$ rpki-client -vvvf rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/5FB89FD4DA8511EEBD7AF854C4F9AE02.roa File: 5FB89FD4DA8511EEBD7AF854C4F9AE02.roa (raw, json) Hash identifier: SoVh7KeNIhUR76ABihEDV9citeXRv1PsGv6J/APPyfM= Subject key identifier: 5C:56:05:6B:D5:2F:48:C0:A5:D0:18:E8:AB:62:AA:A0:E3:0D:69:F3 Certificate issuer: /CN=A91477C3/serialNumber=B20E9FE64AF3CE8C982725D012A142927263CEF0 Certificate serial: 0911 Authority key identifier: B2:0E:9F:E6:4A:F3:CE:8C:98:27:25:D0:12:A1:42:92:72:63:CE:F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/5FB89FD4DA8511EEBD7AF854C4F9AE02.roa Signing time: Wed 30 Sep 2026 20:40:28 +0000 ROA not before: Wed 30 Sep 2026 20:40:28 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 45270 IP address blocks: 43.252.0.0/22 maxlen: 22 101.234.192.0/24 maxlen: 24 101.234.193.0/24 maxlen: 24 101.234.194.0/24 maxlen: 24 101.234.195.0/24 maxlen: 24 101.234.196.0/24 maxlen: 24 101.234.200.0/24 maxlen: 24 101.234.201.0/24 maxlen: 24 101.234.202.0/24 maxlen: 24 103.233.16.0/22 maxlen: 22 223.25.228.0/23 maxlen: 23 223.25.231.0/24 maxlen: 24 2407:ab00::/48 maxlen: 48 2407:ab00:1::/48 maxlen: 48 2407:ab00:2::/48 maxlen: 48 2407:ab00:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.crl rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 20:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2321 (0x911) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91477C3, serialNumber=B20E9FE64AF3CE8C982725D012A142927263CEF0 Validity Not Before: Sep 30 20:40:28 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abd73bb-c51c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f3:9e:d0:59:00:db:02:47:2b:12:f3:e8:0f: 0c:b6:c8:52:14:bb:6c:77:fa:33:18:f0:62:b3:e2: 70:0a:38:4d:98:e8:f5:c9:52:ab:1f:59:68:02:95: 4e:6e:d4:0c:e8:15:db:14:7b:8e:55:73:7a:09:59: 67:b2:9c:1e:33:97:f6:f5:36:99:a2:c8:5e:86:c7: 74:67:6f:f7:f4:20:ee:2e:2f:1e:52:05:d6:2e:ac: b5:6e:de:06:a6:68:f9:f8:e6:c9:41:bb:da:9f:77: bb:ff:b7:2d:0a:1f:d9:01:b4:8a:0e:e0:cb:d5:0c: fe:79:81:ec:1c:a0:dd:ba:98:f9:09:9a:a8:35:57: 96:0f:c8:b7:df:d2:2f:1f:45:e3:41:dc:12:92:e3: 5c:21:0e:d8:12:1e:f3:61:95:85:ea:e6:d7:b7:5d: 83:e0:c1:7b:be:ef:49:9b:7a:ab:f2:8f:46:bf:4f: 13:fb:98:5b:77:88:e8:c1:04:6e:7b:02:83:06:42: 04:cb:43:3d:ae:9e:e0:00:ae:99:10:4a:54:ba:7e: fd:d7:3f:ff:72:bb:90:7e:1b:30:d0:fe:3d:75:7f: f5:59:f8:df:81:9e:cf:86:70:79:d0:e2:26:54:4f: a4:4c:27:8b:a4:61:01:35:03:b3:3d:41:aa:d3:3e: af:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:56:05:6B:D5:2F:48:C0:A5:D0:18:E8:AB:62:AA:A0:E3:0D:69:F3 X509v3 Authority Key Identifier: keyid:B2:0E:9F:E6:4A:F3:CE:8C:98:27:25:D0:12:A1:42:92:72:63:CE:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/5FB89FD4DA8511EEBD7AF854C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.252.0.0/22 