$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/F894F5B0E09411F0B3B2B389426F56BC.roa File: F894F5B0E09411F0B3B2B389426F56BC.roa (raw, json) Hash identifier: g2GkrwqDM8g4EPcoRU14VtmMWrRkEc3nm/o6l5+kRws= Subject key identifier: 34:AA:3C:5A:BB:1D:F1:B9:A5:90:35:75:B8:B9:FE:B0:EC:41:5C:AD Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0D8D Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/F894F5B0E09411F0B3B2B389426F56BC.roa Signing time: Wed 17 Jun 2026 03:26:24 +0000 ROA not before: Wed 17 Jun 2026 03:26:24 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 2914 IP address blocks: 43.230.54.0/24 maxlen: 24 43.231.190.0/24 maxlen: 24 43.231.191.0/24 maxlen: 24 43.246.128.0/24 maxlen: 24 43.246.130.0/24 maxlen: 24 43.246.131.0/24 maxlen: 24 43.246.199.0/24 maxlen: 24 103.7.117.0/24 maxlen: 24 103.7.208.0/24 maxlen: 24 103.7.211.0/24 maxlen: 24 103.12.52.0/24 maxlen: 24 103.15.33.0/24 maxlen: 24 103.27.80.0/24 maxlen: 24 103.27.81.0/24 maxlen: 24 103.27.82.0/24 maxlen: 24 103.27.83.0/24 maxlen: 24 103.197.208.0/24 maxlen: 24 103.197.209.0/24 maxlen: 24 103.197.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 19:11:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3469 (0xd8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Jun 17 03:26:24 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6a3213e0-6147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fc:30:62:72:3a:68:b6:d9:ab:96:5b:48:a9: f9:92:bb:60:eb:3d:10:88:3f:22:77:0c:7d:45:34: 39:7e:0a:c3:02:8b:db:d9:94:f7:c2:6a:01:03:08: ce:9c:65:d1:79:46:dc:47:07:bd:bd:1c:99:d3:3f: 2b:c3:0f:25:a8:87:5c:4d:fc:d4:5f:74:9f:09:fb: 5e:e6:c3:bf:01:99:3b:eb:d7:9a:d8:f5:81:3c:16: 38:2f:ec:ba:85:77:51:0c:a8:87:4e:ad:b9:09:7d: 24:28:fb:8c:fd:2e:4e:c8:1a:90:c2:df:f8:2a:ac: 92:ee:06:f2:a5:47:b1:5f:63:fe:ba:7e:54:e2:3a: 47:2d:7a:d8:d2:b7:e8:3b:97:20:c6:c3:5d:5f:dd: b6:ce:71:2b:a0:70:e3:7a:a3:e3:75:74:95:f9:08: f2:be:81:d9:f2:5b:98:ac:b5:81:f9:67:34:97:27: 07:e6:7a:14:6d:ef:a0:22:73:98:8c:7e:57:4c:67: f9:9d:ce:8b:ce:56:34:2d:47:b3:fd:42:8f:af:4b: bd:c7:c2:b8:c4:a6:e7:85:d3:64:fe:07:0e:a4:fa: 54:6c:65:a2:c6:d7:4c:6a:73:99:0c:0f:2d:9d:06: 4e:db:dd:b9:55:6f:37:7e:29:4c:61:fa:72:1c:70: 9d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:AA:3C:5A:BB:1D:F1:B9:A5:90:35:75:B8:B9:FE:B0:EC:41:5C:AD X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/F894F5B0E09411F0B3B2B389426F56BC.roa sbgp-ipAddrBlock: