$ rpki-client -vvf rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/9FC8CE38936E11EC92AF8421C4F9AE02.roa File: 9FC8CE38936E11EC92AF8421C4F9AE02.roa (raw, json) Hash identifier: vwUFyzVHyN9gmRMfJMr4a16IV2f6KAmtlJCbMeEKz3c= Subject key identifier: 4A:58:9F:3A:D8:BA:19:7D:D5:15:A4:06:3F:C3:2B:C7:17:78:62:A7 Certificate issuer: /CN=A91F58C9/serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Certificate serial: 046C Authority key identifier: 19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/9FC8CE38936E11EC92AF8421C4F9AE02.roa Signing time: Sat 21 Mar 2026 03:36:09 +0000 ROA not before: Sat 21 Mar 2026 03:36:09 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 149512 IP address blocks: 163.128.92.0/23 maxlen: 24 2400:16e0::/32 maxlen: 32 2400:16e0::/48 maxlen: 48 2400:16e0:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 23:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1132 (0x46c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F58C9, serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Validity Not Before: Mar 21 03:36:09 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69be1229-6c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:45:f8:79:7e:89:63:0f:28:cd:6c:9d:08:f5: 15:4f:9e:49:0a:df:18:90:3a:5f:69:c8:3c:16:7d: 36:47:37:bd:9c:ad:78:b5:b7:4e:81:ab:8f:46:b7: 9c:28:18:25:ad:3c:7f:f7:74:8a:e3:6e:1a:f9:8b: 96:cb:1c:54:8e:9e:4e:dc:a9:4d:09:a6:e7:22:76: de:88:44:48:94:a1:d4:df:4c:b0:ed:32:27:4a:a1: a9:bc:74:ee:c2:d7:dd:95:85:a1:85:9f:96:49:44: cf:00:96:90:a8:7f:58:2b:68:d9:f3:0b:e2:3b:eb: 5a:d6:2e:a8:cd:6a:3c:8a:2b:c6:bd:05:97:01:fa: 19:cd:bc:41:e6:42:b9:b1:cd:91:57:09:ff:6f:50: d4:03:28:7d:e5:c1:92:b3:0a:42:28:8c:32:ee:da: 34:96:b6:39:03:c8:2c:d1:2c:bb:14:41:6d:a6:97: 20:3e:90:27:10:fa:7f:13:e9:db:6b:ab:54:0a:87: dc:9d:2f:8a:94:1b:14:cf:00:b6:b2:ce:86:9d:a2: 0e:2b:be:19:ec:26:c0:15:aa:02:fe:ae:56:fc:86: 52:07:1c:e1:1e:28:47:08:46:12:87:dc:9a:30:41: 80:0a:e3:7f:aa:0b:c7:a2:9c:8f:6e:f4:56:72:ed: 44:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:58:9F:3A:D8:BA:19:7D:D5:15:A4:06:3F:C3:2B:C7:17:78:62:A7 X509v3 Authority Key Identifier: keyid:19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/9FC8CE38936E11EC92AF8421C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 163.128.92.0/23 IPv6: 2400:16e0::/32 Signature Algorithm: sha256WithRSAEncryption 92:e3:22:df:04:c3:ba:ee:b4:2f:42:ef:4b:27:0a:71:6a:d1: 79:2c:8b:2d:0e:78:a9:ab:86:ef:20:c2:db:08:d7:ad:87:44: 34:be:b3:74:4a:b2:8d:b4:6b:d1:ea:2a:06:e5:ec:54:04:d6: f0:f6:8d:8c:14:f6:34:92:b6:d3:9e:62:06:07:03:48:3f:0e: 95:97:10:34:c8:c5:46:11:ab:63:91:0e:6d:a4:29:ea:22:3d: 7a:51:c6:18:22:79:96:94:f6:5d:c8:15:9b:49:25:ef:b9:f2: df:43:b3:03:7a:bb:4b:b0:66:eb:25:38:76:43:80:d7:0e:66: 97:12:5e:be:93:a9:21:8d:99:db:ed:72:94:ac:ab:d1:1a:d2: 4e:df:ec:43:9d:f9:14:0f:dc:da:53:d0:d6:fd:1e:92:f5:8a: 19:4b:e0:8c:eb:fb:46:b2:8a:29:68:ef:32:d7:08:63:e6:1c: 35:f8:b0:30:6b:7e:4e:7f:44:9c:55:cf:01:59:b3:34:c3:63: 6d:45:01:af:01:13:05:b0:2a:f0:1c:0f:2c:bc:5c:92:3a:8a: 9f:3c:fb:3d:d6:0c:c8:9e:91:ee:2a:da:bb:e9:cf:e4:26:e5: c1:3d:82:78:3c:93:a0:4a:92:7a:62:29:71:90:14:63:c0:08: 18:22:4f:0d -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4QzkxMTAvBgNVBAUTKDE5Mjk3N0REQUEwOTVCNDA3N0VFMEQ3NjIzODQ2M0Yx QjZGNDBBRUUwHhcNMjYwMzIxMDMzNjA5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWJlMTIyOS02YzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0X4eX6JYw8ozWydCPUVT55JCt8YkDpfacg8Fn02Rze9nK14tbdOgauPRrec KBglrTx/93SK424a+YuWyxxUjp5O3KlNCabnInbeiERIlKHU30yw7TInSqGpvHTu wtfdlYWhhZ+WSUTPAJaQqH9YK2jZ8wviO+ta1i6ozWo8iivGvQWXAfoZzbxB5kK5 sc2RVwn/b1DUAyh95cGSswpCKIwy7to0lrY5A8gs0Sy7FEFtppcgPpAnEPp/E+nb a6tUCofcnS+KlBsUzwC2ss6GnaIOK74Z7CbAFaoC/q5W/IZSBxzhHihHCEYSh9ya MEGACuN/qgvHopyPbvRWcu1E8QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFEpYnzrY uhl91RWkBj/DK8cXeGKnMB8GA1UdIwQYMBaAFBkpd92qCVtAd+4NdiOEY/G29Aru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNThDOS80MEUwQzBFRTkz NkMxMUVDQkRDMTFBMjBDNEY5QUUwMi9HU2wzM2FvSlcwQjM3ZzEySTRSajhiYjBD dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dTbDMzYW9KVzBCMzdnMTJJNFJqOGJiMEN1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjU4QzkvNDBFMEMwRUU5MzZDMTFFQ0JEQzExQTIwQzRGOUFFMDIvOUZDOENFMzg5 MzZFMTFFQzkyQUY4NDIxQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBo4BcMA0EAgACMAcDBQAkABbgMA0GCSqGSIb3DQEBCwUAA4IBAQCS 4yLfBMO67rQvQu9LJwpxatF5LIstDnipq4bvIMLbCNeth0Q0vrN0SrKNtGvR6ioG 5exUBNbw9o2MFPY0krbTnmIGBwNIPw6VlxA0yMVGEatjkQ5tpCnqIj16UcYYInmW lPZdyBWbSSXvufLfQ7MDertLsGbrJTh2Q4DXDmaXEl6+k6khjZnb7XKUrKvRGtJO 3+xDnfkUD9zaU9DW/R6S9YoZS+CM6/tGsoopaO8y1whj5hw1+LAwa35Of0ScVc8B WbM0w2NtRQGvARMFsCrwHA8svFySOoqfPPs91gzInpHuKtq76c/kJuXBPYJ4PJOg SpJ6YilxkBRjwAgYIk8N -----END CERTIFICATE-----Generated at Sat Mar 28 12:07:33 2026 by rpki-client