$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/AA6965E4CD8D11EF8DF2E66DC4F9AE02.roa File: AA6965E4CD8D11EF8DF2E66DC4F9AE02.roa (raw, json) Hash identifier: 7YT8Uh8iVq2WcO7DAhE9Km8qbK8pjLJhvfj2HZyJDec= Subject key identifier: F4:EC:ED:95:E6:20:E9:DF:13:EC:82:62:10:11:F6:A7:1A:70:FC:D9 Certificate issuer: /CN=A91B6D28/serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Certificate serial: 359A Authority key identifier: 9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/AA6965E4CD8D11EF8DF2E66DC4F9AE02.roa Signing time: Wed 02 Sep 2026 15:16:47 +0000 ROA not before: Wed 02 Sep 2026 15:16:47 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 38592 IP address blocks: 101.2.160.0/21 maxlen: 24 103.5.232.0/22 maxlen: 24 119.10.168.0/22 maxlen: 22 119.10.168.0/24 maxlen: 24 119.10.169.0/24 maxlen: 24 119.10.170.0/24 maxlen: 24 119.10.171.0/24 maxlen: 24 119.10.172.0/22 maxlen: 24 163.47.84.0/22 maxlen: 24 202.65.168.0/21 maxlen: 24 203.80.188.0/22 maxlen: 24 2402:2300::/32 maxlen: 32 2402:2300::/48 maxlen: 48 2402:2300:1211::/48 maxlen: 48 2402:2300:1212::/48 maxlen: 48 2402:2300:1215::/48 maxlen: 48 2402:2300:1220::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:43:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13722 (0x359a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6D28, serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Validity Not Before: Sep 2 15:16:47 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a983ddf-302b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b3:30:7a:4d:90:57:34:44:0d:5c:a8:6f:b9: 33:83:8d:67:7b:47:66:8f:83:de:9f:be:b6:4a:05: 80:6c:7e:20:37:00:72:61:32:8e:b9:89:9e:42:85: a2:c0:d7:64:2d:0e:99:7e:24:8c:67:8c:1a:d4:dc: d5:43:57:41:24:50:19:84:e6:ed:35:17:d9:f8:c5: b4:c0:3c:cf:87:31:05:3f:fd:72:57:61:b5:70:57: 13:74:b2:57:2b:ae:58:de:3b:6f:35:4b:d1:3c:3c: a2:49:00:2e:dc:af:ac:c3:77:67:a6:57:05:c2:ea: e6:a8:f5:4f:65:06:ff:52:93:8e:6c:60:a1:42:33: 32:c5:ca:6c:10:72:41:a6:a9:31:01:76:0b:b5:f9: ae:f2:67:a1:fe:9f:96:26:8d:c1:81:00:13:fa:66: ad:50:ab:26:d6:1d:1d:1c:d7:eb:9c:9f:23:de:03: 63:73:fa:de:0f:e1:ad:18:bf:81:14:37:cb:f9:c8: 1d:f6:6e:60:33:37:07:d9:4f:3f:8e:50:2d:a3:6c: f8:eb:b0:41:f3:4e:c5:06:bc:3f:de:58:38:3a:2d: d7:e7:37:b1:67:51:05:06:cc:2f:c9:b4:51:f0:7d: 22:3a:f3:6c:cd:5c:fd:e8:64:c5:50:2e:7d:89:aa: f5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:EC:ED:95:E6:20:E9:DF:13:EC:82:62:10:11:F6:A7:1A:70:FC:D9 X509v3 Authority Key Identifier: keyid:9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/AA6965E4CD8D11EF8DF2E66DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 101.2.160.0/21 103.5.232.0/22 