101.234.192.0-101.234.196.255 101.234.200.0-101.234.202.255 103.233.16.0/22 223.25.228.0/23 223.25.231.0/24 IPv6: 2407:ab00::/46 Signature Algorithm: sha256WithRSAEncryption a1:b6:11:3e:00:c8:1f:b8:e7:34:2f:1e:b5:c2:31:e4:a6:c8: 26:76:be:ad:cd:cf:0b:cc:68:77:1d:f6:66:98:0d:9d:0e:95: 40:7b:f9:b0:a1:80:2c:db:27:08:04:b3:bf:b6:fa:ab:ec:86: 73:36:d4:9b:01:2b:7a:d6:6e:d1:a3:c5:5c:00:1c:18:40:62: 00:a7:75:ad:31:9f:a7:89:16:9c:03:03:ef:49:89:64:6b:5b: 5e:a9:ea:35:01:f1:e7:95:80:9c:a4:e1:a9:e0:3e:05:73:1e: 09:63:eb:8e:8e:56:95:15:02:5e:30:ba:25:6d:d0:7d:2c:46: f8:1f:7d:31:17:38:0e:f6:d7:59:ea:fc:ac:3f:ab:9e:10:25: 4e:3f:7f:e7:8e:d7:db:34:02:d6:3a:9c:33:18:75:4a:62:b2: ba:b0:09:30:7d:22:92:ba:5e:eb:84:49:d7:86:56:17:cb:95: 12:cf:31:ec:76:59:26:8a:38:3f:41:ef:71:6b:7d:8b:95:c3: ae:a2:14:9c:f5:16:ec:5a:ec:b5:d0:fc:30:25:bb:cb:53:36: f7:a8:23:51:9f:01:eb:52:d8:f5:b1:46:83:ea:e5:ca:65:b3: 1d:66:28:6e:f2:60:63:c8:9f:81:e7:c1:fd:9e:46:f9:57:66: 33:73:f3:9c -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgICCREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc3QzMxMTAvBgNVBAUTKEIyMEU5RkU2NEFGM0NFOEM5ODI3MjVEMDEyQTE0Mjky NzI2M0NFRjAwHhcNMjYwOTMwMjA0MDI4WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkNzNiYi1jNTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPOe0FkA2wJHKxLz6A8MtshSFLtsd/ozGPBis+JwCjhNmOj1yVKrH1loApVO btQM6BXbFHuOVXN6CVlnspweM5f29TaZoshehsd0Z2/39CDuLi8eUgXWLqy1bt4G pmj5+ObJQbvan3e7/7ctCh/ZAbSKDuDL1Qz+eYHsHKDdupj5CZqoNVeWD8i339Iv H0XjQdwSkuNcIQ7YEh7zYZWF6ubXt12D4MF7vu9Jm3qr8o9Gv08T+5hbd4jowQRu ewKDBkIEy0M9rp7gAK6ZEEpUun791z//cruQfhsw0P49dX/1WfjfgZ7PhnB50OIm VE+kTCeLpGEBNQOzPUGq0z6vqQIDAQABo4ICnzCCApswHQYDVR0OBBYEFFxWBWvV L0jApdAY6KtiqqDjDWnzMB8GA1UdIwQYMBaAFLIOn+ZK886MmCcl0BKhQpJyY87w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzdDMy81REE0OEMyMEU3 NkUxMUVBODE0MkE4MzlDNEY5QUUwMi9zZzZmNWtyenpveVlKeVhRRXFGQ2tuSmp6 dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NnNmY1a3J6em95WUp5WFFFcUZDa25Kanp2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc3QzMvNURBNDhDMjBFNzZFMTFFQTgxNDJBODM5QzRGOUFFMDIvNUZCODlGRDRE QTg1MTFFRUJEN0FGODU0QzRGOUFFMDIucm9hMF4GCCsGAQUFBwEHAQH/BE8wTTA6 BAIAATA0AwQCK/wAMAwDBAZl6sADBABl6sQwDAMEA2XqyAMEAGXqygMEAmfpEAME Ad8Z5AMEAN8Z5zAPBAIAAjAJAwcCJAerAAAAMA0GCSqGSIb3DQEBCwUAA4IBAQCh thE+AMgfuOc0Lx61wjHkpsgmdr6tzc8LzGh3HfZmmA2dDpVAe/mwoYAs2ycIBLO/ tvqr7IZzNtSbASt61m7Ro8VcABwYQGIAp3WtMZ+niRacAwPvSYlka1teqeo1AfHn lYCcpOGp4D4Fcx4JY+uOjlaVFQJeMLolbdB9LEb4H30xFzgO9tdZ6vysP6ueECVO P3/njtfbNALWOpwzGHVKYrK6sAkwfSKSul7rhEnXhlYXy5USzzHsdlkmijg/Qe9x a32LlcOuohSc9RbsWuy10PwwJbvLUzb3qCNRnwHrUtj1sUaD6uXKZbMdZihu8mBj yJ+B58H9nkb5V2Yzc/Oc -----END CERTIFICATE-----Generated at Tue Oct 6 01:25:46 2026 by rpki-client