$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/9BCD7C8E2FD311F0A93F2250C4F9AE02.roa File: 9BCD7C8E2FD311F0A93F2250C4F9AE02.roa (raw, json) Hash identifier: Ys229hErtCf/dq2pk7Irnd81k9zH6g6K93xye9WDEYA= Subject key identifier: 72:AA:E2:D2:13:3E:EC:AC:C5:99:31:3E:A0:88:98:0E:96:8A:38:02 Certificate issuer: /CN=A91D8DD9/serialNumber=7FFC805650742CEA50986D11ABCB73E0F55058F9 Certificate serial: 0111 Authority key identifier: 7F:FC:80:56:50:74:2C:EA:50:98:6D:11:AB:CB:73:E0:F5:50:58:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/9BCD7C8E2FD311F0A93F2250C4F9AE02.roa Signing time: Thu 15 Oct 2026 03:20:22 +0000 ROA not before: Thu 15 Oct 2026 03:20:22 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 142276 IP address blocks: 43.228.253.0/24 maxlen: 24 163.227.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 06:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8DD9, serialNumber=7FFC805650742CEA50986D11ABCB73E0F55058F9 Validity Not Before: Oct 15 03:20:22 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6ad04676-2620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e9:10:c8:e1:c2:7f:91:c1:c8:0c:1a:b5:89: a5:32:fb:d6:36:bc:54:0c:c7:59:0c:00:25:4a:82: 9b:eb:0e:ce:02:22:48:b5:da:dc:7e:c5:f7:8a:c9: 2e:01:73:8a:19:44:14:9a:27:59:6b:3e:f4:8a:b9: d6:ef:78:12:cb:1f:18:b0:03:0d:ec:02:f5:0d:9b: 05:8d:35:97:06:38:bc:b9:6d:26:0f:39:31:18:b6: 70:56:37:16:96:e1:94:d0:56:00:76:54:2e:4d:25: f0:af:64:e1:e1:8e:99:9c:a8:ff:45:80:2a:ff:a7: 6e:8a:21:2d:e6:3c:58:b2:2c:da:42:61:ac:08:1a: af:ce:29:f0:fb:d6:0b:31:1b:09:06:fe:6c:7e:d5: a7:69:5e:e9:e9:00:ab:60:7b:7e:6c:28:ae:a1:d1: 40:d1:4b:e3:31:3d:62:11:98:73:53:33:0c:f4:d3: 4c:5b:eb:c1:26:a8:0e:9f:14:e8:46:bb:2a:80:94: 61:3c:fa:81:a4:73:72:12:8d:99:ce:02:b0:1c:e6: 0f:27:b5:94:bc:c7:1c:46:1d:97:a1:f7:c7:01:bf: cf:98:4a:65:21:06:97:c1:fd:62:45:c8:ff:87:64: f1:34:14:db:e6:b2:6a:7e:1d:a0:d1:34:49:17:96: e5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AA:E2:D2:13:3E:EC:AC:C5:99:31:3E:A0:88:98:0E:96:8A:38:02 X509v3 Authority Key Identifier: keyid:7F:FC:80:56:50:74:2C:EA:50:98:6D:11:AB:CB:73:E0:F5:50:58:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/9BCD7C8E2FD311F0A93F2250C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.228.253.0/24 163.227.208.0/24 Signature Algorithm: sha256WithRSAEncryption 33:6a:f3:d6:25:13:99:f1:fe:6b:09:49:fa:38:ba:4d:01:71: