$ rpki-client -vvf rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/F2826A504FCF11EB88444467C4F9AE02.roa File: F2826A504FCF11EB88444467C4F9AE02.roa (raw, json) Hash identifier: QqSGad7FxeptCh4lzX5ee03GteRq4SxJe8s+1HGe3x4= Subject key identifier: 7D:07:46:9B:50:38:54:E1:D3:06:31:62:B9:8F:FA:29:16:A6:F6:D6 Certificate issuer: /CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Certificate serial: 0D94 Authority key identifier: 1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/F2826A504FCF11EB88444467C4F9AE02.roa Signing time: Tue 06 May 2025 18:27:36 +0000 ROA not before: Tue 06 May 2025 18:27:36 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 55933 IP address blocks: 43.243.168.0/23 maxlen: 23 43.243.168.0/24 maxlen: 24 43.243.169.0/24 maxlen: 24 103.38.255.0/24 maxlen: 24 103.90.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:59:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3476 (0xd94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91568F6, serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Validity Not Before: May 6 18:27:36 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=681a5497-f4b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8f:d2:85:8e:cd:8f:5d:d4:c1:dd:de:4c:af: 1a:87:6b:33:c4:d8:39:79:58:d4:56:5b:be:f0:5c: 19:4f:a7:3f:bf:0c:46:95:f2:80:ab:04:8c:87:08: 4a:94:4f:45:b5:19:5d:51:01:2b:98:1a:6c:0c:9a: 09:b1:22:07:cf:39:a0:f0:3b:bb:e8:2c:5c:ab:7d: 5d:3a:2a:7b:f4:72:a3:c5:64:a5:e1:70:ad:b2:21: 63:61:50:40:ae:2b:27:7e:46:30:1d:d6:0f:b5:ac: 06:4e:e1:7d:be:41:dd:65:1f:9a:96:3d:21:20:83: cc:28:d6:dd:50:da:79:8d:35:eb:d8:af:b5:bf:7d: 0a:7f:85:24:a3:2d:99:61:5d:dc:98:74:4a:ba:56: 33:c9:1d:e7:9c:b0:0e:9f:83:59:69:39:34:fc:63: a0:b7:ea:9d:b7:e7:96:9e:52:0d:cf:85:6a:05:9e: cd:7f:7d:e8:c9:b3:f6:4b:d1:1c:66:94:a1:80:14: 36:40:09:fd:af:20:ca:ad:19:fd:68:80:e7:5c:47: 11:a2:86:bf:96:db:0a:37:c9:11:44:74:af:91:28: d3:73:ed:c4:47:f1:d9:4d:5b:e7:64:b1:b3:a5:cc: ca:38:4d:06:3b:1c:59:17:f3:09:1a:85:d9:79:af: 2a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:07:46:9B:50:38:54:E1:D3:06:31:62:B9:8F:FA:29:16:A6:F6:D6 X509v3 Authority Key Identifier: keyid:1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/F2826A504FCF11EB88444467C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.243.168.0/23 103.38.255.0/24 103.90.203.0/24 Signature Algorithm: sha256WithRSAEncryption 85:42:a4:d8:81:2a:05:bb:0c:f7:5a:44:14:7d:56:4d:81:6a: ab:0f:66:ad:cc:6d:be:06:a7:71:50:94:f0:65:3b:39:da:5c: bf:80:3c:04:5b:8c:17:05:3b:81:1c:42:43:47:c3:81:e6:f7: 22:ed:9b:32:ff:bf:94:e4:05:9e:8f:96:62:53:14:46:47:58: c2:f0:6f:5e:e7:ef:4b:c2:9e:21:98:a8:ec:5b:db:d9:67:42: 56:9a:6c:d3:38:24:33:5c:e8:bc:08:1c:c3:78:67:0b:ca:9a: ef:c9:71:63:a3:12:55:f5:6a:39:97:2b:e0:f7:d3:5f:71:86: 2f:39:19:3e:7b:dc:64:57:47:c7:8e:47:2a:2d:79:83:18:32: 08:60:96:8b:90:dd:fe:a7:b6:83:10:50:c7:25:fc:ee:e5:2a: 13:2b:85:5e:14:0b:fe:9f:57:21:92:46:4c:d5:5a:6d:6e:7a: d7:bd:76:c1:2a:89:cc:64:e6:bc:fd:a5:a9:40:6e:a7:68:04: f6:fe:9f:e5:16:55:fa:1a:40:c1:9e:ab:45:45:de:73:19:6c: 27:1c:df:78:f6:0b:e7:3f:3f:10:1c:a0:7f:19:20:a5:f5:cd: 89:cd:f2:42:0a:2f:36:ed:47:15:b6:c2:2c:f7:d1:fa:64:02: 41:26:a6:b2 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICDZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY4RjYxMTAvBgNVBAUTKDFFMzI5RTk4RjY3NjkyRTlCNTc2MDIzQTJGQkM1NTdE NTdERDU1NkMwHhcNMjUwNTA2MTgyNzM2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFhNTQ5Ny1mNGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvo/ShY7Nj13Uwd3eTK8ah2szxNg5eVjUVlu+8FwZT6c/vwxGlfKAqwSMhwhK lE9FtRldUQErmBpsDJoJsSIHzzmg8Du76Cxcq31dOip79HKjxWSl4XCtsiFjYVBA risnfkYwHdYPtawGTuF9vkHdZR+alj0hIIPMKNbdUNp5jTXr2K+1v30Kf4Ukoy2Z YV3cmHRKulYzyR3nnLAOn4NZaTk0/GOgt+qdt+eWnlINz4VqBZ7Nf33oybP2S9Ec ZpShgBQ2QAn9ryDKrRn9aIDnXEcRooa/ltsKN8kRRHSvkSjTc+3ER/HZTVvnZLGz pczKOE0GOxxZF/MJGoXZea8qiwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFH0HRptQ OFTh0wYxYrmP+ikWpvbWMB8GA1UdIwQYMBaAFB4ynpj2dpLptXYCOi+8VX1X3VVs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjhGNi8zN0QwM0RGNkNF MjgxMUU5QTZCNkMxN0JDNEY5QUUwMi9IaktlbVBaMmt1bTFkZ0k2TDd4VmZWZmRW V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hqS2VtUFoya3VtMWRnSTZMN3hWZlZmZFZXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTY4RjYvMzdEMDNERjZDRTI4MTFFOUE2QjZDMTdCQzRGOUFFMDIvRjI4MjZBNTA0 RkNGMTFFQjg4NDQ0NDY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAEr86gDBABnJv8DBABnWsswDQYJKoZIhvcNAQELBQADggEB AIVCpNiBKgW7DPdaRBR9Vk2BaqsPZq3Mbb4Gp3FQlPBlOznaXL+APARbjBcFO4Ec QkNHw4Hm9yLtmzL/v5TkBZ6PlmJTFEZHWMLwb17n70vCniGYqOxb29lnQlaabNM4 JDNc6LwIHMN4ZwvKmu/JcWOjElX1ajmXK+D3019xhi85GT573GRXR8eORyoteYMY MghglouQ3f6ntoMQUMcl/O7lKhMrhV4UC/6fVyGSRkzVWm1uete9dsEqicxk5rz9 palAbqdoBPb+n+UWVfoaQMGeq0VF3nMZbCcc33j2C+c/PxAcoH8ZIKX1zYnN8kIK LzbtRxW2wiz30fpkAkEmprI= -----END CERTIFICATE-----Generated at Wed Nov 5 04:28:30 2025 by rpki-client