$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/35BBCFB005C111EEA3A8584CC4F9AE02.roa File: 35BBCFB005C111EEA3A8584CC4F9AE02.roa (raw, json) Hash identifier: nMFdDCUb4ENNKUnmKytdPmfWGdDIIdu20F9f9Lqgp3o= Subject key identifier: 2C:BE:2C:C1:E5:67:A4:DF:4A:AD:8D:B1:67:33:2E:80:08:18:40:DE Certificate issuer: /CN=A91FCABC/serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89 Certificate serial: 025A Authority key identifier: 97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/35BBCFB005C111EEA3A8584CC4F9AE02.roa Signing time: Fri 07 Aug 2026 02:51:55 +0000 ROA not before: Fri 07 Aug 2026 02:51:55 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 18191 IP address blocks: 168.132.0.0/16 maxlen: 17 168.132.121.0/24 maxlen: 24 168.132.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 602 (0x25a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCABC, serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89 Validity Not Before: Aug 7 02:51:55 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a75484b-47f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ed:9a:74:85:ab:dd:d2:37:fe:25:29:2f:50: 63:09:15:0f:a3:ad:9b:3d:77:74:e5:6b:8d:1a:84: 64:2b:f8:34:3f:66:62:1a:2f:14:5d:bf:cb:88:7c: 27:88:46:a6:50:35:4c:5b:c6:22:e1:62:fd:bd:8d: 4b:73:a1:5e:13:11:35:2f:10:a0:57:82:03:ad:0e: 90:60:74:de:9d:5c:be:e7:28:e5:48:31:95:01:8b: 07:f7:f0:d2:32:9f:0d:c7:22:e8:62:20:04:81:19: 01:e8:af:5b:76:ad:d7:41:0a:48:2e:e0:6b:c3:0a: cb:37:f5:f1:15:47:de:46:af:38:00:66:cb:b0:19: 26:97:19:44:70:23:08:03:fc:02:18:15:b1:72:f9: 8b:ea:e6:a2:19:e8:b1:be:8f:6f:1a:5b:1a:33:54: 92:2d:36:fb:cb:a6:1e:74:f5:32:f4:3c:3e:ef:32: 62:51:89:81:13:91:52:b4:a5:c3:20:9a:ae:e2:de: f5:50:d9:f8:d7:df:0c:ff:0a:25:50:49:86:02:bd: 3b:5d:42:5d:23:f5:88:f6:ba:5b:b8:1b:ff:dd:2b: 21:f0:ec:5e:37:45:c8:ec:3e:84:d0:7f:6c:28:3f: 26:02:ba:dc:37:09:b4:49:63:c7:e5:dd:58:42:48: 6f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BE:2C:C1:E5:67:A4:DF:4A:AD:8D:B1:67:33:2E:80:08:18:40:DE X509v3 Authority Key Identifier: keyid:97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/35BBCFB005C111EEA3A8584CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 168.132.0.0/16 Signature Algorithm: sha256WithRSAEncryption 95:a9:0d:fd:55:da:4e:a7:50:5e:2e:5e:b1:f4:6c:f8:3e:d4: 42:1f:1f:0d:49:16:0e:66:c9:dd:81:3d:19:06:ff:8a:99:b4: d8:87:64:27:f6:6a:8a:5e:24:10:9c:d4:c0:3a:ff:c6:ec:72: 47:2b:ca:de:bd:fa:17:29:64:74:c7:2e:8b:4d:b7:a8:e6:73: 79:51:2d:75:e7:58:18:d1:94:4f:c6:7e:3f:db:d7:4f:51:f5: 42:eb:40:39:03:7b:57:b2:ed:d2:cb:78:92:4c:d8:27:f4:da: 57:e4:4b:46:1c:05:7b:7b:b8:59:b4:5b:ac:dd:be:37:40:d1: b1:08:c6:11:ac:2c:4b:c3:67:bf:01:40:55:b2:f9:8d:46:28: 95:70:00:5b:d3:ca:5d:27:b0:26:04:b1:ea:6f:a4:b4:22:55: 7d:0c:d8:5f:3e:09:b1:ab:11:14:7f:a1:54:fa:28:f8:a4:c3: 6b:31:b5:98:d3:17:59:84:86:10:6e:61:94:b4:ba:74:a9:21: ed:01:d7:eb:99:b6:8a:ad:1f:04:ee:1b:2f:d7:2f:0c:55:84: 1c:c3:4e:cb:79:86:c8:62:fa:fe:98:4e:72:f1:33:7b:a7:d1: 81:72:8c:f4:e7:0d:40:84:9d:2b:cb:f2:af:40:ab:62:5d:33: 74:03:0c:3b -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBQkMxMTAvBgNVBAUTKDk3Q0U1NjhGNjQ2ODI1NjQ3M0Y4NEIzOEIzQ0UwM0VB MzU0OUVCODkwHhcNMjYwODA3MDI1MTU1WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTc1NDg0Yi00N2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzO2adIWr3dI3/iUpL1BjCRUPo62bPXd05WuNGoRkK/g0P2ZiGi8UXb/LiHwn iEamUDVMW8Yi4WL9vY1Lc6FeExE1LxCgV4IDrQ6QYHTenVy+5yjlSDGVAYsH9/DS Mp8NxyLoYiAEgRkB6K9bdq3XQQpILuBrwwrLN/XxFUfeRq84AGbLsBkmlxlEcCMI A/wCGBWxcvmL6uaiGeixvo9vGlsaM1SSLTb7y6YedPUy9Dw+7zJiUYmBE5FStKXD IJqu4t71UNn4198M/wolUEmGAr07XUJdI/WI9rpbuBv/3Ssh8OxeN0XI7D6E0H9s KD8mArrcNwm0SWPH5d1YQkhvAwIDAQABo4ICXzCCAlswHQYDVR0OBBYEFCy+LMHl Z6TfSq2NsWczLoAIGEDeMB8GA1UdIwQYMBaAFJfOVo9kaCVkc/hLOLPOA+o1SeuJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0FCQy9DNTUxNjQxMjA1 QjkxMUVFQTkxMzBCMzdDNEY5QUUwMi9sODVXajJSb0pXUnotRXM0czg0RDZqVko2 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2w4NVdqMlJvSldSei1FczRzODRENmpWSjY0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkNBQkMvQzU1MTY0MTIwNUI5MTFFRUE5MTMwQjM3QzRGOUFFMDIvMzVCQkNGQjAw NUMxMTFFRUEzQTg1ODRDQzRGOUFFMDIucm9hMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAqIQwDQYJKoZIhvcNAQELBQADggEBAJWpDf1V2k6nUF4uXrH0bPg+ 1EIfHw1JFg5myd2BPRkG/4qZtNiHZCf2aopeJBCc1MA6/8bsckcryt69+hcpZHTH LotNt6jmc3lRLXXnWBjRlE/Gfj/b109R9ULrQDkDe1ey7dLLeJJM2Cf02lfkS0Yc BXt7uFm0W6zdvjdA0bEIxhGsLEvDZ78BQFWy+Y1GKJVwAFvTyl0nsCYEsepvpLQi VX0M2F8+CbGrERR/oVT6KPikw2sxtZjTF1mEhhBuYZS0unSpIe0B1+uZtoqtHwTu Gy/XLwxVhBzDTst5hshi+v6YTnLxM3un0YFyjPTnDUCEnSvL8q9Aq2JdM3QDDDs= -----END CERTIFICATE-----Generated at Thu Sep 24 01:57:55 2026 by rpki-client