$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/0E43AECA3B5D11F0A26BC064C4F9AE02.roa File: 0E43AECA3B5D11F0A26BC064C4F9AE02.roa (raw, json) Hash identifier: 0R8aUOkuvkxBptQCqK8x5AV36AA1pHonSA2IeVHkDK4= Subject key identifier: 7B:D9:B4:BF:98:84:8A:E4:0A:C1:61:B7:86:05:2A:B9:9F:34:B5:06 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0DE0 Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/0E43AECA3B5D11F0A26BC064C4F9AE02.roa Signing time: Sat 22 Aug 2026 13:21:30 +0000 ROA not before: Sat 22 Aug 2026 13:21:30 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 395793 IP address blocks: 43.230.54.0/24 maxlen: 24 43.230.55.0/24 maxlen: 24 43.231.188.0/24 maxlen: 24 43.231.190.0/24 maxlen: 24 43.231.191.0/24 maxlen: 24 43.246.128.0/24 maxlen: 24 43.246.130.0/24 maxlen: 24 43.246.131.0/24 maxlen: 24 43.246.196.0/23 maxlen: 23 43.246.196.0/24 maxlen: 24 43.246.197.0/24 maxlen: 24 45.115.32.0/24 maxlen: 24 45.115.34.0/24 maxlen: 24 103.12.52.0/24 maxlen: 24 103.24.163.0/24 maxlen: 24 103.248.148.0/24 maxlen: 24 103.248.149.0/24 maxlen: 24 160.20.46.0/24 maxlen: 24 160.20.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 18:49:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3552 (0xde0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Aug 22 13:21:30 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6a89a25a-3a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ea:ec:ef:33:c0:7f:1e:0b:d5:1f:97:91:14: 4f:66:7c:1a:c4:e2:7f:59:86:66:75:2d:8d:72:f4: dc:f2:8f:bc:e8:cc:6d:1f:d3:b0:ea:c9:e4:a3:9c: 16:02:d3:45:dc:29:17:77:4a:03:44:c6:83:88:ad: 34:a4:d7:a4:a7:92:38:2c:f7:56:5a:0d:7b:82:4b: f5:5e:46:f1:4c:12:ed:64:1c:8c:6e:f7:5e:2a:2a: c3:1d:10:83:84:74:d9:79:2b:91:03:c0:c5:a5:13: 74:4b:bf:a7:a0:35:52:e0:97:ba:26:57:a4:d4:04: 6e:bf:e7:b1:e1:3c:a3:5a:ed:3f:a3:35:d0:ea:f7: 72:ed:7b:f0:89:cc:43:59:81:d5:17:62:d6:ce:db: 3f:f4:b2:24:06:cf:f3:98:f0:09:4a:90:81:bf:8c: b7:1c:b0:61:76:58:5c:12:e9:d4:73:fb:d8:79:b0: 4c:96:5a:75:a4:b0:00:be:12:e1:c1:94:c4:81:d4: 98:4e:de:21:20:34:68:82:e8:e3:00:db:21:61:5f: ec:96:5d:22:bc:14:20:a2:eb:c9:5e:e6:1b:78:2d: 04:f8:f3:4c:bf:dd:93:8e:63:c8:71:ed:8a:a5:8a: b0:36:dd:f9:6d:6f:76:96:38:f7:73:15:98:2b:c9: 8b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D9:B4:BF:98:84:8A:E4:0A:C1:61:B7:86:05:2A:B9:9F:34:B5:06 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/0E43AECA3B5D11F0A26BC064C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.230.54.0/23 