$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/5A7BB752BD2F11EBB84EE532C4F9AE02.roa File: 5A7BB752BD2F11EBB84EE532C4F9AE02.roa (raw, json) Hash identifier: 24VUnNW+IwALD6fth9CM1bbdRgcY8qK4/vGIkj8WWe4= Subject key identifier: AF:98:9E:1F:40:6F:56:30:2E:52:EA:BE:DB:0C:5C:5D:17:03:A8:DA Certificate issuer: /CN=A91EA958/serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1 Certificate serial: 35AA Authority key identifier: FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/5A7BB752BD2F11EBB84EE532C4F9AE02.roa Signing time: Thu 16 Jul 2026 15:13:19 +0000 ROA not before: Thu 16 Jul 2026 15:13:19 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 59318 IP address blocks: 43.245.200.0/23 maxlen: 23 43.245.200.0/24 maxlen: 24 43.245.201.0/24 maxlen: 24 180.178.124.0/23 maxlen: 23 180.178.124.0/24 maxlen: 24 180.178.125.0/24 maxlen: 24 2404:b300::/48 maxlen: 48 2404:b300:10::/48 maxlen: 48 2404:b300:23::/48 maxlen: 48 2404:b300:31::/48 maxlen: 48 2404:b300:32::/48 maxlen: 48 2404:b300:33::/48 maxlen: 48 2404:b300:105::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:04:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13738 (0x35aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA958, serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1 Validity Not Before: Jul 16 15:13:19 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a58f50e-631c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1c:50:6b:45:f2:50:7a:77:80:6e:95:1c:60: 56:02:b1:51:6c:75:75:75:35:62:0d:e6:d4:e0:3f: 76:20:15:7d:30:3a:c9:14:90:6a:66:96:0a:5f:69: 22:a2:60:a0:78:03:d9:90:17:0a:27:1c:48:94:90: c7:44:fe:80:12:13:8e:ec:fb:84:6a:fc:28:ba:a6: 1b:66:30:f9:4f:5a:84:f5:29:43:40:0f:7e:93:eb: f1:4f:99:c2:cd:ac:82:8b:47:71:2d:96:2b:7b:e1: d6:66:1d:6f:04:65:11:a9:53:ea:af:7c:9a:e7:be: 12:29:b2:ed:76:4e:2e:f2:b9:b2:8a:da:23:a8:64: ce:22:52:d8:1b:ea:1f:c1:34:c0:a5:e7:75:b3:a9: c6:fd:ca:18:8c:7c:da:bb:9a:77:59:3b:8b:72:2a: 5b:39:59:47:f1:f8:32:88:42:89:b3:df:05:c8:b4: 9e:18:38:b6:a2:ea:9a:dd:02:c6:36:ee:fd:b0:6a: 56:e9:9f:b1:ab:6f:13:36:15:7e:1b:c2:29:cc:6f: 4a:b1:5d:af:e6:64:71:ec:2b:02:42:18:99:7e:c0: 6c:33:6d:02:45:88:c5:2a:de:f7:68:4c:5e:17:dc: ad:b3:7e:64:bc:b1:b2:c5:71:a5:79:56:a4:fe:2b: 76:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:98:9E:1F:40:6F:56:30:2E:52:EA:BE:DB:0C:5C:5D:17:03:A8:DA X509v3 Authority Key Identifier: keyid:FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/5A7BB752BD2F11EBB84EE532C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.245.200.0/23 180.178.124.0/23 IPv6: 2404:b300::/48 2404:b300:10::/48 2404:b300:23::/48 2404:b300:31::-2404:b300:33:ffff:ffff:ffff:ffff:ffff 