$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/561F6388B87A11F1A56A92905711F970.roa File: 561F6388B87A11F1A56A92905711F970.roa (raw, json) Hash identifier: ks/UElCZ5NCRIs8pWBwo0vMPtYF1EBZwWVTbZ027vbs= Subject key identifier: E7:3E:41:2F:5B:F3:86:0F:3F:DD:90:AB:CC:9A:CB:13:E4:8E:4A:F4 Certificate issuer: /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Certificate serial: 0387 Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/561F6388B87A11F1A56A92905711F970.roa Signing time: Fri 25 Sep 2026 00:45:00 +0000 ROA not before: Fri 25 Sep 2026 00:45:00 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 9426 IP address blocks: 166.120.0.0/22 maxlen: 24 166.120.5.0/24 maxlen: 24 166.120.7.0/24 maxlen: 24 166.120.8.0/24 maxlen: 24 166.120.64.0/19 maxlen: 19 166.120.64.0/22 maxlen: 22 166.120.64.0/23 maxlen: 24 166.120.68.0/23 maxlen: 24 166.120.70.0/23 maxlen: 24 166.120.72.0/22 maxlen: 23 166.120.74.0/23 maxlen: 24 166.120.76.0/22 maxlen: 22 166.120.76.0/23 maxlen: 24 166.120.80.0/20 maxlen: 22 166.120.164.0/22 maxlen: 24 166.120.200.0/22 maxlen: 24 166.120.212.0/22 maxlen: 24 166.120.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 01:32:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 903 (0x387) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B47, serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Validity Not Before: Sep 25 00:45:00 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6ab5c40c-6f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:af:df:27:eb:12:e2:2b:58:33:31:0c:20:49: 84:53:7a:37:53:0d:0b:93:b4:44:d8:c4:ae:d8:9f: 1c:3f:62:4e:e3:ef:24:82:d4:c8:76:e3:c6:76:11: ce:8a:d2:06:18:62:55:c8:22:e7:71:dd:bc:79:bc: ca:02:62:51:dd:94:c7:ad:0a:41:68:d0:46:01:a9: 4e:86:d5:38:a8:1e:31:7a:28:fb:5d:f8:45:14:1f: 80:76:32:7d:a9:aa:53:4b:c3:82:6d:cf:26:ad:04: ae:8c:31:e1:82:e1:da:7f:f6:20:23:d8:df:cf:66: c0:fe:ab:bb:17:99:3d:2e:c4:d5:6e:f0:0d:1e:4a: 26:ff:ce:f4:48:fe:39:9b:8b:ab:1e:c2:fd:57:27: 57:d7:cb:8e:e5:84:f9:93:1b:40:98:a0:5b:fd:51: 94:1a:08:a5:64:ae:87:82:2c:eb:f5:69:5a:f8:55: ee:b1:8f:39:e6:24:a9:f6:f6:30:09:71:79:8d:87: 9c:71:13:53:18:73:d4:03:03:3b:34:3c:17:29:ba: b7:ab:12:ab:b0:4c:37:24:c2:6d:87:cf:be:be:30: 21:37:81:2c:02:70:f3:ee:68:db:67:d4:5a:fa:e1: 22:f9:e1:9b:c8:f7:da:c0:33:6b:02:9e:09:f9:bb: ef:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:3E:41:2F:5B:F3:86:0F:3F:DD:90:AB:CC:9A:CB:13:E4:8E:4A:F4 X509v3 Authority Key Identifier: keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/561F6388B87A11F1A56A92905711F970.roa sbgp-ipAddrBlock: critical IPv4: 166.120.0.0/22 166.120.5.0/24 166.120.7.0-166.120.8.255 166.120.64.0/19 