$ rpki-client -vvvf rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/F0BA037C1D1A11F1B3DF5E87103D8C67.roa File: F0BA037C1D1A11F1B3DF5E87103D8C67.roa (raw, json) Hash identifier: Jv5BJrTJeaBGXUeY94Ls0qo9A275bsyOi9VK8HD+iNQ= Subject key identifier: 0F:3D:71:D8:A5:B2:5E:01:65:40:45:51:D0:2A:6C:A0:C8:DF:5B:51 Certificate issuer: /CN=A91958FF/serialNumber=F24F1471723A64E4D570DBB0D44C824305426266 Certificate serial: 97 Authority key identifier: F2:4F:14:71:72:3A:64:E4:D5:70:DB:B0:D4:4C:82:43:05:42:62:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/F0BA037C1D1A11F1B3DF5E87103D8C67.roa Signing time: Thu 03 Sep 2026 07:59:17 +0000 ROA not before: Thu 03 Sep 2026 07:59:17 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 13335 IP address blocks: 43.243.68.0/22 maxlen: 24 103.12.148.0/22 maxlen: 24 2400:1c80::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91958FF, serialNumber=F24F1471723A64E4D570DBB0D44C824305426266 Validity Not Before: Sep 3 07:59:17 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a9928d5-dc78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:55:45:fe:44:eb:54:11:9b:78:4a:b3:15:f4: 04:b8:f7:36:19:f1:6b:38:d4:84:0c:56:c3:38:2d: 2d:7e:81:fc:52:06:df:4a:17:58:b5:84:76:e5:de: 3b:13:3d:45:7f:56:5f:c9:56:84:a0:65:fe:22:5a: 76:92:3f:e9:ed:2d:d9:34:74:6e:fb:10:9e:f5:ed: 27:27:cd:cb:b7:c1:73:92:88:e8:1d:59:41:99:27: ba:0e:1b:cb:01:6f:20:4f:ef:99:63:e0:4a:87:c2: 33:d1:fb:1b:d9:6f:e8:74:fc:db:9a:7b:57:9c:eb: 76:7b:5d:19:18:60:bc:f5:b6:c2:fd:c4:b4:80:0c: 85:f8:bb:86:f9:11:b7:4f:e2:be:50:95:2f:4a:4a: a1:a7:a3:ae:d6:e0:c6:ac:d6:98:47:39:d3:36:77: 32:54:57:4c:0f:03:bf:2c:1e:db:7b:78:60:c7:14: b4:ea:0c:db:b6:31:3a:26:3b:b5:8a:c7:e3:fe:5f: e7:1f:8c:9b:00:78:b6:78:c8:bc:f1:e8:4f:14:b4: bb:01:bb:e8:cf:8d:86:69:55:2e:52:8a:3a:c2:7b: d4:d7:b1:ec:2c:24:cc:5f:14:6c:26:c9:db:44:7c: ab:c8:bc:ca:c7:c3:36:57:5d:70:85:38:2c:75:17: 8b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3D:71:D8:A5:B2:5E:01:65:40:45:51:D0:2A:6C:A0:C8:DF:5B:51 X509v3 Authority Key Identifier: keyid:F2:4F:14:71:72:3A:64:E4:D5:70:DB:B0:D4:4C:82:43:05:42:62:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/F0BA037C1D1A11F1B3DF5E87103D8C67.roa sbgp-ipAddrBlock: critical IPv4: 43.243.68.0/22 103.12.148.0/22 IPv6: 2400:1c80::/32 Signature Algorithm: sha256WithRSAEncryption 2f:d6:f4:78:c5:8d:5a:9f:e5:28:6b:11:1d:fd:0f:93:d3:eb: 