$ rpki-client -vvvf rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/91CB02E0DBDD11F0B3C660C858641951.roa File: 91CB02E0DBDD11F0B3C660C858641951.roa (raw, json) Hash identifier: S9P6S3zHGxSIuuK6o8a+ulaM7AA43gLPQGWTZ+ootLs= Subject key identifier: E7:16:E6:46:C5:B3:81:72:91:7D:18:C9:C4:20:E1:43:A4:6F:27:0D Certificate issuer: /CN=A91454A8/serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D Certificate serial: 0944 Authority key identifier: 9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/91CB02E0DBDD11F0B3C660C858641951.roa Signing time: Fri 18 Sep 2026 04:36:21 +0000 ROA not before: Fri 18 Sep 2026 04:36:21 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 146943 IP address blocks: 43.242.224.0/22 maxlen: 24 103.35.164.0/23 maxlen: 23 103.48.50.0/24 maxlen: 24 103.48.51.0/24 maxlen: 24 103.150.187.0/24 maxlen: 24 202.66.172.0/23 maxlen: 23 202.66.172.0/24 maxlen: 24 202.66.174.0/23 maxlen: 23 202.66.174.0/24 maxlen: 24 202.66.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2372 (0x944) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454A8, serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D Validity Not Before: Sep 18 04:36:21 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6aacbfc5-a6e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d6:e1:d9:6f:88:04:41:f4:95:ca:8a:a2:02: ed:1a:f1:bf:67:fd:9c:91:12:38:ca:c5:a0:f6:f2: 3b:cc:3a:bc:9a:42:dd:bd:68:ed:71:9a:aa:f0:b1: 4c:36:3b:ad:a3:c5:bd:84:d1:cb:21:cd:1a:b9:c9: 10:c6:52:5e:27:7b:26:ab:f3:d8:ae:1d:e8:d1:c6: 4c:2b:1f:d2:de:d2:f3:a0:ba:18:eb:4d:4a:a7:7d: 21:c0:83:35:a5:c8:6a:c4:32:8c:db:be:3b:d7:46: bf:19:62:6a:4b:59:ef:8e:b8:6b:87:85:98:4a:9a: 7d:f4:1b:08:f2:a6:14:37:53:68:dd:bf:da:0e:cc: 2d:5a:04:5f:d2:29:0a:6c:9f:88:1a:0b:61:41:13: 8e:b7:16:db:c7:d9:9d:55:c2:e4:e3:46:74:76:2e: 2c:f2:a6:a6:89:30:ea:17:09:a3:1d:69:6f:0e:94: 3d:53:a7:90:36:11:ae:28:9c:7d:37:c7:65:be:74: 9a:17:c2:f7:ac:5e:8a:f7:d1:9c:25:be:b1:1c:90: 8b:5e:48:ba:9e:6c:ab:cb:4c:ba:1c:55:0f:30:3a: fc:1b:51:bc:af:67:28:54:cc:21:34:f9:f2:a5:d5: 94:7c:4c:a6:76:f2:ed:81:9b:af:de:18:00:ba:c2: a6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:16:E6:46:C5:B3:81:72:91:7D:18:C9:C4:20:E1:43:A4:6F:27:0D X509v3 Authority Key Identifier: keyid:9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/91CB02E0DBDD11F0B3C660C858641951.roa sbgp-ipAddrBlock: critical IPv4: 43.242.224.0/22 103.35.164.0/23 103.48.50.0/23 103.150.187.0/24 202.66.172.0/22 Signature Algorithm: sha256WithRSAEncryption 