$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/16DDC0F4CFE811ECA193B36BC4F9AE02.roa File: 16DDC0F4CFE811ECA193B36BC4F9AE02.roa (raw, json) Hash identifier: bD03UDBRQ1taaixgQUTMVbh3gQ61ze+8RuiRrQb961Q= Subject key identifier: 68:9C:D5:87:11:90:DD:F0:86:C3:E9:D1:DD:8E:10:46:E1:21:F1:D0 Certificate issuer: /CN=A91BC269/serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75 Certificate serial: 0429 Authority key identifier: 22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/16DDC0F4CFE811ECA193B36BC4F9AE02.roa Signing time: Mon 21 Sep 2026 00:50:50 +0000 ROA not before: Mon 21 Sep 2026 00:50:50 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 55850 IP address blocks: 139.180.64.0/18 maxlen: 18 149.19.16.0/20 maxlen: 20 167.179.216.0/21 maxlen: 21 208.56.208.0/20 maxlen: 20 209.87.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.crl rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1065 (0x429) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC269, serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75 Validity Not Before: Sep 21 00:50:50 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ab07f69-560a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bc:c0:6e:e7:fa:a5:e4:da:2a:5d:27:ba:70: 20:b0:ed:26:2d:68:cc:4f:51:a5:cc:38:7e:3a:ba: e5:74:07:4b:ae:e1:16:b7:45:4a:17:80:c4:80:bf: d7:53:80:aa:9b:69:97:cb:ba:66:f9:b4:6b:6d:87: 95:d5:b3:59:5c:47:d4:89:fc:d2:8f:f7:19:6b:a6: 75:09:9e:1d:40:8d:70:33:8f:07:b6:71:ce:9c:2e: da:e5:d4:d0:b5:50:73:44:cc:92:f1:d9:1e:ab:f1: 44:69:2f:89:cb:58:d6:fc:cc:c6:46:42:a9:06:c6: 41:9e:66:60:23:ac:9c:cc:03:42:b2:dc:9b:d4:81: 46:35:66:ba:1f:87:d3:fe:42:52:d6:5f:05:44:6c: de:86:fb:e8:42:8e:4d:07:7c:c7:ff:ba:ba:5c:d7: 75:6b:59:20:35:96:9a:86:70:b5:10:f0:d9:f7:a5: 89:5a:74:95:68:4d:2f:3e:7d:29:d5:74:cf:0e:27: 66:be:c2:cf:90:0d:3e:97:58:4f:82:67:92:f7:e6: 48:26:f9:cf:f1:ac:88:37:7a:36:0d:1d:29:6e:c5: d9:ad:fb:ec:36:73:ad:9d:3f:65:d4:aa:83:47:66: c1:d4:85:c4:7d:72:d1:f9:56:d9:69:cf:ac:4a:59: b4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9C:D5:87:11:90:DD:F0:86:C3:E9:D1:DD:8E:10:46:E1:21:F1:D0 X509v3 Authority Key Identifier: keyid:22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/16DDC0F4CFE811ECA193B36BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 139.180.64.0/18 149.19.16.0/20 167.179.216.0/21 208.56.208.0/20 209.87.188.0/22 Signature Algorithm: sha256WithRSAEncryption 34:67:3e:cd:f2:c0:74:36:df:1c:bf:6c:1d:11:58:f3:67:b7: 