$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/47D9BDECB09511F19F7126F35A11F970.roa File: 47D9BDECB09511F19F7126F35A11F970.roa (raw, json) Hash identifier: mZN/3zgpNk+AZ6JAlUUhY+2aqWlwlMcE9iiivGrhDBU= Subject key identifier: F1:D9:AF:92:70:A7:EE:5F:35:EC:08:31:BF:7E:27:CD:7A:A5:05:91 Certificate issuer: /CN=A91BF27F/serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F Certificate serial: 225F Authority key identifier: 59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/47D9BDECB09511F19F7126F35A11F970.roa Signing time: Mon 14 Sep 2026 23:38:51 +0000 ROA not before: Mon 14 Sep 2026 23:38:51 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 55803 IP address blocks: 43.243.116.0/22 maxlen: 24 103.226.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 15:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8799 (0x225f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF27F, serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F Validity Not Before: Sep 14 23:38:51 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6aa8858a-7fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:af:fa:82:13:b5:77:8b:f1:17:15:2f:5e:89: 53:78:00:e5:ee:91:43:ce:ca:5b:6d:17:35:0b:e2: f6:11:86:df:4e:8a:89:08:da:f2:71:9e:33:50:9b: 02:09:36:e7:6a:23:b3:07:48:72:c3:90:21:27:17: b3:8a:77:58:19:42:e7:27:97:7a:06:11:56:74:8a: 81:3c:91:24:5a:cb:77:dc:e9:a3:a1:17:fe:03:fa: 70:8b:cd:e8:3e:a4:15:b5:bc:8a:8a:cd:f9:9c:19: 29:b9:21:d5:8a:22:74:ba:1a:12:38:06:e8:19:b2: b3:0c:f8:32:e6:c4:a1:1d:7a:08:31:15:1d:fa:60: 1a:c5:c6:3a:7a:0f:fa:c3:5c:2d:46:81:54:fb:67: 45:18:47:7a:80:1b:47:7e:3e:89:9b:9b:72:45:e7: d8:d5:4b:cb:6d:f9:b5:50:90:b2:3c:81:5b:92:eb: b4:46:00:10:87:b2:f5:c2:21:9f:b3:44:76:25:06: 72:16:4f:d6:a5:01:60:47:67:af:be:6d:4d:d2:43: a5:3d:29:4b:90:6a:20:7c:c2:1a:c9:be:b3:73:a0: f0:53:ea:49:4b:5a:09:fc:cf:4b:3d:67:cf:b2:7f: 9d:c7:b4:db:6e:1c:28:36:9b:46:71:ef:67:a5:c3: 03:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D9:AF:92:70:A7:EE:5F:35:EC:08:31:BF:7E:27:CD:7A:A5:05:91 X509v3 Authority Key Identifier: keyid:59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/47D9BDECB09511F19F7126F35A11F970.roa sbgp-ipAddrBlock: critical IPv4: 43.243.116.0/22 103.226.220.0/22 Signature Algorithm: sha256WithRSAEncryption 64:7b:dc:27:11:15:60:de:36:78:ad:eb:e6:c5:a4:6a:1b:ab: 2b:ff:d7:49:93:40:43:4e:f0:38:6a:39:ee:3e:9f:6b:b3:9d: f9:29:06:94:bb:53:97:9c:8c:f9:ba:19:d4:56:89:1b:d8:51: a8:79:8a:5c:41:1f:d5:7d:49:1e:75:c9:3e:fd:91:bf:b9:76: 32:ff:c3:31:24:bb:e1:1c:ec:7c:83:a0:eb:ac:d1:b4:e6:54: 85:08:c5:cc:2f:28:5a:0a:9c:6d:3a:89:98:76:55:34:9c:35: 16:5f:81:f1:02:a3:6e:7e:fb:da:63:22:e0:8d:d5:d9:dc:a3: df:6c:a1:4d:87:3e:ac:5b:41:12:40:f7:35:dc:60:e6:a0:ea: 36:cd:a7:5b:f5:61:9c:dd:d6:7f:a5:15:54:69:ad:33:9f:4b: ca:a0:39:7c:27:a6:4e:8f:87:b1:ac:39:15:1b:39:71:9a:8f: 8c:76:3f:9c:38:83:33:3c:3b:b2:fa:1e:88:5b:f8:4b:70:9c: a5:74:62:a9:ba:9b:1f:1e:88:13:cb:d4:6e:b6:73:3d:44:7e: e9:4d:c7:67:e5:aa:3a:2a:26:50:5e:af:e9:7b:e9:df:1a:4a: ed:99:7b:71:9c:80:58:16:76:67:f1:96:09:52:87:a4:5f:01: 58:1c:0c:75 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICIl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyN0YxMTAvBgNVBAUTKDU5QTY0NzI4RUUwMUQ2QUUzNEZFNzdCMDFFODg1OUM4 MjA5N0U1N0YwHhcNMjYwOTE0MjMzODUxWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YWE4ODU4YS03ZmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuq/6ghO1d4vxFxUvXolTeADl7pFDzspbbRc1C+L2EYbfToqJCNrycZ4zUJsC CTbnaiOzB0hyw5AhJxezindYGULnJ5d6BhFWdIqBPJEkWst33OmjoRf+A/pwi83o PqQVtbyKis35nBkpuSHViiJ0uhoSOAboGbKzDPgy5sShHXoIMRUd+mAaxcY6eg/6 w1wtRoFU+2dFGEd6gBtHfj6Jm5tyRefY1UvLbfm1UJCyPIFbkuu0RgAQh7L1wiGf s0R2JQZyFk/WpQFgR2evvm1N0kOlPSlLkGogfMIayb6zc6DwU+pJS1oJ/M9LPWfP sn+dx7TbbhwoNptGce9npcMDfQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFPHZr5Jw p+5fNewIMb9+J816pQWRMB8GA1UdIwQYMBaAFFmmRyjuAdauNP53sB6IWcggl+V/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI3Ri85QzMyNTZBMkU5 OEYxMUU1QjJBREM1NjdDNEY5QUUwMi9XYVpIS080QjFxNDBfbmV3SG9oWnlDQ1g1 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dhWkhLTzRCMXE0MF9uZXdIb2haeUNDWDVYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkYyN0YvOUMzMjU2QTJFOThGMTFFNUIyQURDNTY3QzRGOUFFMDIvNDdEOUJERUNC MDk1MTFGMTlGNzEyNkYzNUExMUY5NzAucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK/N0AwQCZ+LcMA0GCSqGSIb3DQEBCwUAA4IBAQBke9wnERVg3jZ4 revmxaRqG6sr/9dJk0BDTvA4ajnuPp9rs535KQaUu1OXnIz5uhnUVokb2FGoeYpc QR/VfUkedck+/ZG/uXYy/8MxJLvhHOx8g6DrrNG05lSFCMXMLyhaCpxtOomYdlU0 nDUWX4HxAqNufvvaYyLgjdXZ3KPfbKFNhz6sW0ESQPc13GDmoOo2zadb9WGc3dZ/ pRVUaa0zn0vKoDl8J6ZOj4exrDkVGzlxmo+Mdj+cOIMzPDuy+h6IW/hLcJyldGKp upsfHogTy9RutnM9RH7pTcdn5ao6KiZQXq/pe+nfGkrtmXtxnIBYFnZn8ZYJUoek XwFYHAx1 -----END CERTIFICATE-----Generated at Tue Sep 22 18:24:14 2026 by rpki-client