$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/550BDEE486FD11F194514C90ABEE528E.roa File: 550BDEE486FD11F194514C90ABEE528E.roa (raw, json) Hash identifier: cROEO2KeJD8VNn1ja3b2H4yPhR2dVDekjJOaLUHdtRw= Subject key identifier: A2:C8:B7:AC:3A:BD:E6:EA:1C:35:F0:5A:87:A9:A7:F6:1C:25:08:75 Certificate issuer: /CN=A91A1EE0/serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0 Certificate serial: 35E8 Authority key identifier: 86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/550BDEE486FD11F194514C90ABEE528E.roa Signing time: Thu 10 Sep 2026 15:16:27 +0000 ROA not before: Thu 10 Sep 2026 15:16:27 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 24122 IP address blocks: 43.243.204.0/23 maxlen: 23 43.243.204.0/24 maxlen: 24 43.243.205.0/24 maxlen: 24 43.243.206.0/23 maxlen: 23 43.243.206.0/24 maxlen: 24 43.243.207.0/24 maxlen: 24 103.16.72.0/22 maxlen: 22 103.16.72.0/23 maxlen: 23 103.16.72.0/24 maxlen: 24 103.16.73.0/24 maxlen: 24 103.16.74.0/23 maxlen: 23 103.16.74.0/24 maxlen: 24 103.16.75.0/24 maxlen: 24 119.40.80.0/20 maxlen: 24 210.4.64.0/20 maxlen: 24 2403:4000::/32 maxlen: 32 2403:4000:17::/48 maxlen: 48 2403:4000:18::/48 maxlen: 48 2403:4000:19::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 14:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13800 (0x35e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1EE0, serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0 Validity Not Before: Sep 10 15:16:27 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aa2c9cb-9184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:89:09:31:48:e6:47:47:3c:8c:99:64:40:4b: b1:90:19:69:7b:57:6e:6a:05:45:08:64:e2:4c:d5: de:73:fb:a0:95:1c:18:f5:02:e6:f3:03:f6:f9:5f: 91:12:89:5a:03:fb:5e:61:ab:81:0a:f8:82:54:1d: df:6e:17:46:94:11:da:1c:73:ff:cb:e7:bd:4c:eb: e1:be:c4:c8:e0:20:69:36:33:a9:31:d1:be:7b:52: c3:33:cb:a9:cc:ed:bf:0b:23:80:33:db:6f:3a:65: c9:7c:51:35:ea:f3:de:86:a0:4d:ab:6f:60:de:d8: 0b:9d:fa:b8:94:42:2a:33:eb:d8:cc:9f:86:af:ba: 11:6e:24:35:78:d4:37:ff:14:23:56:78:83:c5:0c: d6:72:f2:0d:af:5d:3c:47:54:4a:80:ef:5b:88:7a: d5:4b:d8:0f:da:2e:7c:90:8e:6e:c0:a3:c0:a3:4c: 9a:ca:1c:8b:01:d8:75:58:97:f0:7d:66:4e:71:43: e1:22:1c:e4:e2:fd:c8:88:46:c1:a6:4c:01:18:56: 0a:f7:15:d0:18:de:bd:83:ca:fe:f2:6a:78:5a:95: a2:49:48:89:31:a9:ff:1a:87:d3:3b:50:07:f7:de: 9c:11:a3:80:df:12:7e:3f:62:cd:7b:b0:e4:ed:16: d9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C8:B7:AC:3A:BD:E6:EA:1C:35:F0:5A:87:A9:A7:F6:1C:25:08:75 X509v3 Authority Key Identifier: keyid:86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/550BDEE486FD11F194514C90ABEE528E.roa sbgp-ipAddrBlock: critical IPv4: 