$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/5CCDCD7C9BEA11EFBCB36227C4F9AE02.roa File: 5CCDCD7C9BEA11EFBCB36227C4F9AE02.roa (raw, json) Hash identifier: sWIaQsRig/VPK+jbVKOZ7b0CcY18nT76qL7QJZBmK1M= Subject key identifier: 14:62:9D:18:65:9E:8E:DC:75:7D:A2:1F:A5:DE:49:CA:34:70:7D:1C Certificate issuer: /CN=A91B67D1/serialNumber=767872BDD0EF826A6495D8126A139FC40493800F Certificate serial: 10AC Authority key identifier: 76:78:72:BD:D0:EF:82:6A:64:95:D8:12:6A:13:9F:C4:04:93:80:0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/5CCDCD7C9BEA11EFBCB36227C4F9AE02.roa Signing time: Wed 02 Sep 2026 17:35:18 +0000 ROA not before: Wed 02 Sep 2026 17:35:18 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 63689 IP address blocks: 45.114.236.0/22 maxlen: 24 103.71.24.0/24 maxlen: 24 2401:d640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.crl rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4268 (0x10ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B67D1, serialNumber=767872BDD0EF826A6495D8126A139FC40493800F Validity Not Before: Sep 2 17:35:18 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a985e55-084c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9f:12:50:62:94:10:fe:f1:fa:1d:4d:76:0d: e8:bc:04:1d:4d:1e:e8:3b:f7:a3:3a:79:b5:b8:16: 3b:df:31:91:6e:e5:06:28:e8:34:d4:50:0d:d3:f8: d5:c5:44:15:77:70:92:32:0a:22:2f:a1:2c:01:6d: cf:a3:40:98:91:c4:c9:29:ef:f1:46:14:a7:07:8f: e1:c0:3b:85:8f:16:0b:0e:42:43:dd:a4:d7:0c:82: 86:5f:b3:04:c1:35:d3:1e:11:7f:35:1a:fa:ec:8d: 27:76:d9:b3:84:8e:6c:f6:ae:ae:78:a2:ec:90:1c: 39:64:23:08:a4:8e:de:22:32:4a:3a:c9:c2:9f:99: e8:3c:ec:f0:1d:64:bb:10:4e:7f:4c:8e:8a:70:08: 6d:8b:c4:d0:16:35:a1:fe:eb:30:94:16:f7:55:31: 71:94:d1:f5:e6:62:17:cc:c1:55:f9:db:5b:76:0c: e9:cc:79:85:e0:30:af:fa:a0:20:ed:05:5c:b5:1f: e7:77:4c:d8:d3:48:fc:f3:f7:b3:c1:17:1e:3e:3b: c8:06:11:95:42:14:f7:d7:6d:57:53:86:51:5b:7d: 84:22:91:c3:3f:d3:86:75:4f:6e:37:91:e1:98:73: ad:b1:f1:88:0e:2f:a0:1e:cd:8d:c0:8f:bf:ba:d8: 4f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:62:9D:18:65:9E:8E:DC:75:7D:A2:1F:A5:DE:49:CA:34:70:7D:1C X509v3 Authority Key Identifier: keyid:76:78:72:BD:D0:EF:82:6A:64:95:D8:12:6A:13:9F:C4:04:93:80:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/5CCDCD7C9BEA11EFBCB36227C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.114.236.0/22 103.71.24.0/24 IPv6: 2401:d640::/32 Signature Algorithm: sha256WithRSAEncryption 4b:02:ac:f4:b6:70:3c:ff:7a:5d:34:59:ea:73:f7:74:82:21: