$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/5C1DBC489BEA11EFBCB36227C4F9AE02.roa File: 5C1DBC489BEA11EFBCB36227C4F9AE02.roa (raw, json) Hash identifier: X9qQAMuSIANj5rZ69KeyXyhB5xhdMqRkN0M45pqUe9g= Subject key identifier: 78:8E:34:C8:82:F1:EF:A3:13:A7:7E:16:9A:4C:14:FB:D5:5F:98:69 Certificate issuer: /CN=A91B67D1/serialNumber=767872BDD0EF826A6495D8126A139FC40493800F Certificate serial: 10AB Authority key identifier: 76:78:72:BD:D0:EF:82:6A:64:95:D8:12:6A:13:9F:C4:04:93:80:0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/5C1DBC489BEA11EFBCB36227C4F9AE02.roa Signing time: Wed 02 Sep 2026 17:35:15 +0000 ROA not before: Wed 02 Sep 2026 17:35:15 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 59033 IP address blocks: 45.114.236.0/22 maxlen: 24 103.71.24.0/24 maxlen: 24 2401:d640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.crl rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4267 (0x10ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B67D1, serialNumber=767872BDD0EF826A6495D8126A139FC40493800F Validity Not Before: Sep 2 17:35:15 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a985e53-35f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:26:45:e4:cc:02:29:da:ad:19:85:62:c9:31: a2:7d:ea:c4:e0:40:19:03:d6:a2:46:8f:c2:82:1f: 14:d6:10:00:86:9b:00:40:30:7a:8c:ff:e7:04:dc: 7c:b4:7a:29:62:0c:29:27:b3:f6:43:b5:48:79:3e: 7a:a7:41:2a:df:ce:d8:ac:da:0d:65:02:6a:cf:c5: 0f:60:72:85:1d:80:3d:61:4d:ce:8e:7c:87:4a:d7: 15:02:45:d1:30:cb:e6:bc:4c:4c:94:c7:b9:06:7d: b8:91:04:fd:6a:7c:11:5b:df:65:5e:9f:e3:a7:fd: f4:56:c4:ec:f1:d0:31:5d:50:93:c4:13:20:c7:00: 25:7e:9d:3e:32:69:ea:d3:e4:f2:21:62:d5:f6:7e: 32:43:fa:dc:af:1f:91:2b:11:db:92:94:6c:5b:a4: c1:f6:2e:a0:21:6a:55:85:ec:79:bc:fa:b9:24:92: e8:d3:0e:e5:ec:29:b9:70:08:c5:77:b3:0d:12:f8: 54:10:f2:8e:5c:8b:d9:5f:34:38:e2:38:7a:fe:f1: 1a:66:11:5b:5c:b0:b8:af:db:8f:dc:2a:44:6a:45: d3:50:33:c0:1e:98:8f:dd:b2:89:15:3e:4a:1c:4b: e7:19:e4:25:67:e4:2a:48:15:14:72:23:3d:ab:c5: 20:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:8E:34:C8:82:F1:EF:A3:13:A7:7E:16:9A:4C:14:FB:D5:5F:98:69 X509v3 Authority Key Identifier: keyid:76:78:72:BD:D0:EF:82:6A:64:95:D8:12:6A:13:9F:C4:04:93:80:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/5C1DBC489BEA11EFBCB36227C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.114.236.0/22 103.71.24.0/24 IPv6: 2401:d640::/32 Signature Algorithm: sha256WithRSAEncryption 26:c9:24:6d:a1:4a:6a:44:31:bd:2f:01:3c:1e:30:b8:65:5b: 