$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/436251B0C52311F0A1118818C4F9AE02.roa File: 436251B0C52311F0A1118818C4F9AE02.roa (raw, json) Hash identifier: rWbPnjm/JvnTJWnBFd9TRsQ84zFWbQzVjnxVj9NliVs= Subject key identifier: 33:6C:E4:4E:1E:52:1E:91:87:6A:EA:C4:0E:73:42:A7:EC:B3:90:82 Certificate issuer: /CN=A91B2D56/serialNumber=91B289916B5EF7B36869B3BA810C245B364E43C0 Certificate serial: A9 Authority key identifier: 91:B2:89:91:6B:5E:F7:B3:68:69:B3:BA:81:0C:24:5B:36:4E:43:C0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/436251B0C52311F0A1118818C4F9AE02.roa Signing time: Thu 01 Oct 2026 08:56:51 +0000 ROA not before: Thu 01 Oct 2026 08:56:51 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 139704 IP address blocks: 165.101.220.0/23 maxlen: 23 165.101.220.0/24 maxlen: 24 165.101.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.crl rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 07:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D56, serialNumber=91B289916B5EF7B36869B3BA810C245B364E43C0 Validity Not Before: Oct 1 08:56:51 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6abe2053-50d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:82:c6:15:52:72:75:fd:b4:bb:93:0f:60:ee: ab:55:5f:d4:ac:32:00:9b:87:09:da:71:a1:67:38: 03:51:cc:f8:1b:24:6b:b3:2a:10:d6:1b:2e:8d:78: e5:b6:57:e2:35:17:04:22:34:da:66:f9:30:1c:60: 5d:bb:88:eb:f8:55:01:42:36:72:93:b2:0b:58:5b: 38:d0:93:7f:0d:8a:0a:23:c9:4f:5c:bf:b1:cc:ae: 3e:76:e3:5a:02:24:d2:57:3a:4a:72:ef:93:9d:c2: 16:84:08:9e:52:77:e8:84:70:aa:df:e9:96:b1:bf: 61:ea:01:f8:48:5c:37:40:30:88:05:e2:bd:22:e2: c0:de:43:71:e8:5d:7d:e6:47:93:0e:5b:4a:6c:9b: fa:ef:71:ff:00:46:07:4f:61:a4:5f:d8:65:d5:06: 43:b8:14:16:25:5e:84:58:13:c9:37:09:07:8a:cd: 41:76:94:8c:83:94:bc:93:e4:f5:c1:10:2e:f4:21: 30:8a:45:00:0e:d9:f6:00:ea:bf:11:83:1e:bf:18: 92:06:96:fc:10:5d:66:9c:5e:0f:28:59:42:15:3b: 86:23:79:62:65:41:74:e8:6c:59:be:4a:7e:48:a9: 08:5e:7b:ed:b2:2c:ef:6f:26:a4:09:8b:16:ad:3a: 8f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6C:E4:4E:1E:52:1E:91:87:6A:EA:C4:0E:73:42:A7:EC:B3:90:82 X509v3 Authority Key Identifier: keyid:91:B2:89:91:6B:5E:F7:B3:68:69:B3:BA:81:0C:24:5B:36:4E:43:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/436251B0C52311F0A1118818C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 165.101.220.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:99:36:c7:61:b6:35:96:90:3e:b5:73:48:e7:a3:ca:bb:54: d6:d8:ea:cc:d4:7f:e8:7a:83:59:db:a8:e5:d3:87:47:bf:76: 1b:9d:71:fd:72:38:1a:a9:3c:3a:4e:4b:24:40:90:0e:e8:92: 1f:2e:6f:2a:13:91:b8:46:20:b8:2b:a6:2e:07:36:84:2e:60: 0b:02:55:8b:cd:7d:62:f6:43:19:70:fe:b6:35:57:80:d1:e3: 15:44:d6:fd:0a:46:c4:77:0a:1d:e4:b7:01:d5:0e:e6:91:1e: 5e:a1:03:23:a5:c6:52:46:3d:9c:28:0f:7a:6f:85:fb:90:48: db:9e:87:cf:ef:29:ba:8a:b4:97:8b:fa:1d:40:76:73:b2:65: af:a5:77:49:22:a3:3e:51:2b:21:a4:f1:63:19:c9:0b:ec:80: 34:33:9a:33:37:41:06:41:ce:ae:c5:ef:12:4b:c7:71:4b:6e: 48:3d:16:d0:1a:5c:8a:af:c4:e7:12:3d:55:2a:18:68:cd:fa: 9f:d5:bf:2e:1c:ac:62:29:4f:af:72:07:9d:4a:79:e7:4a:9b: c4:47:e1:4b:82:a4:da:6a:30:b0:7a:b9:5d:c6:38:e4:3f:c2: 62:0c:87:0d:cb:da:48:bd:7a:af:b2:9a:16:e2:2d:ec:0c:5c: b8:20:c9:fc -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJENTYxMTAvBgNVBAUTKDkxQjI4OTkxNkI1RUY3QjM2ODY5QjNCQTgxMEMyNDVC MzY0RTQzQzAwHhcNMjYxMDAxMDg1NjUxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJlMjA1My01MGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnILGFVJydf20u5MPYO6rVV/UrDIAm4cJ2nGhZzgDUcz4GyRrsyoQ1hsujXjl tlfiNRcEIjTaZvkwHGBdu4jr+FUBQjZyk7ILWFs40JN/DYoKI8lPXL+xzK4+duNa AiTSVzpKcu+TncIWhAieUnfohHCq3+mWsb9h6gH4SFw3QDCIBeK9IuLA3kNx6F19 5keTDltKbJv673H/AEYHT2GkX9hl1QZDuBQWJV6EWBPJNwkHis1BdpSMg5S8k+T1 wRAu9CEwikUADtn2AOq/EYMevxiSBpb8EF1mnF4PKFlCFTuGI3liZUF06GxZvkp+ SKkIXnvtsizvbyakCYsWrTqPcwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDNs5E4e Uh6Rh2rqxA5zQqfss5CCMB8GA1UdIwQYMBaAFJGyiZFrXvezaGmzuoEMJFs2TkPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQ1Ni9FREJCREZEOEM1 MjIxMUYwODdDN0IyMTdDNEY5QUUwMi9rYktKa1d0ZTk3Tm9hYk82Z1F3a1d6Wk9R OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tiS0prV3RlOTdOb2FiTzZnUXdrV3paT1E4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjJENTYvRURCQkRGRDhDNTIyMTFGMDg3QzdCMjE3QzRGOUFFMDIvNDM2MjUxQjBD NTIzMTFGMEExMTE4ODE4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBpWXcMA0GCSqGSIb3DQEBCwUAA4IBAQB+mTbHYbY1lpA+tXNI56PK u1TW2OrM1H/oeoNZ26jl04dHv3YbnXH9cjgaqTw6TkskQJAO6JIfLm8qE5G4RiC4 K6YuBzaELmALAlWLzX1i9kMZcP62NVeA0eMVRNb9CkbEdwod5LcB1Q7mkR5eoQMj pcZSRj2cKA96b4X7kEjbnofP7ym6irSXi/odQHZzsmWvpXdJIqM+USshpPFjGckL 7IA0M5ozN0EGQc6uxe8SS8dxS25IPRbQGlyKr8TnEj1VKhhozfqf1b8uHKxiKU+v cgedSnnnSpvER+FLgqTaajCwerldxjjkP8JiDIcNy9pIvXqvspoW4i3sDFy4IMn8 -----END CERTIFICATE-----Generated at Thu Oct 8 17:33:31 2026 by rpki-client