$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/8BEC7D66E54911F091014A6A756F56BC.roa File: 8BEC7D66E54911F091014A6A756F56BC.roa (raw, json) Hash identifier: EDgw1y1njUptJobYA07Zwnc+lrn+MA53o6pSdj5Vrcc= Subject key identifier: B0:42:A1:16:D8:F7:45:B2:62:F4:D4:37:B5:55:6F:1D:9A:E1:45:EF Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0DF9 Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/8BEC7D66E54911F091014A6A756F56BC.roa Signing time: Thu 03 Sep 2026 13:09:52 +0000 ROA not before: Thu 03 Sep 2026 13:09:52 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 2497 IP address blocks: 43.246.129.0/24 maxlen: 24 45.115.35.0/24 maxlen: 24 45.124.63.0/24 maxlen: 24 103.7.209.0/24 maxlen: 24 103.7.210.0/24 maxlen: 24 103.26.164.0/24 maxlen: 24 103.26.165.0/24 maxlen: 24 103.26.166.0/24 maxlen: 24 103.26.167.0/24 maxlen: 24 103.244.211.0/24 maxlen: 24 160.20.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3577 (0xdf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Sep 3 13:09:52 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6a99719f-24eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ae:67:5a:c1:5e:b3:0d:07:89:04:4c:27:ce: 5a:12:22:53:c2:a5:7b:12:cd:dc:05:83:3e:0b:86: 96:4f:26:83:85:e5:72:1b:42:9b:58:88:3f:34:89: b9:13:ea:59:52:ee:8b:f8:ea:f2:6a:b7:70:32:e5: 11:b3:36:29:d3:c0:94:f7:26:c2:97:1f:63:42:40: 98:fc:cf:de:ce:e0:b4:75:f6:12:03:78:a5:c4:6b: cf:8a:8b:9b:7a:bf:7d:ae:cf:b9:27:35:dd:e8:49: a4:e3:c2:3e:ed:66:53:de:ce:70:e2:7a:ff:53:87: 5e:ba:56:04:f2:50:bf:d6:8c:c9:4b:80:0a:66:2f: 84:fc:0f:29:e0:88:53:52:be:38:36:5d:8d:21:d1: 33:28:95:32:af:f9:c0:c4:24:90:1c:16:36:18:8e: b3:70:14:f2:ec:f8:c4:3d:64:4d:26:65:d8:15:3c: 90:70:28:e3:5d:f5:f5:c6:81:21:65:9e:ac:6c:eb: 0d:cf:61:ac:e8:9e:3e:54:13:a3:1a:92:b7:31:b0: f6:93:e6:b9:ed:6c:99:2c:2f:7b:65:40:6d:ef:23: 2c:77:cc:f8:19:f9:de:c2:73:d2:0b:be:57:6d:ed: 8c:61:b1:d8:9a:9b:9d:b0:c0:32:2b:72:b2:0c:d6: 99:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:42:A1:16:D8:F7:45:B2:62:F4:D4:37:B5:55:6F:1D:9A:E1:45:EF X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/8BEC7D66E54911F091014A6A756F56BC.roa sbgp-ipAddrBlock: critical IPv4: 43.246.129.0/24 45.115.35.0/24 45.124.63.0/24 103.7.209.0-103.7.210.255 103.26.164.0/22 103.244.211.0/24 160.20.45.0/24 Signature Algorithm: sha256WithRSAEncryption a3:ba:b0:41:d8:b9:1d:48:67:ad:55:9e:54:b8:3f:a3:e0:f8: cf:33:b6:78:75:d8:85:2b:c9:4b:b9:de:65:04:14:e1:a9:bc: ac:3a:d0:b6:1b:08:48:c3:82:2a:40:07:19:16:08:7a:be:b1: 16:ae:5a:77:f2:9f:0e:5d:77:6e:c2:9f:91:3e:5a:9e:1b:f5: 45:53:b0:5c:a0:53:71:61:1c:6f:b4:02:ca:82:82:1a:6b:4d: 5d:26:df:55:36:ac:c1:dc:6f:05:35:0d:90:1a:66:41:28:69: 5d:bc:a5:f2:26:0f:7d:dd:86:6b:64:4b:0d:e2:3b:b8:e8:cb: d4:d5:10:71:94:0b:59:04:da:9f:77:bd:3e:1e:1a:50:d4:1e: 31:84:e0:19:06:24:a4:96:0a:5d:28:68:4a:bf:5a:50:b5:60: 54:ba:1b:01:8b:9c:b2:f4:aa:c1:51:df:ce:70:7d:3d:2c:8c: 6c:db:53:43:bf:39:eb:e3:5a:85:27:1c:2c:c4:57:13:9d:97: 2c:35:47:4e:22:cf:fe:b5:9b:b9:d6:72:7a:33:99:55:22:91: 94:e8:a6:4e:62:6a:77:62:57:66:99:ae:f2:ff:a4:ff:29:d2: 7f:e9:0c:a9:db:06:62:43:39:32:36:80:05:05:f4:b6:13:2f: b8:19:8c:cb -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgICDfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjYwOTAzMTMwOTUyWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YTk5NzE5Zi0yNGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoq5nWsFesw0HiQRMJ85aEiJTwqV7Es3cBYM+C4aWTyaDheVyG0KbWIg/NIm5 E+pZUu6L+OryardwMuURszYp08CU9ybClx9jQkCY/M/ezuC0dfYSA3ilxGvPioub er99rs+5JzXd6Emk48I+7WZT3s5w4nr/U4deulYE8lC/1ozJS4AKZi+E/A8p4IhT Ur44Nl2NIdEzKJUyr/nAxCSQHBY2GI6zcBTy7PjEPWRNJmXYFTyQcCjjXfX1xoEh ZZ6sbOsNz2Gs6J4+VBOjGpK3MbD2k+a57WyZLC97ZUBt7yMsd8z4GfnewnPSC75X be2MYbHYmpudsMAyK3KyDNaZjwIDAQABo4ICjDCCAogwHQYDVR0OBBYEFLBCoRbY 90WyYvTUN7VVbx2a4UXvMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvOEJFQzdENjZF NTQ5MTFGMDkxMDE0QTZBNzU2RjU2QkMucm9hMEsGCCsGAQUFBwEHAQH/BDwwOjA4 BAIAATAyAwQAK/aBAwQALXMjAwQALXw/MAwDBABnB9EDBABnB9IDBAJnGqQDBABn 9NMDBACgFC0wDQYJKoZIhvcNAQELBQADggEBAKO6sEHYuR1IZ61VnlS4P6Pg+M8z tnh12IUryUu53mUEFOGpvKw60LYbCEjDgipABxkWCHq+sRauWnfynw5dd27Cn5E+ Wp4b9UVTsFygU3FhHG+0AsqCghprTV0m31U2rMHcbwU1DZAaZkEoaV28pfImD33d hmtkSw3iO7joy9TVEHGUC1kE2p93vT4eGlDUHjGE4BkGJKSWCl0oaEq/WlC1YFS6 GwGLnLL0qsFR385wfT0sjGzbU0O/OevjWoUnHCzEVxOdlyw1R04iz/61m7nWcnoz mVUikZTopk5iandiV2aZrvL/pP8p0n/pDKnbBmJDOTI2gAUF9LYTL7gZjMs= -----END CERTIFICATE-----Generated at Sun Sep 20 21:54:16 2026 by rpki-client