$ rpki-client -vvvf rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/96AD16C6B5FA11F0A1583C84C4F9AE02.roa File: 96AD16C6B5FA11F0A1583C84C4F9AE02.roa (raw, json) Hash identifier: Mcx6RypIsfsl2k17p8RaDjuBm8idJIvsDM1If3ILtcI= Subject key identifier: 32:71:27:24:21:B5:5F:77:1B:C3:60:E6:AC:B2:BF:74:26:C8:7E:45 Certificate issuer: /CN=A91139AB/serialNumber=C1424C4CCC59C9A031BE1ACDF7982D87AB57D068 Certificate serial: B2 Authority key identifier: C1:42:4C:4C:CC:59:C9:A0:31:BE:1A:CD:F7:98:2D:87:AB:57:D0:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUJMTMxZyaAxvhrN95gth6tX0Gg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/96AD16C6B5FA11F0A1583C84C4F9AE02.roa Signing time: Sun 30 Aug 2026 21:41:35 +0000 ROA not before: Sun 30 Aug 2026 21:41:35 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 4857 IP address blocks: 202.147.96.0/20 maxlen: 20 202.147.112.0/20 maxlen: 24 203.82.160.0/20 maxlen: 24 203.82.176.0/20 maxlen: 24 203.201.64.0/20 maxlen: 24 203.201.80.0/20 maxlen: 24 203.201.96.0/20 maxlen: 20 203.201.112.0/20 maxlen: 24 221.120.128.0/20 maxlen: 24 221.120.144.0/24 maxlen: 24 221.120.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.crl rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUJMTMxZyaAxvhrN95gth6tX0Gg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 21:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91139AB, serialNumber=C1424C4CCC59C9A031BE1ACDF7982D87AB57D068 Validity Not Before: Aug 30 21:41:35 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a94a38f-02e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:36:fc:19:59:2b:96:03:99:7e:64:40:d5:93: 99:ca:0f:9e:e1:46:10:0a:74:a3:ac:1f:30:38:64: bf:5e:3b:d1:65:3e:b8:fb:62:3f:11:8f:aa:6d:72: 5c:77:9b:e7:c2:e2:9b:14:58:53:16:33:a1:57:8a: aa:5f:a6:42:d1:93:c5:15:a9:8a:82:2e:8b:3e:2f: 93:08:63:cb:4f:ec:54:c5:60:8b:73:6c:26:1f:a2: aa:d2:19:7c:ef:71:f0:55:88:89:ff:86:cd:9c:ae: 76:38:c2:78:0a:78:9e:ca:ad:47:60:52:d1:d1:b7: 3d:e9:8b:ea:f8:42:a3:05:fc:69:06:5d:43:ae:4e: 00:31:55:a0:c2:c7:88:3c:dc:5d:71:22:52:74:49: 04:c3:22:5c:d9:3c:d9:34:df:de:5d:75:92:6b:c6: ca:43:ae:c9:87:f9:a8:c2:fa:23:fb:d8:65:56:da: 9d:dd:02:2f:ed:81:6e:5c:62:3d:7e:36:a6:85:aa: 83:64:86:f8:69:de:d8:01:b0:e8:21:9c:79:5f:4c: b9:e7:d6:59:bf:e7:35:5d:13:46:3c:53:5b:8b:83: b8:c7:7d:bd:88:ef:f2:5f:19:82:93:97:2f:c7:82: db:f8:03:3f:9f:7e:11:38:c6:de:62:20:48:7d:44: d1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:71:27:24:21:B5:5F:77:1B:C3:60:E6:AC:B2:BF:74:26:C8:7E:45 X509v3 Authority Key Identifier: keyid:C1:42:4C:4C:CC:59:C9:A0:31:BE:1A:CD:F7:98:2D:87:AB:57:D0:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUJMTMxZyaAxvhrN95gth6tX0Gg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/96AD16C6B5FA11F0A1583C84C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.147.96.0/19 