$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/4AF261A4A27811F0898CD81DC4F9AE02.roa File: 4AF261A4A27811F0898CD81DC4F9AE02.roa (raw, json) Hash identifier: 6pgejcIaUcN1QRW0oM4tHtZxgRp4SfCd0QJe8Epxtw0= Subject key identifier: FF:23:CF:15:EF:EE:0B:35:6B:13:2B:98:BE:73:59:CE:EC:B2:15:C0 Certificate issuer: /CN=A91FC25F/serialNumber=486CB816BE3A5E03CB72772988A0DE0EA972CDAA Certificate serial: AF Authority key identifier: 48:6C:B8:16:BE:3A:5E:03:CB:72:77:29:88:A0:DE:0E:A9:72:CD:AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGy4Fr46XgPLcncpiKDeDqlyzao.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/4AF261A4A27811F0898CD81DC4F9AE02.roa Signing time: Thu 03 Sep 2026 07:58:11 +0000 ROA not before: Thu 03 Sep 2026 07:58:11 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 154273 IP address blocks: 43.229.18.0/23 maxlen: 23 43.229.18.0/24 maxlen: 24 43.229.19.0/24 maxlen: 24 2001:df6:2a40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.crl rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGy4Fr46XgPLcncpiKDeDqlyzao.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC25F, serialNumber=486CB816BE3A5E03CB72772988A0DE0EA972CDAA Validity Not Before: Sep 3 07:58:11 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6a992893-80ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a3:27:f2:33:ec:e5:55:b6:6d:e9:70:16:a3: 00:85:1c:86:b6:75:ce:81:25:64:5a:f3:92:eb:95: 9a:40:40:0b:64:db:07:9c:7d:84:e9:f2:d2:cc:2a: 9c:b8:4a:7c:c5:80:7a:37:6b:41:ed:68:9a:fe:b0: 8b:76:4a:90:76:e6:16:ca:cf:69:cc:3a:f8:86:22: ac:32:12:39:ad:72:98:52:92:15:02:6a:7e:1e:73: b4:5b:35:b5:f9:88:64:f4:00:3c:95:87:b5:a4:cb: 63:ef:a1:c5:0d:e2:cd:51:12:b0:05:d9:0b:df:05: 32:1c:b3:8a:de:d6:f5:99:8b:a6:2a:f9:e5:bf:6f: 39:c0:5f:2f:76:c3:0c:d8:00:21:d8:1c:9d:20:63: 03:2e:8d:49:bb:df:54:f9:15:51:14:b3:55:ed:d8: b4:06:7b:bf:9b:f1:a7:c2:15:93:3e:11:ec:9b:46: 72:d3:7b:b9:1e:2d:57:b0:06:84:99:d3:28:9f:0c: 59:f6:39:4c:9a:f7:49:3a:26:09:e0:ba:c8:cd:b2: bf:98:48:41:22:f3:a6:3c:f6:e2:f9:6a:00:09:b1: 56:34:76:a0:fc:60:08:a9:18:56:e7:25:d1:f6:c3: 2e:04:47:5e:58:e9:5a:ce:4c:13:64:cc:04:c6:30: 95:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:23:CF:15:EF:EE:0B:35:6B:13:2B:98:BE:73:59:CE:EC:B2:15:C0 X509v3 Authority Key Identifier: keyid:48:6C:B8:16:BE:3A:5E:03:CB:72:77:29:88:A0:DE:0E:A9:72:CD:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGy4Fr46XgPLcncpiKDeDqlyzao.