$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/5060B434AD8911F1B5F6152E6611F970.roa File: 5060B434AD8911F1B5F6152E6611F970.roa (raw, json) Hash identifier: 9FnBND8nmvsKH6cDvf/xdjAGczE3b5tt1j6KJMIXX0E= Subject key identifier: 3D:C0:7E:18:74:64:4E:9B:10:9A:3C:C2:B4:06:9D:11:C6:14:91:A7 Certificate issuer: /CN=A91EF19E/serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A Certificate serial: 2B04 Authority key identifier: 9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/5060B434AD8911F1B5F6152E6611F970.roa Signing time: Fri 11 Sep 2026 02:34:30 +0000 ROA not before: Fri 11 Sep 2026 02:34:30 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 7575 IP address blocks: 138.44.0.0/16 maxlen: 24 160.250.178.0/23 maxlen: 24 192.203.235.0/24 maxlen: 24 192.207.33.0/24 maxlen: 24 192.207.113.0/24 maxlen: 24 192.207.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 14:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11012 (0x2b04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF19E, serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A Validity Not Before: Sep 11 02:34:30 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6aa368b6-4595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9a:69:fb:67:42:bc:59:a4:51:c1:63:5a:b3: 7f:47:42:9f:6d:d2:41:bf:59:03:5f:6c:fe:61:87: 9f:3f:89:55:c0:16:2f:a2:73:70:e1:57:3e:79:44: f8:d4:c6:93:ad:3e:a4:ca:fa:c7:a8:89:45:bd:9f: df:16:f4:1b:76:12:43:e8:57:a5:77:a8:af:ee:c9: 74:b9:7a:98:fa:97:b8:3b:95:c2:d4:ce:ab:c7:9c: 23:0c:9e:74:15:15:0b:cd:a9:17:ab:5a:c4:67:40: 3f:59:4d:fc:02:c4:1f:67:49:26:1e:c5:9b:53:af: a5:d0:04:64:84:82:73:46:4b:48:28:df:d3:27:42: 86:66:62:14:d4:1a:6b:10:d7:43:c9:57:e4:27:98: fa:45:73:e3:23:b4:28:2b:92:50:a9:75:a8:ed:e6: 0f:f2:61:00:f7:12:ad:69:30:1b:a3:25:e4:36:f8: ce:c6:46:a5:a1:70:fa:d0:f2:bb:0c:b4:72:a1:85: 9d:f4:64:ea:66:83:ec:76:f2:59:72:cf:3b:0c:6d: 4a:e4:8b:7e:83:9c:2d:f5:93:bf:92:a1:e1:3c:66: 8d:ba:06:7e:62:2f:58:cb:be:37:5d:10:d8:76:bd: 01:7c:61:49:ca:f9:d0:5c:9a:39:53:c4:57:38:22: d3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C0:7E:18:74:64:4E:9B:10:9A:3C:C2:B4:06:9D:11:C6:14:91:A7 X509v3 Authority Key Identifier: keyid:9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/5060B434AD8911F1B5F6152E6611F970.roa sbgp-ipAddrBlock: critical IPv4: 138.44.0.0/16 160.250.178.0/23 192.203.235.0/24 192.207.33.0/24 192.207.113.0/24 192.207.161.0/24 Signature Algorithm: sha256WithRSAEncryption 13:54:b2:7d:d4:77:1f:67:58:17:7d:5c:26:12:d8:15:5f:e9: 