$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/145F8B6434D211EEA9BD8F64C4F9AE02.roa File: 145F8B6434D211EEA9BD8F64C4F9AE02.roa (raw, json) Hash identifier: ymE3NF3mNxbc0n3cw24HjyP+vV1nrdP5Yd7pXRaMI6Y= Subject key identifier: C4:E9:9C:24:8B:81:91:0A:5C:F8:9B:A8:10:2E:CA:68:87:5D:7E:A5 Certificate issuer: /CN=A91F7DBA/serialNumber=E0849F0543918202B178444E5FF22F899F9E320E Certificate serial: 05B4 Authority key identifier: E0:84:9F:05:43:91:82:02:B1:78:44:4E:5F:F2:2F:89:9F:9E:32:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/145F8B6434D211EEA9BD8F64C4F9AE02.roa Signing time: Sun 30 Aug 2026 23:44:42 +0000 ROA not before: Sun 30 Aug 2026 23:44:42 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 132007 IP address blocks: 43.255.136.0/22 maxlen: 24 103.239.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.crl rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 22:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1460 (0x5b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7DBA, serialNumber=E0849F0543918202B178444E5FF22F899F9E320E Validity Not Before: Aug 30 23:44:42 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a94c06a-a1c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7c:5f:25:a7:54:a7:3c:71:7d:6f:e3:35:f4: 4a:eb:8c:0b:81:b5:55:54:b1:ee:4b:76:a6:34:99: 14:72:20:f9:ce:c1:b0:7b:ed:80:ea:13:14:c5:0b: d0:3e:a2:9c:38:f4:47:6b:c0:a7:6b:6d:9f:02:d8: 19:68:29:16:bd:9a:c2:29:c4:2a:85:56:9f:c6:5a: 6e:e0:23:40:3f:20:bc:e3:03:21:1a:c6:b5:75:03: 71:5b:80:7a:8d:9c:b4:88:a8:50:c5:8d:73:00:10: 43:c1:6e:f3:4e:d9:b5:d8:db:27:7d:bf:01:f2:d6: 4f:02:ee:0c:35:92:74:83:56:f7:1c:27:1d:14:89: e8:85:7e:8c:ba:5c:fd:56:8c:24:6a:4e:7c:46:6c: e2:e0:df:52:dd:30:0e:85:fc:ec:41:f9:b5:f6:5d: 40:d0:0a:03:4e:d9:4a:d5:f8:60:a7:f8:56:f9:40: 8f:5c:77:68:33:74:cb:7e:b0:7d:05:ad:fd:9c:98: 9e:ec:3c:f7:01:c7:57:b1:21:c7:e6:5e:2f:fa:22: 53:3e:94:72:de:87:89:fc:c1:90:1f:08:2f:45:75: a4:3e:21:8b:db:e7:bb:8e:a4:55:95:ae:50:70:43: 1e:f0:4e:89:d3:86:07:de:38:9e:6b:4c:2f:30:98: 39:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E9:9C:24:8B:81:91:0A:5C:F8:9B:A8:10:2E:CA:68:87:5D:7E:A5 X509v3 Authority Key Identifier: keyid:E0:84:9F:05:43:91:82:02:B1:78:44:4E:5F:F2:2F:89:9F:9E:32:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/145F8B6434D211EEA9BD8F64C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.255.136.0/22 103.239.132.0/22 Signature Algorithm: sha256WithRSAEncryption