$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/943D15902D1011EFBBEBA67BC4F9AE02.roa File: 943D15902D1011EFBBEBA67BC4F9AE02.roa (raw, json) Hash identifier: DqvdHy0dVK5CWNPfPNrFUaz/YCxyxg+f1hCph6DAQYE= Subject key identifier: 64:22:B2:0B:C5:C7:B7:47:7E:4F:67:CA:70:8C:C0:DD:B8:B4:65:E1 Certificate issuer: /CN=A91D1216/serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002 Certificate serial: 04BF Authority key identifier: 6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/943D15902D1011EFBBEBA67BC4F9AE02.roa Signing time: Tue 15 Sep 2026 00:03:24 +0000 ROA not before: Tue 15 Sep 2026 00:03:24 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 17551 IP address blocks: 123.50.128.0/20 maxlen: 20 123.50.128.0/21 maxlen: 21 123.50.136.0/22 maxlen: 22 123.50.140.0/22 maxlen: 22 123.50.148.0/22 maxlen: 22 125.254.104.0/24 maxlen: 24 125.254.108.0/23 maxlen: 23 125.254.110.0/23 maxlen: 23 125.254.116.0/23 maxlen: 23 125.254.118.0/23 maxlen: 23 125.254.120.0/21 maxlen: 21 125.254.120.0/22 maxlen: 22 125.254.124.0/22 maxlen: 22 202.169.22.0/24 maxlen: 24 210.56.224.0/22 maxlen: 22 210.56.228.0/23 maxlen: 23 210.56.237.0/24 maxlen: 24 210.56.241.0/24 maxlen: 24 210.56.243.0/24 maxlen: 24 210.56.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1215 (0x4bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1216, serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002 Validity Not Before: Sep 15 00:03:24 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6aa88b4b-625e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:16:64:f8:00:aa:e3:53:cc:54:2f:8e:d5:52: 55:9d:21:20:35:a5:1c:bc:2f:07:c6:ee:bd:8c:4b: 89:00:6f:54:7e:e1:58:6e:1d:3c:7b:ec:3b:b7:76: c1:9c:51:4b:fb:bb:79:7d:e5:66:49:03:c0:d5:8a: 42:ab:21:e3:e1:be:19:a7:df:3a:84:e1:59:84:5c: 84:6c:5b:da:f4:2f:44:df:89:30:46:d0:01:08:09: 63:bf:3f:2c:3f:b3:42:78:a2:ad:5a:b4:48:98:c0: 2e:32:91:2b:09:c9:c0:98:33:a4:9d:4a:5a:84:e3: 33:a0:7a:a6:e3:97:96:f0:49:93:7c:e2:26:ba:fa: a5:98:bc:f8:fe:e8:3c:b8:41:c6:3c:ec:6a:83:c1: 0b:eb:1f:b9:68:ad:8d:2c:d4:47:89:c5:db:57:0d: 2c:d1:d2:6e:2c:3f:a8:c0:99:51:3e:3d:df:c3:f5: df:d9:b6:b2:81:ea:1d:9d:90:b7:66:c4:a0:86:45: 75:a4:b3:43:a6:c6:1b:d2:0b:4d:3b:bc:d8:e0:35: 60:02:c3:1c:c7:55:c9:71:9e:9c:1e:e4:41:24:de: 2d:9f:cf:ae:a9:81:24:e7:2c:ed:9f:4a:b4:24:ee: 28:af:3a:be:52:61:a6:23:cd:4d:e3:14:76:c1:80: d4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:22:B2:0B:C5:C7:B7:47:7E:4F:67:CA:70:8C:C0:DD:B8:B4:65:E1 X509v3 Authority Key Identifier: keyid:6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/943D15902D1011EFBBEBA67BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 123.50.128.0/20 123.50.148.0/22 125.254.104.0/24 125.254.108.0/22 125.254.116.0-125.254.127.255 