$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/5B3CBC209BEA11EFBCB36227C4F9AE02.roa File: 5B3CBC209BEA11EFBCB36227C4F9AE02.roa (raw, json) Hash identifier: Cj4OYm14pPKAq2MPYlPoOUpdF12Cuo+hs3NS/ALB7Mk= Subject key identifier: 72:55:6B:2D:6F:14:F9:69:26:1A:F9:95:E1:93:EE:4C:AB:C7:83:C7 Certificate issuer: /CN=A91B67D1/serialNumber=767872BDD0EF826A6495D8126A139FC40493800F Certificate serial: 10AA Authority key identifier: 76:78:72:BD:D0:EF:82:6A:64:95:D8:12:6A:13:9F:C4:04:93:80:0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/5B3CBC209BEA11EFBCB36227C4F9AE02.roa Signing time: Wed 02 Sep 2026 17:35:13 +0000 ROA not before: Wed 02 Sep 2026 17:35:13 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 132168 IP address blocks: 45.114.236.0/22 maxlen: 24 103.71.24.0/24 maxlen: 24 2401:d640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.crl rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4266 (0x10aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B67D1, serialNumber=767872BDD0EF826A6495D8126A139FC40493800F Validity Not Before: Sep 2 17:35:13 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a985e51-1ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:37:fa:c1:23:44:c8:9f:25:97:55:21:2c:fd: c6:c5:cf:ff:93:74:ac:03:62:37:96:63:b6:7c:c4: 7d:91:9b:76:14:93:ed:94:e0:c4:50:de:68:8c:db: 68:7a:18:2e:19:28:1a:81:6c:4b:9f:14:11:34:b0: 88:d0:a4:53:3c:cb:96:ff:06:86:cd:51:79:ca:e9: bc:b0:6f:5c:60:44:f6:c7:0a:05:99:2d:75:25:3b: 91:86:37:2f:52:f4:bc:65:82:ce:da:6e:1d:58:10: b3:26:a8:b8:6d:c0:b6:53:66:0d:e1:ac:ac:73:a9: fd:89:5f:dc:22:e7:de:c5:07:98:5d:3d:2f:cf:91: da:0f:d1:0c:87:4a:cb:3f:03:75:fc:73:e1:08:ea: 08:55:34:e7:46:4f:95:da:c6:fe:65:25:c3:73:ab: 33:44:fc:58:3d:8e:ff:67:a8:f9:a6:df:50:fa:7c: 3c:ac:85:16:c9:b3:a4:3f:91:b6:d0:f6:a6:d8:57: e8:ac:ce:26:c1:0b:bd:cf:29:ac:f5:3c:e5:88:78: 23:36:34:1f:5c:4a:0d:5b:0c:15:dc:47:ad:39:f4: 72:de:9d:fa:ed:c7:f3:60:7b:56:34:13:cb:3c:db: 25:a5:50:16:23:6a:82:e1:6c:19:e7:1a:91:31:ab: 9d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:55:6B:2D:6F:14:F9:69:26:1A:F9:95:E1:93:EE:4C:AB:C7:83:C7 X509v3 Authority Key Identifier: keyid:76:78:72:BD:D0:EF:82:6A:64:95:D8:12:6A:13:9F:C4:04:93:80:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/5B3CBC209BEA11EFBCB36227C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.114.236.0/22 103.71.24.0/24 IPv6: 2401:d640::/32 Signature Algorithm: sha256WithRSAEncryption 47:49:cc:bd:ae:80:d0:ac:8c:4f:65:c1:7e:0c:8c:e4:d1:6a: