$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/4A7E2898A5C411F19C8FF2B67011F970.roa File: 4A7E2898A5C411F19C8FF2B67011F970.roa (raw, json) Hash identifier: Oo3xLhYdX4LaDkZHIvo2YBA4zCU5lfp7HfSpK5gZTlY= Subject key identifier: F1:5C:83:A0:90:A2:13:35:61:65:A6:8F:5F:FF:C4:91:F5:E8:49:1E Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0DF6 Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/4A7E2898A5C411F19C8FF2B67011F970.roa Signing time: Thu 03 Sep 2026 02:08:36 +0000 ROA not before: Thu 03 Sep 2026 02:08:36 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 4637 IP address blocks: 43.246.129.0/24 maxlen: 24 45.115.35.0/24 maxlen: 24 45.124.63.0/24 maxlen: 24 103.7.209.0/24 maxlen: 24 103.7.210.0/24 maxlen: 24 103.26.164.0/24 maxlen: 24 103.26.165.0/24 maxlen: 24 103.244.211.0/24 maxlen: 24 160.20.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 18:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3574 (0xdf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Sep 3 02:08:36 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6a98d6a4-8472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bc:07:2f:ab:79:fd:03:ec:13:41:47:13:28: 51:00:63:fe:6e:da:f0:dd:1a:c3:9a:28:99:a2:f5: 51:d7:23:0c:1d:1a:be:f4:5a:1f:8b:9f:54:7e:fe: 46:95:3a:2d:4d:2d:80:f7:c6:9e:e0:ca:07:01:b3: ba:2a:14:01:71:ec:a2:79:98:6c:64:df:c2:dc:ad: 03:5f:13:40:69:d4:86:86:84:9a:e8:fc:62:75:b2: a2:16:64:b4:c4:ad:23:1e:0e:61:cc:83:ef:ff:e4: 6f:7c:53:18:a5:48:dd:c3:ff:c0:f1:15:16:94:fc: f3:9b:38:b5:72:76:6b:3d:13:0f:fb:73:42:17:51: dc:bc:b2:e4:74:12:0a:62:54:91:64:b3:c3:6b:0b: 95:fe:19:36:f4:e8:53:1a:94:a7:6c:74:76:de:8d: ac:3e:35:22:79:69:02:ed:a4:63:c1:7b:aa:51:c5: 87:b3:4c:fb:fc:c2:3b:eb:7e:a9:51:eb:8a:ad:35: ed:de:8d:84:35:72:5b:1a:7f:fa:e1:09:ee:ab:af: e6:73:95:c3:1e:26:36:71:c9:33:ea:71:0f:55:de: 51:84:f2:8b:b0:1d:d5:ec:d1:05:1c:1e:95:5b:a1: ae:2d:83:a1:54:d0:77:07:fa:d7:5f:9e:63:c9:f7: 58:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:5C:83:A0:90:A2:13:35:61:65:A6:8F:5F:FF:C4:91:F5:E8:49:1E X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/4A7E2898A5C411F19C8FF2B67011F970.roa sbgp-ipAddrBlock: critical IPv4: 43.246.129.0/24 45.115.35.0/24 45.124.63.0/24 103.7.209.0-103.7.210.255 103.26.164.0/23 103.244.211.0/24 160.20.45.0/24 Signature Algorithm: sha256WithRSAEncryption 64:62:05:72:09:69:8b:4e:85:89:75:03:1a:80:01:12:5b:5a: 8f:ae:d9:ee:02:64:fb:d2:e5:24:aa:c5:bd:fc:d1:aa:b9:ee: 2a:21:b3:90:1b:34:97:d5:06:10:b9:8d:cc:0a:f7:f3:22:04: 0a:be:8e:5c:d6:8c:28:34:f4:c4:08:df:56:0c:a7:63:9d:4d: 35:ef:16:3d:18:f1:16:83:df:9b:3d:d7:80:84:c9:bb:ef:93: dd:e6:df:b5:e3:4c:a6:2d:58:eb:68:3f:ef:fc:86:f5:0e:50: 95:44:87:9f:f7:9d:1e:a5:28:66:fa:3b:ed:47:77:29:c6:e5: 3a:90:ac:8a:d2:42:f2:c4:8b:ad:1e:eb:34:c4:1e:ad:f8:4c: 33:e8:ec:32:37:5e:5a:42:69:80:20:b5:22:79:6d:99:16:c2: bc:5b:da:76:df:af:b7:c5:1b:ec:31:82:da:c2:0a:9c:38:3c: 61:8e:b5:d8:82:86:18:e6:90:57:1d:03:6d:98:04:2a:1c:53: b5:93:3f:2b:af:9c:e3:33:59:d4:f3:8f:41:9a:ba:85:15:09: 18:5d:cf:3f:09:1a:c1:0d:7d:99:e0:0d:0c:72:a0:e7:a2:ca: 58:53:af:5e:a7:48:5c:0a:f2:a5:89:1c:98:6d:6a:e8:79:6f: fb:7b:f4:2f -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgICDfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjYwOTAzMDIwODM2WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4ZDZhNC04NDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrwHL6t5/QPsE0FHEyhRAGP+btrw3RrDmiiZovVR1yMMHRq+9Fofi59Ufv5G lTotTS2A98ae4MoHAbO6KhQBceyieZhsZN/C3K0DXxNAadSGhoSa6PxidbKiFmS0 xK0jHg5hzIPv/+RvfFMYpUjdw//A8RUWlPzzmzi1cnZrPRMP+3NCF1HcvLLkdBIK YlSRZLPDawuV/hk29OhTGpSnbHR23o2sPjUieWkC7aRjwXuqUcWHs0z7/MI7636p UeuKrTXt3o2ENXJbGn/64Qnuq6/mc5XDHiY2cckz6nEPVd5RhPKLsB3V7NEFHB6V W6GuLYOhVNB3B/rXX55jyfdYEwIDAQABo4ICjDCCAogwHQYDVR0OBBYEFPFcg6CQ ohM1YWWmj1//xJH16EkeMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvNEE3RTI4OThB NUM0MTFGMTlDOEZGMkI2NzAxMUY5NzAucm9hMEsGCCsGAQUFBwEHAQH/BDwwOjA4 BAIAATAyAwQAK/aBAwQALXMjAwQALXw/MAwDBABnB9EDBABnB9IDBAFnGqQDBABn 9NMDBACgFC0wDQYJKoZIhvcNAQELBQADggEBAGRiBXIJaYtOhYl1AxqAARJbWo+u 2e4CZPvS5SSqxb380aq57iohs5AbNJfVBhC5jcwK9/MiBAq+jlzWjCg09MQI31YM p2OdTTXvFj0Y8RaD35s914CEybvvk93m37XjTKYtWOtoP+/8hvUOUJVEh5/3nR6l KGb6O+1HdynG5TqQrIrSQvLEi60e6zTEHq34TDPo7DI3XlpCaYAgtSJ5bZkWwrxb 2nbfr7fFG+wxgtrCCpw4PGGOtdiChhjmkFcdA22YBCocU7WTPyuvnOMzWdTzj0Ga uoUVCRhdzz8JGsENfZngDQxyoOeiylhTr16nSFwK8qWJHJhtauh5b/t79C8= -----END CERTIFICATE-----Generated at Sat Sep 5 00:56:20 2026 by rpki-client