202.169.22.0/24 210.56.224.0-210.56.229.255 210.56.237.0/24 210.56.241.0/24 210.56.243.0/24 210.56.254.0/23 Signature Algorithm: sha256WithRSAEncryption 76:d7:6b:d4:6e:19:40:9c:a1:fd:12:43:ca:4c:58:b3:a0:e9: c6:e2:8a:1f:df:ab:99:b8:b8:ba:d6:d2:48:ca:60:c7:88:10: e0:76:15:17:20:3a:a4:a9:6a:5a:81:e7:7a:bc:bf:c9:ba:fe: 86:60:03:51:9b:43:e3:7a:86:1b:bc:b8:e5:ee:bd:20:28:41: 9c:2e:7c:73:1c:53:fe:37:56:4c:4a:d0:4a:3c:93:68:8a:21: 08:71:50:42:98:87:86:3f:09:e5:0e:c3:76:05:e4:ce:ac:a7: 02:2b:3a:dc:fe:a7:84:67:e4:de:bf:72:54:85:a5:6b:36:27: 74:7f:04:3c:29:df:4c:56:e9:92:d8:c7:07:25:33:c0:ad:ac: 77:5f:79:b2:ad:e2:15:60:d0:a5:4d:2a:3b:87:35:04:11:7c: 2e:f5:d4:e2:30:1f:2a:dd:a8:1a:80:fa:2c:3c:e0:fe:10:5f: 35:bf:6b:0d:5f:04:96:df:3e:fd:c6:51:1b:b0:da:56:e8:e9: a5:f2:c0:b4:99:9a:f6:78:22:f7:0b:a4:0e:6c:a3:e7:86:c6: 5e:31:c4:5b:4c:3d:91:0b:9c:8c:43:23:51:03:f9:96:59:09: 88:a5:33:db:17:cc:bb:fe:c9:e8:1c:35:af:0c:3f:f2:3f:79: 95:70:54:4b -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICBL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyMTYxMTAvBgNVBAUTKDZEQkQ1QzREMDEyMUZDQjMxOEU3OEM0NTFCNkY1Njcz MjA5ODYwMDIwHhcNMjYwOTE1MDAwMzI0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE4OGI0Yi02MjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqBZk+ACq41PMVC+O1VJVnSEgNaUcvC8Hxu69jEuJAG9UfuFYbh08e+w7t3bB nFFL+7t5feVmSQPA1YpCqyHj4b4Zp986hOFZhFyEbFva9C9E34kwRtABCAljvz8s P7NCeKKtWrRImMAuMpErCcnAmDOknUpahOMzoHqm45eW8EmTfOImuvqlmLz4/ug8 uEHGPOxqg8EL6x+5aK2NLNRHicXbVw0s0dJuLD+owJlRPj3fw/Xf2baygeodnZC3 ZsSghkV1pLNDpsYb0gtNO7zY4DVgAsMcx1XJcZ6cHuRBJN4tn8+uqYEk5yztn0q0 JO4orzq+UmGmI81N4xR2wYDUZwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFGQisgvF x7dHfk9nynCMwN24tGXhMB8GA1UdIwQYMBaAFG29XE0BIfyzGOeMRRtvVnMgmGAC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIxNi9EQzc4MjY4Q0I5 NEIxMUVDODMyQjc0MTlDNEY5QUUwMi9iYjFjVFFFaF9MTVk1NHhGRzI5V2N5Q1lZ QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JiMWNUUUVoX0xNWTU0eEZHMjlXY3lDWVlBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDEyMTYvREM3ODI2OENCOTRCMTFFQzgzMkI3NDE5QzRGOUFFMDIvOTQzRDE1OTAy RDEwMTFFRkJCRUJBNjdCQzRGOUFFMDIucm9hMGsGCCsGAQUFBwEHAQH/BFwwWjBY BAIAATBSAwQEezKAAwQCezKUAwQAff5oAwQCff5sMAwDBAJ9/nQDBAd9/gADBADK qRYwDAMEBdI44AMEAdI45AMEANI47QMEANI48QMEANI48wMEAdI4/jANBgkqhkiG 9w0BAQsFAAOCAQEAdtdr1G4ZQJyh/RJDykxYs6DpxuKKH9+rmbi4utbSSMpgx4gQ 4HYVFyA6pKlqWoHnery/ybr+hmADUZtD43qGG7y45e69IChBnC58cxxT/jdWTErQ SjyTaIohCHFQQpiHhj8J5Q7DdgXkzqynAis63P6nhGfk3r9yVIWlazYndH8EPCnf TFbpktjHByUzwK2sd195sq3iFWDQpU0qO4c1BBF8LvXU4jAfKt2oGoD6LDzg/hBf Nb9rDV8Elt8+/cZRG7DaVujppfLAtJma9ngi9wukDmyj54bGXjHEW0w9kQucjEMj UQP5llkJiKUz2xfMu/7J6Bw1rww/8j95lXBUSw== -----END CERTIFICATE-----Generated at Tue Sep 22 21:58:16 2026 by rpki-client