$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/F7F2D20ABCE911EFB7786B63C4F9AE02.roa File: F7F2D20ABCE911EFB7786B63C4F9AE02.roa (raw, json) Hash identifier: d3gEiVUqUws+0A/GhooCgjNpu9i7U506wCE8JKmKXtk= Subject key identifier: 61:21:14:C3:DB:D6:C3:26:53:AF:56:F2:D7:D6:85:30:D1:AB:90:71 Certificate issuer: /CN=A91AF3C6/serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441 Certificate serial: 08E2 Authority key identifier: 60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/F7F2D20ABCE911EFB7786B63C4F9AE02.roa Signing time: Mon 31 Aug 2026 20:40:55 +0000 ROA not before: Mon 31 Aug 2026 20:40:55 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 132857 IP address blocks: 43.243.56.0/23 maxlen: 24 103.156.230.0/23 maxlen: 24 2407:2b00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:24:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2274 (0x8e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF3C6, serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441 Validity Not Before: Aug 31 20:40:55 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a95e6d7-f750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ef:18:91:d5:3e:c5:b9:23:a5:1a:dc:34:b7: 03:e8:f9:f1:18:d9:5c:b0:07:df:de:dd:d7:bd:fc: 07:d7:c3:82:f9:50:83:8b:dc:a3:ec:4a:3a:a2:81: 74:b8:0f:e1:9e:dc:0e:da:28:a6:9d:ff:86:fe:64: 59:db:4e:00:2a:d0:f4:31:a0:51:ce:52:30:75:ad: 51:5e:41:15:2f:06:99:c6:32:35:9e:e3:1c:70:8d: 0f:a4:ac:a0:30:37:13:a9:d5:30:70:d1:8a:55:63: dd:0b:0a:51:7e:b8:f8:b2:87:04:0c:b2:31:31:80: 7d:e1:53:c9:e7:5d:ce:8e:e2:fc:43:7f:22:ac:6b: 5e:c0:c2:43:bd:1a:ad:df:93:b4:b9:bf:35:1e:42: b1:b7:a1:5d:14:40:b8:dc:46:c1:68:53:37:83:d1: 18:24:a7:c5:80:63:b2:dc:87:0c:2e:f7:6a:35:93: 28:94:68:0d:e8:8c:2e:35:57:30:a6:2f:6c:c8:fc: 7a:16:b7:02:f3:30:19:02:3d:7e:77:fd:29:8c:fc: fa:84:ba:07:a2:74:99:5a:ac:10:e9:3a:6c:11:dd: 88:f1:d8:9f:2f:3e:30:50:5e:4d:b9:aa:82:38:ba: 46:46:5d:02:2d:b9:c3:f5:a4:e6:8c:6f:92:c7:45: 1d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:21:14:C3:DB:D6:C3:26:53:AF:56:F2:D7:D6:85:30:D1:AB:90:71 X509v3 Authority Key Identifier: keyid:60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/F7F2D20ABCE911EFB7786B63C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.243.56.0/23 103.156.230.0/23 IPv6: 2407:2b00::/32 Signature Algorithm: sha256WithRSAEncryption 57:4b:c1:c8:b3:d8:e8:c4:9b:78:bb:e0:8c:07:32:69:3c:e3: 12:52:48:f5:a8:14:18:aa:4c:3c:32:a8:7c:c5:28:7e:07:43: 2c:b0:d7:50:c0:98:c3:ab:5e:a4:b3:ab:9a:ec:e9:80:10:66: 14:f4:1c:bd:42:c4:c0:84:e8:41:cd:76:30:f9:53:a4:f6:ca: ff:34:3a:08:25:8e:68:ea:be:1f:9a:24:a5:64:1d:38:1a:65: a7:59:dc:e0:3a:bb:0a:71:f6:5d:51:79:08:dd:0e:84:68:30: 47:53:30:a0:ef:85:1e:ce:66:f6:cb:a3:c7:05:72:4d:f7:e3: 99:4f:78:75:5e:5b:c5:f5:c7:86:49:5d:52:fa:aa:8a:47:e8: a9:6a:de:1c:f1:dd:db:f9:ee:5f:ae:14:5b:4d:7a:db:a9:87: e7:cf:60:49:78:24:4f:7d:07:eb:9a:03:50:50:5a:2c:78:09: 33:ff:7c:14:35:4a:e4:c5:cc:8f:3e:11:d4:56:5a:b4:19:f3: ab:41:e1:09:a3:f6:ee:18:90:8b:1e:17:82:db:ba:12:ce:6c: 05:63:f1:e1:83:15:4a:2e:48:90:f3:11:56:c1:48:bd:05:c0: 47:cf:e3:4e:a8:de:4f:e6:86:ac:2e:96:e3:c5:b3:9a:fa:8e: 9d:cd:89:45 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYzQzYxMTAvBgNVBAUTKDYwNkVFODVEQzNDNDY3RkM0NjRBODk0RUQ0N0E5RjFC RDMyMUI0NDEwHhcNMjYwODMxMjA0MDU1WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk1ZTZkNy1mNzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAru8YkdU+xbkjpRrcNLcD6PnxGNlcsAff3t3XvfwH18OC+VCDi9yj7Eo6ooF0 uA/hntwO2iimnf+G/mRZ204AKtD0MaBRzlIwda1RXkEVLwaZxjI1nuMccI0PpKyg MDcTqdUwcNGKVWPdCwpRfrj4socEDLIxMYB94VPJ513OjuL8Q38irGtewMJDvRqt 35O0ub81HkKxt6FdFEC43EbBaFM3g9EYJKfFgGOy3IcMLvdqNZMolGgN6IwuNVcw pi9syPx6FrcC8zAZAj1+d/0pjPz6hLoHonSZWqwQ6TpsEd2I8difLz4wUF5NuaqC OLpGRl0CLbnD9aTmjG+Sx0UduwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFGEhFMPb 1sMmU69W8tfWhTDRq5BxMB8GA1UdIwQYMBaAFGBu6F3DxGf8RkqJTtR6nxvTIbRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjNDNi82MzFDQzE2MEYz MzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpfeEdTb2xPMUhxZkc5TWh0 RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHN29YY1BFWl94R1NvbE8xSHFmRzlNaHRFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUYzQzYvNjMxQ0MxNjBGMzM4MTFFQUE2M0Q0MTU0QzRGOUFFMDIvRjdGMkQyMEFC Q0U5MTFFRkI3Nzg2QjYzQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQBK/M4AwQBZ5zmMA0EAgACMAcDBQAkBysAMA0GCSqGSIb3DQEBCwUA A4IBAQBXS8HIs9joxJt4u+CMBzJpPOMSUkj1qBQYqkw8Mqh8xSh+B0MssNdQwJjD q16ks6ua7OmAEGYU9By9QsTAhOhBzXYw+VOk9sr/NDoIJY5o6r4fmiSlZB04GmWn WdzgOrsKcfZdUXkI3Q6EaDBHUzCg74Uezmb2y6PHBXJN9+OZT3h1XlvF9ceGSV1S +qqKR+ipat4c8d3b+e5frhRbTXrbqYfnz2BJeCRPfQfrmgNQUFoseAkz/3wUNUrk xcyPPhHUVlq0GfOrQeEJo/buGJCLHheC27oSzmwFY/HhgxVKLkiQ8xFWwUi9BcBH z+NOqN5P5oasLpbjxbOa+o6dzYlF -----END CERTIFICATE-----Generated at Tue Sep 22 15:03:38 2026 by rpki-client