$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/166A252AB71711F1A361D5CD6B11F970.roa File: 166A252AB71711F1A361D5CD6B11F970.roa (raw, json) Hash identifier: 2HTTCo9EN7RaaTms6tS2PLHj1nQZYPIMniKzGv0VfzI= Subject key identifier: 51:99:76:EF:4D:C7:D2:C7:C3:2A:75:A0:01:8C:9A:09:79:37:57:51 Certificate issuer: /CN=A91E7363/serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3 Certificate serial: 361D Authority key identifier: A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/166A252AB71711F1A361D5CD6B11F970.roa Signing time: Wed 23 Sep 2026 06:25:59 +0000 ROA not before: Wed 23 Sep 2026 06:25:59 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 138984 IP address blocks: 112.134.16.0/20 maxlen: 24 112.134.56.0/21 maxlen: 24 203.96.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13853 (0x361d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7363, serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3 Validity Not Before: Sep 23 06:25:59 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6ab370f7-5497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:72:e2:b8:be:9a:9a:38:6e:5c:58:c1:ae:94: 1b:ef:6d:95:b7:94:14:9b:80:35:32:30:bb:61:47: 8d:c9:d5:ca:fd:e1:89:c7:93:57:f7:3c:a0:0c:ee: e6:2e:6c:ed:09:1c:30:e1:db:b6:19:07:59:e8:c7: 06:8d:e3:56:98:ca:d8:63:b4:56:e9:20:9f:d0:93: f1:df:eb:e1:bd:5c:29:61:19:af:21:0a:74:79:6e: 19:dd:83:a2:eb:52:a1:ef:ea:73:a4:06:f2:51:6c: b2:29:86:9c:1e:b2:dc:67:3c:ec:10:3e:17:11:69: 56:91:e3:3c:06:b6:51:c5:26:52:86:46:61:71:be: 55:27:9c:89:19:a4:58:bb:74:42:16:e8:69:70:29: 90:cc:79:49:66:06:82:c6:de:7f:c4:ca:a8:48:3b: 04:c0:76:48:cc:c4:9c:03:af:bf:f5:5e:01:cf:b4: 7c:23:0a:53:84:e5:2c:69:b1:af:1f:99:1c:4f:3b: 70:31:a9:7c:e4:4e:e4:58:17:68:2e:06:2a:a1:01: 62:78:47:aa:64:dc:bc:04:73:41:98:7c:da:51:80: 72:dd:77:1a:c1:88:86:63:60:18:78:4d:0d:07:33: 92:30:99:3d:fc:74:74:5c:7a:3f:3c:1a:ab:a1:bb: 2b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:99:76:EF:4D:C7:D2:C7:C3:2A:75:A0:01:8C:9A:09:79:37:57:51 X509v3 Authority Key Identifier: keyid:A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/166A252AB71711F1A361D5CD6B11F970.roa sbgp-ipAddrBlock: critical IPv4: 112.134.16.0/20 112.134.56.0/21 203.96.160.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:88:a5:0b:e6:42:1d:1d:4e:b2:bf:d8:2c:53:6c:f4:7e:33: 03:13:08:9b:c1:d0:bf:17:db:d8:8a:9f:53:69:ba:c1:7b:2f: d9:39:9d:c2:9a:28:41:85:55:4a:c3:e2:78:00:d8:f7:1e:df: d2:94:30:96:9a:b2:28:36:6a:cc:4a:56:52:57:66:48:63:6c: 3d:44:57:70:6f:a5:83:21:58:10:11:5c:bb:b5:1f:47:81:37: 2e:96:fb:08:ff:83:14:e0:26:e7:7d:bc:4f:28:64:71:35:2e: f6:72:5b:2f:2d:10:0c:2d:2d:7b:ed:9e:3e:ba:a9:90:9b:51: 61:63:e8:ac:19:ef:ef:78:94:ef:10:ef:e3:c0:e2:46:09:ac: eb:52:60:f2:af:04:2f:75:00:61:01:68:24:03:a1:17:2f:c6: 76:da:5e:90:c8:02:eb:58:ed:fc:cb:35:47:e6:fa:3b:fb:1a: 1d:19:9e:76:46:1f:00:d6:18:3b:81:ef:b1:fb:2b:06:80:b0: dc:43:24:99:49:ac:88:23:fa:9b:97:34:35:23:e8:92:50:ad: 7b:db:a8:9b:4f:b8:bd:8c:d6:a3:ac:05:a9:fa:d4:2a:5e:3e: 0b:90:c3:be:35:4d:97:da:79:10:17:d3:76:a3:e8:68:ed:c1: a0:ed:6c:1f -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICNh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTczNjMxMTAvBgNVBAUTKEE4OTdDMDRERTEyRjBBNkY1OUMxQUQxNTA5RjBCMjA5 RkE1NDM4QjMwHhcNMjYwOTIzMDYyNTU5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWIzNzBmNy01NDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhnLiuL6amjhuXFjBrpQb722Vt5QUm4A1MjC7YUeNydXK/eGJx5NX9zygDO7m LmztCRww4du2GQdZ6McGjeNWmMrYY7RW6SCf0JPx3+vhvVwpYRmvIQp0eW4Z3YOi 61Kh7+pzpAbyUWyyKYacHrLcZzzsED4XEWlWkeM8BrZRxSZShkZhcb5VJ5yJGaRY u3RCFuhpcCmQzHlJZgaCxt5/xMqoSDsEwHZIzMScA6+/9V4Bz7R8IwpThOUsabGv H5kcTztwMal85E7kWBdoLgYqoQFieEeqZNy8BHNBmHzaUYBy3XcawYiGY2AYeE0N BzOSMJk9/HR0XHo/PBqrobsrjQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFFGZdu9N x9LHwyp1oAGMmgl5N1dRMB8GA1UdIwQYMBaAFKiXwE3hLwpvWcGtFQnwsgn6VDiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzM2My9GRjhCNEI2QzFE ODQxMUUyOENEMzNEREIwOEIwMkNEMi9xSmZBVGVFdkNtOVp3YTBWQ2ZDeUNmcFVP TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FKZkFUZUV2Q205WndhMFZDZkN5Q2ZwVU9MTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTczNjMvRkY4QjRCNkMxRDg0MTFFMjhDRDMzRERCMDhCMDJDRDIvMTY2QTI1MkFC NzE3MTFGMUEzNjFENUNENkIxMUY5NzAucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQEcIYQAwQDcIY4AwQCy2CgMA0GCSqGSIb3DQEBCwUAA4IBAQCfiKUL 5kIdHU6yv9gsU2z0fjMDEwibwdC/F9vYip9TabrBey/ZOZ3CmihBhVVKw+J4ANj3 Ht/SlDCWmrIoNmrMSlZSV2ZIY2w9RFdwb6WDIVgQEVy7tR9HgTculvsI/4MU4Cbn fbxPKGRxNS72clsvLRAMLS177Z4+uqmQm1FhY+isGe/veJTvEO/jwOJGCazrUmDy rwQvdQBhAWgkA6EXL8Z22l6QyALrWO38yzVH5vo7+xodGZ52Rh8A1hg7ge+x+ysG gLDcQySZSayII/qblzQ1I+iSUK1726ibT7i9jNajrAWp+tQqXj4LkMO+NU2X2nkQ F9N2o+ho7cGg7Wwf -----END CERTIFICATE-----Generated at Wed Sep 23 14:05:16 2026 by rpki-client