$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D91A51FE753E11ED91728868C4F9AE02.roa File: D91A51FE753E11ED91728868C4F9AE02.roa (raw, json) Hash identifier: PxS+dZ91drRVkpNjqn/HiQXlUGBH5/UGOsE6b4oD3SQ= Subject key identifier: 9B:FD:42:94:59:67:9E:F2:BC:BD:9C:28:C6:64:6F:0B:99:81:28:B7 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6EFC Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D91A51FE753E11ED91728868C4F9AE02.roa Signing time: Fri 02 Oct 2026 15:35:10 +0000 ROA not before: Fri 02 Oct 2026 15:35:10 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 38244 IP address blocks: 45.127.252.0/22 maxlen: 24 49.213.64.0/18 maxlen: 24 58.84.0.0/22 maxlen: 24 61.28.224.0/19 maxlen: 24 103.196.236.0/22 maxlen: 24 103.245.248.0/22 maxlen: 24 118.102.0.0/21 maxlen: 24 120.138.64.0/20 maxlen: 24 122.201.8.0/21 maxlen: 24 2001:df0:13::/48 maxlen: 48 2001:df0:1a::/48 maxlen: 48 2402:4e0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 15:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28412 (0x6efc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 2 15:35:10 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcf2e-8484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bf:54:60:37:5f:96:f2:ff:c4:01:7d:2f:44: 46:7d:ac:e3:8a:37:b9:b8:b5:08:94:71:00:ae:d0: b9:81:d6:f4:f2:63:69:a6:6d:0d:19:06:98:cf:63: 89:30:8c:2c:f4:23:a6:e4:45:0b:d8:06:ed:36:34: ac:e6:9b:0a:5c:14:9c:12:04:12:4c:23:b5:0a:48: 1e:c6:51:ce:66:24:d1:48:9b:f0:39:3a:ef:b9:32: e4:5c:4e:ec:d4:f9:85:94:d7:f1:5e:8c:d9:78:6c: 05:7c:d5:7f:cd:db:01:a5:3c:7a:44:76:f3:08:f0: 10:b8:e2:51:f2:5e:aa:db:df:05:7e:8d:cb:eb:92: 5b:b4:58:fa:81:94:bf:83:a5:b8:07:5f:65:35:6e: 6b:69:80:f4:1c:48:58:92:48:a9:c9:6f:5c:70:db: d6:e3:3e:09:69:43:d9:cc:d5:0f:fd:fc:be:3f:3b: a8:a9:53:72:30:0e:21:5c:8d:5b:22:39:e5:b5:8a: 3b:2e:fa:d9:b5:da:bb:e3:8a:c1:de:c6:38:54:d7: a8:65:0f:da:c5:21:1d:d5:b0:ea:c5:6d:e8:cc:8b: b3:70:31:e3:5f:18:f3:f5:e0:24:82:e3:95:84:3b: cc:fe:af:52:6d:ce:29:4e:01:5b:2e:d7:24:e3:d9: df:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:FD:42:94:59:67:9E:F2:BC:BD:9C:28:C6:64:6F:0B:99:81:28:B7 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D91A51FE753E11ED91728868C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.127.252.0/22 49.213.64.0/18 58.84.0.0/22 61.28.224.0/19 103.196.236.0/22 103.245.248.0/22 118.102.0.0/21 120.138.64.0/20 122.201.8.0/21 IPv6: 2001:df0:13::/48 2001:df0:1a::/48 2402:4e0::/32 Signature Algorithm: sha256WithRSAEncryption 54:3d:ae:c7:32:83:49:8c:45:df:1b:c7:8e:ec:c0:7e:38:52: 08:6e:26:84:a6:be:cf:c5:72:69:ee:f5:d7:98:c5:92:f7:94: e7:4c:49:ec:82:5f:15:ec:9a:df:c3:a5:e5:18:0b:16:da:2d: f2:3c:5f:0e:21:41:fb:72:69:52:f7:8a:aa:8f:6a:76:c9:55: ad:a4:a4:c3:e4:df:59:91:31:5b:1c:a5:b7:03:f5:e3:21:1a: 11:cd:f5:d8:58:21:c1:e2:6e:27:ac:7f:93:8f:0b:a3:b7:37: 59:c4:8c:5d:46:44:f5:62:1b:79:10:2b:d1:55:96:8e:a9:15: 6b:62:6c:da:6f:3b:dd:ce:78:b6:59:df:66:9b:99:d6:12:0f: 63:f7:d7:32:66:fe:e8:c3:e3:93:1a:aa:23:c8:9b:31:27:e1: a9:da:f7:41:50:ec:c3:fd:d8:4c:24:4b:b3:15:43:46:9f:8a: 48:b6:97:3e:09:ef:4a:90:56:18:4e:d4:42:ae:48:5b:48:00: b8:48:93:e9:1d:21:95:e9:b9:5c:5b:de:37:34:44:5f:2e:40: c0:06:cb:67:8b:70:75:03:35:fd:a4:9f:ac:f9:10:85:12:75: 04:8e:9d:b8:9b:f5:98:0a:84:8c:e0:40:73:44:69:a6:2e:7d: 6b:27:41:0c -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICbvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYxMDAyMTUzNTEwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2YyZS04NDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1b9UYDdflvL/xAF9L0RGfazjije5uLUIlHEArtC5gdb08mNppm0NGQaYz2OJ MIws9COm5EUL2AbtNjSs5psKXBScEgQSTCO1CkgexlHOZiTRSJvwOTrvuTLkXE7s 1PmFlNfxXozZeGwFfNV/zdsBpTx6RHbzCPAQuOJR8l6q298Ffo3L65JbtFj6gZS/ g6W4B19lNW5raYD0HEhYkkipyW9ccNvW4z4JaUPZzNUP/fy+PzuoqVNyMA4hXI1b IjnltYo7LvrZtdq744rB3sY4VNeoZQ/axSEd1bDqxW3ozIuzcDHjXxjz9eAkguOV hDvM/q9Sbc4pTgFbLtck49nfaQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFJv9QpRZ Z57yvL2cKMZkbwuZgSi3MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRDkxQTUxRkU3 NTNFMTFFRDkxNzI4ODY4QzRGOUFFMDIucm9hMHAGCCsGAQUFBwEHAQH/BGEwXzA8 BAIAATA2AwQCLX/8AwQGMdVAAwQCOlQAAwQFPRzgAwQCZ8TsAwQCZ/X4AwQDdmYA AwQEeIpAAwQDeskIMB8EAgACMBkDBwAgAQ3wABMDBwAgAQ3wABoDBQAkAgTgMA0G CSqGSIb3DQEBCwUAA4IBAQBUPa7HMoNJjEXfG8eO7MB+OFIIbiaEpr7PxXJp7vXX mMWS95TnTEnsgl8V7Jrfw6XlGAsW2i3yPF8OIUH7cmlS94qqj2p2yVWtpKTD5N9Z kTFbHKW3A/XjIRoRzfXYWCHB4m4nrH+TjwujtzdZxIxdRkT1Yht5ECvRVZaOqRVr Ymzabzvdzni2Wd9mm5nWEg9j99cyZv7ow+OTGqojyJsxJ+Gp2vdBUOzD/dhMJEuz FUNGn4pItpc+Ce9KkFYYTtRCrkhbSAC4SJPpHSGV6blcW943NERfLkDABstni3B1 AzX9pJ+s+RCFEnUEjp24m/WYCoSM4EBzRGmmLn1rJ0EM -----END CERTIFICATE-----Generated at Thu Oct 8 15:53:58 2026 by rpki-client