70:45:90:8c:9b:a0:dd:ba:f4:15:d7:2d:e1:36:80:16:54:15: 9f:99:61:af:f5:a3:ce:41:6c:63:09:da:37:f4:0c:71:4e:fa: 25:ab:a3:cd:50:97:74:cb:e9:e9:3b:cd:cf:3a:02:57:3b:33: 3a:ca:63:30:33:cc:03:21:0a:ca:2e:30:03:d1:ca:46:0a:8a: ef:2a:34:fe:9a:ff:02:54:46:d7:09:17:cf:3c:ec:43:9b:e7: dc:0f:f5:13:d0:7d:64:4c:cb:e0:7e:14:61:a9:34:67:ea:2a: 55:a3:f1:ba:07:06:b5:63:53:dd:46:31:df:56:f0:da:a9:52: 4c:fb:75:21:e4:2d:c3:ab:ba:ac:3d:ad:b9:b8:96:ed:61:a2: d8:7c:47:39:6d:f5:29:4f:52:7c:8c:81:95:03:d6:2a:ac:e5: 52:a5:fe:86:ca:96:94:da:84:5d:cb:e2:73:83:26:8e:13:2c: 52:d3:d1:fb:48:df:52:5a:40:76:a1:bf:d5:11:55:03:8f:1a: 7e:21:bb:0f:aa:ea:39:50:f3:02:5a:7d:db:68:b7:43:01:ee: 83:83:1e:30:f6:58:4b:06:84:a2:62:b0:99:0d:7d:0a:40:e5: 87:7b:1a:85 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgICKwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxOUUxMTAvBgNVBAUTKDlFMUYxOUE3RTE4RDhCQ0VEMjNFRjJFREFCMTlFODU0 MzhFN0YwOEEwHhcNMjYwOTExMDIzNDMwWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEzNjhiNi00NTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Zpp+2dCvFmkUcFjWrN/R0KfbdJBv1kDX2z+YYefP4lVwBYvonNw4Vc+eUT4 1MaTrT6kyvrHqIlFvZ/fFvQbdhJD6Feld6iv7sl0uXqY+pe4O5XC1M6rx5wjDJ50 FRULzakXq1rEZ0A/WU38AsQfZ0kmHsWbU6+l0ARkhIJzRktIKN/TJ0KGZmIU1Bpr ENdDyVfkJ5j6RXPjI7QoK5JQqXWo7eYP8mEA9xKtaTAboyXkNvjOxkaloXD60PK7 DLRyoYWd9GTqZoPsdvJZcs87DG1K5It+g5wt9ZO/kqHhPGaNugZ+Yi9Yy743XRDY dr0BfGFJyvnQXJo5U8RXOCLTFQIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFD3Afhh0 ZE6bEJo8wrQGnRHGFJGnMB8GA1UdIwQYMBaAFJ4fGafhjYvO0j7y7asZ6FQ45/CK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE5RS9BOTNFOTkzRTM0 MEQxMUU0OUVDOTgxNjNDNEY5QUUwMi9uaDhacC1HTmk4N1NQdkx0cXhub1ZEam44 SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25oOFpwLUdOaTg3U1B2THRxeG5vVkRqbjhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUYxOUUvQTkzRTk5M0UzNDBEMTFFNDlFQzk4MTYzQzRGOUFFMDIvNTA2MEI0MzRB RDg5MTFGMUI1RjYxNTJFNjYxMUY5NzAucm9hMDwGCCsGAQUFBwEHAQH/BC0wKzAp BAIAATAjAwMAiiwDBAGg+rIDBADAy+sDBADAzyEDBADAz3EDBADAz6EwDQYJKoZI hvcNAQELBQADggEBABNUsn3Udx9nWBd9XCYS2BVf6XBFkIyboN269BXXLeE2gBZU FZ+ZYa/1o85BbGMJ2jf0DHFO+iWro81Ql3TL6ek7zc86Alc7MzrKYzAzzAMhCsou MAPRykYKiu8qNP6a/wJURtcJF8887EOb59wP9RPQfWRMy+B+FGGpNGfqKlWj8boH BrVjU91GMd9W8NqpUkz7dSHkLcOruqw9rbm4lu1hoth8Rzlt9SlPUnyMgZUD1iqs 5VKl/obKlpTahF3L4nODJo4TLFLT0ftI31JaQHahv9URVQOPGn4huw+q6jlQ8wJa fdtot0MB7oODHjD2WEsGhKJisJkNfQpA5Yd7GoU= -----END CERTIFICATE-----Generated at Fri Sep 25 09:54:30 2026 by rpki-client