37:bd:59:21:5d:97:85:5e:f7:61:19:9d:a7:0a:71:43:a4:d9: e5:4c:8b:bb:de:6a:69:45:b7:b4:60:5a:a4:19:f0:7e:db:96: 6a:a2:6a:9e:b4:6d:1f:6f:40:14:93:99:c4:f5:78:9b:48:ae: b9:85:ad:1a:98:5e:2b:95:c9:0f:98:9b:df:5f:fd:06:a3:6c: c9:50:af:f1:ec:16:4d:0e:70:67:c8:b3:fc:77:1b:1e:9d:66: ea:e1:58:79:26:bb:70:a4:90:af:7c:1e:0d:32:e6:d3:a6:4f: e1:c4:a7:bb:2f:74:b9:23:ed:3a:00:02:f1:7f:f8:66:4b:56: 7c:d6:43:bc:11:4e:dd:ae:72:14:c2:6e:c3:3d:31:82:ff:bf: 9f:e0:5c:4c:3e:99:18:59:68:fb:02:63:b8:be:0e:7f:f3:0a: af:1a:65:e0:3c:e1:9d:d7:24:9a:6c:df:6e:7e:47:5a:eb:8f: f9:46:37:21:31:b3:b2:5b:a5:35:c7:81:ae:50:b1:3a:45:c7: 11:01:1e:c5:3a:02:d4:6e:4a:75:c9:8f:03:2c:6f:e1:42:07: d7:0a:36:93:d9:d4:f3:ae:64:6a:19:8c:c0:e1:43:09:97:42: 1f:a1:50:1a -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU4RkYxMTAvBgNVBAUTKEYyNEYxNDcxNzIzQTY0RTRENTcwREJCMEQ0NEM4MjQz MDU0MjYyNjYwHhcNMjYwOTAzMDc1OTE3WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk5MjhkNS1kYzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm1VF/kTrVBGbeEqzFfQEuPc2GfFrONSEDFbDOC0tfoH8UgbfShdYtYR25d47 Ez1Ff1ZfyVaEoGX+Ilp2kj/p7S3ZNHRu+xCe9e0nJ83Lt8FzkojoHVlBmSe6DhvL AW8gT++ZY+BKh8Iz0fsb2W/odPzbmntXnOt2e10ZGGC89bbC/cS0gAyF+LuG+RG3 T+K+UJUvSkqhp6Ou1uDGrNaYRznTNncyVFdMDwO/LB7be3hgxxS06gzbtjE6Jju1 isfj/l/nH4ybAHi2eMi88ehPFLS7Abvoz42GaVUuUoo6wnvU17HsLCTMXxRsJsnb RHyryLzKx8M2V11whTgsdReLhQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFA89cdil sl4BZUBFUdAqbKDI31tRMB8GA1UdIwQYMBaAFPJPFHFyOmTk1XDbsNRMgkMFQmJm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NThGRi80RTNDQjZDMEQ3 MUIxMUYwOUExNDhEMjU5QUQzNjQxRC84azhVY1hJNlpPVFZjTnV3MUV5Q1F3VkNZ bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhrOFVjWEk2Wk9UVmNOdXcxRXlDUXdWQ1ltWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTU4RkYvNEUzQ0I2QzBENzFCMTFGMDlBMTQ4RDI1OUFEMzY0MUQvRjBCQTAzN0Mx RDFBMTFGMUIzREY1RTg3MTAzRDhDNjcucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCK/NEAwQCZwyUMA0EAgACMAcDBQAkAByAMA0GCSqGSIb3DQEBCwUA A4IBAQAv1vR4xY1an+UoaxEd/Q+T0+s3vVkhXZeFXvdhGZ2nCnFDpNnlTIu73mpp Rbe0YFqkGfB+25ZqomqetG0fb0AUk5nE9XibSK65ha0amF4rlckPmJvfX/0Go2zJ UK/x7BZNDnBnyLP8dxsenWbq4Vh5JrtwpJCvfB4NMubTpk/hxKe7L3S5I+06AALx f/hmS1Z81kO8EU7drnIUwm7DPTGC/7+f4FxMPpkYWWj7AmO4vg5/8wqvGmXgPOGd 1ySabN9ufkda64/5RjchMbOyW6U1x4GuULE6RccRAR7FOgLUbkp1yY8DLG/hQgfX CjaT2dTzrmRqGYzA4UMJl0IfoVAa -----END CERTIFICATE-----Generated at Mon Sep 21 21:28:23 2026 by rpki-client