$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/10BBF6CEB2E711EB8A61B44EC4F9AE02.roa File: 10BBF6CEB2E711EB8A61B44EC4F9AE02.roa (raw, json) Hash identifier: 1rFQoS3DfNJzVC5UFIoBg14GJsC3VEN00cj3t0a8RU0= Subject key identifier: AF:FF:C8:97:74:05:22:0E:23:98:51:7C:53:CA:84:91:1C:3B:9B:13 Certificate issuer: /CN=A91B777C/serialNumber=7EBB3B41C97F3313FAE781EF63323C4AF62B8FB7 Certificate serial: 06EA Authority key identifier: 7E:BB:3B:41:C9:7F:33:13:FA:E7:81:EF:63:32:3C:4A:F6:2B:8F:B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/10BBF6CEB2E711EB8A61B44EC4F9AE02.roa Signing time: Tue 01 Sep 2026 03:43:08 +0000 ROA not before: Tue 01 Sep 2026 03:43:08 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 133847 IP address blocks: 43.224.88.0/22 maxlen: 24 43.242.108.0/22 maxlen: 24 103.12.60.0/22 maxlen: 24 103.38.20.0/22 maxlen: 24 103.43.108.0/22 maxlen: 24 103.199.148.0/22 maxlen: 24 103.207.72.0/22 maxlen: 24 137.59.80.0/22 maxlen: 24 210.16.124.0/22 maxlen: 24 2402:4ba0::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.crl rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 22:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1770 (0x6ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B777C, serialNumber=7EBB3B41C97F3313FAE781EF63323C4AF62B8FB7 Validity Not Before: Sep 1 03:43:08 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6a9649cc-0e48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9c:5b:b6:d1:ee:b0:fd:48:f7:f1:22:fc:47: de:d8:49:08:32:22:eb:64:cd:1f:24:c5:b6:c3:9b: 5e:dc:d5:f2:a7:ac:c7:69:58:2d:0d:9a:fd:3a:61: ba:86:19:92:65:39:b0:61:25:7e:25:a8:7e:c0:03: a1:c9:0c:8a:2e:21:c7:de:6d:4e:cd:5a:f1:97:4c: 81:64:70:1b:26:f6:9f:0a:99:19:47:ac:b7:da:a0: 64:16:cf:b5:2a:f6:c1:69:75:f9:e7:cb:41:d5:33: 15:e5:1e:23:b2:9d:db:b5:5c:00:f8:64:a5:42:93: 62:01:01:a0:b7:9e:df:ee:e1:17:2a:2e:c4:3b:dc: e0:84:25:22:cd:14:7f:0c:4f:58:d0:e6:0e:e9:de: 25:f3:64:d4:71:4b:56:af:dd:62:f7:f7:38:af:39: b0:03:15:11:21:be:54:43:1e:2b:12:79:2d:89:6a: 75:c9:d4:6d:4e:36:0d:66:5c:2c:51:20:2d:a2:dc: 6a:d1:5c:bb:98:12:6c:eb:37:51:70:77:03:dd:9f: 83:f7:7e:fe:b3:7c:07:60:42:b7:e3:d5:cc:2a:0a: bc:18:3b:81:c5:35:72:94:bc:74:49:1a:45:d4:6c: 05:31:41:23:58:f7:ce:a3:7f:4c:d8:27:6d:12:7b: de:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FF:C8:97:74:05:22:0E:23:98:51:7C:53:CA:84:91:1C:3B:9B:13 X509v3 Authority Key Identifier: keyid:7E:BB:3B:41:C9:7F:33:13:FA:E7:81:EF:63:32:3C:4A:F6:2B:8F:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/10BBF6CEB2E711EB8A61B44EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.224.88.0/22 43.242.108.0/22 103.12.60.0/22 103.38.20.0/22 103.43.108.0/22 