$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/F04A74EC90C511EDA07C3025C4F9AE02.roa File: F04A74EC90C511EDA07C3025C4F9AE02.roa (raw, json) Hash identifier: YbTHElizFzUtlbWyp+pwU08KL5opGYwYJhzV3rHc988= Subject key identifier: 93:0A:1D:85:BB:C7:A9:EE:2A:23:DD:FE:DF:09:EE:4A:A8:88:5E:5B Certificate issuer: /CN=A91E4696/serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5 Certificate serial: 02AF Authority key identifier: 27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/F04A74EC90C511EDA07C3025C4F9AE02.roa Signing time: Wed 29 Jul 2026 02:51:31 +0000 ROA not before: Wed 29 Jul 2026 02:51:31 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 38277 IP address blocks: 43.252.164.0/22 maxlen: 22 43.252.164.0/24 maxlen: 24 43.252.165.0/24 maxlen: 24 43.252.166.0/24 maxlen: 24 43.252.167.0/24 maxlen: 24 103.28.44.0/22 maxlen: 22 103.28.44.0/24 maxlen: 24 103.28.45.0/24 maxlen: 24 103.28.46.0/24 maxlen: 24 103.28.47.0/24 maxlen: 24 203.124.8.0/24 maxlen: 24 203.124.9.0/24 maxlen: 24 203.124.10.0/24 maxlen: 24 203.124.11.0/24 maxlen: 24 203.124.12.0/24 maxlen: 24 203.124.13.0/24 maxlen: 24 203.124.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:17:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 687 (0x2af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4696, serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5 Validity Not Before: Jul 29 02:51:31 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a696ab3-d23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8f:aa:71:ac:a7:8e:02:c2:1e:d5:91:4b:f3: b2:a1:10:56:95:c4:2e:00:2d:8c:cc:e9:69:03:5a: 52:2e:7f:9d:66:a0:de:a8:52:02:ab:33:ec:64:63: 15:7f:fc:cb:8b:fd:0b:1c:cd:85:91:c4:8b:dd:81: c9:f0:f0:9f:dd:31:c0:bb:1d:8c:99:9a:58:fe:4c: d3:78:25:ec:94:fd:90:ac:2a:9a:b3:b2:de:c8:8a: a4:43:32:d9:65:a5:65:8a:82:c5:74:ef:0d:db:b5: c9:18:ec:21:09:ed:79:54:37:51:bb:08:a1:d2:01: b9:b2:e2:c5:43:28:6a:9c:9f:a4:f1:8c:d0:69:b9: fa:7d:d9:c7:6d:57:a0:37:d2:d1:83:ff:e3:3b:31: 88:39:79:33:f9:42:f7:ce:fe:e8:9b:8f:eb:76:b3: 11:00:e2:1f:6c:d5:2d:3d:40:93:c2:65:77:f9:bb: 5c:67:8a:37:a4:52:8b:42:01:a4:54:71:c9:f3:33: 29:76:24:55:3c:26:33:3b:66:64:f1:ea:78:86:19: 56:ab:2f:b3:4a:00:54:38:41:c5:90:28:c8:3d:17: a0:79:b9:3b:dc:02:75:64:dd:c5:6a:f7:e0:db:2e: 45:83:06:8a:33:f5:0c:a2:6e:66:23:61:13:7f:e6: 26:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:0A:1D:85:BB:C7:A9:EE:2A:23:DD:FE:DF:09:EE:4A:A8:88:5E:5B X509v3 Authority Key Identifier: keyid:27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/F04A74EC90C511EDA07C3025C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.252.164.0/22 103.28.44.0/22 203.124.8.0-203.124.13.255 203.124.15.