$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/04EDE6343E2B11F1B4A6C6E4B6833773.roa File: 04EDE6343E2B11F1B4A6C6E4B6833773.roa (raw, json) Hash identifier: LMy6VYgTcsTBcx2OItSEyTKYKnkkDiO7uEs+0s8aooQ= Subject key identifier: F7:DE:FD:62:7F:16:97:D3:D6:33:0D:D1:56:2B:3A:7E:DE:66:7D:DA Certificate issuer: /CN=A91D2B56/serialNumber=95A34D957585E055F0368E474DA3D1F9BBCFA8DF Certificate serial: 44 Authority key identifier: 95:A3:4D:95:75:85:E0:55:F0:36:8E:47:4D:A3:D1:F9:BB:CF:A8:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/laNNlXWF4FXwNo5HTaPR-bvPqN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/04EDE6343E2B11F1B4A6C6E4B6833773.roa Signing time: Thu 27 Aug 2026 07:57:25 +0000 ROA not before: Thu 27 Aug 2026 07:57:24 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 63888 IP address blocks: 43.239.64.0/22 maxlen: 22 43.239.64.0/24 maxlen: 24 43.239.65.0/24 maxlen: 24 43.239.66.0/24 maxlen: 24 43.239.67.0/24 maxlen: 24 103.194.148.0/22 maxlen: 22 103.194.148.0/24 maxlen: 24 103.194.149.0/24 maxlen: 24 103.194.150.0/24 maxlen: 24 103.194.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.crl rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/laNNlXWF4FXwNo5HTaPR-bvPqN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2B56, serialNumber=95A34D957585E055F0368E474DA3D1F9BBCFA8DF Validity Not Before: Aug 27 07:57:24 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a8fede4-f276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:39:46:1b:fd:a2:bf:ac:88:df:08:b1:00:19: 65:30:f1:36:ce:9c:60:6d:23:7c:43:b8:97:66:ac: 9e:3b:26:7a:d9:69:6f:49:b4:e0:b7:42:27:69:89: 37:49:b0:ce:e9:eb:4c:48:a2:dd:12:fe:c9:eb:52: 50:aa:30:a1:71:8e:57:3e:e9:46:b9:5d:66:f0:52: f3:fd:86:d4:de:0b:ad:70:2b:6c:cd:b0:1d:1c:af: ed:e6:03:13:49:7c:3a:47:a3:bb:04:b8:fa:1f:7c: f2:1c:4c:6c:df:cf:d2:af:a7:8e:a4:75:f7:50:9e: 31:e2:ae:97:56:f7:1f:8b:8a:0c:7e:04:b1:76:bd: 30:e4:3d:54:c8:0d:24:d9:3c:e5:e2:88:f6:e3:72: 09:83:31:c1:49:89:9c:ec:98:6a:01:19:c1:78:15: b6:1b:a7:87:a7:b8:41:41:42:73:24:79:9f:66:c0: 2a:fc:27:1f:8a:9d:14:98:70:bf:92:5d:75:6d:3d: 14:87:67:33:a9:24:97:40:8f:c0:b9:42:4e:b2:b5: bb:30:cd:34:f5:cc:fa:8e:8c:bb:80:b5:8e:e7:8c: 90:f5:30:f4:ab:20:43:fc:51:85:c3:64:53:3a:0e: f8:05:0e:1e:eb:49:36:d7:77:70:47:51:58:e1:7a: 10:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DE:FD:62:7F:16:97:D3:D6:33:0D:D1:56:2B:3A:7E:DE:66:7D:DA X509v3 Authority Key Identifier: keyid:95:A3:4D:95:75:85:E0:55:F0:36:8E:47:4D:A3:D1:F9:BB:CF:A8:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/laNNlXWF4FXwNo5HTaPR-bvPqN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/04EDE6343E2B11F1B4A6C6E4B6833773.roa