$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/75522B0A002B11EA855CA925C4F9AE02.roa File: 75522B0A002B11EA855CA925C4F9AE02.roa (raw, json) Hash identifier: 9GpcqksqCneDnIf0DLfUkzA97uuRd85btObC4kf3ijE= Subject key identifier: E7:57:D7:FA:7D:EB:C6:E8:B9:2E:44:35:5F:32:72:5C:A3:A9:71:56 Certificate issuer: /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Certificate serial: 1458 Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/75522B0A002B11EA855CA925C4F9AE02.roa Signing time: Thu 10 Sep 2026 17:33:48 +0000 ROA not before: Thu 10 Sep 2026 17:33:48 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 4637 IP address blocks: 101.167.176.0/22 maxlen: 24 101.167.180.0/22 maxlen: 24 101.167.184.0/22 maxlen: 24 101.167.188.0/22 maxlen: 24 101.167.192.0/21 maxlen: 24 101.167.200.0/21 maxlen: 24 101.167.208.0/22 maxlen: 24 101.167.212.0/22 maxlen: 24 101.167.216.0/21 maxlen: 24 203.36.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 16:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5208 (0x1458) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Validity Not Before: Sep 10 17:33:48 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6aa2e9fc-0add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b8:05:e2:08:92:40:d5:24:13:43:32:d8:99: 39:e4:a2:ba:dc:86:e3:61:04:dd:50:5f:fe:cb:cd: e9:6d:ff:1e:30:d4:81:2d:dd:d0:b3:60:13:62:8a: f2:6b:45:18:ff:59:fa:11:c8:74:06:e3:7f:78:b1: 84:01:95:37:4d:4f:34:b0:91:bb:f9:b2:f9:e7:f1: 5f:c0:e6:7e:a8:05:86:8a:43:3d:90:31:52:dc:1b: fa:06:da:9b:05:d4:a7:42:dc:56:15:42:46:46:6b: 9e:8e:18:72:24:37:9b:c7:41:a6:e0:0f:db:ac:90: 2f:c2:13:33:c3:12:b2:cf:3d:da:ed:29:de:85:17: 01:7a:3f:ba:cc:b4:b5:b2:ff:93:7f:6d:39:aa:86: 4d:67:00:e5:23:bd:e3:6d:5e:c7:0c:44:22:3c:de: 1c:8c:17:1b:60:89:bb:3b:ab:6c:ed:ab:53:9c:e2: aa:8a:20:0f:63:d3:b3:55:ab:d6:22:e3:ed:27:2e: c4:53:bc:b7:27:b4:68:ac:a7:e1:d3:b5:d1:51:5b: b9:9f:cf:dd:3a:47:3d:14:76:9d:0b:d0:44:1c:df: 81:e1:a4:30:2a:9e:41:ea:5a:83:62:7d:5e:8e:7b: 64:2a:4a:26:2a:34:b6:d4:10:37:61:21:01:92:01: 5b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:57:D7:FA:7D:EB:C6:E8:B9:2E:44:35:5F:32:72:5C:A3:A9:71:56 X509v3 Authority Key Identifier: keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/75522B0A002B11EA855CA925C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 101.167.176.0-101.167.223.255 203.36.128.0/24 Signature Algorithm: sha256WithRSAEncryption 20:a3:a6:01:e7:a0:b4:cc:46:60:4e:ed:2a:1f:e4:c2:49:42: 6d:cf:a2:ba:00:d6:05:db:23:6f:6d:e5:c3:53:44:93:92:b2: 13:cf:00:81:45:f5:f1:41:41:87:ba:79:84:37:c2:f3:b6:5b: ca:7c:f5:21:91:4e:ec:36:13:51:0c:8d:7f:72:bb:da:8f:40: 4f:80:4e:1b:82:72:b3:25:23:30:13:c9:da:1c:47:ce:20:83: 22:ed:f7:11:97:15:56:f3:c4:07:cd:90:82:ad:e2:f7:60:f2: 2c:5e:d4:cc:60:99:b4:b4:a9:13:56:d5:40:bb:c8:d6:ff:f0: 22:bc:50:d4:03:21:c4:a9:b2:68:74:59:3d:ab:53:79:63:2b: 90:da:59:77:a2:e7:f4:af:a7:08:a4:68:d2:ff:1f:70:8b:92: 2e:64:17:f5:1f:57:6e:3d:42:69:0b:b0:d0:dc:43:a5:4d:94: 27:88:ca:72:e7:5e:4d:fa:87:a2:7f:89:c5:62:18:e0:5d:09: 9c:f5:aa:9e:7f:11:e9:fd:8b:e6:57:63:87:64:a6:62:ae:e1: 67:af:5f:47:1c:68:b4:4d:8c:36:f1:99:3e:bd:01:02:9e:3d: e8:c2:b5:38:2b:1f:95:a6:ed:00:95:b7:fa:05:e6:bc:01:2f: 82:ea:89:05 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICFFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKDcxNTY1RjJEN0I5MjRDRDcyQjQ1NUI2OEI2NjcxOTQw MTBCQjFBOUYwHhcNMjYwOTEwMTczMzQ4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEyZTlmYy0wYWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA37gF4giSQNUkE0My2Jk55KK63IbjYQTdUF/+y83pbf8eMNSBLd3Qs2ATYory a0UY/1n6Ech0BuN/eLGEAZU3TU80sJG7+bL55/FfwOZ+qAWGikM9kDFS3Bv6Btqb BdSnQtxWFUJGRmuejhhyJDebx0Gm4A/brJAvwhMzwxKyzz3a7SnehRcBej+6zLS1 sv+Tf205qoZNZwDlI73jbV7HDEQiPN4cjBcbYIm7O6ts7atTnOKqiiAPY9OzVavW IuPtJy7EU7y3J7RorKfh07XRUVu5n8/dOkc9FHadC9BEHN+B4aQwKp5B6lqDYn1e jntkKkomKjS21BA3YSEBkgFbvQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFOdX1/p9 68bouS5ENV8yclyjqXFWMB8GA1UdIwQYMBaAFHFWXy17kkzXK0VbaLZnGUAQuxqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8xNjczMEQyMENE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1ROY3JSVnRvdG1jWlFCQzdH cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NWWmZMWHVTVE5jclJWdG90bWNaUUJDN0dwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkE5ODMvMTY3MzBEMjBDRDBGMTFFODlEOUZGMTY1QzRGOUFFMDIvNzU1MjJCMEEw MDJCMTFFQTg1NUNBOTI1QzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUMAwDBARlp7ADBAVlp8ADBADLJIAwDQYJKoZIhvcNAQELBQADggEBACCj pgHnoLTMRmBO7Sof5MJJQm3PoroA1gXbI29t5cNTRJOSshPPAIFF9fFBQYe6eYQ3 wvO2W8p89SGRTuw2E1EMjX9yu9qPQE+AThuCcrMlIzATydocR84ggyLt9xGXFVbz xAfNkIKt4vdg8ixe1MxgmbS0qRNW1UC7yNb/8CK8UNQDIcSpsmh0WT2rU3ljK5Da WXei5/SvpwikaNL/H3CLki5kF/UfV249QmkLsNDcQ6VNlCeIynLnXk36h6J/icVi GOBdCZz1qp5/Een9i+ZXY4dkpmKu4WevX0ccaLRNjDbxmT69AQKePejCtTgrH5Wm 7QCVt/oF5rwBL4LqiQU= -----END CERTIFICATE-----Generated at Fri Sep 25 10:04:14 2026 by rpki-client