$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/674FABEA9DFE11F1A590ACA54711F970.roa File: 674FABEA9DFE11F1A590ACA54711F970.roa (raw, json) Hash identifier: JA9jJvsUHbiL7kzbgateu3mZ/L7MqDA79t8h6ItSPj4= Subject key identifier: CC:CA:42:0B:91:73:A5:79:EB:38:01:46:15:1B:75:CB:10:94:E2:7F Certificate issuer: /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Certificate serial: 0362 Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/674FABEA9DFE11F1A590ACA54711F970.roa Signing time: Sat 29 Aug 2026 18:51:44 +0000 ROA not before: Sat 29 Aug 2026 18:51:44 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 9547 IP address blocks: 166.120.4.0/24 maxlen: 24 166.120.6.0/24 maxlen: 24 166.120.58.0/23 maxlen: 24 166.120.66.0/23 maxlen: 24 166.120.75.0/24 maxlen: 24 166.120.76.0/23 maxlen: 24 166.120.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:54:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 866 (0x362) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B47, serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Validity Not Before: Aug 29 18:51:44 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6a932a40-b8a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fc:21:1e:47:98:6b:4d:b1:fd:e4:4c:83:23: a0:ea:8f:b6:b5:ca:b4:3c:78:b6:d8:dc:60:43:1b: 2b:f4:1b:ed:0b:1b:8e:78:d4:6c:96:a5:6c:c9:55: 8e:71:98:8a:e6:7c:d3:da:c6:f4:04:d3:c2:41:b0: 5e:29:a7:e5:27:ad:1f:6c:bc:76:24:74:8e:02:c9: 60:d1:cc:ea:a3:3b:f9:87:2e:cf:d3:a9:d0:da:f7: 2c:cb:ad:00:f5:4e:2c:e0:11:52:f0:73:69:62:1f: d0:26:71:7e:95:15:d3:e0:78:e0:26:5e:39:31:97: 75:ea:c8:72:e8:c5:83:ae:d5:6e:cb:a7:77:0f:58: c6:3b:a7:f9:f1:a0:23:e3:03:1f:ac:71:cb:e8:14: ed:7a:e4:c7:23:e5:4b:a8:8e:b8:e5:ac:cb:bc:1a: c3:af:aa:a9:e0:1f:1b:0c:90:a6:d1:e4:b0:01:69: b3:c1:d6:ed:78:a4:54:cb:8b:34:3b:d2:34:12:13: 84:c9:76:2f:2e:30:17:53:4e:79:b0:06:0f:c9:89: 98:0f:12:38:58:ef:55:1a:5e:d4:68:57:a1:c4:fc: fa:b1:55:7c:38:bc:90:29:b5:25:e5:51:49:cc:79: 10:ce:a3:a8:49:29:26:44:f9:8e:43:2a:f6:69:82: 18:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:CA:42:0B:91:73:A5:79:EB:38:01:46:15:1B:75:CB:10:94:E2:7F X509v3 Authority Key Identifier: keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/674FABEA9DFE11F1A590ACA54711F970.roa sbgp-ipAddrBlock: critical IPv4: 166.120.4.0/24 166.120.6.0/24 166.120.58.0/23 166.120.66.0/23 166.120.75.0-166.120.77.255 166.120.176.0/23 Signature Algorithm: sha256WithRSAEncryption 87:3b:b8:8b:98:49:4d:c4:73:1b:33:34:c3:5d:8e:c7:57:7a: 