$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/3486A02AA5C311F19BC95E547011F970.roa File: 3486A02AA5C311F19BC95E547011F970.roa (raw, json) Hash identifier: vs7sa5NS68Qk8KNYKrQf+y7MRMvUgeeC0OfnYx4e6O4= Subject key identifier: 52:25:E3:DA:68:7E:9B:58:6B:AA:A9:DC:7B:6B:57:63:B1:02:E0:5C Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0DF7 Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/3486A02AA5C311F19BC95E547011F970.roa Signing time: Thu 03 Sep 2026 02:08:39 +0000 ROA not before: Thu 03 Sep 2026 02:08:39 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 6939 IP address blocks: 43.246.129.0/24 maxlen: 24 45.115.35.0/24 maxlen: 24 45.124.63.0/24 maxlen: 24 103.7.209.0/24 maxlen: 24 103.7.210.0/24 maxlen: 24 103.26.164.0/24 maxlen: 24 103.26.165.0/24 maxlen: 24 103.244.211.0/24 maxlen: 24 160.20.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 18:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3575 (0xdf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Sep 3 02:08:39 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6a98d6a7-8900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d5:c6:c9:30:ea:86:35:36:62:12:36:97:7f: 11:12:ae:26:01:31:2a:10:44:30:4b:80:aa:b8:c6: 38:19:c7:30:cc:14:10:df:79:87:1b:b8:fe:9e:f6: 07:0b:e7:59:0c:a6:ec:c9:9c:6f:7e:1f:f9:88:88: 9a:97:f0:df:c2:5a:64:04:16:f4:f5:b2:45:e7:59: 43:89:f1:00:eb:2c:dd:a4:1a:6f:9c:b4:7d:be:10: 4e:09:c8:1b:ef:23:99:2a:f8:9c:55:dd:a1:9a:eb: 42:d5:64:2c:3e:4e:b8:ab:4a:49:56:eb:35:2c:76: b6:26:17:d8:3c:49:f2:8f:92:56:de:0d:89:67:98: c7:bc:43:b8:2e:64:31:ef:c5:18:24:a8:11:e1:f7: fc:55:8c:fa:18:e3:0d:fb:0c:49:59:e1:3c:59:57: 21:13:59:31:eb:3c:3c:1c:57:86:5e:a3:ab:4d:b3: 26:74:c0:ae:b2:c4:e1:25:f1:72:1b:06:fc:f9:a7: 2a:41:25:70:0a:74:01:47:5d:96:f5:50:58:58:da: bc:56:d5:f5:bc:02:a0:f7:9d:e5:2e:32:ca:ec:9b: d3:47:bb:2a:c4:14:0f:bb:5b:61:87:c5:07:1c:b3: 9c:ae:cc:a0:83:3c:4a:0c:eb:2d:ed:b8:8f:95:33: 62:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:25:E3:DA:68:7E:9B:58:6B:AA:A9:DC:7B:6B:57:63:B1:02:E0:5C X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/3486A02AA5C311F19BC95E547011F970.roa sbgp-ipAddrBlock: critical IPv4: 43.246.129.0/24 45.115.35.0/24 45.124.63.0/24 103.7.209.0-103.7.210.255 103.26.164.0/23 103.244.211.0/24 160.20.45.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:3f:d8:5c:1b:88:d7:12:d4:b4:8e:1f:6c:96:e3:5d:cf:f2: 81:97:21:2a:c1:c4:6d:1a:80:71:d4:2a:d4:f9:1b:8d:de:9b: 73:2b:91:c9:7d:09:83:35:ab:72:87:9a:b1:d7:66:35:7f:0c: 77:7f:98:45:c3:cf:b7:aa:f2:f1:ac:3b:27:9e:1e:2d:1a:0e: 1c:5e:e5:1d:99:d7:cd:88:56:11:4d:c7:1e:74:c1:f3:88:fe: 4d:2a:a3:3e:a7:7b:53:eb:43:a3:4a:41:6c:41:ab:0d:44:38: df:aa:9c:13:fa:ba:c5:41:c9:f5:aa:43:c9:a3:19:cf:49:54: 6e:0f:8e:bf:e2:3b:58:48:3c:42:93:7e:e7:49:5c:ce:a8:a6: 25:e8:c1:d8:9d:6b:cf:e7:cf:39:77:11:14:52:4c:46:72:c4: 25:a5:22:ef:3d:6f:bb:79:ff:29:e4:61:fb:c7:9f:a5:38:f1: 77:bd:dc:c1:7e:ce:ad:20:16:4e:da:c9:b4:82:f8:ae:a6:92: fc:7e:cc:c5:8f:8e:98:49:79:04:cb:8a:39:1e:56:55:c5:f4: d1:13:8f:8a:75:e2:a2:fe:3f:f7:17:39:f7:96:dd:8b:09:b1: ca:cb:22:a7:76:2c:c9:1d:2d:e5:28:c7:77:5b:7e:25:e5:e0: 72:5e:96:f3 -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgICDfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjYwOTAzMDIwODM5WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4ZDZhNy04OTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9XGyTDqhjU2YhI2l38REq4mATEqEEQwS4CquMY4GccwzBQQ33mHG7j+nvYH C+dZDKbsyZxvfh/5iIial/DfwlpkBBb09bJF51lDifEA6yzdpBpvnLR9vhBOCcgb 7yOZKvicVd2hmutC1WQsPk64q0pJVus1LHa2JhfYPEnyj5JW3g2JZ5jHvEO4LmQx 78UYJKgR4ff8VYz6GOMN+wxJWeE8WVchE1kx6zw8HFeGXqOrTbMmdMCussThJfFy Gwb8+acqQSVwCnQBR12W9VBYWNq8VtX1vAKg953lLjLK7JvTR7sqxBQPu1thh8UH HLOcrsyggzxKDOst7biPlTNihwIDAQABo4ICjDCCAogwHQYDVR0OBBYEFFIl49po fptYa6qp3HtrV2OxAuBcMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvMzQ4NkEwMkFB NUMzMTFGMTlCQzk1RTU0NzAxMUY5NzAucm9hMEsGCCsGAQUFBwEHAQH/BDwwOjA4 BAIAATAyAwQAK/aBAwQALXMjAwQALXw/MAwDBABnB9EDBABnB9IDBAFnGqQDBABn 9NMDBACgFC0wDQYJKoZIhvcNAQELBQADggEBAJo/2FwbiNcS1LSOH2yW413P8oGX ISrBxG0agHHUKtT5G43em3Mrkcl9CYM1q3KHmrHXZjV/DHd/mEXDz7eq8vGsOyee Hi0aDhxe5R2Z182IVhFNxx50wfOI/k0qoz6ne1PrQ6NKQWxBqw1EON+qnBP6usVB yfWqQ8mjGc9JVG4Pjr/iO1hIPEKTfudJXM6opiXowdida8/nzzl3ERRSTEZyxCWl Iu89b7t5/ynkYfvHn6U48Xe93MF+zq0gFk7aybSC+K6mkvx+zMWPjphJeQTLijke VlXF9NETj4p14qL+P/cXOfeW3YsJscrLIqd2LMkdLeUox3dbfiXl4HJelvM= -----END CERTIFICATE-----Generated at Sat Sep 5 00:56:21 2026 by rpki-client