$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/EB259DA0B32811F1945B3D586A11F970.roa File: EB259DA0B32811F1945B3D586A11F970.roa (raw, json) Hash identifier: 7eLutbGIYOQSljYtW1RnN1uUIe+foY+Rp748DOXdmOo= Subject key identifier: 29:2D:A4:96:B0:00:1D:7A:D5:86:67:49:E2:D5:A6:22:92:E6:E8:AF Certificate issuer: /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Certificate serial: 0382 Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/EB259DA0B32811F1945B3D586A11F970.roa Signing time: Fri 18 Sep 2026 06:20:56 +0000 ROA not before: Fri 18 Sep 2026 06:20:56 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 9426 IP address blocks: 166.120.0.0/22 maxlen: 24 166.120.5.0/24 maxlen: 24 166.120.7.0/24 maxlen: 24 166.120.8.0/24 maxlen: 24 166.120.64.0/19 maxlen: 19 166.120.64.0/22 maxlen: 24 166.120.68.0/23 maxlen: 24 166.120.70.0/23 maxlen: 24 166.120.72.0/22 maxlen: 23 166.120.74.0/23 maxlen: 24 166.120.76.0/22 maxlen: 22 166.120.76.0/23 maxlen: 24 166.120.80.0/20 maxlen: 22 166.120.164.0/22 maxlen: 24 166.120.200.0/22 maxlen: 24 166.120.212.0/22 maxlen: 24 166.120.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:54:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 898 (0x382) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B47, serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Validity Not Before: Sep 18 06:20:56 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6aacd848-5944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c2:e6:4d:77:5e:91:10:d8:04:51:42:0c:31: 8b:62:5f:de:fa:40:19:12:b8:77:cb:06:44:f2:04: ec:a8:9d:40:51:36:a1:ec:4d:08:76:d7:ee:35:3c: f7:b0:ab:fe:12:53:26:96:6e:34:ab:53:36:6e:75: a1:25:7c:ef:49:3e:43:a1:38:79:2f:20:71:3f:dd: 33:6c:cc:d1:b5:ea:d2:18:15:00:f1:0d:41:40:f3: ee:1d:8b:20:ab:dd:8d:bf:ce:b7:27:57:f0:e3:e8: ae:1a:2f:25:0f:ae:65:17:35:60:d4:cb:c5:4c:fe: d1:97:c2:df:8f:01:2e:2b:2a:1b:49:6e:ba:a5:8d: b3:d7:88:3e:c6:54:c5:9e:c6:bc:f7:da:95:17:f7: dc:7b:3b:f5:53:7e:8c:aa:7e:bb:64:d8:d1:94:92: c4:e1:87:86:60:a0:fc:94:22:d1:42:b3:1f:29:d0: cf:6c:8f:3c:b1:56:b1:ea:34:c9:ad:83:d7:ab:0d: 21:7d:ee:4e:92:4e:04:ff:e1:39:b3:32:99:e1:ef: 6b:90:aa:e2:8d:5e:f9:8d:06:0b:5a:3f:d2:57:cd: 6a:ff:78:8f:36:5f:76:47:11:ce:2f:50:cc:b4:73: ea:26:01:5a:7f:95:aa:b0:5b:fb:dc:4b:d4:e0:5c: 6e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:2D:A4:96:B0:00:1D:7A:D5:86:67:49:E2:D5:A6:22:92:E6:E8:AF X509v3 Authority Key Identifier: keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/EB259DA0B32811F1945B3D586A11F970.roa sbgp-ipAddrBlock: critical IPv4: 166.120.0.0/22 166.120.5.0/24 166.120.7.0-166.120.8.255 166.120.64.0/19 166.120.164.0/22 