$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/6549AD3EAC1011ED8592693FC4F9AE02.roa File: 6549AD3EAC1011ED8592693FC4F9AE02.roa (raw, json) Hash identifier: 4uTpTxxOKcFpix9VMs0QMyQDPqJHXQEnQ2Lc7hCfmwQ= Subject key identifier: 31:66:83:D7:35:D7:EF:90:D0:94:E2:8C:13:A0:27:93:EC:77:99:BE Certificate issuer: /CN=A91F8E9B/serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9 Certificate serial: 02C7 Authority key identifier: 44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/6549AD3EAC1011ED8592693FC4F9AE02.roa Signing time: Sat 05 Sep 2026 01:51:14 +0000 ROA not before: Sat 05 Sep 2026 01:51:14 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 24324 IP address blocks: 202.160.48.0/21 maxlen: 21 202.160.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 711 (0x2c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8E9B, serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9 Validity Not Before: Sep 5 01:51:14 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a9b7592-d56a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b9:29:fd:d5:1e:c4:d3:5f:fa:bf:65:36:2a: 84:e0:29:5d:b9:91:50:dd:31:af:af:35:b0:2b:f9: ce:66:cb:1e:a5:78:ab:30:e2:57:22:0e:de:da:c4: 3a:60:03:41:7a:23:38:96:db:c9:49:10:2b:88:a7: 4f:cd:00:7c:87:f5:38:be:3a:5c:a5:19:79:c4:7c: 6e:92:3d:03:3f:b4:18:91:96:e3:e6:68:b3:3d:f8: bd:ee:a9:86:e3:03:60:e4:89:09:66:43:90:9d:d2: 78:31:9a:8f:f6:2c:5e:6c:2a:f9:a2:40:c6:a3:0d: 2d:2b:cc:58:94:d6:35:ed:ea:7c:c4:b2:95:d6:08: b7:87:26:9d:35:99:2b:d7:bf:fb:38:8a:9e:05:a4: 95:db:1f:e6:dd:0d:08:27:b0:0c:6e:bd:ef:0b:5b: 4d:1c:d1:f8:70:98:96:9b:4c:b8:4c:6a:03:0f:42: 91:17:be:38:39:92:14:43:25:a4:70:39:f9:0d:8f: dc:38:6a:c1:25:55:fd:76:48:73:4c:57:dd:70:9f: ca:11:9d:7b:54:a4:69:02:ac:06:1c:ac:d9:d0:96: 28:84:08:0c:68:0d:db:ae:19:ca:7b:6b:df:8d:77: bd:e4:d2:0c:3f:5e:b6:b3:25:8e:36:e6:5a:9e:8b: 6c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:66:83:D7:35:D7:EF:90:D0:94:E2:8C:13:A0:27:93:EC:77:99:BE X509v3 Authority Key Identifier: keyid:44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/6549AD3EAC1011ED8592693FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.160.48.0/20 Signature Algorithm: sha256WithRSAEncryption 48:b9:e6:e1:38:aa:cd:5e:bc:28:ff:19:21:46:55:e5:52:70: 09:48:0e:9e:d6:fc:ab:14:87:f0:98:bf:3d:bf:03:76:21:79: df:dc:94:ee:60:9e:63:ad:72:83:5a:ab:9c:32:66:23:a8:f7: 29:6c:6d:a5:1a:d0:49:cd:cb:1d:da:1a:77:2c:d6:e7:29:99: d9:a2:2f:9f:b3:68:b1:81:19:89:33:f4:da:47:ac:6f:5a:c3: 9e:4d:ad:21:8e:81:b3:f1:08:9f:e3:96:60:c4:63:85:71:9b: d1:d1:46:ac:c8:1c:f3:56:bc:41:8f:75:b3:93:85:18:95:a5: 42:ce:38:73:f1:6a:67:46:e9:33:d5:19:8e:6c:6c:63:29:16: 1c:e2:16:87:f5:57:56:c7:af:9f:6f:2c:42:e2:a1:f7:83:d0: c1:cb:0c:14:19:b4:7f:98:75:ad:c2:da:77:31:13:92:ff:ec: d3:64:25:12:92:c1:d1:9b:06:9b:30:08:e0:6a:72:4a:7b:a5: 4e:fc:de:11:78:ac:96:3c:b9:73:d3:82:fa:1b:04:2f:aa:2e: 5e:02:10:14:f1:47:f3:b5:6e:86:c8:c7:a3:6d:0c:ca:00:f8: 1f:47:c6:cb:2f:55:2e:69:a5:85:54:fb:c2:17:08:f5:c2:3f: 54:6a:a7:88 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhFOUIxMTAvBgNVBAUTKDQ0Njc5MjQzOTI1ODE4MkE3QTFFNERBNEIyQzA2RkFE MkFBRUU0QjkwHhcNMjYwOTA1MDE1MTE0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTliNzU5Mi1kNTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn7kp/dUexNNf+r9lNiqE4ClduZFQ3TGvrzWwK/nOZssepXirMOJXIg7e2sQ6 YANBeiM4ltvJSRAriKdPzQB8h/U4vjpcpRl5xHxukj0DP7QYkZbj5mizPfi97qmG 4wNg5IkJZkOQndJ4MZqP9ixebCr5okDGow0tK8xYlNY17ep8xLKV1gi3hyadNZkr 17/7OIqeBaSV2x/m3Q0IJ7AMbr3vC1tNHNH4cJiWm0y4TGoDD0KRF744OZIUQyWk cDn5DY/cOGrBJVX9dkhzTFfdcJ/KEZ17VKRpAqwGHKzZ0JYohAgMaA3brhnKe2vf jXe95NIMP162syWONuZanots2wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDFmg9c1 1++Q0JTijBOgJ5Psd5m+MB8GA1UdIwQYMBaAFERnkkOSWBgqeh5NpLLAb60qruS5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEU5Qi82OUVCNDJDMDk2 MEUxMUVEOUE0Q0VBNjVDNEY5QUUwMi9SR2VTUTVKWUdDcDZIazJrc3NCdnJTcXU1 TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JHZVNRNUpZR0NwNkhrMmtzc0J2clNxdTVMay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjhFOUIvNjlFQjQyQzA5NjBFMTFFRDlBNENFQTY1QzRGOUFFMDIvNjU0OUFEM0VB QzEwMTFFRDg1OTI2OTNGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEyqAwMA0GCSqGSIb3DQEBCwUAA4IBAQBIuebhOKrNXrwo/xkhRlXl UnAJSA6e1vyrFIfwmL89vwN2IXnf3JTuYJ5jrXKDWqucMmYjqPcpbG2lGtBJzcsd 2hp3LNbnKZnZoi+fs2ixgRmJM/TaR6xvWsOeTa0hjoGz8Qif45ZgxGOFcZvR0Uas yBzzVrxBj3Wzk4UYlaVCzjhz8WpnRukz1RmObGxjKRYc4haH9VdWx6+fbyxC4qH3 g9DBywwUGbR/mHWtwtp3MROS/+zTZCUSksHRmwabMAjganJKe6VO/N4ReKyWPLlz 04L6GwQvqi5eAhAU8UfztW6GyMejbQzKAPgfR8bLL1UuaaWFVPvCFwj1wj9UaqeI -----END CERTIFICATE-----Generated at Mon Sep 21 16:08:21 2026 by rpki-client