$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/AEEA3AE45BF611E984E25E54C4F9AE02.roa File: AEEA3AE45BF611E984E25E54C4F9AE02.roa (raw, json) Hash identifier: 5Q3MWx4Ewo9/UKJ7jz7gMiN8rU99sMEnjBMOjFr/rTk= Subject key identifier: 53:6B:51:32:60:91:09:36:44:17:4A:B3:60:8B:A4:80:2F:21:26:31 Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Certificate serial: 2785 Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/AEEA3AE45BF611E984E25E54C4F9AE02.roa Signing time: Mon 28 Sep 2026 16:23:25 +0000 ROA not before: Mon 28 Sep 2026 16:23:25 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 17724 IP address blocks: 111.84.12.0/24 maxlen: 24 111.84.16.0/24 maxlen: 24 111.84.20.0/24 maxlen: 24 111.84.52.0/23 maxlen: 24 111.84.54.0/23 maxlen: 24 111.84.178.0/23 maxlen: 24 111.84.180.0/23 maxlen: 24 202.91.16.0/23 maxlen: 24 202.91.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 15:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10117 (0x2785) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1136, serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Validity Not Before: Sep 28 16:23:25 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aba947c-3277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7d:26:78:a3:b4:40:6c:09:6b:b2:d1:9b:5d: 95:bc:37:4d:c8:b2:eb:62:4f:78:77:a7:dc:b8:85: c9:bc:2e:cc:86:83:37:71:8f:07:63:ed:16:e3:da: 11:72:20:65:7c:ba:fb:18:69:21:5d:fd:7e:6c:d7: 91:74:37:46:ff:e1:d9:20:6a:6b:a1:9a:fb:75:69: 44:f4:be:4a:2b:f4:34:ad:41:bf:27:d3:81:49:de: d5:8b:6d:de:b3:1f:c4:33:98:cf:6d:6a:6f:0b:22: 15:38:d3:da:33:3f:bc:8a:3a:75:35:53:85:87:20: 86:2f:ab:c7:df:bf:57:6c:e3:7b:f3:f5:e5:b5:27: 98:ae:c6:00:de:50:25:af:51:9f:10:c7:08:56:3d: 30:d0:35:c0:23:e6:80:49:a3:43:bb:6b:3b:d8:fc: 45:dc:98:16:2c:27:62:df:81:fb:74:27:39:ab:98: 3f:d4:85:2f:b7:47:b5:32:d9:3b:6c:63:46:c7:7d: a5:0f:e8:67:97:df:49:04:b9:a5:80:a3:6c:e6:f8: 49:a2:5f:f9:10:1d:ec:96:56:96:8e:fc:84:6d:4f: 45:ca:a9:ae:84:2d:cb:dc:45:dd:e8:48:12:55:dd: 23:d1:2e:ef:f0:d5:a1:bd:e5:e9:ea:90:73:95:19: d7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:6B:51:32:60:91:09:36:44:17:4A:B3:60:8B:A4:80:2F:21:26:31 X509v3 Authority Key Identifier: keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/AEEA3AE45BF611E984E25E54C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 111.84.12.0/24 111.84.16.0/24 111.84.20.0/24 111.84.52.0/22 111.84.178.0-111.84.181.255 202.91.16.0/23 202.91.20.0/22 Signature Algorithm: sha256WithRSAEncryption 