$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/D9D9DEF8A69911F182359F0F3411F970.roa File: D9D9DEF8A69911F182359F0F3411F970.roa (raw, json) Hash identifier: kSMdikhUB64TDDAQf33yJf5KmpRLoHxtdZFPCRUfWx0= Subject key identifier: D1:BB:B4:FD:D8:5E:EB:91:A9:D4:35:57:94:FC:CA:1D:97:A6:3F:88 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0DF2 Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/D9D9DEF8A69911F182359F0F3411F970.roa Signing time: Wed 02 Sep 2026 06:45:14 +0000 ROA not before: Wed 02 Sep 2026 06:45:14 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 5065 IP address blocks: 43.230.52.0/24 maxlen: 24 43.230.53.0/24 maxlen: 24 43.246.198.0/24 maxlen: 24 43.249.240.0/24 maxlen: 24 43.249.243.0/24 maxlen: 24 43.250.89.0/24 maxlen: 24 43.250.90.0/24 maxlen: 24 45.115.33.0/24 maxlen: 24 103.7.118.0/24 maxlen: 24 103.7.119.0/24 maxlen: 24 103.13.16.0/24 maxlen: 24 103.13.19.0/24 maxlen: 24 103.15.32.0/24 maxlen: 24 103.15.34.0/24 maxlen: 24 103.15.35.0/24 maxlen: 24 103.248.150.0/24 maxlen: 24 103.248.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Sep 2026 18:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3570 (0xdf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Sep 2 06:45:14 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6a97c5fa-8e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ba:a7:86:4e:5f:17:b7:86:75:b2:7e:d4:54: 07:96:7e:9e:e5:12:23:2f:e0:1d:99:41:f8:5e:8b: f1:65:a8:fd:25:71:8c:b3:d9:15:5f:c8:87:d6:11: 7b:45:c4:02:cc:f3:1a:24:1f:a1:85:3b:be:b1:8b: e1:26:ee:e8:37:9e:35:5c:f7:72:6e:91:55:fb:98: a5:1f:b8:b4:52:da:fc:e5:b9:a2:70:99:c2:15:67: 5d:67:7d:d1:1b:f9:34:85:cc:be:d1:43:7a:40:ee: 79:9b:94:ba:b6:d2:bc:dd:bb:bf:e9:19:f6:65:ca: 1b:87:3e:17:b9:de:f0:5e:fe:bb:fe:d9:04:fb:25: 09:92:12:df:2d:8b:fd:6d:e7:89:11:7d:7f:4e:c2: a7:ea:60:29:72:54:36:20:e6:6d:3a:e1:38:69:38: 41:f3:0f:18:28:6f:13:6e:e8:c9:22:f8:ca:02:28: 09:cb:a9:2f:ff:b2:d7:4d:5a:46:b7:42:f5:66:d9: ff:8f:92:8f:62:33:9f:d8:0b:86:1e:e2:cc:f4:05: a5:9c:62:75:bb:5b:c1:f2:98:cf:63:1b:12:56:45: 58:71:0f:30:ae:a7:1e:45:61:f1:5a:03:ad:f7:ca: 7c:d8:7b:3e:df:27:6d:d3:92:0e:d3:7b:7d:23:2b: 3f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:BB:B4:FD:D8:5E:EB:91:A9:D4:35:57:94:FC:CA:1D:97:A6:3F:88 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/D9D9DEF8A69911F182359F0F3411F970.roa sbgp-ipAddrBlock: critical IPv4: 43.230.52.0/23 43.246.198.0/24 43.249.240.0/24 43.249.243.0/24 43.250.89.0-43.250.90.255 45.115.33.0/24 103.7.118.0/23 103.13.16.0/24 103.13.19.0/24 103.15.32.0/24 103.15.34.0/23 103.248.150.