$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/7B0202308D7511F1B81A5A6E3211F970.roa File: 7B0202308D7511F1B81A5A6E3211F970.roa (raw, json) Hash identifier: lv3GXVFOzs+qZgsFZM+UB3hGX5PZBVPXBw8RmXvYngs= Subject key identifier: B0:4A:05:74:0E:61:5A:62:22:DE:A2:42:08:D3:4D:26:29:D7:51:F3 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0DF5 Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/7B0202308D7511F1B81A5A6E3211F970.roa Signing time: Thu 03 Sep 2026 02:08:34 +0000 ROA not before: Thu 03 Sep 2026 02:08:34 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 202736 IP address blocks: 43.246.129.0/24 maxlen: 24 45.115.35.0/24 maxlen: 24 45.124.63.0/24 maxlen: 24 103.7.209.0/24 maxlen: 24 103.7.210.0/24 maxlen: 24 103.26.164.0/24 maxlen: 24 103.26.165.0/24 maxlen: 24 103.244.211.0/24 maxlen: 24 160.20.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:46:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3573 (0xdf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Sep 3 02:08:34 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6a98d6a2-0fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:14:b1:a8:ea:2f:d9:ab:fc:9c:8b:1b:4a:22: 57:43:f9:da:33:04:52:09:8c:d1:e5:50:08:97:ec: 1b:45:d3:cb:26:a7:38:a2:8e:b0:c3:c9:31:ed:29: e3:6e:d2:ca:fe:cd:30:70:37:c3:4b:de:65:f5:f1: 0e:38:d9:ff:1a:73:a1:fd:f1:85:55:c3:43:68:ba: ec:af:08:9d:ee:94:72:ac:5d:a2:35:13:11:58:f5: 25:91:cb:b1:34:eb:12:db:9a:68:d3:b2:6f:09:e7: 65:5a:51:d4:b0:6b:9e:69:1d:3a:87:8a:6b:19:87: 4a:52:6d:9b:df:c9:96:ff:88:ce:aa:82:80:1c:11: 00:89:5a:79:24:d9:7b:53:03:4c:df:fc:49:d1:93: bc:03:0f:ff:6f:29:0d:1a:dd:f3:f9:13:fd:68:6e: c4:d3:b1:00:61:2b:83:ac:03:41:7c:09:e8:cc:5a: f8:ef:cf:d0:84:7f:d9:e9:af:ab:57:ba:e6:11:74: b8:51:0a:23:57:1f:95:31:ed:be:92:ac:3c:39:86: 72:31:d9:c8:cd:89:5f:8e:64:b3:12:f5:b7:16:3c: 89:af:12:82:dd:15:b7:eb:1a:54:4f:97:3a:b7:57: f3:5c:51:65:ed:2b:c3:a4:9a:fc:c0:af:7b:20:b1: ea:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4A:05:74:0E:61:5A:62:22:DE:A2:42:08:D3:4D:26:29:D7:51:F3 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/7B0202308D7511F1B81A5A6E3211F970.roa sbgp-ipAddrBlock: critical IPv4: 43.246.129.0/24 45.115.35.0/24 45.124.63.0/24 103.7.209.0-103.7.210.255 103.26.164.0/23 103.244.211.0/24 160.20.45.0/24 Signature Algorithm: sha256WithRSAEncryption 06:46:f9:7c:0d:4a:f2:07:8f:76:94:49:4e:01:7e:31:96:e3: 65:3f:ca:86:98:c6:5e:2e:aa:b5:ce:1e:50:1e:06:ee:cc:46: 88:4a:56:1c:ab:8c:5b:0e:f1:da:9f:71:c0:d1:8d:b9:46:0d: 23:41:48:c1:b8:22:6a:df:0c:aa:b7:4f:cf:9e:6a:55:c1:cb: 80:f6:a8:26:29:e3:8a:35:42:f8:a1:99:43:82:ac:32:5b:dc: f3:c9:29:12:b2:04:17:62:86:0e:02:69:a8:32:72:58:9a:70: 08:b0:b9:75:2a:8f:e2:6b:7d:5e:de:64:dd:6b:2e:61:01:2f: 00:4b:cb:38:64:c4:81:24:bd:fc:69:38:e9:39:cd:76:34:d9: c6:ef:ce:42:f3:70:20:48:1c:1c:67:84:ab:ca:e2:6d:00:df: 45:dc:77:6a:ed:49:26:bb:00:9d:64:6a:bb:40:0c:86:fa:04: 89:13:3f:df:32:79:03:b2:8b:96:86:cd:05:92:5f:7f:56:9e: cd:0f:92:23:a1:ee:52:dd:5c:f4:99:f1:eb:8e:43:f2:fe:f4: 3a:82:18:33:35:46:13:56:0e:d1:5e:92:b7:23:3e:df:36:53: dd:f8:ea:ed:ce:66:da:c2:ca:86:4b:55:48:cf:72:37:0e:16: fe:b2:3c:3d -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgICDfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjYwOTAzMDIwODM0WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4ZDZhMi0wZmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshSxqOov2av8nIsbSiJXQ/naMwRSCYzR5VAIl+wbRdPLJqc4oo6ww8kx7Snj btLK/s0wcDfDS95l9fEOONn/GnOh/fGFVcNDaLrsrwid7pRyrF2iNRMRWPUlkcux NOsS25po07JvCedlWlHUsGueaR06h4prGYdKUm2b38mW/4jOqoKAHBEAiVp5JNl7 UwNM3/xJ0ZO8Aw//bykNGt3z+RP9aG7E07EAYSuDrANBfAnozFr478/QhH/Z6a+r V7rmEXS4UQojVx+VMe2+kqw8OYZyMdnIzYlfjmSzEvW3FjyJrxKC3RW36xpUT5c6 t1fzXFFl7SvDpJr8wK97ILHqxQIDAQABo4ICjDCCAogwHQYDVR0OBBYEFLBKBXQO YVpiIt6iQgjTTSYp11HzMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvN0IwMjAyMzA4 RDc1MTFGMUI4MUE1QTZFMzIxMUY5NzAucm9hMEsGCCsGAQUFBwEHAQH/BDwwOjA4 BAIAATAyAwQAK/aBAwQALXMjAwQALXw/MAwDBABnB9EDBABnB9IDBAFnGqQDBABn 9NMDBACgFC0wDQYJKoZIhvcNAQELBQADggEBAAZG+XwNSvIHj3aUSU4BfjGW42U/ yoaYxl4uqrXOHlAeBu7MRohKVhyrjFsO8dqfccDRjblGDSNBSMG4ImrfDKq3T8+e alXBy4D2qCYp44o1QvihmUOCrDJb3PPJKRKyBBdihg4CaagycliacAiwuXUqj+Jr fV7eZN1rLmEBLwBLyzhkxIEkvfxpOOk5zXY02cbvzkLzcCBIHBxnhKvK4m0A30Xc d2rtSSa7AJ1kartADIb6BIkTP98yeQOyi5aGzQWSX39Wns0PkiOh7lLdXPSZ8euO Q/L+9DqCGDM1RhNWDtFekrcjPt82U9346u3OZtrCyoZLVUjPcjcOFv6yPD0= -----END CERTIFICATE-----Generated at Tue Sep 22 03:38:53 2026 by rpki-client