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:52:84:fa:1c:4a:91:e5:eb:52:8c:e4:b9:7c:a2:9d:36:38: 6e:d9:1f:c9:e5:cf:65:3a:51:c8:0e:f4:6d:2f:74:1c:a4:a2: ec:77:53:ef:d6:8d:7f:a1:10:f0:41:18:06:f8:02:cf:e4:29: aa:4b:3e:dc:c2:45:be:49:64:01:99:6f:df:bb:75:96:35:aa: fc:b1:66:cc:eb:48:72:6a:74:f6:16:ac:33:4b:9e:76:e5:99: 23:b9:28:32:e5:40:da:50:92:08:b9:d2:db:e9:6b:78:0b:da: 85:76:5f:e9:55:00:80:20:f0:59:a2:d6:6a:2b:42:0f:cc:6e: 1d:81:26:0f:e8:dd:08:60:0d:18:68:2b:54:1d:2f:62:39:02: c0:4b:c7:f6:77:47:8e:77:60:9c:0c:33:98:c4:be:9a:d0:a0: 56:76:92:f8:47:20:30:f4:a2:ab:5c:cd:b8:22:50:45:19:3d: fe:52:56:4c:00:4e:72:d8:bb:04:58:56:31:00:26:55:4d:6b: 63:7b:44:43:0b:d9:24:86:6f:1c:99:85:20:ef:30:eb:89:74: 28:35:cf:41:e6:f0:ca:86:05:d3:f4:e1:c9:be:b2:69:1a:ea: cb:70:2f:f2:6d:a9:80:12:35:33:92:aa:33:fc:e0:37:f7:bc: 10:08:0f:be -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICAq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2OTYxMTAvBgNVBAUTKDI3Qjg3MjJDODU5Q0E0RjZGMDNFQzFFMDYxRkRENEMz QjlCNDk3RTUwHhcNMjYwNzI5MDI1MTMxWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY5NmFiMy1kMjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0o+qcaynjgLCHtWRS/OyoRBWlcQuAC2MzOlpA1pSLn+dZqDeqFICqzPsZGMV f/zLi/0LHM2FkcSL3YHJ8PCf3THAux2MmZpY/kzTeCXslP2QrCqas7LeyIqkQzLZ ZaVlioLFdO8N27XJGOwhCe15VDdRuwih0gG5suLFQyhqnJ+k8YzQabn6fdnHbVeg N9LRg//jOzGIOXkz+UL3zv7om4/rdrMRAOIfbNUtPUCTwmV3+btcZ4o3pFKLQgGk VHHJ8zMpdiRVPCYzO2Zk8ep4hhlWqy+zSgBUOEHFkCjIPRegebk73AJ1ZN3Favfg 2y5FgwaKM/UMom5mI2ETf+YmqQIDAQABo4ICejCCAnYwHQYDVR0OBBYEFJMKHYW7 x6nuKiPd/t8J7kqoiF5bMB8GA1UdIwQYMBaAFCe4ciyFnKT28D7B4GH91MO5tJfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY5Ni9ENkExMUM0QTkw QkYxMUVEOENDMUU3ODNDNEY5QUUwMi9KN2h5TElXY3BQYndQc0hnWWYzVXc3bTBs LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o3aHlMSVdjcFBid1BzSGdZZjNVdzdtMGwtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTQ2OTYvRDZBMTFDNEE5MEJGMTFFRDhDQzFFNzgzQzRGOUFFMDIvRjA0QTc0RUM5 MEM1MTFFREEwN0MzMDI1QzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm BAIAATAgAwQCK/ykAwQCZxwsMAwDBAPLfAgDBAHLfAwDBADLfA8wDQYJKoZIhvcN AQELBQADggEBAE1ShPocSpHl61KM5Ll8op02OG7ZH8nlz2U6UcgO9G0vdBykoux3 U+/WjX+hEPBBGAb4As/kKapLPtzCRb5JZAGZb9+7dZY1qvyxZszrSHJqdPYWrDNL nnblmSO5KDLlQNpQkgi50tvpa3gL2oV2X+lVAIAg8Fmi1morQg/Mbh2BJg/o3Qhg DRhoK1QdL2I5AsBLx/Z3R453YJwMM5jEvprQoFZ2kvhHIDD0oqtczbgiUEUZPf5S VkwATnLYuwRYVjEAJlVNa2N7REML2SSGbxyZhSDvMOuJdCg1z0Hm8MqGBdP04cm+ smka6stwL/JtqYASNTOSqjP84Df3vBAID74= -----END CERTIFICATE-----Generated at Thu Sep 24 07:50:12 2026 by rpki-client