$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3791/07F37F1AB1AD11F1B4E597013411F970/AEF436AEB32111F18FC19D146811F970.roa File: AEF436AEB32111F18FC19D146811F970.roa (raw, json) Hash identifier: hufOxBTDlkt33wKsmT+nceMtRqoSaAfYTZBo3yTM45U= Subject key identifier: AD:F9:DD:08:6C:EE:22:60:A1:91:83:C3:C6:3A:B4:27:F3:E3:2E:B9 Certificate issuer: /CN=A91E3791/serialNumber=40F196BD8940D964562197A1B6B196593F0780EF Certificate serial: 04 Authority key identifier: 40:F1:96:BD:89:40:D9:64:56:21:97:A1:B6:B1:96:59:3F:07:80:EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPGWvYlA2WRWIZehtrGWWT8HgO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3791/07F37F1AB1AD11F1B4E597013411F970/AEF436AEB32111F18FC19D146811F970.roa Signing time: Fri 18 Sep 2026 05:27:48 +0000 ROA not before: Fri 18 Sep 2026 05:27:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45663 IP address blocks: 202.89.104.0/23 maxlen: 23 202.89.104.0/24 maxlen: 24 202.89.106.0/23 maxlen: 23 202.89.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3791/07F37F1AB1AD11F1B4E597013411F970/QPGWvYlA2WRWIZehtrGWWT8HgO8.crl rsync://rpki.apnic.net/member_repository/A91E3791/07F37F1AB1AD11F1B4E597013411F970/QPGWvYlA2WRWIZehtrGWWT8HgO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPGWvYlA2WRWIZehtrGWWT8HgO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3791, serialNumber=40F196BD8940D964562197A1B6B196593F0780EF Validity Not Before: Sep 18 05:27:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6aaccbd3-2a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:01:88:8b:19:8a:80:e8:98:22:06:12:cf:db: e8:cb:a1:e0:2c:1b:74:4d:e0:c6:e1:72:77:97:94: da:d0:8b:71:3d:cb:48:9c:ab:4f:15:e3:e0:af:a0: 60:cc:42:16:b4:4e:c5:40:74:27:a5:b9:12:a5:2b: e5:18:9d:8f:71:53:e0:75:1f:48:24:a0:7b:0c:62: c8:97:ab:6e:8f:6e:77:f8:eb:21:01:28:7c:db:d3: 35:16:cd:d6:ec:92:6d:f2:8f:3a:30:47:91:3e:70: 5a:e9:c2:0d:50:3b:e9:3e:db:08:44:3b:23:10:ed: 20:a9:cb:57:1f:75:00:f9:a1:86:fd:85:c1:44:bb: fb:11:66:c1:fc:cf:23:7b:3b:f2:c7:9c:b3:17:e0: 4b:58:c6:34:27:ab:15:e9:04:ba:40:88:92:8a:9f: d3:09:cc:a8:d4:2b:29:dc:8a:ef:4c:9a:c6:13:8d: f5:9c:43:c3:64:41:7f:e2:f0:22:7a:68:69:b6:f1: 69:d5:70:93:b6:ac:64:82:12:b4:c8:68:c3:b3:48: 4b:7e:06:27:9b:89:c0:e8:c3:a2:49:01:a2:7d:b1: 22:a8:50:a2:49:63:06:43:b7:ed:ac:36:0a:5e:66: 59:e1:72:aa:3f:35:91:e7:ef:ce:2b:2e:16:9a:d4: 14:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F9:DD:08:6C:EE:22:60:A1:91:83:C3:C6:3A:B4:27:F3:E3:2E:B9 X509v3 Authority Key Identifier: keyid:40:F1:96:BD:89:40:D9:64:56:21:97:A1:B6:B1:96:59:3F:07:80:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3791/07F37F1AB1AD11F1B4E597013411F970/QPGWvYlA2WRWIZehtrGWWT8HgO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPGWvYlA2WRWIZehtrGWWT8HgO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3791/07F37F1AB1AD11F1B4E597013411F970/AEF436AEB32111F18FC19D146811F970.roa