$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E560D/FDEA778EB18F11F1AE13A0876B11F970/5EE7F980B19011F1B48673B66B11F970.roa File: 5EE7F980B19011F1B48673B66B11F970.roa (raw, json) Hash identifier: UuC4mq9ysV/rc0h2+dKC344jwlMgtRJnQPAQ5LhDngI= Subject key identifier: A9:F2:5C:F1:CD:F6:7B:37:34:52:8D:98:5E:50:F7:56:1E:BE:1C:CA Certificate issuer: /CN=A91E560D/serialNumber=4D0D284BA0BC0ABC9B9617FAB11B4E85E86822B0 Certificate serial: 06 Authority key identifier: 4D:0D:28:4B:A0:BC:0A:BC:9B:96:17:FA:B1:1B:4E:85:E8:68:22:B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TQ0oS6C8Cryblhf6sRtOhehoIrA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E560D/FDEA778EB18F11F1AE13A0876B11F970/5EE7F980B19011F1B48673B66B11F970.roa Signing time: Wed 16 Sep 2026 05:50:17 +0000 ROA not before: Wed 16 Sep 2026 05:50:17 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 45625 IP address blocks: 43.245.20.0/23 maxlen: 24 103.146.249.0/24 maxlen: 24 103.157.99.0/24 maxlen: 24 103.244.152.0/22 maxlen: 22 103.244.152.0/23 maxlen: 24 103.244.154.0/23 maxlen: 24 112.121.48.0/21 maxlen: 24 112.121.56.0/24 maxlen: 24 112.121.57.0/24 maxlen: 24 112.121.58.0/24 maxlen: 24 112.121.59.0/24 maxlen: 24 112.121.60.0/24 maxlen: 24 112.121.61.0/24 maxlen: 24 112.121.62.0/24 maxlen: 24 112.121.63.0/24 maxlen: 24 202.124.194.0/24 maxlen: 24 2407:bb00::/36 maxlen: 36 2407:bb00:5000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E560D/FDEA778EB18F11F1AE13A0876B11F970/TQ0oS6C8Cryblhf6sRtOhehoIrA.crl rsync://rpki.apnic.net/member_repository/A91E560D/FDEA778EB18F11F1AE13A0876B11F970/TQ0oS6C8Cryblhf6sRtOhehoIrA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TQ0oS6C8Cryblhf6sRtOhehoIrA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 09:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E560D, serialNumber=4D0D284BA0BC0ABC9B9617FAB11B4E85E86822B0 Validity Not Before: Sep 16 05:50:17 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6aaa2e19-7648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d6:cb:2e:55:a1:67:24:47:bf:89:d6:56:07: ea:af:c0:b5:df:de:fb:c7:b4:7b:f4:91:eb:13:a8: 00:2c:8f:a8:28:8a:dd:df:5a:8e:b3:2f:fb:02:12: 98:dd:1f:1f:29:75:3c:31:0c:05:9d:aa:7a:e0:92: c3:d3:64:99:b1:e8:6f:a6:77:bd:1f:fa:9c:f5:3e: bf:e5:5d:ec:34:98:73:3d:53:ef:eb:cf:00:d9:c3: bb:00:db:53:ae:4c:5d:14:7a:ba:6e:8c:12:0c:8b: 17:13:34:ca:6f:a3:77:2c:e1:ad:ed:c4:c0:11:8f: 59:82:d6:1b:7d:10:74:90:4f:82:06:36:3b:a9:d1: ba:37:8e:fe:bf:a9:37:f0:14:53:4c:4c:7e:b3:ae: ff:cb:c8:61:3a:6b:92:04:e0:bc:a2:4e:e8:93:37: 17:38:34:66:23:21:dc:b5:c0:1d:b0:26:dd:d6:12: 7e:15:be:66:58:7c:3c:b8:f4:a2:66:7c:90:c0:1b: 36:20:da:27:e8:7d:2b:07:91:76:f4:70:88:4d:e7: 0e:e6:e5:47:38:4d:fb:2c:da:58:bc:ee:e2:3e:0b: ba:a3:a2:a5:2a:2a:f2:9b:d0:ef:4b:27:29:79:69: bb:a7:25:8a:cc:84:9f:0e:fd:17:5d:81:dd:2c:be: b3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F2:5C:F1:CD:F6:7B:37:34:52:8D:98:5E:50:F7:56:1E:BE:1C:CA X509v3 Authority Key Identifier: