:94:b2: 2a:26:19:a1:56:2c:f3:5d:a3:d5:cb:c4:94:73:f1: 57:b2:9a:de:c1:30:1d:3f:1a:26:ab:75:8d:4c:9c: 4f:55:5c:ed:2b:99:6a:17:67:f3:68:07:cb:07:18: c4:53:a5:f0:f3:ea:f8:74:8d:12:b3:54:3c:82:17: 64:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:59:07:71:E3:94:2E:F9:61:AB:39:7E:85:78:C2:15:D7:93:81:73 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0CB3549EA01011F086F7E872C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 121.200.216.0/23 IPv6: 2001:df6:22c0::/48 Signature Algorithm: sha256WithRSAEncryption a5:12:ea:0d:4c:8f:92:ff:93:5c:67:b0:d3:33:41:f3:2f:a5: dd:c6:f1:63:a4:29:59:f0:57:a8:26:1f:ed:d1:c8:14:c8:db: 1d:13:65:e0:0f:c1:7f:a6:ff:aa:41:7b:f3:67:b4:49:31:e7: 23:f0:70:d8:2f:2b:38:97:2a:6e:bb:09:7a:0a:8d:2f:14:ff: 0e:3f:da:48:a3:1f:58:bf:4a:cb:7a:2e:2a:7f:c5:25:80:45: b5:70:79:ac:c8:e7:ad:9a:bf:df:b9:a9:af:6c:fd:a0:08:87: af:57:22:23:8c:67:66:d0:35:91:88:ef:53:fd:00:d7:60:85: 61:d7:7b:7d:73:1e:ce:17:43:7a:da:e8:29:a6:ea:e9:11:eb: 53:89:18:8e:7d:86:17:a6:24:54:ad:83:8f:ea:35:d7:3c:d7: f0:66:b5:c0:8a:90:5c:81:31:38:63:86:d3:a6:8c:3d:8b:2c: 98:f7:b0:4b:ca:13:56:15:54:a8:77:b5:d4:4a:84:80:a3:b5: 32:65:d8:b3:58:a3:7e:75:18:23:42:9c:ab:6a:e1:9b:92:bc: cf:63:c3:40:a1:65:ca:0a:76:ed:e0:1a:c2:68:f1:4e:e1:0e: a8:21:5e:bf:4e:8a:68:a7:89:8b:77:96:4a:f9:2c:6d:78:48: ad:fa:cb:74 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICbt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYxMDAyMTUzNDEwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2VmMi1kYTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm57T7uKkK/DhUdiTqeX/dWaAj4XkHNBhevJ0F4uWyWMNphNpLTC8krLOhtMf 6ed3sNmu/tmJk64JaXs8pnHejfQKnHCCQ7PC6Tlxs1S2SNKJZHYanoAkKvZ4zwDa mnFXnkqADXH/+zDDu8uB201oSAiKwLKJ8TVgVD4L4Lhx2mvLBL58uZCqb9gEpsYF EradoWTA1ICvHEGotG5PCuToFwJ5dHLk2x4xipCTuQnHSCGwS4kJvq2zbnhvIh12 vexhlLIqJhmhVizzXaPVy8SUc/FXsprewTAdPxomq3WNTJxPVVztK5lqF2fzaAfL BxjEU6Xw8+r4dI0Ss1Q8ghdkcwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFFNZB3Hj lC75Yas5foV4whXXk4FzMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMENCMzU0OUVB MDEwMTFGMDg2RjdFODcyQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBecjYMA8EAgACMAkDBwAgAQ32IsAwDQYJKoZIhvcNAQELBQADggEB AKUS6g1Mj5L/k1xnsNMzQfMvpd3G8WOkKVnwV6gmH+3RyBTI2x0TZeAPwX+m/6pB e/NntEkx5yPwcNgvKziXKm67CXoKjS8U/w4/2kijH1i/Sst6Lip/xSWARbVweazI 562av9+5qa9s/aAIh69XIiOMZ2bQNZGI71P9ANdghWHXe31zHs4XQ3ra6Cmm6ukR 61OJGI59hhemJFStg4/qNdc81/BmtcCKkFyBMThjhtOmjD2LLJj3sEvKE1YVVKh3 tdRKhICjtTJl2LNYo351GCNCnKtq4ZuSvM9jw0ChZcoKdu3gGsJo8U7hDqghXr9O iminiYt3lkr5LG14SK36y3Q= -----END CERTIFICATE-----Generated at Thu Oct 8 02:15:43 2026 by rpki-client