$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/09CEF4D0708411E9AC9EA90EC4F9AE02.roa File: 09CEF4D0708411E9AC9EA90EC4F9AE02.roa (raw, json) Hash identifier: GAqC2i59qt2m/55OagFkhpeao2+SZdUF874/6eeck5o= Subject key identifier: CB:32:E0:60:70:AE:4C:BE:68:5A:7E:52:69:63:36:16:65:5D:54:36 Certificate issuer: /CN=A91F2230/serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F Certificate serial: 1032 Authority key identifier: 17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/09CEF4D0708411E9AC9EA90EC4F9AE02.roa Signing time: Mon 31 Aug 2026 17:34:43 +0000 ROA not before: Mon 31 Aug 2026 17:34:43 +0000 ROA not after: Fri 01 Jan 2027 00:00:00 +0000 asID: 136480 IP address blocks: 43.227.12.0/22 maxlen: 22 43.227.12.0/24 maxlen: 24 43.227.13.0/24 maxlen: 24 43.227.14.0/24 maxlen: 24 43.227.15.0/24 maxlen: 24 103.89.176.0/22 maxlen: 22 103.89.176.0/24 maxlen: 24 103.89.177.0/24 maxlen: 24 103.89.178.0/24 maxlen: 24 103.89.179.0/24 maxlen: 24 2400:f1c0::/32 maxlen: 32 2400:f1c0::/48 maxlen: 48 2400:f1c0:1::/48 maxlen: 48 2400:f1c0:2::/48 maxlen: 48 2400:f1c0:3::/48 maxlen: 48 2400:f1c0:4::/48 maxlen: 48 2400:f1c0:5::/48 maxlen: 48 2400:f1c0:6::/48 maxlen: 48 2400:f1c0:7::/48 maxlen: 48 2400:f1c0:8::/48 maxlen: 48 2400:f1c0:9::/48 maxlen: 48 2400:f1c0:a::/48 maxlen: 48 2400:f1c0:b::/48 maxlen: 48 2400:f1c0:c::/48 maxlen: 48 2400:f1c0:d::/48 maxlen: 48 2400:f1c0:e::/48 maxlen: 48 2400:f1c0:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:23:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4146 (0x1032) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2230, serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F Validity Not Before: Aug 31 17:34:43 2026 GMT Not After : Jan 1 00:00:00 2027 GMT Subject: CN=6a95bb33-67ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ce:47:1a:0d:85:62:54:ec:d5:62:03:4e:65: da:b4:25:dd:b4:c3:94:7e:05:5c:10:ff:ee:d2:1c: 46:1c:f5:c6:ee:fe:5c:aa:24:8d:02:4f:57:9c:d4: 00:4d:88:07:1b:e6:19:14:92:ae:13:91:69:12:0b: fa:0f:c1:13:7c:8c:d9:8e:4c:6e:73:62:cc:bf:eb: 33:d8:19:b5:fa:0f:04:d0:3d:82:13:58:32:63:b7: d0:9f:21:e1:46:3d:3c:13:ea:2b:e2:d2:f2:04:05: 6c:0d:d5:25:74:12:93:e1:50:4d:9f:58:c6:27:d8: fe:f1:5b:88:0d:9b:82:86:64:43:7d:67:6b:90:f3: 2c:94:fa:1a:c7:56:9d:78:0f:9b:87:a8:92:73:17: 99:71:fd:6f:41:65:5c:89:cb:e9:5c:15:a1:85:da: 7d:b3:ef:28:a6:ce:66:13:68:f1:1c:8c:c5:18:a8: 22:ff:28:ec:83:22:60:0b:0d:d3:69:06:2c:c7:3f: 66:93:b8:09:72:f2:7a:68:47:00:9b:47:4a:92:3e: 4b:01:83:47:fe:5b:fe:a2:7e:7e:62:ba:17:f6:1e: 31:6e:d4:8c:2a:49:54:de:2b:d8:db:1e:c4:fe:7f: 00:56:56:de:46:32:b0:c4:9e:bc:e4:9f:1c:0d:8c: e4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:32:E0:60:70:AE:4C:BE:68:5A:7E:52:69:63:36:16:65:5D:54:36 X509v3 Authority Key