103.199.148.0/22 103.207.72.0/22 137.59.80.0/22 210.16.124.0/22 IPv6: 2402:4ba0::/40 Signature Algorithm: sha256WithRSAEncryption 77:59:cb:1d:aa:c2:14:dd:60:ce:fe:cc:4f:7c:13:0a:4b:32: e6:e0:44:a4:cd:27:7c:02:16:e7:a9:50:64:fc:82:80:3e:d8: 03:ac:6e:32:24:8b:c0:f9:04:cb:3a:a6:db:46:89:62:7f:34: a3:1a:1b:86:67:8b:cb:b7:07:65:74:ed:9e:04:f1:c1:d8:ee: 6c:b2:01:39:a2:43:b1:09:06:a3:9e:71:c1:32:50:a7:1a:73: 80:3b:b7:b3:bc:16:59:81:52:11:a0:28:d9:29:cd:eb:45:bd: 15:c4:85:e1:20:3e:08:6f:78:df:41:9b:80:16:24:33:db:44: c4:f4:80:b6:81:c6:b3:33:52:24:cf:61:d1:68:c7:f2:77:7e: e9:f8:62:0a:e9:c8:64:07:a6:6b:b3:6d:f5:e1:c5:91:06:bb: 26:25:8f:77:2b:56:8e:1c:da:82:6d:46:73:e5:17:79:db:6e: c4:de:96:ae:f1:12:cc:94:48:38:9b:bf:af:c8:ec:9e:f5:60: 30:2f:b1:76:f0:40:de:8b:e8:4a:23:d3:fe:03:e2:21:3b:ce: 2f:1b:a2:5b:22:75:8b:93:d4:3d:eb:e7:94:d2:a6:46:c7:10: 95:c6:59:0a:fe:a4:0d:b1:ba:9a:51:3a:23:7b:b6:d2:fa:57: bc:e0:3c:4e -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgICBuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3N0MxMTAvBgNVBAUTKDdFQkIzQjQxQzk3RjMzMTNGQUU3ODFFRjYzMzIzQzRB RjYyQjhGQjcwHhcNMjYwOTAxMDM0MzA4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk2NDljYy0wZTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpxbttHusP1I9/Ei/Efe2EkIMiLrZM0fJMW2w5te3NXyp6zHaVgtDZr9OmG6 hhmSZTmwYSV+Jah+wAOhyQyKLiHH3m1OzVrxl0yBZHAbJvafCpkZR6y32qBkFs+1 KvbBaXX558tB1TMV5R4jsp3btVwA+GSlQpNiAQGgt57f7uEXKi7EO9zghCUizRR/ DE9Y0OYO6d4l82TUcUtWr91i9/c4rzmwAxURIb5UQx4rEnktiWp1ydRtTjYNZlws USAtotxq0Vy7mBJs6zdRcHcD3Z+D937+s3wHYEK349XMKgq8GDuBxTVylLx0SRpF 1GwFMUEjWPfOo39M2CdtEnve6QIDAQABo4ICoDCCApwwHQYDVR0OBBYEFK//yJd0 BSIOI5hRfFPKhJEcO5sTMB8GA1UdIwQYMBaAFH67O0HJfzMT+ueB72MyPEr2K4+3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3Qy82Q0Q4MTMzQ0Iy REExMUVCOEIzODRBNjBDNEY5QUUwMi9mcnM3UWNsX014UDY1NEh2WXpJOFN2WXJq N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZyczdRY2xfTXhQNjU0SHZZekk4U3ZZcmo3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qjc3N0MvNkNEODEzM0NCMkRBMTFFQjhCMzg0QTYwQzRGOUFFMDIvMTBCQkY2Q0VC MkU3MTFFQjhBNjFCNDRFQzRGOUFFMDIucm9hMF8GCCsGAQUFBwEHAQH/BFAwTjA8 BAIAATA2AwQCK+BYAwQCK/JsAwQCZww8AwQCZyYUAwQCZytsAwQCZ8eUAwQCZ89I AwQCiTtQAwQC0hB8MA4EAgACMAgDBgAkAkugADANBgkqhkiG9w0BAQsFAAOCAQEA d1nLHarCFN1gzv7MT3wTCksy5uBEpM0nfAIW56lQZPyCgD7YA6xuMiSLwPkEyzqm 20aJYn80oxobhmeLy7cHZXTtngTxwdjubLIBOaJDsQkGo55xwTJQpxpzgDu3s7wW WYFSEaAo2SnN60W9FcSF4SA+CG9430GbgBYkM9tExPSAtoHGszNSJM9h0WjH8nd+ 6fhiCunIZAema7Nt9eHFkQa7JiWPdytWjhzagm1Gc+UXedtuxN6WrvESzJRIOJu/ r8jsnvVgMC+xdvBA3ovoSiPT/gPiITvOLxuiWyJ1i5PUPevnlNKmRscQlcZZCv6k DbG6mlE6I3u20vpXvOA8Tg== -----END CERTIFICATE-----Generated at Mon Sep 21 13:23:59 2026 by rpki-client