$ rpki-client -vvf rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/4EF1DE0E822A11EDB2081A49C4F9AE02.roa File: 4EF1DE0E822A11EDB2081A49C4F9AE02.roa (raw, json) Hash identifier: zgSxrM3JDm57m2vX62mOv6kyES6AEYoM+0Yal9gdLNY= Subject key identifier: EE:1C:F8:86:DA:B3:6C:43:D3:67:E5:1E:B3:B6:49:F5:E1:70:E2:E4 Certificate issuer: /CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Certificate serial: 0E86 Authority key identifier: 1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/4EF1DE0E822A11EDB2081A49C4F9AE02.roa Signing time: Mon 06 Jul 2026 19:18:45 +0000 ROA not before: Mon 06 Jul 2026 19:18:45 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 134176 IP address blocks: 43.243.170.0/24 maxlen: 24 43.243.171.0/24 maxlen: 24 103.38.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 18:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3718 (0xe86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91568F6, serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Validity Not Before: Jul 6 19:18:45 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a4bff94-c761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4b:97:be:1c:0e:91:88:e3:03:ec:a6:b8:22: f9:17:4e:ae:c8:91:38:09:84:91:a0:a7:8c:e4:0d: b0:1d:8f:af:35:b7:2f:bb:3a:c6:08:dc:3d:ca:6f: 68:e3:f2:a0:b0:98:d2:e1:de:aa:25:c7:99:1b:0e: ee:92:52:ea:90:a7:21:54:a8:03:4a:8b:ed:b9:b7: 67:8d:da:78:9b:88:35:7d:16:a3:52:bf:a1:a1:02: c6:a2:56:28:90:7c:69:f2:f8:dc:8b:bb:e5:cb:49: 48:93:55:bf:5e:24:ae:a6:17:4c:55:77:f2:27:9e: cc:a4:c8:ec:ab:ae:7c:d3:00:2b:98:12:8c:78:3b: f3:c1:17:1a:56:d7:39:b6:b5:b0:5a:20:fd:e5:83: 03:29:0d:b0:33:b6:f8:9e:27:09:16:23:ab:8e:64: 55:13:21:a3:57:10:26:f8:fa:2e:1f:63:23:85:e6: d2:cf:a4:44:08:b9:03:55:ab:2e:c1:fb:d6:c8:2b: ce:f5:8d:af:04:5b:b1:be:70:ca:84:d5:31:4b:ed: 6e:2e:fe:9e:4e:fc:90:d7:51:50:47:65:99:03:a4: 7e:41:91:90:51:b1:a4:54:30:cb:62:a0:99:fa:17: 23:03:fd:b3:eb:83:70:9f:18:e1:f2:f2:ff:bf:cd: a0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:1C:F8:86:DA:B3:6C:43:D3:67:E5:1E:B3:B6:49:F5:E1:70:E2:E4 X509v3 Authority Key Identifier: keyid:1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/4EF1DE0E822A11EDB2081A49C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.243.170.0/23 103.38.254.0/24 Signature Algorithm: sha256WithRSAEncryption a2:ab:d2:60:8a:e7:7d:1f:8d:36:53:9c:a4:5f:ce:ba:84:b8: 2c:fa:7e:f3:51:56:b1:39:15:88:11:85:6c:e6:0a:36:80:c2: a8:ad:bf:6a:c9:57:0d:ff:02:c2:ac:69:04:b6:5b:b3:93:35: 57:31:f2:2c:08:82:ee:cd:0a:cb:50:07:ae:f4:37:33:f5:20: ae:e0:fa:ff:73:8e:d3:6a:9c:43:c9:9d:54:28:e2:d2:5d:6d: 6c:39:bb:bb:89:61:77:8f:04:5c:47:98:bc:91:a1:e0:7d:15: c9:a7:95:a1:81:ab:ca:8c:a5:78:71:cf:5d:d8:c0:f9:43:31: 4a:18:b8:58:91:01:7e:02:b0:f2:19:df:88:ca:92:32:10:5e: bf:0c:c7:17:ad:4d:a7:00:f4:93:ce:73:1d:a2:c5:08:4d:4d: bb:43:d1:66:0f:9c:19:20:1c:53:56:8b:c3:3c:d7:9f:f7:6a: 6d:7b:d9:d5:3c:6a:3a:14:08:ba:93:2a:f7:3a:cb:c8:f9:36: af:7f:0a:c4:e4:d4:d2:c1:0e:4d:be:43:47:4e:ad:84:59:b9: 5d:01:91:47:4c:c8:40:a1:08:86:8e:f0:73:7e:c1:7c:dd:ca: f9:76:73:e4:07:23:ee:90:7a:a8:66:92:92:1d:cf:54:a6:84: 35:4e:61:cd -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICDoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY4RjYxMTAvBgNVBAUTKDFFMzI5RTk4RjY3NjkyRTlCNTc2MDIzQTJGQkM1NTdE NTdERDU1NkMwHhcNMjYwNzA2MTkxODQ1WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZmY5NC1jNzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmkuXvhwOkYjjA+ymuCL5F06uyJE4CYSRoKeM5A2wHY+vNbcvuzrGCNw9ym9o 4/KgsJjS4d6qJceZGw7uklLqkKchVKgDSovtubdnjdp4m4g1fRajUr+hoQLGolYo kHxp8vjci7vly0lIk1W/XiSuphdMVXfyJ57MpMjsq6580wArmBKMeDvzwRcaVtc5 trWwWiD95YMDKQ2wM7b4nicJFiOrjmRVEyGjVxAm+PouH2MjhebSz6RECLkDVasu wfvWyCvO9Y2vBFuxvnDKhNUxS+1uLv6eTvyQ11FQR2WZA6R+QZGQUbGkVDDLYqCZ +hcjA/2z64Nwnxjh8vL/v82gnwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFO4c+Iba s2xD02flHrO2SfXhcOLkMB8GA1UdIwQYMBaAFB4ynpj2dpLptXYCOi+8VX1X3VVs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjhGNi8zN0QwM0RGNkNF MjgxMUU5QTZCNkMxN0JDNEY5QUUwMi9IaktlbVBaMmt1bTFkZ0k2TDd4VmZWZmRW V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hqS2VtUFoya3VtMWRnSTZMN3hWZlZmZFZXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTY4RjYvMzdEMDNERjZDRTI4MTFFOUE2QjZDMTdCQzRGOUFFMDIvNEVGMURFMEU4 MjJBMTFFREIyMDgxQTQ5QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBK/OqAwQAZyb+MA0GCSqGSIb3DQEBCwUAA4IBAQCiq9Jgiud9H402 U5ykX866hLgs+n7zUVaxORWIEYVs5go2gMKorb9qyVcN/wLCrGkEtluzkzVXMfIs CILuzQrLUAeu9Dcz9SCu4Pr/c47TapxDyZ1UKOLSXW1sObu7iWF3jwRcR5i8kaHg fRXJp5WhgavKjKV4cc9d2MD5QzFKGLhYkQF+ArDyGd+IypIyEF6/DMcXrU2nAPST znMdosUITU27Q9FmD5wZIBxTVovDPNef92pte9nVPGo6FAi6kyr3OsvI+TavfwrE 5NTSwQ5NvkNHTq2EWbldAZFHTMhAoQiGjvBzfsF83cr5dnPkByPukHqoZpKSHc9U poQ1TmHN -----END CERTIFICATE-----Generated at Tue Jul 21 13:53:01 2026 by rpki-client