1e:0e:fe:03:01:5e:88:e3:1e:7f:c7:a2:31:b1:5f:b7:7e:14: b3:ab:9f:c1:da:be:4e:06:64:4b:16:3a:1b:ce:8f:f9:7b:b9: 1f:4e:4a:89:35:65:8f:4c:c3:53:5d:00:44:18:24:72:68:88: 26:72:97:33:2e:3f:ac:5c:9f:a6:68:1f:c5:d8:80:2a:83:9a: 11:7e:07:d6:89:aa:ea:0b:cb:72:aa:71:bd:a3:40:f1:e4:de: d7:04:70:66:fd:21:97:be:c8:26:fe:41:29:a9:63:7d:fc:98: 33:a8:14:bd:0a:c5:e1:78:55:ca:4f:8b:ae:56:ba:a4:58:65: 33:03:e2:a5:8d:7f:18:2d:f1:19:eb:e0:b7:1c:3c:05:63:bb: 48:e5:f2:44:d3:bb:95:fa:73:09:d3:f8:d8:11:4c:99:3c:72: a8:f8:43:32:a2:c9:0f:e0:a2:e6:8c:3c:77:8f:df:37:57:c2: b6:eb:77:83:61:0f:7c:59:cc:34:8e:4c:73:c9:7b:2c:c7:6a: e0:e8:28:9f:56:d9:00:d7:7c:c2:7f:3d:64:50:ff:f7:07:1a: da:54:da:ff:72:6b:24:4f:4e:7b:42:71:29:56:2e:ea:98:f8: c7:f1:48:ae -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICBCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMyNjkxMTAvBgNVBAUTKDIyNkY3Mjg5RDRFMzdGRUNFMjI2MEM2NEQzQkNCQTdB QzAzMTVBNzUwHhcNMjYwOTIxMDA1MDUwWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWIwN2Y2OS01NjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rzAbuf6peTaKl0nunAgsO0mLWjMT1GlzDh+OrrldAdLruEWt0VKF4DEgL/X U4Cqm2mXy7pm+bRrbYeV1bNZXEfUifzSj/cZa6Z1CZ4dQI1wM48HtnHOnC7a5dTQ tVBzRMyS8dkeq/FEaS+Jy1jW/MzGRkKpBsZBnmZgI6yczANCstyb1IFGNWa6H4fT /kJS1l8FRGzehvvoQo5NB3zH/7q6XNd1a1kgNZaahnC1EPDZ96WJWnSVaE0vPn0p 1XTPDidmvsLPkA0+l1hPgmeS9+ZIJvnP8ayIN3o2DR0pbsXZrfvsNnOtnT9l1KqD R2bB1IXEfXLR+VbZac+sSlm0AQIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFGic1YcR kN3whsPp0d2OEEbhIfHQMB8GA1UdIwQYMBaAFCJvconU43/s4iYMZNO8unrAMVp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzI2OS9CMTYxMzExOENG RTUxMUVDOTRCQkM3NUFDNEY5QUUwMi9JbTl5aWRUamYtemlKZ3hrMDd5NmVzQXhX blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ltOXlpZFRqZi16aUpneGswN3k2ZXNBeFduVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkMyNjkvQjE2MTMxMThDRkU1MTFFQzk0QkJDNzVBQzRGOUFFMDIvMTZEREMwRjRD RkU4MTFFQ0ExOTNCMzZCQzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQGi7RAAwQElRMQAwQDp7PYAwQE0DjQAwQC0Ve8MA0GCSqGSIb3DQEB CwUAA4IBAQA0Zz7N8sB0Nt8cv2wdEVjzZ7ceDv4DAV6I4x5/x6IxsV+3fhSzq5/B 2r5OBmRLFjobzo/5e7kfTkqJNWWPTMNTXQBEGCRyaIgmcpczLj+sXJ+maB/F2IAq g5oRfgfWiarqC8tyqnG9o0Dx5N7XBHBm/SGXvsgm/kEpqWN9/JgzqBS9CsXheFXK T4uuVrqkWGUzA+KljX8YLfEZ6+C3HDwFY7tI5fJE07uV+nMJ0/jYEUyZPHKo+EMy oskP4KLmjDx3j983V8K263eDYQ98Wcw0jkxzyXssx2rg6CifVtkA13zCfz1kUP/3 BxraVNr/cmskT057QnEpVi7qmPjH8Uiu -----END CERTIFICATE-----Generated at Mon Sep 21 17:34:06 2026 by rpki-client