$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/F9A864386AAB11EF8FEBE576C4F9AE02.roa File: F9A864386AAB11EF8FEBE576C4F9AE02.roa (raw, json) Hash identifier: EhpTUDDHzY+fvrYZYj/pFiggKyojVq9obYmKAT1n3A0= Subject key identifier: 6E:62:ED:58:EF:12:34:5E:B0:45:F6:48:7B:50:A9:0A:20:56:B6:81 Certificate issuer: /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638 Certificate serial: 0478 Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/F9A864386AAB11EF8FEBE576C4F9AE02.roa Signing time: Sun 13 Sep 2026 01:51:21 +0000 ROA not before: Sun 13 Sep 2026 01:51:21 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 133499 IP address blocks: 43.225.188.0/24 maxlen: 24 43.225.190.0/24 maxlen: 24 43.228.236.0/24 maxlen: 24 43.228.238.0/23 maxlen: 23 43.228.238.0/24 maxlen: 24 43.228.239.0/24 maxlen: 24 103.84.120.0/22 maxlen: 24 103.194.113.0/24 maxlen: 24 103.240.164.0/22 maxlen: 24 103.241.52.0/22 maxlen: 22 103.241.52.0/24 maxlen: 24 103.241.53.0/24 maxlen: 24 103.241.54.0/24 maxlen: 24 103.241.55.0/24 maxlen: 24 103.252.110.0/24 maxlen: 24 150.107.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1144 (0x478) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6587, serialNumber=2D634077CC847B59D4048D43E04B3309698FE638 Validity Not Before: Sep 13 01:51:21 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6aa60199-aeab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:81:3c:a1:d5:86:c3:d3:7f:73:4f:36:22:72: 3d:28:68:b6:90:f2:8d:dd:8e:60:23:66:a2:51:2c: c9:cd:37:95:7c:95:4f:30:9f:99:dc:9a:a0:a5:0b: c9:a2:bd:da:a8:85:3f:2b:29:80:dc:cc:eb:c2:bf: 11:b1:91:8a:f1:05:51:59:3c:58:42:e9:64:59:63: 7c:b9:97:66:d4:1a:01:2c:47:06:b4:d6:d2:3c:1e: bb:1a:8b:22:87:16:a9:02:00:a6:8c:f8:c9:ca:f2: 66:5a:d0:3f:3c:9f:a7:1d:79:09:58:7d:e1:d5:f5: 81:84:2c:cf:b1:56:94:da:e7:e2:e0:41:6a:9e:0e: ef:5d:86:80:b8:89:7f:7b:94:cd:41:c0:02:d0:0c: b6:53:b8:0d:ad:4d:93:2b:7c:93:95:78:d9:6a:33: 95:5c:4b:71:be:ff:44:02:1b:8f:5b:f4:54:d2:ee: 6c:a6:55:02:d9:5c:de:92:dc:c5:91:6f:af:59:7f: da:db:8c:c5:57:75:28:2b:34:30:f8:9f:a0:68:ba: fc:fd:a1:a4:ec:b7:c6:6a:3d:46:bd:57:f0:06:0b: 69:57:ac:7d:71:79:ed:23:97:57:d9:9c:bc:b2:90: 78:89:8b:db:cb:c0:03:94:a4:b8:26:d4:e0:c7:43: 0a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:62:ED:58:EF:12:34:5E:B0:45:F6:48:7B:50:A9:0A:20:56:B6:81 X509v3 Authority Key Identifier: keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/F9A864386AAB11EF8FEBE576C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.225.188.0/24 43.225.190.0/24 43.228.236.0/24 43.228.238.0/23 103.84.120.0/22 103.194.113.0/24 103.240.164.0/22 103.241.52.0/22 103.252.110.0/24 150.107.226.