119.10.168.0/21 163.47.84.0/22 202.65.168.0/21 203.80.188.0/22 IPv6: 2402:2300::/32 Signature Algorithm: sha256WithRSAEncryption 21:01:32:8d:f6:dc:46:f6:c8:9b:97:2d:fd:06:ff:46:36:5a: 98:51:e5:0d:75:09:2f:eb:9c:69:87:71:c5:e9:22:1d:5c:f9: 35:b5:d0:9b:17:64:8c:02:13:6b:e4:84:37:93:57:d1:39:6a: 4c:ac:ec:2c:ef:96:19:5a:5f:aa:23:19:ed:ca:ce:16:49:2b: 71:f6:f0:13:e3:c1:31:88:d2:1c:7c:00:30:59:e9:c0:ca:c1: 6e:6e:73:d8:1e:92:3e:2c:ee:19:4e:76:7d:98:2a:84:1d:58: 97:cc:e1:42:68:89:da:fc:3d:71:ff:0a:0f:07:89:21:2c:32: d3:11:26:c9:11:e5:f7:89:93:9b:00:de:6a:ef:d4:61:9f:ba: 14:02:d9:00:c3:c7:22:d0:13:c6:58:d5:a9:b5:bc:17:da:fc: f0:bd:09:0b:99:84:10:26:9e:32:3d:55:e6:8f:4c:7c:45:09: 39:6a:f0:84:05:bd:b0:7e:fc:30:c3:bf:7c:e0:4b:40:1b:3a: 23:98:65:be:9d:16:9e:97:77:d5:0d:10:85:8c:3b:09:31:09: 6b:65:77:f9:63:90:77:d1:17:aa:da:04:cd:c7:49:05:e8:8d: 53:c1:85:a8:d9:94:cb:7c:02:93:bf:6d:56:39:c6:4a:09:82: 36:a8:20:f1 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgICNZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZEMjgxMTAvBgNVBAUTKDlBNERBRjhGQ0E4NUUxOTNEMzRFQTQ5NTk3OTk2REVE MTdDQkRGMUUwHhcNMjYwOTAyMTUxNjQ3WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4M2RkZi0zMDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7Mwek2QVzREDVyob7kzg41ne0dmj4Pen762SgWAbH4gNwByYTKOuYmeQoWi wNdkLQ6ZfiSMZ4wa1NzVQ1dBJFAZhObtNRfZ+MW0wDzPhzEFP/1yV2G1cFcTdLJX K65Y3jtvNUvRPDyiSQAu3K+sw3dnplcFwurmqPVPZQb/UpOObGChQjMyxcpsEHJB pqkxAXYLtfmu8meh/p+WJo3BgQAT+matUKsm1h0dHNfrnJ8j3gNjc/reD+GtGL+B FDfL+cgd9m5gMzcH2U8/jlAto2z467BB807FBrw/3lg4Oi3X5zexZ1EFBswvybRR 8H0iOvNszVz96GTFUC59iar1AwIDAQABo4ICjTCCAokwHQYDVR0OBBYEFPTs7ZXm IOnfE+yCYhAR9qcacPzZMB8GA1UdIwQYMBaAFJpNr4/KheGT006klZeZbe0Xy98e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkQyOC82MUQ0NTMxMDFE OTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRaUFRUcVNWbDVsdDdSZkwz eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21rMnZqOHFGNFpQVFRxU1ZsNWx0N1JmTDN4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjZEMjgvNjFENDUzMTAxRDkyMTFFMjlDNUYzQUY1MDhCMDJDRDIvQUE2OTY1RTRD RDhEMTFFRjhERjJFNjZEQzRGOUFFMDIucm9hMEwGCCsGAQUFBwEHAQH/BD0wOzAq BAIAATAkAwQDZQKgAwQCZwXoAwQDdwqoAwQCoy9UAwQDykGoAwQCy1C8MA0EAgAC MAcDBQAkAiMAMA0GCSqGSIb3DQEBCwUAA4IBAQAhATKN9txG9sibly39Bv9GNlqY UeUNdQkv65xph3HF6SIdXPk1tdCbF2SMAhNr5IQ3k1fROWpMrOws75YZWl+qIxnt ys4WSStx9vAT48ExiNIcfAAwWenAysFubnPYHpI+LO4ZTnZ9mCqEHViXzOFCaIna /D1x/woPB4khLDLTESbJEeX3iZObAN5q79Rhn7oUAtkAw8ci0BPGWNWptbwX2vzw vQkLmYQQJp4yPVXmj0x8RQk5avCEBb2wfvwww7984EtAGzojmGW+nRael3fVDRCF jDsJMQlrZXf5Y5B30Req2gTNx0kF6I1TwYWo2ZTLfAKTv21WOcZKCYI2qCDx -----END CERTIFICATE-----Generated at Tue Sep 22 19:30:17 2026 by rpki-client