sbgp-ipAddrBlock: critical IPv4: 202.89.104.0/22 Signature Algorithm: sha256WithRSAEncryption 85:c9:21:a6:d5:93:4b:ad:66:d9:18:12:bc:f7:d8:a9:09:89: 1b:db:d8:4b:be:ef:75:b0:83:6e:7e:45:f2:e8:fb:48:70:92: d1:97:f3:10:02:78:5a:c7:70:12:b9:b6:1a:c8:83:87:99:25: 63:29:e1:94:8a:e0:bd:d2:40:94:f9:df:88:24:2f:e3:b5:ba: 75:a0:db:16:1e:52:92:60:8a:94:0f:57:90:83:be:2c:37:91: 76:19:7d:39:95:de:43:6b:27:18:c3:27:8d:5d:e8:e8:74:9e: 88:e3:42:13:6b:c9:c4:2f:1c:8e:8a:bd:df:07:1c:0b:2a:ae: 47:17:b0:23:00:6b:e0:73:73:cc:78:2c:00:d0:3d:fb:79:1f: a4:93:fc:f0:91:4a:e3:da:25:36:ad:6b:3f:1b:fe:37:95:4d: af:00:53:d3:59:51:f0:4c:76:78:b6:d1:de:30:e0:ab:6e:98: a1:4c:48:50:c8:2f:15:cf:42:11:b7:9c:86:92:0c:85:54:68: 01:18:89:9a:1d:47:b7:b3:42:07:40:0b:7a:2c:88:2e:ea:7f: d6:49:ba:70:90:20:96:ca:c0:d8:0e:fd:f5:7f:07:e7:fb:02: 86:f2:63:6a:c4:42:ed:17:47:1f:e7:c7:63:02:bc:e0:0d:68: dc:90:b9:f1 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF Mzc5MTExMC8GA1UEBRMoNDBGMTk2QkQ4OTQwRDk2NDU2MjE5N0ExQjZCMTk2NTkz RjA3ODBFRjAeFw0yNjA5MTgwNTI3NDhaFw0yNzA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYWNjYmQzLTJhMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCEAYiLGYqA6JgiBhLP2+jLoeAsG3RN4MbhcneXlNrQi3E9y0icq08V4+CvoGDM Qha0TsVAdCeluRKlK+UYnY9xU+B1H0gkoHsMYsiXq26Pbnf46yEBKHzb0zUWzdbs km3yjzowR5E+cFrpwg1QO+k+2whEOyMQ7SCpy1cfdQD5oYb9hcFEu/sRZsH8zyN7 O/LHnLMX4EtYxjQnqxXpBLpAiJKKn9MJzKjUKynciu9MmsYTjfWcQ8NkQX/i8CJ6 aGm28WnVcJO2rGSCErTIaMOzSEt+BiebicDow6JJAaJ9sSKoUKJJYwZDt+2sNgpe Zlnhcqo/NZHn784rLhaa1BQ5AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUrfndCGzu ImChkYPDxjq0J/PjLrkwHwYDVR0jBBgwFoAUQPGWvYlA2WRWIZehtrGWWT8HgO8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzNzkxLzA3RjM3RjFBQjFB RDExRjFCNEU1OTcwMTM0MTFGOTcwL1FQR1d2WWxBMldSV0laZWh0ckdXV1Q4SGdP OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUVBHV3ZZbEEyV1JXSVplaHRyR1dXVDhIZ084LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mzc5MS8wN0YzN0YxQUIxQUQxMUYxQjRFNTk3MDEzNDExRjk3MC9BRUY0MzZBRUIz MjExMUYxOEZDMTlEMTQ2ODExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBALKWWgwDQYJKoZIhvcNAQELBQADggEBAIXJIabVk0utZtkYErz32KkJ iRvb2Eu+73Wwg25+RfLo+0hwktGX8xACeFrHcBK5thrIg4eZJWMp4ZSK4L3SQJT5 34gkL+O1unWg2xYeUpJgipQPV5CDviw3kXYZfTmV3kNrJxjDJ41d6Oh0nojjQhNr ycQvHI6Kvd8HHAsqrkcXsCMAa+Bzc8x4LADQPft5H6ST/PCRSuPaJTataz8b/jeV Ta8AU9NZUfBMdni20d4w4KtumKFMSFDILxXPQhG3nIaSDIVUaAEYiZodR7ezQgdA C3osiC7qf9ZJunCQIJbKwNgO/fV/B+f7AobyY2rEQu0XRx/nx2MCvOANaNyQufE= -----END CERTIFICATE-----Generated at Tue Sep 22 18:40:28 2026 by rpki-client