$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0FB31D783F9811F1A6E69A7BB8833773.roa File: 0FB31D783F9811F1A6E69A7BB8833773.roa (raw, json) Hash identifier: luuPImQP3n8E7E3RpMGNg8qntuO12ErEvrTILfknQJ4= Subject key identifier: 2C:86:ED:44:A9:8B:2B:79:52:F3:C6:E6:4D:BC:7A:26:4C:9D:65:4E Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6D85 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0FB31D783F9811F1A6E69A7BB8833773.roa Signing time: Fri 02 Oct 2026 15:22:28 +0000 ROA not before: Fri 02 Oct 2026 15:22:28 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 131386 IP address blocks: 45.119.80.0/22 maxlen: 24 45.119.84.0/22 maxlen: 24 103.2.228.0/22 maxlen: 24 103.27.236.0/22 maxlen: 24 103.87.220.0/22 maxlen: 24 103.89.92.0/22 maxlen: 24 103.95.156.0/22 maxlen: 24 103.200.24.0/22 maxlen: 24 2403:bf40::/42 maxlen: 48 2403:bf40:240::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 14:33:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28037 (0x6d85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 2 15:22:28 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcc34-af6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bb:6d:bf:b7:07:c6:9f:35:86:13:f2:0d:0b: e8:1a:30:b0:6e:ea:89:f1:2b:ee:94:0e:99:40:a1: 10:75:4a:2e:b5:99:f0:6e:a7:14:6f:6a:28:f3:9b: f4:4d:31:21:c2:33:5d:71:c4:db:cb:87:13:6d:b4: e4:33:bb:5b:85:7a:7e:92:21:5c:2e:47:68:d9:51: e7:9b:7d:30:c3:a7:3b:53:0e:f3:c7:6f:6f:65:bb: 41:c8:d0:0b:aa:13:73:0f:3e:19:bc:78:bb:14:10: 10:0e:55:05:86:1c:db:ad:f9:1b:cc:9f:22:b7:81: ba:5b:97:a5:7d:5e:0b:87:4f:ca:e5:25:e4:5a:83: 8d:ec:ac:7a:bb:d6:be:a4:dc:82:07:29:8a:0d:89: e5:66:ca:1e:80:0c:c5:44:8a:bd:69:f2:da:b4:5d: d2:95:fb:3a:3f:33:74:a5:07:c1:94:bc:1c:6f:0c: 1b:33:cd:91:c9:1a:97:e5:49:b8:b0:f2:c8:a3:ce: a2:80:ac:b2:8a:f9:17:50:3c:5f:42:90:c1:83:55: 3a:cc:0e:8a:73:cf:5a:b0:dd:3a:ee:d6:19:a4:14: 4e:90:a1:3a:2d:ec:28:2c:f5:df:15:b9:15:33:bd: 85:64:57:ea:7c:ce:35:aa:15:47:7d:c6:4c:2f:63: 91:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:86:ED:44:A9:8B:2B:79:52:F3:C6:E6:4D:BC:7A:26:4C:9D:65:4E X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0FB31D783F9811F1A6E69A7BB8833773.roa sbgp-ipAddrBlock: critical IPv4: 45.119.80.0/21 103.2.228.0/22 103.27.236.0/22 103.87.220.0/22 103.89.92.0/22 103.95.156.0/22 103.200.24.0/22 IPv6: 2403:bf40::/42 2403:bf40:240::/42 Signature Algorithm: sha256WithRSAEncryption b2:c9:92:3b:1e:48:ad:a6:bc:2c:b9:e5:89:20:15:2f:0c:aa: 50:ee:d4:e4:14:bc:23:45:36:68:ca:f2:7c:25:a3:31:04:23: f4:1d:27:33:31:9f:ec:4d:a4:fc:e4:2c:02:88:31:68:b8:47: 9c:56:79:8c:6c:dd:95:83:12:cf:44:9a:3a:9f:de:16:2b:dc: d6:d7:c9:ed:84:df:e2:6d:7f:61:fe:06:a1:e4:42:20:b3:06: 58:41:bb:46:22:dd:c6:2c:bd:df:e3:7f:eb:27:7c:51:59:8b: 54:45:2d:a0:90:1d:98:80:c1:bb:e5:91:fd:98:21:60:23:92: d6:11:2e:96:50:82:05:d2:af:bc:5f:21:ae:2f:a6:e6:a5:8d: 0a:9e:b6:5e:60:f5:50:02:27:c5:4a:19:6e:21:ed:21:85:6a: 23:28:8c:9d:28:a7:e1:6a:53:29:f9:5a:fe:d8:48:e6:00:e0: 2b:22:04:0b:99:a5:83:82:fe:3b:cf:fb:a2:48:0f:d5:c6:98: 85:01:cd:39:29:52:4c:47:ae:ac:4c:f8:1f:7f:a8:3b:03:7c: 2c:2c:dd:f2:49:e7:f5:15:48:64:2b:ea:2c:6f:6d:13:0b:13: 87:92:35:52:27:eb:96:1c:28:61:47:dd:45:2b:ab:4b:b9:96: fb:1b:21:f8 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgICbYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYxMDAyMTUyMjI4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2MzNC1hZjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApbttv7cHxp81hhPyDQvoGjCwbuqJ8SvulA6ZQKEQdUoutZnwbqcUb2oo85v0 TTEhwjNdccTby4cTbbTkM7tbhXp+kiFcLkdo2VHnm30ww6c7Uw7zx29vZbtByNAL qhNzDz4ZvHi7FBAQDlUFhhzbrfkbzJ8it4G6W5elfV4Lh0/K5SXkWoON7Kx6u9a+ pNyCBymKDYnlZsoegAzFRIq9afLatF3Slfs6PzN0pQfBlLwcbwwbM82RyRqX5Um4 sPLIo86igKyyivkXUDxfQpDBg1U6zA6Kc89asN067tYZpBROkKE6LewoLPXfFbkV M72FZFfqfM41qhVHfcZML2OR8wIDAQABo4ICnjCCApowHQYDVR0OBBYEFCyG7USp iyt5UvPG5k28eiZMnWVOMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMEZCMzFENzgz Rjk4MTFGMUE2RTY5QTdCQjg4MzM3NzMucm9hMF0GCCsGAQUFBwEHAQH/BE4wTDAw BAIAATAqAwQDLXdQAwQCZwLkAwQCZxvsAwQCZ1fcAwQCZ1lcAwQCZ1+cAwQCZ8gY MBgEAgACMBIDBwYkA79AAAADBwYkA79AAkAwDQYJKoZIhvcNAQELBQADggEBALLJ kjseSK2mvCy55YkgFS8MqlDu1OQUvCNFNmjK8nwlozEEI/QdJzMxn+xNpPzkLAKI MWi4R5xWeYxs3ZWDEs9Emjqf3hYr3NbXye2E3+Jtf2H+BqHkQiCzBlhBu0Yi3cYs vd/jf+snfFFZi1RFLaCQHZiAwbvlkf2YIWAjktYRLpZQggXSr7xfIa4vpualjQqe tl5g9VACJ8VKGW4h7SGFaiMojJ0op+FqUyn5Wv7YSOYA4CsiBAuZpYOC/jvP+6JI D9XGmIUBzTkpUkxHrqxM+B9/qDsDfCws3fJJ5/UVSGQr6ixvbRMLE4eSNVIn65Yc KGFH3UUrq0u5lvsbIfg= -----END CERTIFICATE-----Generated at Sun Oct 11 14:53:19 2026 by rpki-client