43.231.188.0/24 43.231.190.0/23 43.246.128.0/24 43.246.130.0/23 43.246.196.0/23 45.115.32.0/24 45.115.34.0/24 103.12.52.0/24 103.24.163.0/24 103.248.148.0/23 160.20.46.0/23 Signature Algorithm: sha256WithRSAEncryption 63:25:8d:04:5d:22:10:12:b5:94:00:09:57:d3:67:05:29:2d: 69:14:e4:c8:93:63:11:33:69:a1:f1:6f:62:01:17:6c:26:d0: 76:ac:6c:90:5d:31:6e:ce:e1:76:54:6a:1f:62:b9:fb:15:1b: 60:de:20:e1:03:ce:37:f7:f0:32:4b:aa:71:c8:dd:ee:de:59: bb:0c:7e:ef:89:a2:b2:10:52:4a:b8:33:41:a2:cc:7a:96:c7: 09:3b:10:c6:0b:bf:c7:7d:3d:c9:26:7c:60:41:60:d1:0c:cb: fa:68:d8:8b:7e:16:78:07:7c:b2:b1:54:96:26:05:18:08:2b: 2f:0e:45:26:fe:2c:fc:55:d5:84:fe:36:42:e0:c3:73:01:3b: e9:f0:38:fe:db:10:08:63:d9:b6:15:b3:c3:cd:0c:a7:99:f6: c4:33:03:5d:63:a2:3b:3f:53:b7:25:be:12:7f:61:af:94:d7: 6b:b3:b8:f9:8c:3b:18:22:b8:8a:e9:3a:1a:f1:5e:59:c5:61: 38:2e:b0:66:7c:90:f1:1b:6c:c1:c5:31:a1:00:ce:6e:40:6d: c5:22:ce:2b:21:cc:c3:38:35:ea:ec:a4:f9:e8:6e:0e:46:dc: 71:36:27:4f:dd:c1:ee:fd:a5:11:bd:71:90:a1:c1:6a:bb:5a: 24:b8:ad:ba -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgICDeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjYwODIyMTMyMTMwWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YTg5YTI1YS0zYTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArurs7zPAfx4L1R+XkRRPZnwaxOJ/WYZmdS2NcvTc8o+86MxtH9Ow6snko5wW AtNF3CkXd0oDRMaDiK00pNekp5I4LPdWWg17gkv1XkbxTBLtZByMbvdeKirDHRCD hHTZeSuRA8DFpRN0S7+noDVS4Je6Jlek1ARuv+ex4TyjWu0/ozXQ6vdy7XvwicxD WYHVF2LWzts/9LIkBs/zmPAJSpCBv4y3HLBhdlhcEunUc/vYebBMllp1pLAAvhLh wZTEgdSYTt4hIDRogujjANshYV/sll0ivBQgouvJXuYbeC0E+PNMv92TjmPIce2K pYqwNt35bW92ljj3cxWYK8mLdQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHvZtL+Y hIrkCsFht4YFKrmfNLUGMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvMEU0M0FFQ0Ez QjVEMTFGMEEyNkJDMDY0QzRGOUFFMDIucm9hMGEGCCsGAQUFBwEHAQH/BFIwUDBO BAIAATBIAwQBK+Y2AwQAK+e8AwQBK+e+AwQAK/aAAwQBK/aCAwQBK/bEAwQALXMg AwQALXMiAwQAZww0AwQAZxijAwQBZ/iUAwQBoBQuMA0GCSqGSIb3DQEBCwUAA4IB AQBjJY0EXSIQErWUAAlX02cFKS1pFOTIk2MRM2mh8W9iARdsJtB2rGyQXTFuzuF2 VGofYrn7FRtg3iDhA8439/AyS6pxyN3u3lm7DH7viaKyEFJKuDNBosx6lscJOxDG C7/HfT3JJnxgQWDRDMv6aNiLfhZ4B3yysVSWJgUYCCsvDkUm/iz8VdWE/jZC4MNz ATvp8Dj+2xAIY9m2FbPDzQynmfbEMwNdY6I7P1O3Jb4Sf2GvlNdrs7j5jDsYIriK 6Toa8V5ZxWE4LrBmfJDxG2zBxTGhAM5uQG3FIs4rIczDODXq7KT56G4ORtxxNidP 3cHu/aURvXGQocFqu1okuK26 -----END CERTIFICATE-----Generated at Tue Sep 1 02:09:28 2026 by rpki-client