$ rpki-client -vvf rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/F8B24A3C127911F09BCB8B7AC4F9AE02.roa File: F8B24A3C127911F09BCB8B7AC4F9AE02.roa (raw, json) Hash identifier: 4DtJGQsQOtWQEaIVm9e3mKJdmYWMS51213hhqRFkVZg= Subject key identifier: D4:32:6C:73:22:64:2A:FD:61:0E:CD:D6:63:F5:77:F9:03:1A:F5:BE Certificate issuer: /CN=A91348C9/serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB Certificate serial: 019F Authority key identifier: 0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/F8B24A3C127911F09BCB8B7AC4F9AE02.roa Signing time: Mon 02 Mar 2026 12:39:07 +0000 ROA not before: Thu 01 May 2025 04:41:27 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 10111 IP address blocks: 43.239.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 03:34:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91348C9, serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB Validity Not Before: May 1 04:41:27 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a584eb-d8e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3b:75:9a:f6:d0:81:22:3d:c7:9c:bc:70:d1: 56:3c:6f:ab:77:c2:c5:43:d9:ff:bd:65:66:06:34: 0b:3d:9c:74:78:d8:d4:95:61:d3:b4:3d:4b:6c:2e: 5f:30:02:80:86:bc:6c:5d:22:66:6d:1b:11:33:19: 52:1e:b8:41:32:13:ad:ec:bb:33:95:fd:e4:ad:31: 4a:fe:49:0f:2b:2a:ad:4c:91:e5:ec:93:d8:fd:d7: fe:67:27:71:ad:21:99:46:50:eb:ff:7b:e3:87:bb: 9f:3a:ae:7a:3c:f2:8d:99:d6:ea:1e:28:f7:1d:bd: de:46:61:36:d2:33:1b:f4:f6:c7:5c:36:0e:1a:05: 5b:46:68:2b:7a:d5:7d:86:60:ef:0c:93:e5:29:b1: 95:8a:0d:13:7c:d4:fb:82:ff:6a:01:70:a4:3a:7f: 60:7f:9d:cb:d7:3b:4d:cf:a2:c2:66:a9:0e:8e:89: dc:d5:1d:46:eb:49:fa:21:f1:bf:67:b3:bf:fa:13: 09:63:83:76:58:15:e6:32:2b:cf:3e:df:fb:3e:23: 0e:fb:dc:19:e0:06:8b:25:99:45:e1:77:75:73:0f: 28:3b:36:f6:76:cc:1d:a0:eb:c1:1b:2d:0f:cf:e6: 43:79:5e:b8:ed:5d:56:09:90:56:0d:c0:71:72:6f: ee:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:32:6C:73:22:64:2A:FD:61:0E:CD:D6:63:F5:77:F9:03:1A:F5:BE X509v3 Authority Key Identifier: keyid:0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/F8B24A3C127911F09BCB8B7AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.239.95.0/24 Signature Algorithm: sha256WithRSAEncryption 11:2c:40:ca:12:86:7c:fe:16:c2:19:48:a9:c0:eb:e2:8f:d6: 1a:bb:19:69:ba:00:53:c9:f2:44:05:55:c0:63:f0:31:a5:16: 33:1d:34:9a:42:46:94:ac:74:36:c1:4a:f0:3d:45:5e:49:91: af:79:60:85:df:6b:8c:8a:28:c4:d5:40:22:a6:36:aa:0a:14: 9b:e6:e9:4b:ea:b9:ec:8e:1b:ad:0c:6b:00:01:0c:4c:88:49: 57:15:b8:e6:c3:73:40:6c:39:ad:ae:ac:af:fe:86:fe:83:d4: e0:61:9f:39:f6:0f:59:be:62:8d:55:e7:74:23:44:f8:d6:6b: 42:79:aa:84:f9:73:13:3e:f5:fe:f1:98:5f:31:0d:1f:11:94: 79:6d:b8:93:66:62:73:d9:79:84:0c:11:f6:d1:71:3d:f6:9d: 4e:28:34:04:1c:51:0c:62:a2:91:ce:42:89:19:92:f4:ad:33: a5:58:67:9e:79:1e:12:be:30:37:54:f0:5a:27:89:15:99:c4: 3d:0a:68:d8:d3:1d:17:eb:eb:b3:c0:23:db:5a:6d:e6:50:f4: 10:ec:ab:2a:45:b3:48:74:48:d9:bb:d2:0f:6c:c5:b4:75:42: 97:9f:c4:2f:9d:88:73:48:89:cd:4d:44:07:34:70:b6:6b:7a: 5f:e7:f0:0d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ4QzkxMTAvBgNVBAUTKDBDNzYyQjJDOTAyNEIzNEM5ODg0ODJGMUQ3MUQ3NDlB RTdEQzRBRUIwHhcNMjUwNTAxMDQ0MTI3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1ODRlYi1kOGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzt1mvbQgSI9x5y8cNFWPG+rd8LFQ9n/vWVmBjQLPZx0eNjUlWHTtD1LbC5f MAKAhrxsXSJmbRsRMxlSHrhBMhOt7Lszlf3krTFK/kkPKyqtTJHl7JPY/df+Zydx rSGZRlDr/3vjh7ufOq56PPKNmdbqHij3Hb3eRmE20jMb9PbHXDYOGgVbRmgretV9 hmDvDJPlKbGVig0TfNT7gv9qAXCkOn9gf53L1ztNz6LCZqkOjonc1R1G60n6IfG/ Z7O/+hMJY4N2WBXmMivPPt/7PiMO+9wZ4AaLJZlF4Xd1cw8oOzb2dswdoOvBGy0P z+ZDeV647V1WCZBWDcBxcm/ujQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNQybHMi ZCr9YQ7N1mP1d/kDGvW+MB8GA1UdIwQYMBaAFAx2KyyQJLNMmISC8dcddJrn3Err MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDhDOS9DRkMxMEUwQUNF OTcxMUVFOTIzRjA0NzBDNEY5QUUwMi9ESFlyTEpBa3MweVloSUx4MXgxMG11ZmNT dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RIWXJMSkFrczB5WWhJTHgxeDEwbXVmY1N1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzQ4QzkvQ0ZDMTBFMEFDRTk3MTFFRTkyM0YwNDcwQzRGOUFFMDIvRjhCMjRBM0Mx Mjc5MTFGMDlCQ0I4QjdBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK+9fMA0GCSqGSIb3DQEBCwUAA4IBAQARLEDKEoZ8/hbCGUipwOvi j9YauxlpugBTyfJEBVXAY/AxpRYzHTSaQkaUrHQ2wUrwPUVeSZGveWCF32uMiijE 1UAipjaqChSb5ulL6rnsjhutDGsAAQxMiElXFbjmw3NAbDmtrqyv/ob+g9TgYZ85 9g9ZvmKNVed0I0T41mtCeaqE+XMTPvX+8ZhfMQ0fEZR5bbiTZmJz2XmEDBH20XE9 9p1OKDQEHFEMYqKRzkKJGZL0rTOlWGeeeR4SvjA3VPBaJ4kVmcQ9CmjY0x0X6+uz wCPbWm3mUPQQ7KsqRbNIdEjZu9IPbMW0dUKXn8QvnYhzSInNTUQHNHC2a3pf5/AN -----END CERTIFICATE-----Generated at Fri Mar 13 09:45:25 2026 by rpki-client