critical IPv4: 43.230.54.0/24 43.231.190.0/23 43.246.128.0/24 43.246.130.0/23 43.246.199.0/24 103.7.117.0/24 103.7.208.0/24 103.7.211.0/24 103.12.52.0/24 103.15.33.0/24 103.27.80.0/22 103.197.208.0/22 Signature Algorithm: sha256WithRSAEncryption 41:c7:0f:0c:4d:dc:74:1b:97:69:90:50:1f:e7:25:36:dd:48: 09:75:e9:6d:bd:86:1d:14:2b:05:56:94:1d:a8:9e:19:b5:10: ca:d0:33:36:1b:8a:df:34:31:1d:31:e0:fe:05:19:da:74:7b: b2:dc:c7:b8:4a:d0:85:ff:d2:bb:98:4c:f3:98:f5:c2:06:56: bb:86:52:3a:79:d9:23:bc:d2:64:25:4d:df:1b:16:38:55:44: 2a:e2:8b:23:8b:ae:81:3a:d8:03:b6:e8:ab:1d:00:cc:c9:22: 66:6b:2b:9a:45:fd:5a:7e:1f:9b:25:c2:ec:01:ac:14:4e:21: c4:51:d4:e5:9a:aa:10:be:75:ac:88:42:85:5a:e3:79:5e:da: 3b:43:96:25:20:e4:d1:07:38:f3:2c:21:f5:3d:b5:ea:fd:bd: 26:b0:a9:52:80:3d:9d:f2:89:8d:0f:55:a7:ea:e9:33:3f:5c: 9e:94:3d:44:3e:a2:ab:48:d5:8a:f7:2f:09:47:ea:0c:7d:8f: 51:55:84:02:1d:8b:a9:ce:ca:74:14:88:14:ca:9e:34:f3:79: ff:58:62:3a:ee:89:04:c8:d2:fb:a3:1b:21:98:90:53:23:76: cc:99:3c:7b:10:a4:f6:0d:d0:cf:d4:17:19:1d:3e:65:5a:b5: e2:ae:62:13 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgICDY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjYwNjE3MDMyNjI0WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YTMyMTNlMC02MTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/wwYnI6aLbZq5ZbSKn5krtg6z0QiD8idwx9RTQ5fgrDAovb2ZT3wmoBAwjO nGXReUbcRwe9vRyZ0z8rww8lqIdcTfzUX3SfCfte5sO/AZk769ea2PWBPBY4L+y6 hXdRDKiHTq25CX0kKPuM/S5OyBqQwt/4KqyS7gbypUexX2P+un5U4jpHLXrY0rfo O5cgxsNdX922znEroHDjeqPjdXSV+QjyvoHZ8luYrLWB+Wc0lycH5noUbe+gInOY jH5XTGf5nc6LzlY0LUez/UKPr0u9x8K4xKbnhdNk/gcOpPpUbGWixtdManOZDA8t nQZO2925VW83filMYfpyHHCduwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDSqPFq7 HfG5pZA1dbi5/rDsQVytMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvRjg5NEY1QjBF MDk0MTFGMEIzQjJCMzg5NDI2RjU2QkMucm9hMGEGCCsGAQUFBwEHAQH/BFIwUDBO BAIAATBIAwQAK+Y2AwQBK+e+AwQAK/aAAwQBK/aCAwQAK/bHAwQAZwd1AwQAZwfQ AwQAZwfTAwQAZww0AwQAZw8hAwQCZxtQAwQCZ8XQMA0GCSqGSIb3DQEBCwUAA4IB AQBBxw8MTdx0G5dpkFAf5yU23UgJdeltvYYdFCsFVpQdqJ4ZtRDK0DM2G4rfNDEd MeD+BRnadHuy3Me4StCF/9K7mEzzmPXCBla7hlI6edkjvNJkJU3fGxY4VUQq4osj i66BOtgDtuirHQDMySJmayuaRf1afh+bJcLsAawUTiHEUdTlmqoQvnWsiEKFWuN5 Xto7Q5YlIOTRBzjzLCH1PbXq/b0msKlSgD2d8omND1Wn6ukzP1yelD1EPqKrSNWK 9y8JR+oMfY9RVYQCHYupzsp0FIgUyp4083n/WGI67okEyNL7oxshmJBTI3bMmTx7 EKT2DdDP1BcZHT5lWrXirmIT -----END CERTIFICATE-----Generated at Tue Jul 21 20:16:44 2026 by rpki-client