$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/A59E2538BA0211F0892F7E0BC4F9AE02.roa File: A59E2538BA0211F0892F7E0BC4F9AE02.roa (raw, json) Hash identifier: Hl3Xyx26gpFtLsuBQgWv+ANMc2eZUQOg0WhN0n2+tFM= Subject key identifier: 05:35:A6:7E:53:10:84:37:E8:9D:9A:84:C7:62:26:D5:76:99:5A:B3 Certificate issuer: /CN=A91B2A6F/serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1 Certificate serial: 0B1D Authority key identifier: 8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/A59E2538BA0211F0892F7E0BC4F9AE02.roa Signing time: Sun 02 Aug 2026 19:39:24 +0000 ROA not before: Sun 02 Aug 2026 19:39:23 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 4764 IP address blocks: 43.247.64.0/22 maxlen: 22 103.26.172.0/22 maxlen: 22 2401:f80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 19:12:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2845 (0xb1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2A6F, serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1 Validity Not Before: Aug 2 19:39:23 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a6f9ceb-0c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:51:3a:58:f4:0c:17:3c:87:bc:2b:71:fc:68: 80:2c:63:83:b0:e7:88:d2:29:2a:85:e5:4b:35:e0: a0:c1:6c:67:86:ba:6b:f2:5f:4b:52:af:84:be:98: 35:fb:30:c4:19:49:ed:96:be:ad:eb:13:75:fe:fe: ea:d9:f7:d4:03:09:5c:93:84:a1:5b:7e:76:d0:f2: b5:c4:18:03:8e:19:92:d9:81:a8:28:b8:88:ca:ef: 24:13:75:62:f5:a9:82:2b:4a:f2:ce:05:63:36:dc: 73:3e:5c:2d:4e:96:86:09:d0:52:39:75:80:f3:64: 43:29:31:a2:24:f7:e0:06:cf:5d:5b:e6:00:d9:3c: f2:df:2c:18:43:6e:1d:db:f7:38:45:9b:4b:7a:0a: 7f:cf:1b:af:02:5d:15:18:cd:e7:42:9c:53:d6:22: 40:36:41:39:0d:ac:0e:33:54:97:08:be:f9:c1:de: 1a:94:9f:90:7f:83:fd:2f:67:53:dc:83:fd:63:b3: 38:9d:20:40:91:9f:3c:04:ac:59:98:1b:ca:fa:f8: b1:ff:3f:86:eb:ae:6f:09:1a:fc:99:54:f8:f1:e1: 1c:70:64:e6:4b:b0:c2:95:f4:b6:cc:5b:dd:8a:c5: a7:f4:c6:04:99:5f:42:84:d8:83:19:81:bc:b5:73: f6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:35:A6:7E:53:10:84:37:E8:9D:9A:84:C7:62:26:D5:76:99:5A:B3 X509v3 Authority Key Identifier: keyid:8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/A59E2538BA0211F0892F7E0BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.247.64.0/22 103.26.172.0/22 IPv6: 2401:f80::/32 Signature Algorithm: sha256WithRSAEncryption 74:9b:01:ea:b9:64:98:29:22:21:25:22:14:5e:43:fa:58:f1: 36:63:dc:32:23:d5:52:52:2d:72:e5:51:b5:a0:49:87:3a:d2: e2:dc:9c:5c:a0:58:c3:e7:b2:36:63:f1:d9:d5:7d:af:17:da: 2d:99:7f:9c:77:eb:13:8b:de:62:3c:a6:6b:80:c3:cd:4c:8c: c0:0c:2e:3b:d2:9d:66:67:2b:66:dd:9d:ce:a8:24:da:7e:55: eb:3e:94:b8:50:1b:c9:66:b9:09:cb:78:43:3c:09:17:7a:e3: a3:6b:fe:7c:d0:62:6a:f0:3e:72:38:5e:7c:36:6b:6f:b8:e3: 72:2f:57:e4:be:43:05:9f:d1:8b:2b:a4:84:28:9a:3b:b5:88: 8d:c3:cb:98:e3:60:f9:ea:6e:50:de:73:69:be:03:6a:88:63: 86:f9:e9:06:1f:cc:4d:2e:ca:04:94:29:c9:48:d8:c8:ad:5f: e0:48:0a:ee:10:b7:9a:bc:b0:c8:0a:96:aa:46:39:bf:ea:5e: 37:db:cd:bc:a6:50:7f:81:23:22:38:4a:e6:68:64:68:30:69: 0b:dd:96:eb:c4:d7:af:5b:ba:ed:27:2e:03:60:fa:e0:e0:10: 91:5c:4b:d4:19:3c:f7:76:5b:46:ee:43:2a:58:78:e0:6a:90: 3f:85:9c:c9 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJBNkYxMTAvBgNVBAUTKDhDNUE4OTk3RkNBNUJGMDI3MEVBRjg2RUU4QzBDQjY1 NTFBQjk3RDEwHhcNMjYwODAyMTkzOTIzWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTZmOWNlYi0wYzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA11E6WPQMFzyHvCtx/GiALGODsOeI0ikqheVLNeCgwWxnhrpr8l9LUq+Evpg1 +zDEGUntlr6t6xN1/v7q2ffUAwlck4ShW3520PK1xBgDjhmS2YGoKLiIyu8kE3Vi 9amCK0ryzgVjNtxzPlwtTpaGCdBSOXWA82RDKTGiJPfgBs9dW+YA2Tzy3ywYQ24d 2/c4RZtLegp/zxuvAl0VGM3nQpxT1iJANkE5DawOM1SXCL75wd4alJ+Qf4P9L2dT 3IP9Y7M4nSBAkZ88BKxZmBvK+vix/z+G665vCRr8mVT48eEccGTmS7DClfS2zFvd isWn9MYEmV9ChNiDGYG8tXP2CwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFAU1pn5T EIQ36J2ahMdiJtV2mVqzMB8GA1UdIwQYMBaAFIxaiZf8pb8CcOr4bujAy2VRq5fR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkE2Ri9DQURGRjJGRTZF MzYxMUVBQTEwRUZGNzZDNEY5QUUwMi9qRnFKbF95bHZ3Snc2dmh1Nk1ETFpWR3Js OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pGcUpsX3lsdndKdzZ2aHU2TURMWlZHcmw5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjJBNkYvQ0FERkYyRkU2RTM2MTFFQUExMEVGRjc2QzRGOUFFMDIvQTU5RTI1MzhC QTAyMTFGMDg5MkY3RTBCQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCK/dAAwQCZxqsMA0EAgACMAcDBQAkAQ+AMA0GCSqGSIb3DQEBCwUA A4IBAQB0mwHquWSYKSIhJSIUXkP6WPE2Y9wyI9VSUi1y5VG1oEmHOtLi3JxcoFjD 57I2Y/HZ1X2vF9otmX+cd+sTi95iPKZrgMPNTIzADC470p1mZytm3Z3OqCTaflXr PpS4UBvJZrkJy3hDPAkXeuOja/580GJq8D5yOF58NmtvuONyL1fkvkMFn9GLK6SE KJo7tYiNw8uY42D56m5Q3nNpvgNqiGOG+ekGH8xNLsoElCnJSNjIrV/gSAruELea vLDICpaqRjm/6l432828plB/gSMiOErmaGRoMGkL3ZbrxNevW7rtJy4DYPrg4BCR XEvUGTz3dltG7kMqWHjgapA/hZzJ -----END CERTIFICATE-----Generated at Sat Sep 5 09:00:55 2026 by rpki-client