fb:3c:d9:00:85:6f:cf:0e:e5:31:de:f2:74:11:69:ef:84:86: a6:5f:91:72:33:96:cf:4b:b5:eb:d6:ab:03:ed:8f:0c:cf:f0: 95:53:b3:fd:40:a1:9e:4c:36:10:b3:81:1b:0f:2c:cf:69:f6: 5f:a6:06:2b:9d:3a:e0:91:2d:8a:42:25:18:de:e5:48:b7:d9: 1d:f2:fb:35:f6:65:a9:e7:80:ff:19:29:c9:c4:9f:37:b0:d3: 0b:bf:89:3b:c5:2c:00:f1:f7:a9:bc:f0:c1:e7:82:08:44:06: 75:07:0e:59:d9:02:80:51:c1:4a:2b:33:01:5d:41:ac:3d:23: 2d:97:57:41:e6:51:bb:c2:f6:4b:c7:f6:5b:be:44:f5:af:49: 6d:ee:9c:d2:02:60:fb:b7:50:4e:33:4b:b6:47:21:92:f9:ec: 37:9e:8a:29:05:41:15:a2:0d:ed:4e:30:13:6c:9f:df:23:50: 6d:1d:00:02:27:72:d0:9e:ab:ac:a1:a5:44:f4:10:69:15:3a: 48:3c:dc:5c:c7:1b:16:10:6b:72:fe:5a:c4:da:d9:40:0d:fd: a1:bf:b1:94:1f:c2:bc:b9:aa:f6:6b:fb:73:24:c6:b9:a0:3b: e1:1f:41:74 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICEKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY3RDExMTAvBgNVBAUTKDc2Nzg3MkJERDBFRjgyNkE2NDk1RDgxMjZBMTM5RkM0 MDQ5MzgwMEYwHhcNMjYwOTAyMTczNTEzWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4NWU1MS0xZmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjf6wSNEyJ8ll1UhLP3Gxc//k3SsA2I3lmO2fMR9kZt2FJPtlODEUN5ojNto ehguGSgagWxLnxQRNLCI0KRTPMuW/waGzVF5yum8sG9cYET2xwoFmS11JTuRhjcv UvS8ZYLO2m4dWBCzJqi4bcC2U2YN4aysc6n9iV/cIufexQeYXT0vz5HaD9EMh0rL PwN1/HPhCOoIVTTnRk+V2sb+ZSXDc6szRPxYPY7/Z6j5pt9Q+nw8rIUWybOkP5G2 0Pam2FforM4mwQu9zyms9TzliHgjNjQfXEoNWwwV3EetOfRy3p367cfzYHtWNBPL PNslpVAWI2qC4WwZ5xqRMaudeQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFHJVay1v FPlpJhr5leGT7kyrx4PHMB8GA1UdIwQYMBaAFHZ4cr3Q74JqZJXYEmoTn8QEk4AP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjdEMS82Q0JDOUI0MDYx MUQxMUU5QjAxMkRCMzdDNEY5QUUwMi9kbmh5dmREdmdtcGtsZGdTYWhPZnhBU1Rn QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RuaHl2ZER2Z21wa2xkZ1NhaE9meEFTVGdBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjY3RDEvNkNCQzlCNDA2MTFEMTFFOUIwMTJEQjM3QzRGOUFFMDIvNUIzQ0JDMjA5 QkVBMTFFRkJDQjM2MjI3QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCLXLsAwQAZ0cYMA0EAgACMAcDBQAkAdZAMA0GCSqGSIb3DQEBCwUA A4IBAQBHScy9roDQrIxPZcF+DIzk0Wr7PNkAhW/PDuUx3vJ0EWnvhIamX5FyM5bP S7Xr1qsD7Y8Mz/CVU7P9QKGeTDYQs4EbDyzPafZfpgYrnTrgkS2KQiUY3uVIt9kd 8vs19mWp54D/GSnJxJ83sNMLv4k7xSwA8fepvPDB54IIRAZ1Bw5Z2QKAUcFKKzMB XUGsPSMtl1dB5lG7wvZLx/ZbvkT1r0lt7pzSAmD7t1BOM0u2RyGS+ew3noopBUEV og3tTjATbJ/fI1BtHQACJ3LQnqusoaVE9BBpFTpIPNxcxxsWEGty/lrE2tlADf2h v7GUH8K8uar2a/tzJMa5oDvhH0F0 -----END CERTIFICATE-----Generated at Thu Sep 24 09:07:00 2026 by rpki-client