203.82.160.0/19 203.201.64.0/18 221.120.128.0-221.120.145.255 Signature Algorithm: sha256WithRSAEncryption ae:ad:6e:1d:34:a8:58:97:c7:58:27:e7:ae:79:2d:7e:bb:f7: 9d:bf:8a:b8:cb:a1:b9:46:d4:4d:f3:27:c5:2d:25:41:0b:d1: 58:6e:b8:6f:39:53:be:a4:8a:a8:ae:d6:dd:28:8e:da:f9:27: b0:af:e0:05:de:9e:c4:cf:bc:2b:6f:10:7a:44:e4:2c:e3:05: b9:10:2c:a4:85:c5:5c:86:20:38:67:f7:2e:9b:4b:0a:4b:88: 04:29:f3:03:50:26:a4:2c:e2:b7:69:18:1e:72:e0:bd:0e:17: a9:26:b4:cb:2b:8e:9e:7b:ce:9b:a0:bd:ab:ad:1f:f0:4e:87: 64:37:fb:35:30:96:4c:b7:5f:60:63:e0:c0:6d:e3:a6:00:a3: 98:06:66:1b:05:a1:21:69:c9:24:cf:ae:42:10:4c:46:54:9c: ae:08:1f:c2:2b:4f:ae:75:56:03:24:41:35:c9:46:93:85:69: 3f:85:99:fb:73:03:f0:4b:96:29:c8:35:ee:a8:65:d4:b8:f6: 10:e3:fc:10:a6:9b:40:c7:34:63:41:b6:8c:35:d5:69:e8:f9: 56:e7:5a:76:f6:b3:fc:75:cb:51:d6:44:64:6b:da:96:3d:7b: bf:45:db:5a:f1:93:31:3a:41:55:75:50:48:e5:0a:e5:6f:21: d2:e7:df:cc -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM5QUIxMTAvBgNVBAUTKEMxNDI0QzRDQ0M1OUM5QTAzMUJFMUFDREY3OTgyRDg3 QUI1N0QwNjgwHhcNMjYwODMwMjE0MTM1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk0YTM4Zi0wMmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApTb8GVkrlgOZfmRA1ZOZyg+e4UYQCnSjrB8wOGS/XjvRZT64+2I/EY+qbXJc d5vnwuKbFFhTFjOhV4qqX6ZC0ZPFFamKgi6LPi+TCGPLT+xUxWCLc2wmH6Kq0hl8 73HwVYiJ/4bNnK52OMJ4Cnieyq1HYFLR0bc96Yvq+EKjBfxpBl1Drk4AMVWgwseI PNxdcSJSdEkEwyJc2TzZNN/eXXWSa8bKQ67Jh/mowvoj+9hlVtqd3QIv7YFuXGI9 fjamhaqDZIb4ad7YAbDoIZx5X0y559ZZv+c1XRNGPFNbi4O4x329iO/yXxmCk5cv x4Lb+AM/n34ROMbeYiBIfUTRDQIDAQABo4ICejCCAnYwHQYDVR0OBBYEFDJxJyQh tV93G8Ng5qyyv3QmyH5FMB8GA1UdIwQYMBaAFMFCTEzMWcmgMb4azfeYLYerV9Bo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzlBQi8xNThENDkwNjI1 NUIxMUVCQTlGNTYwMUFDNEY5QUUwMi93VUpNVE14WnlhQXh2aHJOOTVndGg2dFgw R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVSk1UTXhaeWFBeHZock45NWd0aDZ0WDBHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTM5QUIvMTU4RDQ5MDYyNTVCMTFFQkE5RjU2MDFBQzRGOUFFMDIvOTZBRDE2QzZC NUZBMTFGMEExNTgzQzg0QzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm BAIAATAgAwQFypNgAwQFy1KgAwQGy8lAMAwDBAfdeIADBAHdeJAwDQYJKoZIhvcN AQELBQADggEBAK6tbh00qFiXx1gn5655LX67952/irjLoblG1E3zJ8UtJUEL0Vhu uG85U76kiqiu1t0ojtr5J7Cv4AXensTPvCtvEHpE5CzjBbkQLKSFxVyGIDhn9y6b SwpLiAQp8wNQJqQs4rdpGB5y4L0OF6kmtMsrjp57zpugvautH/BOh2Q3+zUwlky3 X2Bj4MBt46YAo5gGZhsFoSFpySTPrkIQTEZUnK4IH8IrT651VgMkQTXJRpOFaT+F mftzA/BLlinINe6oZdS49hDj/BCmm0DHNGNBtow11Wno+VbnWnb2s/x1y1HWRGRr 2pY9e79F21rxkzE6QVV1UEjlCuVvIdLn38w= -----END CERTIFICATE-----Generated at Mon Oct 5 16:41:45 2026 by rpki-client