166.120.200.0/22 166.120.212.0-166.120.219.255 Signature Algorithm: sha256WithRSAEncryption 50:ed:20:d7:df:b1:8e:ea:fa:b7:76:16:56:c5:e6:a3:82:a2: 56:65:16:d2:5e:ae:42:ca:9f:70:17:66:28:6c:58:9a:63:4c: 44:97:6c:15:f9:e2:53:73:c1:71:f1:59:1f:78:ef:8b:bf:76: e1:39:d9:7d:e9:b8:bb:de:36:82:6e:6c:f7:74:a5:82:e4:1e: b3:5f:fe:d3:a6:42:f9:ae:56:10:82:33:23:b6:c1:30:97:49: 6a:1d:6c:b5:1e:49:79:ec:e2:0e:1e:e7:dc:29:96:a8:89:ef: 67:01:15:01:d4:5e:d9:b0:0c:3a:b2:48:18:b3:1e:64:25:f2: 45:f3:4a:62:1a:49:d4:75:3d:63:ae:62:c7:f2:8b:8d:89:9b: 21:af:28:1c:07:0a:62:35:0c:b8:2f:f8:60:5a:2e:c3:fb:87: 0c:7f:87:74:37:48:0e:34:84:49:ed:e3:db:5a:55:01:dc:30: 8d:ab:41:bd:ad:32:57:13:86:c7:99:2f:b3:48:86:5c:7f:b0: c7:18:41:c0:58:20:cc:62:02:9a:a2:f8:07:5f:b6:c3:26:ea: ee:ba:30:94:06:4d:88:6d:75:41:b2:9a:e2:a2:df:72:a6:60: f3:1e:23:aa:6a:22:0d:31:50:f9:a9:85:0f:69:44:61:6e:63: cf:99:7e:b5 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgICA4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNDcxMTAvBgNVBAUTKDE3RDVGRTMyM0VCRkQ5QThEMzQ0RTc3QjczNzk5QThF NzU2MjQzNTIwHhcNMjYwOTE4MDYyMDU2WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFjZDg0OC01OTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAocLmTXdekRDYBFFCDDGLYl/e+kAZErh3ywZE8gTsqJ1AUTah7E0IdtfuNTz3 sKv+ElMmlm40q1M2bnWhJXzvST5DoTh5LyBxP90zbMzRterSGBUA8Q1BQPPuHYsg q92Nv863J1fw4+iuGi8lD65lFzVg1MvFTP7Rl8LfjwEuKyobSW66pY2z14g+xlTF nsa899qVF/fcezv1U36Mqn67ZNjRlJLE4YeGYKD8lCLRQrMfKdDPbI88sVax6jTJ rYPXqw0hfe5Okk4E/+E5szKZ4e9rkKrijV75jQYLWj/SV81q/3iPNl92RxHOL1DM tHPqJgFaf5WqsFv73EvU4FxuLQIDAQABo4IClDCCApAwHQYDVR0OBBYEFCktpJaw AB161YZnSeLVpiKS5uivMB8GA1UdIwQYMBaAFBfV/jI+v9mo00Tne3N5mo51YkNS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI0Ny9FODhFOUM3RTMz QUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJhalRST2Q3YzNtYWpuVmlR MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Y5WC1NajZfMmFqVFJPZDdjM21ham5WaVExSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjJCNDcvRTg4RTlDN0UzM0FGMTFFREI2MTA3NDM0QzRGOUFFMDIvRUIyNTlEQTBC MzI4MTFGMTk0NUIzRDU4NkExMUY5NzAucm9hMFMGCCsGAQUFBwEHAQH/BEQwQjBA BAIAATA6AwQCpngAAwQApngFMAwDBACmeAcDBACmeAgDBAWmeEADBAKmeKQDBAKm eMgwDAMEAqZ41AMEAqZ42DANBgkqhkiG9w0BAQsFAAOCAQEAUO0g19+xjur6t3YW VsXmo4KiVmUW0l6uQsqfcBdmKGxYmmNMRJdsFfniU3PBcfFZH3jvi7924TnZfem4 u942gm5s93SlguQes1/+06ZC+a5WEIIzI7bBMJdJah1stR5JeeziDh7n3CmWqInv ZwEVAdRe2bAMOrJIGLMeZCXyRfNKYhpJ1HU9Y65ix/KLjYmbIa8oHAcKYjUMuC/4 YFouw/uHDH+HdDdIDjSESe3j21pVAdwwjatBva0yVxOGx5kvs0iGXH+wxxhBwFgg zGICmqL4B1+2wybq7rowlAZNiG11QbKa4qLfcqZg8x4jqmoiDTFQ+amFD2lEYW5j z5l+tQ== -----END CERTIFICATE-----Generated at Mon Sep 21 19:13:56 2026 by rpki-client