keyid:4D:0D:28:4B:A0:BC:0A:BC:9B:96:17:FA:B1:1B:4E:85:E8:68:22:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E560D/FDEA778EB18F11F1AE13A0876B11F970/TQ0oS6C8Cryblhf6sRtOhehoIrA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TQ0oS6C8Cryblhf6sRtOhehoIrA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E560D/FDEA778EB18F11F1AE13A0876B11F970/5EE7F980B19011F1B48673B66B11F970.roa sbgp-ipAddrBlock: critical IPv4: 43.245.20.0/23 103.146.249.0/24 103.157.99.0/24 103.244.152.0/22 112.121.48.0/20 202.124.194.0/24 IPv6: 2407:bb00::/36 2407:bb00:5000::/44 Signature Algorithm: sha256WithRSAEncryption 0a:0f:dd:5c:9e:a1:de:4f:6a:3c:1e:3e:5d:f1:61:b5:f6:82: 6e:36:27:f7:b7:5a:27:90:33:11:22:e4:d6:30:e3:b9:01:d2: 77:1a:4d:69:36:10:70:6e:70:cf:37:6e:82:b8:04:7c:96:fa: 78:67:4c:1e:2f:93:bd:45:6a:aa:a0:8f:db:c9:e9:e3:a1:d3: 26:1d:33:1f:7b:e5:36:06:6c:d1:8e:5a:b4:35:e6:90:02:ce: 97:83:f4:b3:c8:84:d2:e2:7b:8e:11:c3:e7:36:32:a8:a3:4d: f1:33:7c:82:cd:90:2e:38:8f:81:ad:de:ac:fd:bb:b4:1b:26: 1f:35:d9:73:5e:8b:89:04:19:59:6a:38:34:c2:10:07:a0:7a: c2:79:ef:a2:de:53:cd:49:9d:34:69:39:56:fe:e1:67:a5:e8: 96:de:0f:bf:c6:40:73:35:69:16:55:72:a3:87:8e:aa:4b:15: e3:08:13:53:23:0f:bb:df:a7:06:5c:fa:ac:8c:1f:1c:40:4b: 9e:92:c6:83:6a:0f:81:ae:10:88:5b:59:7d:62:85:f3:69:82: 2e:bd:0b:77:3f:d0:cf:25:18:92:24:20:42:a0:40:a0:46:33: 16:f6:49:34:cf:4b:b3:09:8e:a6:3a:93:52:8c:f6:0b:4e:96: 23:5e:dc:13 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTYwRDExMC8GA1UEBRMoNEQwRDI4NEJBMEJDMEFCQzlCOTYxN0ZBQjExQjRFODVF ODY4MjJCMDAeFw0yNjA5MTYwNTUwMTdaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYWEyZTE5LTc2NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDv1ssuVaFnJEe/idZWB+qvwLXf3vvHtHv0kesTqAAsj6goit3fWo6zL/sCEpjd Hx8pdTwxDAWdqnrgksPTZJmx6G+md70f+pz1Pr/lXew0mHM9U+/rzwDZw7sA21Ou TF0UerpujBIMixcTNMpvo3cs4a3txMARj1mC1ht9EHSQT4IGNjup0bo3jv6/qTfw FFNMTH6zrv/LyGE6a5IE4LyiTuiTNxc4NGYjIdy1wB2wJt3WEn4VvmZYfDy49KJm fJDAGzYg2ifofSsHkXb0cIhN5w7m5Uc4Tfss2li87uI+C7qjoqUqKvKb0O9LJyl5 abunJYrMhJ8O/Rddgd0svrOdAgMBAAGjggKXMIICkzAdBgNVHQ4EFgQUqfJc8c32 ezc0Uo2YXlD3Vh6+HMowHwYDVR0jBBgwFoAUTQ0oS6C8Cryblhf6sRtOhehoIrAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1NjBEL0ZERUE3NzhFQjE4 RjExRjFBRTEzQTA4NzZCMTFGOTcwL1RRMG9TNkM4Q3J5YmxoZjZzUnRPaGVob0ly QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVFEwb1M2QzhDcnlibGhmNnNSdE9oZWhvSXJBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTYwRC9GREVBNzc4RUIxOEYxMUYxQUUxM0EwODc2QjExRjk3MC81RUU3Rjk4MEIx OTAxMUYxQjQ4NjczQjY2QjExRjk3MC5yb2EwVgYIKwYBBQUHAQcBAf8ERzBFMCoE AgABMCQDBAEr9RQDBABnkvkDBABnnWMDBAJn9JgDBARweTADBADKfMIwFwQCAAIw EQMGBCQHuwAAAwcEJAe7AFAAMA0GCSqGSIb3DQEBCwUAA4IBAQAKD91cnqHeT2o8 Hj5d8WG19oJuNif3t1onkDMRIuTWMOO5AdJ3Gk1pNhBwbnDPN26CuAR8lvp4Z0we L5O9RWqqoI/byenjodMmHTMfe+U2BmzRjlq0NeaQAs6Xg/SzyITS4nuOEcPnNjKo o03xM3yCzZAuOI+Brd6s/bu0GyYfNdlzXouJBBlZajg0whAHoHrCee+i3lPNSZ00 aTlW/uFnpeiW3g+/xkBzNWkWVXKjh46qSxXjCBNTIw+736cGXPqsjB8cQEueksaD ag+BrhCIW1l9YoXzaYIuvQt3P9DPJRiSJCBCoECgRjMW9kk0z0uzCY6mOpNSjPYL TpYjXtwT -----END CERTIFICATE-----Generated at Mon Sep 28 22:27:20 2026 by rpki-client