81:43:58:e8:20:6e:d1:b7:c9:57:11:71:2a:55:bf:a4:16:d6: 50:54:88:14:9c:de:7e:20:80:5a:a8:26:d8:be:96:19:91:55: 6b:90:83:23:38:a3:72:99:44:59:fe:11:d4:8f:38:80:9c:5f: 5c:ef:30:3d:dd:44:6e:05:15:3f:77:c0:1a:87:b1:b8:e3:de: 20:2a:d4:2a:ad:fd:7c:3e:3c:71:32:38:8e:de:3e:f8:7d:be: 00:39:fe:1e:80:d5:a7:5d:81:3b:e3:33:65:56:28:36:c1:b6: 6b:66:97:50:7e:7c:e0:1d:94:2d:1d:ec:f4:42:c0:ed:45:76: 7f:00:8e:20:8d:04:eb:19:cf:16:b0:e9:a5:7a:6c:84:d3:9f: 3d:3f:33:a8:d6:72:e8:a8:ec:4a:e9:6f:f8:d8:eb:52:97:c7: 2d:5e:a0:b9:17:52:2f:0d:2d:4b:8c:e5:3b:62:a4:ef:a2:be: a1:57:38:8b:b4:69:1c:df:49:1b:27:90:86:26:d7:3c:17:f9: ef:93:db:ac:d5:16:8c:75:a2:e7:81:8b:36:16:72:cf:6d:c7: 25:19:67:b6:e5:5d:f1:6f:dc:8d:38:79:0f:91:3f:4c:27:ac: 09:8e:91:b3:0f:78:85:8e:67:c5:1b:f8:79:dc:9d:d5:22:51: 2e:d0:9c:6b -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICCUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0QTgxMTAvBgNVBAUTKDlCQjJCNEQxQThGRTgxMURDNDk1M0Q4MDJEMTAyRjVE MDQ4RDA4MUQwHhcNMjYwOTE4MDQzNjIxWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFjYmZjNS1hNmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9bh2W+IBEH0lcqKogLtGvG/Z/2ckRI4ysWg9vI7zDq8mkLdvWjtcZqq8LFM Njuto8W9hNHLIc0auckQxlJeJ3smq/PYrh3o0cZMKx/S3tLzoLoY601Kp30hwIM1 pchqxDKM274710a/GWJqS1nvjrhrh4WYSpp99BsI8qYUN1No3b/aDswtWgRf0ikK bJ+IGgthQROOtxbbx9mdVcLk40Z0di4s8qamiTDqFwmjHWlvDpQ9U6eQNhGuKJx9 N8dlvnSaF8L3rF6K99GcJb6xHJCLXki6nmyry0y6HFUPMDr8G1G8r2coVMwhNPny pdWUfEymdvLtgZuv3hgAusKmKwIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFOcW5kbF s4FykX0YycQg4UOkbycNMB8GA1UdIwQYMBaAFJuytNGo/oEdxJU9gC0QL10EjQgd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRBOC9FMjk1MjBCOEQx Q0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdSM0VsVDJBTFJBdlhRU05D QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL203SzAwYWotZ1IzRWxUMkFMUkF2WFFTTkNCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDU0QTgvRTI5NTIwQjhEMUNEMTFFQUJBNEEzNDQwQzRGOUFFMDIvOTFDQjAyRTBE QkREMTFGMEIzQzY2MEM4NTg2NDE5NTEucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQCK/LgAwQBZyOkAwQBZzAyAwQAZ5a7AwQCykKsMA0GCSqGSIb3DQEB CwUAA4IBAQCBQ1joIG7Rt8lXEXEqVb+kFtZQVIgUnN5+IIBaqCbYvpYZkVVrkIMj OKNymURZ/hHUjziAnF9c7zA93URuBRU/d8Aah7G4494gKtQqrf18PjxxMjiO3j74 fb4AOf4egNWnXYE74zNlVig2wbZrZpdQfnzgHZQtHez0QsDtRXZ/AI4gjQTrGc8W sOmlemyE0589PzOo1nLoqOxK6W/42OtSl8ctXqC5F1IvDS1LjOU7YqTvor6hVziL tGkc30kbJ5CGJtc8F/nvk9us1RaMdaLngYs2FnLPbcclGWe25V3xb9yNOHkPkT9M J6wJjpGzD3iFjmfFG/h53J3VIlEu0Jxr -----END CERTIFICATE-----Generated at Mon Sep 21 00:58:14 2026 by rpki-client