43.243.204.0/22 103.16.72.0/22 119.40.80.0/20 210.4.64.0/20 IPv6: 2403:4000::/32 Signature Algorithm: sha256WithRSAEncryption 4c:97:0c:ce:de:42:53:83:34:a1:80:83:42:9b:27:ce:b3:cb: c5:2f:c8:1f:5b:71:2b:6d:2c:c3:16:fc:b5:6f:61:0f:ed:c7: 10:fd:ae:f5:97:8a:72:e9:45:f1:29:f2:18:7e:c3:29:25:6f: 57:9b:4a:73:42:a1:ad:5c:d0:95:ef:98:4d:90:5a:1c:be:5a: 81:44:f0:6e:93:78:25:25:33:43:b5:6d:6f:65:c0:d9:91:68: e1:a5:85:9d:9c:8e:49:2e:0c:28:0b:8a:c2:87:78:a1:7a:cf: b3:cb:06:d6:7c:c4:22:ea:d6:6d:82:98:ca:95:bf:74:ff:c1: 8a:fa:f5:96:6b:ac:f8:5a:86:6e:02:b7:f6:b7:40:33:f1:e6: 69:7f:e8:7c:62:3b:eb:27:c2:3a:79:49:12:df:80:12:af:70: b1:cf:0a:92:bc:a7:d4:eb:37:da:07:a3:3e:ff:cf:d6:ae:c0: 96:19:3c:3b:1a:35:7d:78:c2:5f:d0:93:d5:f4:65:1e:9d:ae: 0c:f7:9a:fd:27:3d:b5:48:54:e8:58:f2:9b:40:e9:3c:c0:1f: f4:96:64:6a:eb:da:43:9b:91:01:8f:a4:9b:ed:d2:02:e0:d8: ff:e7:98:3c:28:64:ac:0d:aa:b0:d9:2f:25:c7:1d:7f:5c:5f: de:23:cc:ee -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICNegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFFRTAxMTAvBgNVBAUTKDg2MEMwOTA0Q0VEN0JCMEQxRDk3QjI5MkZEQjY2MkU4 QjlBOEFGRjAwHhcNMjYwOTEwMTUxNjI3WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEyYzljYi05MTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAookJMUjmR0c8jJlkQEuxkBlpe1duagVFCGTiTNXec/uglRwY9QLm8wP2+V+R EolaA/teYauBCviCVB3fbhdGlBHaHHP/y+e9TOvhvsTI4CBpNjOpMdG+e1LDM8up zO2/CyOAM9tvOmXJfFE16vPehqBNq29g3tgLnfq4lEIqM+vYzJ+Gr7oRbiQ1eNQ3 /xQjVniDxQzWcvINr108R1RKgO9biHrVS9gP2i58kI5uwKPAo0yayhyLAdh1WJfw fWZOcUPhIhzk4v3IiEbBpkwBGFYK9xXQGN69g8r+8mp4WpWiSUiJMan/GofTO1AH 996cEaOA3xJ+P2LNe7Dk7RbZjQIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFKLIt6w6 vebqHDXwWoepp/YcJQh1MB8GA1UdIwQYMBaAFIYMCQTO17sNHZeykv22Yui5qK/w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUVFMC9EMjM2MzQ0NjFE OEExMUUyODIwRjA0RTUwOEIwMkNEMi9oZ3dKQk03WHV3MGRsN0tTX2JaaTZMbW9y X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hnd0pCTTdYdXcwZGw3S1NfYlppNkxtb3JfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTFFRTAvRDIzNjM0NDYxRDhBMTFFMjgyMEYwNEU1MDhCMDJDRDIvNTUwQkRFRTQ4 NkZEMTFGMTk0NTE0QzkwQUJFRTUyOEUucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQCK/PMAwQCZxBIAwQEdyhQAwQE0gRAMA0EAgACMAcDBQAkA0AAMA0G CSqGSIb3DQEBCwUAA4IBAQBMlwzO3kJTgzShgINCmyfOs8vFL8gfW3ErbSzDFvy1 b2EP7ccQ/a71l4py6UXxKfIYfsMpJW9Xm0pzQqGtXNCV75hNkFocvlqBRPBuk3gl JTNDtW1vZcDZkWjhpYWdnI5JLgwoC4rCh3ihes+zywbWfMQi6tZtgpjKlb90/8GK +vWWa6z4WoZuArf2t0Az8eZpf+h8YjvrJ8I6eUkS34ASr3CxzwqSvKfU6zfaB6M+ /8/WrsCWGTw7GjV9eMJf0JPV9GUena4M95r9Jz21SFToWPKbQOk8wB/0lmRq69pD m5EBj6Sb7dIC4Nj/55g8KGSsDaqw2S8lxx1/XF/eI8zu -----END CERTIFICATE-----Generated at Wed Oct 7 08:02:21 2026 by rpki-client