a5:82:ae:9e:43:a0:48:4e:77:97:4c:aa:b5:17:64:d9:9a:dc: 47:ca:8c:58:2e:e7:68:5f:90:74:76:39:53:c4:c5:f9:c6:08: c7:42:16:ef:34:ef:8d:3b:3f:1d:b3:77:9c:bd:3f:8c:66:fa: 4d:93:b8:3d:72:a5:17:ed:1c:a9:a6:04:31:e0:e6:66:ad:fd: 33:9d:b8:31:fb:da:51:a3:1d:b8:e5:1e:2e:bb:b9:79:f7:71: a2:7d:52:ef:6e:00:87:7f:ca:74:b9:d3:2a:63:4a:9a:49:db: b8:4c:59:71:af:32:de:ce:ea:ac:71:f7:56:7f:e1:2b:03:46: 69:5c:7d:04:5a:51:3c:c4:e0:e3:1c:15:39:6e:52:c1:f8:c6: 38:1d:fe:72:9f:c6:a4:98:48:95:bf:2d:c9:94:6d:f0:35:de: ac:97:87:30:f4:c4:8f:27:be:04:26:e1:43:bb:90:e4:34:08: 20:8c:32:12:93:0a:9f:37:b1:ae:d6:da:70:c3:f4:0b:b5:c3: 90:3b:e7:5e:a6:55:6d:4d:59:72:10:a3:a6:bd:02:40:de:b2: cd:2f:bd:75:95:df:cb:9c:8a:ae:5f:3b:55:ca:d9:9b:70:7a: 12:fb:4e:77:86:da:dc:36:da:6c:f3:52:64:ab:4b:ba:85:2e: 26:d2:75:ef -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdEQkExMTAvBgNVBAUTKEUwODQ5RjA1NDM5MTgyMDJCMTc4NDQ0RTVGRjIyRjg5 OUY5RTMyMEUwHhcNMjYwODMwMjM0NDQyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk0YzA2YS1hMWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXxfJadUpzxxfW/jNfRK64wLgbVVVLHuS3amNJkUciD5zsGwe+2A6hMUxQvQ PqKcOPRHa8Cna22fAtgZaCkWvZrCKcQqhVafxlpu4CNAPyC84wMhGsa1dQNxW4B6 jZy0iKhQxY1zABBDwW7zTtm12Nsnfb8B8tZPAu4MNZJ0g1b3HCcdFInohX6Mulz9 Vowkak58Rmzi4N9S3TAOhfzsQfm19l1A0AoDTtlK1fhgp/hW+UCPXHdoM3TLfrB9 Ba39nJie7Dz3AcdXsSHH5l4v+iJTPpRy3oeJ/MGQHwgvRXWkPiGL2+e7jqRVla5Q cEMe8E6J04YH3jiea0wvMJg5LwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFMTpnCSL gZEKXPibqBAuymiHXX6lMB8GA1UdIwQYMBaAFOCEnwVDkYICsXhETl/yL4mfnjIO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0RCQS8yOEVCNzE0NjJC RDQxMUVDQjBCQURFNThDNEY5QUUwMi80SVNmQlVPUmdnS3hlRVJPWF9JdmlaLWVN ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRJU2ZCVU9SZ2dLeGVFUk9YX0l2aVotZU1nNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjdEQkEvMjhFQjcxNDYyQkQ0MTFFQ0IwQkFERTU4QzRGOUFFMDIvMTQ1RjhCNjQz NEQyMTFFRUE5QkQ4RjY0QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK/+IAwQCZ++EMA0GCSqGSIb3DQEBCwUAA4IBAQClgq6eQ6BITneX TKq1F2TZmtxHyoxYLudoX5B0djlTxMX5xgjHQhbvNO+NOz8ds3ecvT+MZvpNk7g9 cqUX7RyppgQx4OZmrf0znbgx+9pRox245R4uu7l593GifVLvbgCHf8p0udMqY0qa Sdu4TFlxrzLezuqscfdWf+ErA0ZpXH0EWlE8xODjHBU5blLB+MY4Hf5yn8akmEiV vy3JlG3wNd6sl4cw9MSPJ74EJuFDu5DkNAggjDISkwqfN7Gu1tpww/QLtcOQO+de plVtTVlyEKOmvQJA3rLNL711ld/LnIquXztVytmbcHoS+053htrcNtps81Jkq0u6 hS4m0nXv -----END CERTIFICATE-----Generated at Mon Sep 21 14:45:35 2026 by rpki-client