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:f8:49:0e:8c:35:b0:fc:4c:e5:a1:4b:ad:56:8c:23:85:c6: 1e:a3:4c:e5:58:3e:20:7b:50:8c:e3:78:dd:02:54:7e:ee:ea: c0:16:d1:5a:c4:46:85:f1:19:88:dd:bc:ea:4d:87:41:09:d4: f7:f0:c0:bf:e3:1c:e7:46:8b:8b:73:52:00:ce:a1:09:7d:ad: 34:57:84:09:b0:26:cf:4e:90:5a:83:4a:7f:51:ac:20:5f:51: 34:d4:bf:b2:c5:8d:bd:3e:7d:ec:f6:74:18:07:9c:7c:cf:88: ce:fa:ea:e7:8a:ba:5c:80:03:c1:5e:5c:4d:ec:83:7c:a4:32: 35:5d:4c:0d:d7:b9:de:9c:67:24:8b:28:88:3d:77:07:a7:4e: a6:dc:2f:13:9d:e4:46:7a:7f:c0:d2:c9:75:6a:83:be:e8:6e: 2d:61:9f:e3:8a:b8:39:56:95:61:e3:2f:ac:2b:d2:e7:f7:ad: 3c:4a:dd:07:7b:e5:87:c4:cc:33:b8:08:30:46:ee:2e:a8:ee: d2:78:cb:ea:34:bd:1e:27:c2:d8:a5:d8:9a:cf:5c:b3:5e:5d: 09:c8:a2:42:62:82:da:5b:4c:79:46:87:e4:06:d3:38:dd:0c: f4:1c:3b:37:83:af:40:db:b0:df:e8:49:92:96:29:ee:81:20: 60:3f:94:bf -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICBHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1ODcxMTAvBgNVBAUTKDJENjM0MDc3Q0M4NDdCNTlENDA0OEQ0M0UwNEIzMzA5 Njk4RkU2MzgwHhcNMjYwOTEzMDE1MTIxWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE2MDE5OS1hZWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApoE8odWGw9N/c082InI9KGi2kPKN3Y5gI2aiUSzJzTeVfJVPMJ+Z3JqgpQvJ or3aqIU/KymA3Mzrwr8RsZGK8QVRWTxYQulkWWN8uZdm1BoBLEcGtNbSPB67Gosi hxapAgCmjPjJyvJmWtA/PJ+nHXkJWH3h1fWBhCzPsVaU2ufi4EFqng7vXYaAuIl/ e5TNQcAC0Ay2U7gNrU2TK3yTlXjZajOVXEtxvv9EAhuPW/RU0u5splUC2VzektzF kW+vWX/a24zFV3UoKzQw+J+gaLr8/aGk7LfGaj1GvVfwBgtpV6x9cXntI5dX2Zy8 spB4iYvby8ADlKS4JtTgx0MKLQIDAQABo4ICljCCApIwHQYDVR0OBBYEFG5i7Vjv EjResEX2SHtQqQogVraBMB8GA1UdIwQYMBaAFC1jQHfMhHtZ1ASNQ+BLMwlpj+Y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjU4Ny80MTdENzFCNDkx ODYxMUVEQTg0QTEyNERDNEY5QUUwMi9MV05BZDh5RWUxblVCSTFENEVzekNXbVA1 amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xXTkFkOHlFZTFuVUJJMUQ0RXN6Q1dtUDVqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjY1ODcvNDE3RDcxQjQ5MTg2MTFFREE4NEExMjREQzRGOUFFMDIvRjlBODY0Mzg2 QUFCMTFFRjhGRUJFNTc2QzRGOUFFMDIucm9hMFUGCCsGAQUFBwEHAQH/BEYwRDBC BAIAATA8AwQAK+G8AwQAK+G+AwQAK+TsAwQBK+TuAwQCZ1R4AwQAZ8JxAwQCZ/Ck AwQCZ/E0AwQAZ/xuAwQAlmviMA0GCSqGSIb3DQEBCwUAA4IBAQCK+EkOjDWw/Ezl oUutVowjhcYeo0zlWD4ge1CM43jdAlR+7urAFtFaxEaF8RmI3bzqTYdBCdT38MC/ 4xznRouLc1IAzqEJfa00V4QJsCbPTpBag0p/UawgX1E01L+yxY29Pn3s9nQYB5x8 z4jO+urnirpcgAPBXlxN7IN8pDI1XUwN17nenGckiyiIPXcHp06m3C8TneRGen/A 0sl1aoO+6G4tYZ/jirg5VpVh4y+sK9Ln9608St0He+WHxMwzuAgwRu4uqO7SeMvq NL0eJ8LYpdiaz1yzXl0JyKJCYoLaW0x5RofkBtM43Qz0HDs3g69A27Df6EmSlinu gSBgP5S/ -----END CERTIFICATE-----Generated at Tue Sep 22 20:23:16 2026 by rpki-client