52:cb:75:d6:e6:98:f9:01:43:42:33:e9:d7:a4:e0:eb:55:cd: 8e:55:58:98:4d:0a:7c:1c:4f:92:76:2e:f7:ef:26:b0:64:da: 05:e9:10:ef:80:8e:e1:ee:a2:ac:a2:48:ee:1e:78:3c:8f:0a: 54:1d:98:48:e6:01:dd:b8:0d:ac:04:5f:be:d5:cb:d7:5f:ac: d9:9e:12:36:a2:c3:c2:76:7d:15:45:42:5d:7a:c3:15:67:49: 90:fa:f5:de:6a:6b:76:c6:b7:8b:2a:d7:0b:c2:49:22:40:19: 50:f5:23:f5:8c:8f:c6:1c:03:66:26:d5:84:00:4d:54:9c:b5: 39:e1:40:2c:1e:e2:fd:f3:25:7d:dc:49:b7:ad:37:18:1f:f8: 68:8a:b7:b8:98:c1:13:da:47:13:10:fc:14:a3:1d:16:ca:91: 02:99:33:c9:d7:5a:9e:3a:a7:66:10:7f:f7:c3:0a:c7:91:fe: 5c:97:c9:fd:f8:dc:a5:32:91:32:16:20:86:0a:7c:7b:56:81: 09:8f:05:f6:6b:fe:a7:57:02:6c:fd:b1:d3:7a:aa:15:e5:6f: 91:74:86:95:db:6c:5d:6d:d9:69:32:52:d5:42:1e:5a:16:76: e2:d6:2b:e9:95:b3:bb:bf:52:0d:e9:4a:ea:64:1d:22:68:50: 7b:42:d1:af -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgICJ4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMzYxMTAvBgNVBAUTKEI3QjczRTg5QjYyMTA4MTYwOUNENjg5QUIwQUVGN0ZB RjE0ODkyNkMwHhcNMjYwOTI4MTYyMzI1WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJhOTQ3Yy0zMjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw30meKO0QGwJa7LRm12VvDdNyLLrYk94d6fcuIXJvC7MhoM3cY8HY+0W49oR ciBlfLr7GGkhXf1+bNeRdDdG/+HZIGproZr7dWlE9L5KK/Q0rUG/J9OBSd7Vi23e sx/EM5jPbWpvCyIVONPaMz+8ijp1NVOFhyCGL6vH379XbON78/XltSeYrsYA3lAl r1GfEMcIVj0w0DXAI+aASaNDu2s72PxF3JgWLCdi34H7dCc5q5g/1IUvt0e1Mtk7 bGNGx32lD+hnl99JBLmlgKNs5vhJol/5EB3sllaWjvyEbU9FyqmuhC3L3EXd6EgS Vd0j0S7v8NWhveXp6pBzlRnXrwIDAQABo4ICjDCCAogwHQYDVR0OBBYEFFNrUTJg kQk2RBdKs2CLpIAvISYxMB8GA1UdIwQYMBaAFLe3Pom2IQgWCc1omrCu9/rxSJJs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEzNi9DRjMyODFDODIx NUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENCWUp6V2lhc0s3My12Rklr bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q3Yy1pYlloQ0JZSnpXaWFzSzczLXZGSWttdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDExMzYvQ0YzMjgxQzgyMTVCMTFFNUE3QkY4OTBFQzRGOUFFMDIvQUVFQTNBRTQ1 QkY2MTFFOTg0RTI1RTU0QzRGOUFFMDIucm9hMEsGCCsGAQUFBwEHAQH/BDwwOjA4 BAIAATAyAwQAb1QMAwQAb1QQAwQAb1QUAwQCb1Q0MAwDBAFvVLIDBAFvVLQDBAHK WxADBALKWxQwDQYJKoZIhvcNAQELBQADggEBAFLLddbmmPkBQ0Iz6dek4OtVzY5V WJhNCnwcT5J2LvfvJrBk2gXpEO+AjuHuoqyiSO4eeDyPClQdmEjmAd24DawEX77V y9dfrNmeEjaiw8J2fRVFQl16wxVnSZD69d5qa3bGt4sq1wvCSSJAGVD1I/WMj8Yc A2Ym1YQATVSctTnhQCwe4v3zJX3cSbetNxgf+GiKt7iYwRPaRxMQ/BSjHRbKkQKZ M8nXWp46p2YQf/fDCseR/lyXyf343KUykTIWIIYKfHtWgQmPBfZr/qdXAmz9sdN6 qhXlb5F0hpXbbF1t2WkyUtVCHloWduLWK+mVs7u/Ug3pSupkHSJoUHtC0a8= -----END CERTIFICATE-----Generated at Sun Oct 11 01:01:42 2026 by rpki-client