$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/5A9C0D58311C11F0B91A2E64C4F9AE02.roa File: 5A9C0D58311C11F0B91A2E64C4F9AE02.roa (raw, json) Hash identifier: l6Aa6/fE1hclyiAYT5GGmvLW7ocJavi4M76SaKG1uMc= Subject key identifier: AF:49:A6:DE:14:1C:16:40:3C:CE:10:CB:EE:69:BF:B1:61:ED:C0:14 Certificate issuer: /CN=A91A5ED2/serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1 Certificate serial: 0125 Authority key identifier: D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/5A9C0D58311C11F0B91A2E64C4F9AE02.roa Signing time: Wed 11 Nov 2026 06:53:44 +0000 ROA not before: Wed 11 Nov 2026 06:53:44 +0000 ROA not after: Wed 01 Mar 2028 00:00:00 +0000 asID: 4826 IP address blocks: 165.99.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 04:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5ED2, serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1 Validity Not Before: Nov 11 06:53:44 2026 GMT Not After : Mar 1 00:00:00 2028 GMT Subject: CN=6af410f7-96f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:8a:9e:85:3d:e1:28:63:2f:1c:47:8a:c9:ca: 85:3a:07:7c:54:50:11:8b:c3:2c:c4:fb:3b:74:75: 0a:52:cf:29:1e:95:f3:3e:c6:12:84:28:c9:5f:5a: 28:43:67:df:25:8b:9e:50:45:58:af:8f:98:ab:b8: ed:82:b4:ba:8c:e4:6e:a5:fb:f9:16:67:7b:b8:01: f2:c6:7b:d2:68:28:eb:29:4f:7d:04:e7:08:e5:f8: 27:81:ed:6b:28:73:84:8d:d3:05:bb:56:f7:1c:ab: 8f:af:06:c6:41:1b:93:3b:99:b3:95:6f:fb:ef:27: 58:4d:2c:2f:17:a5:66:58:e4:66:ea:d7:32:c5:5a: f3:55:f9:c2:cf:d7:ac:97:2b:40:e6:1b:f0:49:df: f9:73:a4:83:58:e5:da:90:7e:fb:ab:ea:d5:54:33: ab:ac:35:2a:83:8c:c6:6d:cc:8e:30:4a:11:f5:a8: 68:d4:2d:11:bb:b3:21:41:b4:fc:06:f7:14:6a:86: 84:92:43:83:2e:4d:a2:79:4a:45:f7:0c:31:37:64: a6:1e:65:43:43:3d:00:cd:41:99:3c:67:ca:47:1b: f4:44:d7:b2:ac:e6:f2:54:98:e3:63:9e:4d:3f:92: 1c:f3:09:d8:4a:60:72:26:02:58:a1:1b:c0:12:49: 5a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:49:A6:DE:14:1C:16:40:3C:CE:10:CB:EE:69:BF:B1:61:ED:C0:14 X509v3 Authority Key Identifier: keyid:D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/5A9C0D58311C11F0B91A2E64C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 165.99.18.0/24 Signature Algorithm: sha256WithRSAEncryption ad:0f:1a:9e:48:a5:b5:0b:c9:d9:66:e7:e3:9a:b6:21:15:68: a3:3d:f1:b4:02:d3:0c:92:89:a9:98:36:f9:ba:38:9a:4b:ed: 20:f1:3f:1a:29:4a:5c:1e:df:16:c2:43:79:c7:af:57:c8:d9: b7:0f:60:58:77:fa:c6:ef:b2:a2:d9:ce:e1:df:b0:06:49:c2: f5:ad:59:91:ef:2a:b9:87:5d:59:20:b5:fd:3f:8c:b3:ef:34: 77:fa:ea:80:4b:54:04:8d:1f:e1:71:51:6e:55:d0:1d:5a:6e: 11:cf:68:bc:41:27:ed:76:bc:0f:c8:fb:f3:a3:45:95:0e:23: ca:af:c7:28:2b:7c:7d:f0:7c:7c:5d:1c:55:7b:f9:38:50:ff: 16:60:3f:4f:5d:db:65:d6:5c:2e:d0:17:e5:4e:1f:19:2e:cd: 4d:cc:7f:2b:c5:08:fb:3a:8c:1a:57:2d:7a:b2:11:75:6d:dc: 47:9d:ed:58:02:34:30:e1:eb:cb:5f:cf:67:4f:a5:51:07:0e: 6d:9e:bf:69:f8:a1:67:f5:7b:ec:92:62:53:5d:90:95:e7:7e: 42:a3:9f:16:e1:f7:dc:c3:59:37:ab:8a:ab:3a:19:69:41:2f: 0d:9f:2e:eb:9b:3e:f6:07:9e:2c:7e:fc:32:fc:fa:bb:da:9e: 3b:e0:49:f5 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVFRDIxMTAvBgNVBAUTKEQ5MDRENTUyQzBFRjMyRjI0OUFCQTQ1OTdCRDg0QTE1 RUU1NTU1QzEwHhcNMjYxMTExMDY1MzQ0WhcNMjgwMzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWY0MTBmNy05NmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8YqehT3hKGMvHEeKycqFOgd8VFARi8MsxPs7dHUKUs8pHpXzPsYShCjJX1oo Q2ffJYueUEVYr4+Yq7jtgrS6jORupfv5Fmd7uAHyxnvSaCjrKU99BOcI5fgnge1r KHOEjdMFu1b3HKuPrwbGQRuTO5mzlW/77ydYTSwvF6VmWORm6tcyxVrzVfnCz9es lytA5hvwSd/5c6SDWOXakH77q+rVVDOrrDUqg4zGbcyOMEoR9aho1C0Ru7MhQbT8 BvcUaoaEkkODLk2ieUpF9wwxN2SmHmVDQz0AzUGZPGfKRxv0RNeyrObyVJjjY55N P5Ic8wnYSmByJgJYoRvAEklaXwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFK9Jpt4U HBZAPM4Qy+5pv7Fh7cAUMB8GA1UdIwQYMBaAFNkE1VLA7zLySaukWXvYShXuVVXB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUVEMi9GMjQ1QjJENjMx MUIxMUYwQTJGNTExNjBDNEY5QUUwMi8yUVRWVXNEdk12SkpxNlJaZTloS0ZlNVZW Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJRVFZVc0R2TXZKSnE2UlplOWhLRmU1VlZjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTVFRDIvRjI0NUIyRDYzMTFCMTFGMEEyRjUxMTYwQzRGOUFFMDIvNUE5QzBENTgz MTFDMTFGMEI5MUEyRTY0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQApWMSMA0GCSqGSIb3DQEBCwUAA4IBAQCtDxqeSKW1C8nZZufjmrYh FWijPfG0AtMMkompmDb5ujiaS+0g8T8aKUpcHt8WwkN5x69XyNm3D2BYd/rG77Ki 2c7h37AGScL1rVmR7yq5h11ZILX9P4yz7zR3+uqAS1QEjR/hcVFuVdAdWm4Rz2i8 QSftdrwPyPvzo0WVDiPKr8coK3x98Hx8XRxVe/k4UP8WYD9PXdtl1lwu0BflTh8Z Ls1NzH8rxQj7OowaVy16shF1bdxHne1YAjQw4evLX89nT6VRBw5tnr9p+KFn9Xvs kmJTXZCV535Co58W4ffcw1k3q4qrOhlpQS8Nny7rmz72B54sfvwy/Pq72p474En1 -----END CERTIFICATE-----Generated at Sun Nov 15 12:18:19 2026 by rpki-client