78:fb:76:31:ac:e5:c8:75:cb:0e:dc:8c:b3:ae:dd:d8:60:36: 55:28:4e:0f:61:52:eb:34:ce:77:91:a4:74:c6:41:cc:34:e4: ba:0b:29:4a:f1:b0:3f:1b:3f:db:ab:41:14:5c:01:9d:1a:d8: 35:36:e1:02:73:67:8c:17:ff:32:a0:de:b0:89:b0:8a:e6:0e: 6e:3f:cc:b8:3e:b4:5c:fc:31:9d:2c:30:b6:4c:4d:18:93:22: 33:1a:4d:5d:75:fb:9f:99:b6:96:0a:c3:f7:53:95:4d:4a:05: 5c:b7:24:26:9a:f6:d8:99:bf:94:7f:5f:6c:a4:f3:f7:0c:9d: 38:d1:b3:e7:09:f2:47:0d:42:c8:c8:eb:fa:72:35:cc:c7:6c: 39:98:42:d5:5f:08:09:12:6b:5d:af:27:ca:a2:6f:e7:71:4e: 3b:1b:37:f0:74:e2:10:ba:db:c3:88:dc:4e:1b:82:14:bb:75: c2:1c:22:3b:9c:0f:c6:0a:0e:e0:46:24:4b:cc:9f:b2:fe:10: 1c:2e:cf:62:c4:c8:af:11:4d:3e:6d:a7:32:c0:5d:95:6f:3b: f8:14:14:8c:89:85:14:82:e2:29:49:ac:51:ed:b1:e7:ff:44: 37:ad:f3:65 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICEKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY3RDExMTAvBgNVBAUTKDc2Nzg3MkJERDBFRjgyNkE2NDk1RDgxMjZBMTM5RkM0 MDQ5MzgwMEYwHhcNMjYwOTAyMTczNTE1WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4NWU1My0zNWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1CZF5MwCKdqtGYViyTGiferE4EAZA9aiRo/Cgh8U1hAAhpsAQDB6jP/nBNx8 tHopYgwpJ7P2Q7VIeT56p0Eq387YrNoNZQJqz8UPYHKFHYA9YU3OjnyHStcVAkXR MMvmvExMlMe5Bn24kQT9anwRW99lXp/jp/30VsTs8dAxXVCTxBMgxwAlfp0+Mmnq 0+TyIWLV9n4yQ/rcrx+RKxHbkpRsW6TB9i6gIWpVhex5vPq5JJLo0w7l7Cm5cAjF d7MNEvhUEPKOXIvZXzQ44jh6/vEaZhFbXLC4r9uP3CpEakXTUDPAHpiP3bKJFT5K HEvnGeQlZ+QqSBUUciM9q8UgYQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFHiONMiC 8e+jE6d+FppMFPvVX5hpMB8GA1UdIwQYMBaAFHZ4cr3Q74JqZJXYEmoTn8QEk4AP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjdEMS82Q0JDOUI0MDYx MUQxMUU5QjAxMkRCMzdDNEY5QUUwMi9kbmh5dmREdmdtcGtsZGdTYWhPZnhBU1Rn QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RuaHl2ZER2Z21wa2xkZ1NhaE9meEFTVGdBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjY3RDEvNkNCQzlCNDA2MTFEMTFFOUIwMTJEQjM3QzRGOUFFMDIvNUMxREJDNDg5 QkVBMTFFRkJDQjM2MjI3QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCLXLsAwQAZ0cYMA0EAgACMAcDBQAkAdZAMA0GCSqGSIb3DQEBCwUA A4IBAQAmySRtoUpqRDG9LwE8HjC4ZVt4+3YxrOXIdcsO3Iyzrt3YYDZVKE4PYVLr NM53kaR0xkHMNOS6CylK8bA/Gz/bq0EUXAGdGtg1NuECc2eMF/8yoN6wibCK5g5u P8y4PrRc/DGdLDC2TE0YkyIzGk1ddfufmbaWCsP3U5VNSgVctyQmmvbYmb+Uf19s pPP3DJ040bPnCfJHDULIyOv6cjXMx2w5mELVXwgJEmtdryfKom/ncU47GzfwdOIQ utvDiNxOG4IUu3XCHCI7nA/GCg7gRiRLzJ+y/hAcLs9ixMivEU0+bacywF2Vbzv4 FBSMiYUUguIpSaxR7bHn/0Q3rfNl -----END CERTIFICATE-----Generated at Tue Sep 22 07:55:39 2026 by rpki-client