sbgp-ipAddrBlock: critical IPv4: 43.239.64.0/22 103.194.148.0/22 Signature Algorithm: sha256WithRSAEncryption 00:b0:d1:79:96:45:d5:b7:a5:b0:e2:ec:4d:ef:94:7f:3f:4b: 5d:5c:94:1f:85:39:be:10:34:1f:a6:c2:0e:c6:b2:e4:30:2f: f3:0d:22:e4:a8:af:4e:c8:99:7c:63:58:81:e4:f4:15:be:36: 75:f0:fe:b5:68:15:08:e6:d0:68:2b:1d:e0:02:cd:f6:65:6a: 5b:e7:26:c5:5e:84:21:17:ce:1d:53:4a:6c:e9:d5:4b:e1:6d: 73:2d:ab:ba:11:30:ea:0a:4b:f3:8f:74:f9:05:54:bb:29:0a: 81:bb:c5:00:d0:dd:60:b9:d4:3b:bd:d4:59:35:a9:29:da:95: b5:5c:e5:db:ed:20:d9:6b:2f:61:62:43:2c:80:70:bf:e4:c9: 0f:57:66:ca:b6:59:37:f2:b3:b0:af:94:fc:9e:22:3a:ce:fe: 3f:68:40:25:ed:0d:c4:de:71:c4:98:8e:ff:73:27:f5:d0:92: cd:cc:49:e6:75:3d:3f:0b:1f:4b:e8:58:d5:e3:15:c1:5a:21: 43:68:84:12:94:ea:42:19:e3:cb:8b:ac:77:b3:72:ef:d1:f4: 95:0d:a7:fc:01:18:6f:3d:42:8e:6f:71:30:22:e6:73:31:ab: 87:f2:04:93:a1:5f:d4:44:20:b0:6c:8a:57:1a:24:0e:0c:9a: 06:d2:76:68 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkI1NjExMC8GA1UEBRMoOTVBMzREOTU3NTg1RTA1NUYwMzY4RTQ3NERBM0QxRjlC QkNGQThERjAeFw0yNjA4MjcwNzU3MjRaFw0yNzEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhOGZlZGU0LWYyNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjOUYb/aK/rIjfCLEAGWUw8TbOnGBtI3xDuJdmrJ47JnrZaW9JtOC3QidpiTdJ sM7p60xIot0S/snrUlCqMKFxjlc+6Ua5XWbwUvP9htTeC61wK2zNsB0cr+3mAxNJ fDpHo7sEuPoffPIcTGzfz9Kvp46kdfdQnjHirpdW9x+Ligx+BLF2vTDkPVTIDSTZ POXiiPbjcgmDMcFJiZzsmGoBGcF4FbYbp4enuEFBQnMkeZ9mwCr8Jx+KnRSYcL+S XXVtPRSHZzOpJJdAj8C5Qk6ytbswzTT1zPqOjLuAtY7njJD1MPSrIEP8UYXDZFM6 DvgFDh7rSTbXd3BHUVjhehAPAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQU9979Yn8W l9PWMw3RVis6ft5mfdowHwYDVR0jBBgwFoAUlaNNlXWF4FXwNo5HTaPR+bvPqN8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQjU2LzM4QzFFOUFBM0Uy NzExRjFCQTI0QzU5REI1ODMzNzczL2xhTk5sWFdGNEZYd05vNUhUYVBSLWJ2UHFO OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbGFOTmxYV0Y0Rlh3Tm81SFRhUFItYnZQcU44LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkI1Ni8zOEMxRTlBQTNFMjcxMUYxQkEyNEM1OURCNTgzMzc3My8wNEVERTYzNDNF MkIxMUYxQjRBNkM2RTRCNjgzMzc3My5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBAIr70ADBAJnwpQwDQYJKoZIhvcNAQELBQADggEBAACw0XmWRdW3pbDi 7E3vlH8/S11clB+FOb4QNB+mwg7GsuQwL/MNIuSor07ImXxjWIHk9BW+NnXw/rVo FQjm0GgrHeACzfZlalvnJsVehCEXzh1TSmzp1UvhbXMtq7oRMOoKS/OPdPkFVLsp CoG7xQDQ3WC51Du91Fk1qSnalbVc5dvtINlrL2FiQyyAcL/kyQ9XZsq2WTfys7Cv lPyeIjrO/j9oQCXtDcTeccSYjv9zJ/XQks3MSeZ1PT8LH0voWNXjFcFaIUNohBKU 6kIZ48uLrHezcu/R9JUNp/wBGG89Qo5vcTAi5nMxq4fyBJOhX9REILBsilcaJA4M mgbSdmg= -----END CERTIFICATE-----Generated at Tue Sep 22 08:23:16 2026 by rpki-client