2404:b300:105::/48 Signature Algorithm: sha256WithRSAEncryption 46:ac:db:b8:b0:81:3b:ff:ac:ad:0f:cf:b1:52:be:2b:09:07: 9e:c2:d3:24:28:4a:5d:fb:74:90:76:cc:c4:c7:d6:e9:27:a8: 3a:94:ba:96:62:79:ad:f1:3d:4d:9f:44:72:3d:5e:d3:74:82: 3d:ab:aa:fd:6a:6a:fc:3f:7b:84:6e:64:55:d6:4a:a8:ff:2e: 64:2e:11:50:37:04:1d:6e:33:01:c4:4b:ac:a9:af:0b:4e:87: 81:e5:db:13:27:68:75:ef:b3:88:3e:6b:fa:33:e6:81:44:4d: 3f:d6:e5:ff:b0:dd:0b:a8:9b:04:b0:f4:55:24:a1:37:aa:8b: f7:9e:9b:79:56:fa:a8:13:7a:32:35:5e:90:22:c2:51:4e:23: cd:b8:b9:1d:17:f7:77:82:31:4b:09:00:c9:e4:db:75:37:ab: 5f:4f:1e:d1:f3:9c:41:b6:60:8b:08:77:0a:f4:91:49:c6:7d: a6:e5:f1:6e:7c:e8:58:52:0f:a8:5e:4b:aa:36:50:f4:01:fe: 9d:20:a4:86:4d:96:23:04:aa:85:be:cf:3c:7a:af:94:bb:79: f2:cd:bc:2d:d1:30:7f:a6:94:82:ff:70:a2:2c:54:eb:6f:19: b1:5c:9c:ea:9a:79:fc:4e:a9:fb:a4:2a:c9:2e:51:41:e7:71: 08:85:de:d6 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICNaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NTgxMTAvBgNVBAUTKEZEMTYwNzE4NjM3M0U4MUY0NEQxMzdCMkEwRTk2OTU3 RTYyQUI4QTEwHhcNMjYwNzE2MTUxMzE5WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTU4ZjUwZS02MzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnhxQa0XyUHp3gG6VHGBWArFRbHV1dTViDebU4D92IBV9MDrJFJBqZpYKX2ki omCgeAPZkBcKJxxIlJDHRP6AEhOO7PuEavwouqYbZjD5T1qE9SlDQA9+k+vxT5nC zayCi0dxLZYre+HWZh1vBGURqVPqr3ya574SKbLtdk4u8rmyitojqGTOIlLYG+of wTTAped1s6nG/coYjHzau5p3WTuLcipbOVlH8fgyiEKJs98FyLSeGDi2ouqa3QLG Nu79sGpW6Z+xq28TNhV+G8IpzG9KsV2v5mRx7CsCQhiZfsBsM20CRYjFKt73aExe F9yts35kvLGyxXGleVak/it25QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFK+Ynh9A b1YwLlLqvtsMXF0XA6jaMB8GA1UdIwQYMBaAFP0WBxhjc+gfRNE3sqDpaVfmKrih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC81QUUxOTdGNDFE OUYxMUUyQkNCRkY3OEYwOEIwMkNEMi9fUllIR0dOejZCOUUwVGV5b09scFYtWXF1 S0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19SWUhHR056NkI5RTBUZXlvT2xwVi1ZcXVLRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUE5NTgvNUFFMTk3RjQxRDlGMTFFMkJDQkZGNzhGMDhCMDJDRDIvNUE3QkI3NTJC RDJGMTFFQkI4NEVFNTMyQzRGOUFFMDIucm9hMGUGCCsGAQUFBwEHAQH/BFYwVDAS BAIAATAMAwQBK/XIAwQBtLJ8MD4EAgACMDgDBwAkBLMAAAADBwAkBLMAABADBwAk BLMAACMwEgMHACQEswAAMQMHAiQEswAAMAMHACQEswABBTANBgkqhkiG9w0BAQsF AAOCAQEARqzbuLCBO/+srQ/PsVK+KwkHnsLTJChKXft0kHbMxMfW6SeoOpS6lmJ5 rfE9TZ9Ecj1e03SCPauq/Wpq/D97hG5kVdZKqP8uZC4RUDcEHW4zAcRLrKmvC06H geXbEydode+ziD5r+jPmgURNP9bl/7DdC6ibBLD0VSShN6qL956beVb6qBN6MjVe kCLCUU4jzbi5HRf3d4IxSwkAyeTbdTerX08e0fOcQbZgiwh3CvSRScZ9puXxbnzo WFIPqF5LqjZQ9AH+nSCkhk2WIwSqhb7PPHqvlLt58s28LdEwf6aUgv9woixU628Z sVyc6pp5/E6p+6QqyS5RQedxCIXe1g== -----END CERTIFICATE-----Generated at Tue Jul 21 23:51:58 2026 by rpki-client