f8:c3:61:2e:9b:7a:e2:d1:62:d0:fe:ff:eb:3f:51:7a:89:6c: 54:e2:cf:c6:cb:57:65:81:1a:bf:97:46:ac:1a:e4:ab:13:c3: cb:df:ec:ab:47:1d:45:8a:d5:af:ab:ba:da:61:fa:f9:7e:d3: 28:4c:0f:df:59:ed:ba:82:d4:67:27:6c:19:6d:d0:dc:c7:26: e7:89:b7:48:a4:d3:1a:18:fb:df:e0:bc:77:18:06:fe:1a:c5: 98:22:45:67:c7:96:8f:9d:dd:fd:a5:42:f8:bd:b6:1a:57:7c: ee:19:40:04:e5:8d:c1:96:08:70:79:ed:92:bc:4a:b4:46:44: c8:88:9c:0a:f4:ff:e9:a9:88:0a:0f:7c:cd:0a:21:5f:5a:e5: 19:4c:ff:49:31:7a:db:92:9e:f5:28:d4:8b:bc:84:ba:49:3e: 6d:11:c3:44:50:99:76:3d:33:a2:8c:89:89:a7:43:a8:ff:6a: 9e:06:06:06:1e:72:ef:37:28:17:be:13:6a:d9:0e:b0:28:16: 77:bb:65:a0:3c:0d:61:a2:aa:ff:d9:83:73:a7:a3:3c:ea:1b: 1e:60:2c:17:89:07:54:05:ac:19:b1:57:49:1c:8b:60:35:2d: fd:7c:28:ca -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhERDkxMTAvBgNVBAUTKDdGRkM4MDU2NTA3NDJDRUE1MDk4NkQxMUFCQ0I3M0Uw RjU1MDU4RjkwHhcNMjYxMDE1MDMyMDIyWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWQwNDY3Ni0yNjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl+kQyOHCf5HByAwatYmlMvvWNrxUDMdZDAAlSoKb6w7OAiJItdrcfsX3isku AXOKGUQUmidZaz70irnW73gSyx8YsAMN7AL1DZsFjTWXBji8uW0mDzkxGLZwVjcW luGU0FYAdlQuTSXwr2Th4Y6ZnKj/RYAq/6duiiEt5jxYsizaQmGsCBqvzinw+9YL MRsJBv5sftWnaV7p6QCrYHt+bCiuodFA0UvjMT1iEZhzUzMM9NNMW+vBJqgOnxTo RrsqgJRhPPqBpHNyEo2ZzgKwHOYPJ7WUvMccRh2XoffHAb/PmEplIQaXwf1iRcj/ h2TxNBTb5rJqfh2g0TRJF5blMQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFHKq4tIT PuysxZkxPqCImA6WijgCMB8GA1UdIwQYMBaAFH/8gFZQdCzqUJhtEavLc+D1UFj5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEREOS9BMzg3Q0Y4RTJG RDIxMUYwQTlBQzVFMkZDNEY5QUUwMi9mX3lBVmxCMExPcFFtRzBScTh0ejRQVlFX UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfeUFWbEIwTE9wUW1HMFJxOHR6NFBWUVdQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDhERDkvQTM4N0NGOEUyRkQyMTFGMEE5QUM1RTJGQzRGOUFFMDIvOUJDRDdDOEUy RkQzMTFGMEE5M0YyMjUwQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAK+T9AwQAo+PQMA0GCSqGSIb3DQEBCwUAA4IBAQAzavPWJROZ8f5r CUn6OLpNAXH4w2Eum3ri0WLQ/v/rP1F6iWxU4s/Gy1dlgRq/l0asGuSrE8PL3+yr Rx1FitWvq7raYfr5ftMoTA/fWe26gtRnJ2wZbdDcxybnibdIpNMaGPvf4Lx3GAb+ GsWYIkVnx5aPnd39pUL4vbYaV3zuGUAE5Y3Blghwee2SvEq0RkTIiJwK9P/pqYgK D3zNCiFfWuUZTP9JMXrbkp71KNSLvIS6ST5tEcNEUJl2PTOijImJp0Oo/2qeBgYG HnLvNygXvhNq2Q6wKBZ3u2WgPA1hoqr/2YNzp6M86hseYCwXiQdUBawZsVdJHItg NS39fCjK -----END CERTIFICATE-----Generated at Tue Nov 10 14:51:30 2026 by rpki-client