166.120.164.0/22 166.120.200.0/22 166.120.212.0-166.120.219.255 Signature Algorithm: sha256WithRSAEncryption 10:2b:93:a6:0f:23:22:d4:e6:c8:c0:36:8f:29:db:b0:cd:f1: 09:21:3a:63:c6:dd:b2:da:fb:24:8a:c5:b0:6f:6e:dc:7d:4f: 02:f9:2e:b5:dc:cf:6d:cb:2b:1b:d2:32:b4:0b:2a:db:4c:cf: b0:37:d4:3b:99:0e:c7:8b:0d:ea:7f:06:12:46:ae:1c:32:95: 85:5c:5c:75:b1:d4:0e:fb:be:8d:e0:64:e6:d7:46:3e:93:2b: 1a:07:24:ef:44:81:3f:63:0a:56:32:aa:44:40:74:48:57:9f: 4d:e0:fb:2f:94:00:e3:41:39:ad:26:86:ca:32:a6:b0:9e:a6: 0e:f6:2e:09:89:57:b8:53:48:2f:1c:67:ca:9a:3e:88:6e:b0: 2c:41:68:ac:0a:68:58:37:29:05:46:d4:cf:6e:74:c3:5e:d0: 71:eb:37:50:5b:37:f6:db:40:ef:b6:e4:9f:d8:59:94:39:d8: 84:12:ff:1f:d3:c7:d8:3e:c5:f4:fd:d0:e3:1a:b0:99:51:26: e5:7d:80:ae:fa:d9:35:39:77:52:1c:1e:49:f1:58:62:b7:f0: 73:6e:ae:11:1b:8b:75:29:36:76:95:73:18:45:a9:28:62:f9: 67:50:f5:d2:b5:40:8b:00:a2:ba:af:48:43:b5:34:78:ae:d7: fb:89:06:ef -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgICA4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNDcxMTAvBgNVBAUTKDE3RDVGRTMyM0VCRkQ5QThEMzQ0RTc3QjczNzk5QThF NzU2MjQzNTIwHhcNMjYwOTI1MDA0NTAwWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWI1YzQwYy02ZjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuq/fJ+sS4itYMzEMIEmEU3o3Uw0Lk7RE2MSu2J8cP2JO4+8kgtTIduPGdhHO itIGGGJVyCLncd28ebzKAmJR3ZTHrQpBaNBGAalOhtU4qB4xeij7XfhFFB+AdjJ9 qapTS8OCbc8mrQSujDHhguHaf/YgI9jfz2bA/qu7F5k9LsTVbvANHkom/870SP45 m4urHsL9VydX18uO5YT5kxtAmKBb/VGUGgilZK6Hgizr9Wla+FXusY855iSp9vYw CXF5jYeccRNTGHPUAwM7NDwXKbq3qxKrsEw3JMJth8++vjAhN4EsAnDz7mjbZ9Ra +uEi+eGbyPfawDNrAp4J+bvvTwIDAQABo4IClDCCApAwHQYDVR0OBBYEFOc+QS9b 84YPP92Qq8yayxPkjkr0MB8GA1UdIwQYMBaAFBfV/jI+v9mo00Tne3N5mo51YkNS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI0Ny9FODhFOUM3RTMz QUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJhalRST2Q3YzNtYWpuVmlR MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Y5WC1NajZfMmFqVFJPZDdjM21ham5WaVExSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjJCNDcvRTg4RTlDN0UzM0FGMTFFREI2MTA3NDM0QzRGOUFFMDIvNTYxRjYzODhC ODdBMTFGMUE1NkE5MjkwNTcxMUY5NzAucm9hMFMGCCsGAQUFBwEHAQH/BEQwQjBA BAIAATA6AwQCpngAAwQApngFMAwDBACmeAcDBACmeAgDBAWmeEADBAKmeKQDBAKm eMgwDAMEAqZ41AMEAqZ42DANBgkqhkiG9w0BAQsFAAOCAQEAECuTpg8jItTmyMA2 jynbsM3xCSE6Y8bdstr7JIrFsG9u3H1PAvkutdzPbcsrG9IytAsq20zPsDfUO5kO x4sN6n8GEkauHDKVhVxcdbHUDvu+jeBk5tdGPpMrGgck70SBP2MKVjKqREB0SFef TeD7L5QA40E5rSaGyjKmsJ6mDvYuCYlXuFNILxxnypo+iG6wLEForApoWDcpBUbU z250w17Qces3UFs39ttA77bkn9hZlDnYhBL/H9PH2D7F9P3Q4xqwmVEm5X2ArvrZ NTl3UhweSfFYYrfwc26uERuLdSk2dpVzGEWpKGL5Z1D10rVAiwCiuq9IQ7U0eK7X +4kG7w== -----END CERTIFICATE-----Generated at Thu Oct 1 18:22:30 2026 by rpki-client