b4:29:6b:42:4e:28:05:de:ff:20:64:8d:e8:b3:66:26:05:8c: bb:93:55:d9:ff:19:67:4c:32:fb:63:dd:76:65:85:fb:d5:84: 29:ad:21:9f:7a:25:82:c0:78:89:c9:b6:10:3e:9f:ef:86:a3: 63:ec:bd:47:14:f1:e7:7c:5e:ab:b7:1a:b6:a1:c1:eb:f9:aa: 5f:ca:eb:e1:1c:c0:9a:d4:d3:cd:01:b9:56:3f:d9:0c:a0:6e: 74:47:34:3f:50:6f:70:b1:d6:50:5a:4e:8f:76:33:19:b4:7c: 36:ba:71:ea:16:ee:bc:23:c5:13:95:88:c7:13:a7:ae:c9:5d: 2f:b7:fa:9a:71:05:0d:c9:03:67:b4:14:b0:f4:e3:e8:b0:04: 98:d2:00:6a:c1:a2:23:af:a1:dd:6f:8f:40:ab:2b:1d:4e:44: 9c:ce:eb:a1:06:31:70:7b:ff:aa:82:e6:73:53:26:df:9c:28: 38:81:90:4c:fe:29:c1:f2:5d:07:a7:e3:65:75:29:67:03:a3: 89:60:92:05:43:41:31:3b:26:ae:d8:98:e5:a6:e6:97:2f:cd: 27:4a:e6:d8:cd:bc:48:32:fc:23:a6:68:1f:7f:77:4d:9b:89: d5:48:56:cc -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICEKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY3RDExMTAvBgNVBAUTKDc2Nzg3MkJERDBFRjgyNkE2NDk1RDgxMjZBMTM5RkM0 MDQ5MzgwMEYwHhcNMjYwOTAyMTczNTE4WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4NWU1NS0wODRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnJ8SUGKUEP7x+h1Ndg3ovAQdTR7oO/ejOnm1uBY73zGRbuUGKOg01FAN0/jV xUQVd3CSMgoiL6EsAW3Po0CYkcTJKe/xRhSnB4/hwDuFjxYLDkJD3aTXDIKGX7ME wTXTHhF/NRr67I0ndtmzhI5s9q6ueKLskBw5ZCMIpI7eIjJKOsnCn5noPOzwHWS7 EE5/TI6KcAhti8TQFjWh/uswlBb3VTFxlNH15mIXzMFV+dtbdgzpzHmF4DCv+qAg 7QVctR/nd0zY00j88/ezwRcePjvIBhGVQhT3121XU4ZRW32EIpHDP9OGdU9uN5Hh mHOtsfGIDi+gHs2NwI+/uthPswIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFBRinRhl no7cdX2iH6XeSco0cH0cMB8GA1UdIwQYMBaAFHZ4cr3Q74JqZJXYEmoTn8QEk4AP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjdEMS82Q0JDOUI0MDYx MUQxMUU5QjAxMkRCMzdDNEY5QUUwMi9kbmh5dmREdmdtcGtsZGdTYWhPZnhBU1Rn QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RuaHl2ZER2Z21wa2xkZ1NhaE9meEFTVGdBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjY3RDEvNkNCQzlCNDA2MTFEMTFFOUIwMTJEQjM3QzRGOUFFMDIvNUNDRENEN0M5 QkVBMTFFRkJDQjM2MjI3QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCLXLsAwQAZ0cYMA0EAgACMAcDBQAkAdZAMA0GCSqGSIb3DQEBCwUA A4IBAQBLAqz0tnA8/3pdNFnqc/d0giG0KWtCTigF3v8gZI3os2YmBYy7k1XZ/xln TDL7Y912ZYX71YQprSGfeiWCwHiJybYQPp/vhqNj7L1HFPHnfF6rtxq2ocHr+apf yuvhHMCa1NPNAblWP9kMoG50RzQ/UG9wsdZQWk6PdjMZtHw2unHqFu68I8UTlYjH E6euyV0vt/qacQUNyQNntBSw9OPosASY0gBqwaIjr6Hdb49AqysdTkSczuuhBjFw e/+qguZzUybfnCg4gZBM/inB8l0Hp+NldSlnA6OJYJIFQ0ExOyau2JjlpuaXL80n SubYzbxIMvwjpmgff3dNm4nVSFbM -----END CERTIFICATE-----Generated at Tue Sep 22 01:02:48 2026 by rpki-client