Identifier: keyid:17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/09CEF4D0708411E9AC9EA90EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.227.12.0/22 103.89.176.0/22 IPv6: 2400:f1c0::/32 Signature Algorithm: sha256WithRSAEncryption 2f:4c:11:ec:3e:1c:72:4b:de:73:c8:1f:c0:16:4d:8a:b2:b1: c6:4f:01:16:ef:9f:1b:5e:75:a8:00:ac:90:06:50:e7:35:12: 0e:90:db:9c:92:0a:d5:45:21:cf:b2:ab:e4:89:3d:69:d9:0d: 48:98:00:44:69:ec:64:92:8f:20:f4:b5:79:eb:9a:91:9f:04: 68:eb:09:0f:2c:87:e1:f2:fe:c9:98:03:2f:52:80:5a:b3:c3: 9e:ec:c0:ff:e2:d3:84:89:6b:96:81:50:66:f8:c5:b5:c0:e3: ae:b9:fa:8e:47:ee:1d:ef:44:9e:75:0b:f0:57:a2:84:c0:2e: 30:9b:f9:8a:52:3a:a5:a4:da:56:94:29:73:5c:95:de:a7:a6: e3:62:b3:0f:17:da:f1:8f:87:a5:81:94:c9:38:d1:f3:56:ba: a0:15:f5:fe:d2:03:c0:ec:74:de:0f:91:36:5e:6e:bc:8b:5b: 5e:29:f0:ec:26:5f:93:50:f2:1e:24:64:91:a3:3f:7b:e2:dd: c4:04:37:a5:4f:7a:f7:8a:25:1b:2a:52:77:0b:4f:69:2a:f2: 58:9b:c7:f1:cc:1e:db:89:85:3d:26:6b:4e:7b:04:39:20:07: 8f:57:15:f2:48:43:c7:f3:b9:cd:1f:ab:84:7d:04:d5:31:90: 2b:3e:0f:34 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICEDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIyMzAxMTAvBgNVBAUTKDE3NkE0RTAzQjU0MEFGMjUxNEE4QkM3MTlDMkJBMEY5 Rjc2RkZCMkYwHhcNMjYwODMxMTczNDQzWhcNMjcwMTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk1YmIzMy02N2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzM5HGg2FYlTs1WIDTmXatCXdtMOUfgVcEP/u0hxGHPXG7v5cqiSNAk9XnNQA TYgHG+YZFJKuE5FpEgv6D8ETfIzZjkxuc2LMv+sz2Bm1+g8E0D2CE1gyY7fQnyHh Rj08E+or4tLyBAVsDdUldBKT4VBNn1jGJ9j+8VuIDZuChmRDfWdrkPMslPoax1ad eA+bh6iScxeZcf1vQWVcicvpXBWhhdp9s+8ops5mE2jxHIzFGKgi/yjsgyJgCw3T aQYsxz9mk7gJcvJ6aEcAm0dKkj5LAYNH/lv+on5+YroX9h4xbtSMKklU3ivY2x7E /n8AVlbeRjKwxJ685J8cDYzkcwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFMsy4GBw rky+aFp+UmljNhZlXVQ2MB8GA1UdIwQYMBaAFBdqTgO1QK8lFKi8cZwroPn3b/sv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjIzMC9BREZBNTU0Qzcw ODIxMUU5QjdCQzM5MEFDNEY5QUUwMi9GMnBPQTdWQXJ5VVVxTHh4bkN1Zy1mZHYt eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YycE9BN1ZBcnlVVXFMeHhuQ3VnLWZkdi15OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjIyMzAvQURGQTU1NEM3MDgyMTFFOUI3QkMzOTBBQzRGOUFFMDIvMDlDRUY0RDA3 MDg0MTFFOUFDOUVBOTBFQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCK+MMAwQCZ1mwMA0EAgACMAcDBQAkAPHAMA0GCSqGSIb3DQEBCwUA A4IBAQAvTBHsPhxyS95zyB/AFk2KsrHGTwEW758bXnWoAKyQBlDnNRIOkNuckgrV RSHPsqvkiT1p2Q1ImABEaexkko8g9LV565qRnwRo6wkPLIfh8v7JmAMvUoBas8Oe 7MD/4tOEiWuWgVBm+MW1wOOuufqOR+4d70SedQvwV6KEwC4wm/mKUjqlpNpWlClz XJXep6bjYrMPF9rxj4elgZTJONHzVrqgFfX+0gPA7HTeD5E2Xm68i1teKfDsJl+T UPIeJGSRoz974t3EBDelT3r3iiUbKlJ3C09pKvJYm8fxzB7biYU9JmtOewQ5IAeP VxXySEPH87nNH6uEfQTVMZArPg80 -----END CERTIFICATE-----Generated at Tue Sep 22 14:26:44 2026 by rpki-client