$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/AE31872C5DBD11F083DD7F61C4F9AE02.roa File: AE31872C5DBD11F083DD7F61C4F9AE02.roa (raw, json) Hash identifier: CwQwKB1HiO4WU+K4KyNPGS3F5C0FjCcAF6X+FcGgBgk= Subject key identifier: D7:F4:69:DA:4A:F1:9A:9A:62:8F:99:6E:F7:63:F8:D7:73:12:6F:F6 Certificate issuer: /CN=A91A99C5/serialNumber=564B69178F269EFB96B76916F78170754E8F0C87 Certificate serial: E4 Authority key identifier: 56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/AE31872C5DBD11F083DD7F61C4F9AE02.roa Signing time: Mon 31 Aug 2026 07:56:06 +0000 ROA not before: Mon 31 Aug 2026 07:56:06 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 153998 IP address blocks: 165.101.68.0/23 maxlen: 23 165.101.68.0/24 maxlen: 24 165.101.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:17:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A99C5, serialNumber=564B69178F269EFB96B76916F78170754E8F0C87 Validity Not Before: Aug 31 07:56:06 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a953396-ffa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:22:fb:2d:78:6b:26:82:34:be:3d:19:7b:90: f9:e5:ff:71:1a:0f:fc:97:c6:af:a2:22:86:4b:e9: 40:60:3c:bc:83:bd:dc:2e:9a:7a:36:5b:f1:fc:44: 93:09:b6:71:5e:28:52:84:38:31:70:b8:d7:44:d5: e2:df:e0:df:01:1a:f6:7e:ea:4a:23:b6:21:e0:8c: 99:c9:06:f1:75:a1:3b:44:97:ab:78:85:b3:14:fe: 12:fc:50:fd:12:40:fa:bc:98:ce:d7:22:07:13:69: af:36:d4:72:95:a5:fd:a3:f4:63:02:f1:78:17:fd: f5:a0:b8:9e:31:8f:0a:29:23:c9:61:ca:ca:85:20: d9:37:85:cd:bf:0a:12:27:92:d2:e7:18:d3:c8:c5: 77:26:a8:51:de:bd:4a:18:36:a2:1a:83:38:c1:e4: 8c:6b:db:fe:6f:bb:fd:e1:6b:cf:bb:47:0e:8f:e0: 1d:ad:8e:50:88:22:bd:c3:52:9d:79:04:13:66:27: 0d:72:40:aa:d9:72:f8:e1:d4:a9:0f:6b:56:31:c5: 81:98:d4:9f:c6:73:5c:a7:00:4e:48:6a:b9:88:4e: 1a:80:9c:2b:15:ab:03:dd:5f:4a:fe:66:3b:ca:db: 77:8f:1a:03:72:d6:48:81:f0:b3:e7:fb:03:42:f9: bb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F4:69:DA:4A:F1:9A:9A:62:8F:99:6E:F7:63:F8:D7:73:12:6F:F6 X509v3 Authority Key Identifier: keyid:56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/AE31872C5DBD11F083DD7F61C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 165.101.68.0/23 Signature Algorithm: sha256WithRSAEncryption cd:56:a3:35:ce:3b:21:1a:c7:c9:3c:5b:4e:ce:e6:80:04:4b: ef:fc:2f:e8:79:39:60:30:32:4d:78:04:c5:08:37:f7:21:93: 43:65:dc:d9:24:2b:69:8a:84:30:ec:6b:5b:15:8d:a0:dc:b3: 5f:60:08:77:bd:4e:65:a9:0e:15:c1:eb:88:fe:e2:69:45:bb: 35:26:9d:57:03:69:2c:6b:4d:f6:68:5f:a0:30:f9:c2:0d:18: d4:76:5a:b2:4a:93:0b:61:ee:d5:ee:df:e1:e2:7e:2e:c1:b6: 8e:0b:b1:89:d0:b3:d1:e6:fd:03:e6:fb:02:2f:4c:68:ed:8f: 58:cd:2f:a6:46:f7:ad:5d:ae:aa:b6:66:73:16:f5:e7:8d:81: 32:24:fb:ec:10:b9:52:86:d7:7c:82:d7:bc:0e:18:ae:be:55: 43:d1:95:5e:f6:c7:9f:68:75:8b:cb:af:e8:82:5c:99:d4:d5: 57:73:43:15:46:e3:b0:32:c3:83:5a:a1:55:9e:04:8b:fc:6b: d6:c0:ce:6e:d3:91:e4:05:35:f3:b5:7e:bc:11:30:d6:2d:98: 05:81:18:2d:0f:47:d4:81:11:14:0e:a8:10:33:5e:56:37:20: 05:dd:0f:f4:8a:f1:0a:42:d1:cd:72:71:8e:61:07:84:83:9f: 0d:ec:af:ca -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk5QzUxMTAvBgNVBAUTKDU2NEI2OTE3OEYyNjlFRkI5NkI3NjkxNkY3ODE3MDc1 NEU4RjBDODcwHhcNMjYwODMxMDc1NjA2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk1MzM5Ni1mZmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2SL7LXhrJoI0vj0Ze5D55f9xGg/8l8avoiKGS+lAYDy8g73cLpp6Nlvx/EST CbZxXihShDgxcLjXRNXi3+DfARr2fupKI7Yh4IyZyQbxdaE7RJereIWzFP4S/FD9 EkD6vJjO1yIHE2mvNtRylaX9o/RjAvF4F/31oLieMY8KKSPJYcrKhSDZN4XNvwoS J5LS5xjTyMV3JqhR3r1KGDaiGoM4weSMa9v+b7v94WvPu0cOj+AdrY5QiCK9w1Kd eQQTZicNckCq2XL44dSpD2tWMcWBmNSfxnNcpwBOSGq5iE4agJwrFasD3V9K/mY7 ytt3jxoDctZIgfCz5/sDQvm7YwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNf0adpK 8ZqaYo+Zbvdj+NdzEm/2MB8GA1UdIwQYMBaAFFZLaRePJp77lrdpFveBcHVOjwyH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTlDNS9GQzAxRTg3QzVE QkIxMUYwOUFBMTc4NTBDNEY5QUUwMi9Wa3RwRjQ4bW52dVd0MmtXOTRGd2RVNlBE SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZrdHBGNDhtbnZ1V3Qya1c5NEZ3ZFU2UERJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTk5QzUvRkMwMUU4N0M1REJCMTFGMDlBQTE3ODUwQzRGOUFFMDIvQUUzMTg3MkM1 REJEMTFGMDgzREQ3RjYxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBpWVEMA0GCSqGSIb3DQEBCwUAA4IBAQDNVqM1zjshGsfJPFtOzuaA BEvv/C/oeTlgMDJNeATFCDf3IZNDZdzZJCtpioQw7GtbFY2g3LNfYAh3vU5lqQ4V weuI/uJpRbs1Jp1XA2ksa032aF+gMPnCDRjUdlqySpMLYe7V7t/h4n4uwbaOC7GJ 0LPR5v0D5vsCL0xo7Y9YzS+mRvetXa6qtmZzFvXnjYEyJPvsELlShtd8gte8Dhiu vlVD0ZVe9sefaHWLy6/oglyZ1NVXc0MVRuOwMsODWqFVngSL/GvWwM5u05HkBTXz tX68ETDWLZgFgRgtD0fUgREUDqgQM15WNyAF3Q/0ivEKQtHNcnGOYQeEg58N7K/K -----END CERTIFICATE-----Generated at Wed Sep 23 16:26:42 2026 by rpki-client