$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/F824C588FF7A11F0B218EB915B6F56BC.roa File: F824C588FF7A11F0B218EB915B6F56BC.roa (raw, json) Hash identifier: HYftwyur4yF/367rCi/mAUGJX4KwI7u7839C5kVZ7Sc= Subject key identifier: 6E:D4:59:F0:CC:03:E2:E3:2A:7C:9C:84:10:93:EC:B0:47:10:E1:E5 Certificate issuer: /CN=A91B25F2/serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Certificate serial: 0D97 Authority key identifier: B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/F824C588FF7A11F0B218EB915B6F56BC.roa Signing time: Fri 21 Aug 2026 15:11:37 +0000 ROA not before: Fri 21 Aug 2026 15:11:37 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 137967 IP address blocks: 43.230.210.0/24 maxlen: 24 43.230.211.0/24 maxlen: 24 103.78.226.0/24 maxlen: 24 103.78.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3479 (0xd97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B25F2, serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Validity Not Before: Aug 21 15:11:37 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6a886aa9-fde6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0b:8d:13:ca:4b:75:f5:22:a3:d1:b0:e8:8d: 2d:81:c4:c9:a8:7e:0a:1b:c5:9b:9c:c9:1d:57:3a: ed:5e:73:0f:29:bd:55:b8:0f:c5:e6:53:8b:05:8f: 00:9a:21:74:62:8b:a2:21:e4:68:91:e9:48:06:d7: 4d:02:7d:8f:fd:57:56:b3:6a:48:a2:76:d8:66:75: 0c:ac:66:e6:32:c5:1e:15:fa:9d:0b:68:0c:de:be: cd:33:4c:a8:4f:02:b6:cb:d8:ee:70:12:37:26:cf: 8a:4a:b3:1f:b5:17:18:0a:33:2b:2f:b4:a1:27:ec: 3c:53:df:15:53:7f:65:32:ad:12:4a:af:64:5f:68: 27:d7:8b:0f:b8:49:77:66:10:36:03:23:b9:5e:ca: d7:b1:ac:19:b6:37:2c:72:d4:25:ef:2b:6c:60:16: bc:bc:6b:24:71:fa:0f:63:1d:33:28:4b:11:5a:6c: bf:70:3d:13:2f:2f:1b:41:d5:f0:9f:87:d5:bd:1b: a3:fe:c7:5d:f6:0b:12:9a:22:88:9e:28:02:44:59: a6:26:d6:4c:c4:93:44:5b:fb:9d:16:f0:80:f5:16: 5a:b4:c4:e2:c4:48:7a:9b:ac:13:97:80:71:fd:15: d6:95:e3:fc:a6:1a:3c:ce:be:d0:b1:aa:23:85:05: 02:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D4:59:F0:CC:03:E2:E3:2A:7C:9C:84:10:93:EC:B0:47:10:E1:E5 X509v3 Authority Key Identifier: keyid:B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/F824C588FF7A11F0B218EB915B6F56BC.roa sbgp-ipAddrBlock: critical IPv4: 43.230.210.0/23 103.78.226.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:b7:db:ca:d5:9a:f9:b2:c2:89:79:22:a6:ab:37:37:2b:b8: 3d:e3:01:95:6d:16:91:91:f4:94:83:86:3e:d0:3a:87:b7:ff: b2:ab:6a:df:1d:25:d6:1f:f6:bc:40:3c:7a:1d:25:aa:a0:a7: e3:b2:19:3b:f3:32:00:0b:c4:91:3d:b6:6f:96:f8:34:10:65: a9:0f:16:c2:49:7b:a0:a6:63:b6:d4:19:31:78:0a:3d:fb:7c: d5:89:d5:e8:3e:ae:bc:5d:c3:51:99:59:24:bb:8b:9a:41:7c: 44:bd:93:b4:a8:04:da:0a:f5:36:07:6f:33:51:e3:cf:82:dc: 22:11:9f:4c:e9:26:f4:c3:f6:45:5e:12:ef:51:79:25:f0:40: db:8a:56:15:6f:38:91:76:b4:af:e3:c8:e4:3c:ab:ad:4a:f3: 04:2f:4a:10:7a:ce:a4:fa:6e:a3:e5:5d:25:62:d8:96:4a:24: 1b:aa:bd:9a:f4:9d:cb:38:c8:99:90:41:2e:ba:93:fc:a9:07: 8b:77:a7:d8:39:d1:1a:bb:f0:ad:37:da:6f:67:71:8e:9f:97: b8:fa:58:4b:98:0e:c7:08:50:60:eb:32:bb:2c:36:2f:7b:e6: 63:2e:3e:30:9a:d9:2b:0f:1c:97:7a:07:b5:fb:a0:5a:d8:61: 9c:b2:fd:47 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICDZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI1RjIxMTAvBgNVBAUTKEI2Qzg3QkI1ODcyOEY3NkY2RjkwQTA5REZENkJBQTFB RDRFNzNCQ0EwHhcNMjYwODIxMTUxMTM3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YTg4NmFhOS1mZGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3guNE8pLdfUio9Gw6I0tgcTJqH4KG8WbnMkdVzrtXnMPKb1VuA/F5lOLBY8A miF0YouiIeRokelIBtdNAn2P/VdWs2pIonbYZnUMrGbmMsUeFfqdC2gM3r7NM0yo TwK2y9jucBI3Js+KSrMftRcYCjMrL7ShJ+w8U98VU39lMq0SSq9kX2gn14sPuEl3 ZhA2AyO5XsrXsawZtjcsctQl7ytsYBa8vGskcfoPYx0zKEsRWmy/cD0TLy8bQdXw n4fVvRuj/sdd9gsSmiKInigCRFmmJtZMxJNEW/udFvCA9RZatMTixEh6m6wTl4Bx /RXWleP8pho8zr7QsaojhQUCeQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFG7UWfDM A+LjKnychBCT7LBHEOHlMB8GA1UdIwQYMBaAFLbIe7WHKPdvb5Cgnf1rqhrU5zvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjVGMi9FRjkwQ0Q0RTAz QjAxMUVBODVGMDI5MzRDNEY5QUUwMi90c2g3dFljbzkyOXZrS0NkX1d1cUd0VG5P OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RzaDd0WWNvOTI5dmtLQ2RfV3VxR3RUbk84by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjI1RjIvRUY5MENENEUwM0IwMTFFQTg1RjAyOTM0QzRGOUFFMDIvRjgyNEM1ODhG RjdBMTFGMEIyMThFQjkxNUI2RjU2QkMucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBK+bSAwQBZ07iMA0GCSqGSIb3DQEBCwUAA4IBAQBat9vK1Zr5ssKJ eSKmqzc3K7g94wGVbRaRkfSUg4Y+0DqHt/+yq2rfHSXWH/a8QDx6HSWqoKfjshk7 8zIAC8SRPbZvlvg0EGWpDxbCSXugpmO21BkxeAo9+3zVidXoPq68XcNRmVkku4ua QXxEvZO0qATaCvU2B28zUePPgtwiEZ9M6Sb0w/ZFXhLvUXkl8EDbilYVbziRdrSv 48jkPKutSvMEL0oQes6k+m6j5V0lYtiWSiQbqr2a9J3LOMiZkEEuupP8qQeLd6fY OdEau/CtN9pvZ3GOn5e4+lhLmA7HCFBg6zK7LDYve+ZjLj4wmtkrDxyXege1+6Ba 2GGcsv1H -----END CERTIFICATE-----Generated at Wed Sep 23 00:18:34 2026 by rpki-client