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:ee:67:24:1c:7b:e8:a3:89:2a:55:22:17:3f:4b:92:49:d7: 20:49:cd:08:0a:cb:ed:bc:58:dd:b7:79:5d:39:58:06:6d:04: 94:15:86:2c:28:20:36:02:d6:dd:7a:f9:e8:91:22:21:0e:85: 8e:71:f2:7d:5b:c0:14:da:89:aa:22:2b:c0:e6:dd:e2:01:a0: 99:94:3a:69:b4:ef:ec:fc:7a:22:62:8a:63:19:5e:72:a0:79: ab:f0:9f:54:ab:0d:c4:9e:8d:1f:f8:b8:b3:91:07:29:21:23: 1c:2f:f1:a9:ea:0f:a2:a0:77:a9:9c:19:89:88:8b:9b:d5:69: 84:82:e0:34:de:73:d2:10:c0:5f:aa:85:03:b1:2a:b7:cb:28: e8:60:b9:a4:63:0d:48:bf:b0:7e:0b:67:0d:77:62:a3:72:51: ff:0b:06:46:19:d7:40:d9:08:00:ae:eb:62:bf:65:05:b7:43: 02:0e:e5:51:aa:92:32:ca:37:de:6e:46:1d:ca:74:bf:96:6c: 87:71:4e:4d:52:f1:ec:73:66:f4:24:a9:6d:78:6e:b3:4c:17: 06:e9:b3:46:c4:b9:8b:9f:79:d9:12:a0:a7:df:8e:b7:b3:fe: 81:4b:0f:6f:b4:b3:e0:3b:8e:6f:d0:3b:63:ec:98:ff:b0:4c: 56:f8:d3:b9 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICDfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjYwOTAyMDY0NTE0WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YTk3YzVmYS04ZTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLqnhk5fF7eGdbJ+1FQHln6e5RIjL+AdmUH4XovxZaj9JXGMs9kVX8iH1hF7 RcQCzPMaJB+hhTu+sYvhJu7oN541XPdybpFV+5ilH7i0Utr85bmicJnCFWddZ33R G/k0hcy+0UN6QO55m5S6ttK83bu/6Rn2Zcobhz4Xud7wXv67/tkE+yUJkhLfLYv9 beeJEX1/TsKn6mApclQ2IOZtOuE4aThB8w8YKG8TbujJIvjKAigJy6kv/7LXTVpG t0L1Ztn/j5KPYjOf2AuGHuLM9AWlnGJ1u1vB8pjPYxsSVkVYcQ8wrqceRWHxWgOt 98p82Hs+3ydt05IO03t9Iys/tQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFNG7tP3Y XuuRqdQ1V5T8yh2Xpj+IMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvRDlEOURFRjhB Njk5MTFGMTgyMzU5RjBGMzQxMUY5NzAucm9hMGkGCCsGAQUFBwEHAQH/BFowWDBW BAIAATBQAwQBK+Y0AwQAK/bGAwQAK/nwAwQAK/nzMAwDBAAr+lkDBAAr+loDBAAt cyEDBAFnB3YDBABnDRADBABnDRMDBABnDyADBAFnDyIDBAFn+JYwDQYJKoZIhvcN AQELBQADggEBAEvuZyQce+ijiSpVIhc/S5JJ1yBJzQgKy+28WN23eV05WAZtBJQV hiwoIDYC1t16+eiRIiEOhY5x8n1bwBTaiaoiK8Dm3eIBoJmUOmm07+z8eiJiimMZ XnKgeavwn1SrDcSejR/4uLORBykhIxwv8anqD6Kgd6mcGYmIi5vVaYSC4DTec9IQ wF+qhQOxKrfLKOhguaRjDUi/sH4LZw13YqNyUf8LBkYZ10DZCACu62K/ZQW3QwIO 5VGqkjLKN95uRh3KdL+WbIdxTk1S8exzZvQkqW14brNMFwbps0bEuYufedkSoKff jrez/oFLD2+0s+A7jm/QO2PsmP+wTFb407k= -----END CERTIFICATE-----Generated at Thu Sep 3 02:28:16 2026 by rpki-client