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/4AF261A4A27811F0898CD81DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.229.18.0/23 IPv6: 2001:df6:2a40::/48 Signature Algorithm: sha256WithRSAEncryption 95:fd:23:d6:ee:f6:b0:98:28:ca:52:52:c8:2f:d3:f7:a1:55: ec:81:8a:c4:51:fd:2d:0b:5f:77:ad:d2:57:c6:87:9e:f3:d6: 5c:c5:a1:bb:6a:41:bd:2d:60:f8:ae:80:ed:6a:3a:59:e8:52: 27:ce:95:b7:15:ee:ca:1c:2e:80:37:5e:b9:a8:56:6a:a2:56: 75:86:d4:81:cd:ea:bf:fd:63:de:d7:c7:5f:c9:8d:cc:d2:c3: 87:bb:d5:33:d1:eb:9f:c5:0e:b1:b6:24:f1:12:82:c0:b1:7c: a2:e0:c0:65:17:e4:8b:49:55:cd:e4:f7:fc:01:33:05:58:26: fa:ec:57:7d:d9:9a:66:3b:28:6d:5e:a9:a6:65:94:53:94:f8: 27:a3:bb:0f:b2:89:2d:72:0f:04:bd:2b:e8:5f:18:1c:03:d9: 87:88:ad:ff:19:c5:0b:39:7c:89:6b:f4:5a:70:6a:10:af:a9: 4f:e3:a3:00:65:ef:76:32:29:f0:ae:82:61:c8:e1:24:b9:79: 78:b2:35:76:96:e8:84:4f:06:e7:7d:d3:bc:7b:20:1a:fb:d8: 2a:d7:e7:67:41:00:d0:33:43:9e:50:f4:53:15:b6:d1:ba:9d: f7:92:9e:1e:3b:33:81:f9:96:60:49:2a:c9:ea:bd:2f:8c:38: 24:17:57:db -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkMyNUYxMTAvBgNVBAUTKDQ4NkNCODE2QkUzQTVFMDNDQjcyNzcyOTg4QTBERTBF QTk3MkNEQUEwHhcNMjYwOTAzMDc1ODExWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk5Mjg5My04MGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6Mn8jPs5VW2belwFqMAhRyGtnXOgSVkWvOS65WaQEALZNsHnH2E6fLSzCqc uEp8xYB6N2tB7Wia/rCLdkqQduYWys9pzDr4hiKsMhI5rXKYUpIVAmp+HnO0WzW1 +Yhk9AA8lYe1pMtj76HFDeLNURKwBdkL3wUyHLOK3tb1mYumKvnlv285wF8vdsMM 2AAh2BydIGMDLo1Ju99U+RVRFLNV7di0Bnu/m/GnwhWTPhHsm0Zy03u5Hi1XsAaE mdMonwxZ9jlMmvdJOiYJ4LrIzbK/mEhBIvOmPPbi+WoACbFWNHag/GAIqRhW5yXR 9sMuBEdeWOlazkwTZMwExjCVUQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFP8jzxXv 7gs1axMrmL5zWc7sshXAMB8GA1UdIwQYMBaAFEhsuBa+Ol4Dy3J3KYig3g6pcs2q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzI1Ri9GQzFGQkU5MkEy NzYxMUYwQUY2MzI4MUJDNEY5QUUwMi9TR3k0RnI0NlhnUExjbmNwaUtEZURxbHl6 YW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NHeTRGcjQ2WGdQTGNuY3BpS0RlRHFseXphby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkMyNUYvRkMxRkJFOTJBMjc2MTFGMEFGNjMyODFCQzRGOUFFMDIvNEFGMjYxQTRB Mjc4MTFGMDg5OENEODFEQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBK+USMA8EAgACMAkDBwAgAQ32KkAwDQYJKoZIhvcNAQELBQADggEB AJX9I9bu9rCYKMpSUsgv0/ehVeyBisRR/S0LX3et0lfGh57z1lzFobtqQb0tYPiu gO1qOlnoUifOlbcV7socLoA3XrmoVmqiVnWG1IHN6r/9Y97Xx1/JjczSw4e71TPR 65/FDrG2JPESgsCxfKLgwGUX5ItJVc3k9/wBMwVYJvrsV33ZmmY7KG1eqaZllFOU +Cejuw+yiS1yDwS9K+hfGBwD2YeIrf8ZxQs5fIlr9FpwahCvqU/jowBl73YyKfCu gmHI4SS5eXiyNXaW6IRPBud907x7IBr72CrX52dBANAzQ55Q9FMVttG6nfeSnh47 M4H5lmBJKsnqvS+MOCQXV9s= -----END CERTIFICATE-----Generated at Mon Sep 21 21:52:32 2026 by rpki-client