23:3f:02:6f:bb:e6:d8:ec:d2:f9:a0:93:11:ba:3f:c1:90:00: 86:29:03:66:0d:f1:ea:cc:86:35:a4:98:20:dd:e9:7f:f4:3f: d4:9a:42:f8:58:ee:a7:7f:af:f7:4c:1c:ce:fe:f2:b9:04:b7: 9f:1c:0e:f9:14:13:da:68:20:51:fd:4e:89:f8:46:f3:f5:07: 11:eb:5a:94:16:2d:9b:5b:97:00:c0:b5:29:cd:c5:7b:b7:e3: 27:bd:92:2b:bb:68:11:b7:62:7e:f8:27:19:f6:90:5c:79:e0: 1c:69:61:5e:f0:05:43:b7:e8:a0:d4:b0:f5:04:f3:ff:63:52: 06:e7:d0:27:76:ae:48:c7:6f:7a:76:6f:24:c2:4e:84:e3:03: 37:de:d5:4f:70:9a:39:30:28:d6:e6:a0:6f:fd:70:6c:51:bd: 80:ba:30:85:49:63:b3:28:14:0e:4c:1e:29:1f:19:a7:a3:db: 53:63:02:42:28:16:64:bc:50:01:ff:4c:13:a8:60:c9:b9:0b: 97:99:13:93:c4:99:de:22:69:14:7b:d9:7b:74:98:fa:31:e6: be:ad:e5:05:18:5d:e5:9a:6f:be:b9:42:b4:9a:a5:f0:57:ef: c2:c6:e2:83 -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgICA2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNDcxMTAvBgNVBAUTKDE3RDVGRTMyM0VCRkQ5QThEMzQ0RTc3QjczNzk5QThF NzU2MjQzNTIwHhcNMjYwODI5MTg1MTQ0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTkzMmE0MC1iOGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPwhHkeYa02x/eRMgyOg6o+2tcq0PHi22NxgQxsr9BvtCxuOeNRslqVsyVWO cZiK5nzT2sb0BNPCQbBeKaflJ60fbLx2JHSOAslg0czqozv5hy7P06nQ2vcsy60A 9U4s4BFS8HNpYh/QJnF+lRXT4HjgJl45MZd16shy6MWDrtVuy6d3D1jGO6f58aAj 4wMfrHHL6BTteuTHI+VLqI645azLvBrDr6qp4B8bDJCm0eSwAWmzwdbteKRUy4s0 O9I0EhOEyXYvLjAXU055sAYPyYmYDxI4WO9VGl7UaFehxPz6sVV8OLyQKbUl5VFJ zHkQzqOoSSkmRPmOQyr2aYIYUwIDAQABo4IChjCCAoIwHQYDVR0OBBYEFMzKQguR c6V56zgBRhUbdcsQlOJ/MB8GA1UdIwQYMBaAFBfV/jI+v9mo00Tne3N5mo51YkNS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI0Ny9FODhFOUM3RTMz QUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJhalRST2Q3YzNtYWpuVmlR MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Y5WC1NajZfMmFqVFJPZDdjM21ham5WaVExSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjJCNDcvRTg4RTlDN0UzM0FGMTFFREI2MTA3NDM0QzRGOUFFMDIvNjc0RkFCRUE5 REZFMTFGMUE1OTBBQ0E1NDcxMUY5NzAucm9hMEUGCCsGAQUFBwEHAQH/BDYwNDAy BAIAATAsAwQApngEAwQApngGAwQBpng6AwQBpnhCMAwDBACmeEsDBAGmeEwDBAGm eLAwDQYJKoZIhvcNAQELBQADggEBAIc7uIuYSU3EcxszNMNdjsdXeiM/Am+75tjs 0vmgkxG6P8GQAIYpA2YN8erMhjWkmCDd6X/0P9SaQvhY7qd/r/dMHM7+8rkEt58c DvkUE9poIFH9Ton4RvP1BxHrWpQWLZtblwDAtSnNxXu34ye9kiu7aBG3Yn74Jxn2 kFx54BxpYV7wBUO36KDUsPUE8/9jUgbn0Cd2rkjHb3p2byTCToTjAzfe1U9wmjkw KNbmoG/9cGxRvYC6MIVJY7MoFA5MHikfGaej21NjAkIoFmS8UAH/TBOoYMm5C5eZ E5PEmd4iaRR72Xt0mPox5r6t5QUYXeWab765QrSapfBX78LG4oM= -----END CERTIFICATE-----Generated at Mon Sep 21 19:14:58 2026 by rpki-client