$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/F04C908AA85711F18FFCAC0D4011F970.roa File: F04C908AA85711F18FFCAC0D4011F970.roa (raw, json) Hash identifier: XQT6focf8duOylg1ZZ3HUJmMwp7Rdw/KmIis9QJeUpg= Subject key identifier: C2:45:5E:DE:39:FA:F6:64:0E:54:EF:65:CC:C9:D0:00:25:B0:04:47 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0DFB Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/F04C908AA85711F18FFCAC0D4011F970.roa Signing time: Fri 04 Sep 2026 11:58:27 +0000 ROA not before: Fri 04 Sep 2026 11:58:27 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 142622 IP address blocks: 43.251.187.0/24 maxlen: 24 45.124.60.0/24 maxlen: 24 45.124.62.0/24 maxlen: 24 103.7.116.0/24 maxlen: 24 103.12.53.0/24 maxlen: 24 103.12.54.0/24 maxlen: 24 103.13.18.0/24 maxlen: 24 103.24.160.0/24 maxlen: 24 103.24.161.0/24 maxlen: 24 103.24.162.0/24 maxlen: 24 103.244.209.0/24 maxlen: 24 103.244.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 18:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3579 (0xdfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Sep 4 11:58:27 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6a9ab263-b753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3f:40:6b:a9:96:c4:f4:e3:bd:af:21:27:67: b4:3a:39:45:1f:c0:a0:76:88:af:2d:a0:36:81:4a: 4a:e3:0e:08:a1:f7:17:0b:f4:1f:ee:84:cb:72:63: b4:dc:50:0a:91:28:73:85:78:c6:76:1d:1b:d3:80: 3c:7a:a6:7e:f8:80:13:5d:74:38:82:bd:62:96:3f: 9b:d9:61:48:86:6f:8e:66:ae:9b:cd:f5:66:6d:c9: 6c:60:a5:c9:b9:eb:c5:c2:96:50:1e:bc:57:ec:8f: 93:75:3d:46:f8:14:85:2d:0e:5b:f0:57:31:7f:77: 4e:8d:be:b8:75:bf:9a:f1:db:f6:fa:56:bd:f3:1f: 64:fa:e8:2f:11:bc:d5:b5:1a:9a:c6:02:22:bd:c5: 37:f9:b6:83:ee:b8:41:6c:29:29:c3:fc:c6:a8:7d: e5:b4:bc:85:ab:a0:46:1f:2a:c1:3c:9c:ff:1a:11: 3a:46:50:e1:08:ef:74:94:ef:f6:8b:98:3d:7b:ac: fc:ae:20:1b:f2:ef:17:6b:d5:b2:ec:cc:06:88:66: 77:ef:86:ba:3f:2f:7b:62:fb:5c:40:37:ff:c3:48: 31:b5:a8:c2:21:76:fe:3b:c2:ab:00:2d:f3:51:86: 14:45:a1:0c:38:23:cf:bb:af:ca:67:7d:40:a0:3a: 40:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:45:5E:DE:39:FA:F6:64:0E:54:EF:65:CC:C9:D0:00:25:B0:04:47 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/F04C908AA85711F18FFCAC0D4011F970.roa sbgp-ipAddrBlock: critical IPv4: 43.251.187.0/24 45.124.60.0/24 45.124.62.0/24 103.7.116.0/24 103.12.53.0-103.12.54.255 103.13.18.0/24 103.24.160.0-103.24.162.255 103.244.209.0-103.244.210.255 Signature Algorithm: sha256WithRSAEncryption c5:e8:55:b0:cc:f0:31:7e:98:0a:94:58:34:d0:0c:9d:0a:e2: 3e:53:1f:1d:d3:80:50:70:7f:12:87:3a:6d:d5:01:65:49:42: e8:49:2a:e4:c6:85:f8:98:7d:51:c2:c7:a6:a0:97:c9:23:77: 62:e6:84:e5:23:48:74:58:28:fd:67:af:e4:23:6b:aa:81:1c: 65:3b:d7:93:82:f8:dd:a4:59:44:c6:a5:ba:0b:ea:04:03:4b: 69:5b:e0:b1:fe:6e:c7:33:07:d0:10:cb:42:7a:3b:7c:d9:2f: 02:d4:d4:11:cc:40:cf:2d:cd:24:8d:b8:dc:bf:6d:be:5c:67: 5b:11:14:54:de:9c:af:23:f1:06:eb:92:95:4c:ce:36:ad:be: 34:c7:d5:d8:f2:bf:35:33:0c:eb:4e:2a:eb:f2:e6:dd:a7:fe: bc:bf:c9:89:38:ee:32:2c:32:68:c3:a7:dc:fd:53:1b:23:24: e5:1b:74:3e:ac:f7:44:b6:00:f3:bd:1d:3a:95:20:7a:27:75: ed:4a:3b:af:c7:41:11:ed:67:ce:46:00:ca:04:d5:0c:a3:fe: 47:68:4b:0b:c9:79:02:d9:71:77:04:ec:82:b4:a2:4b:49:63: e8:20:b0:96:b8:11:5d:98:28:8b:8e:d0:8b:23:54:16:91:6f: 6e:4f:15:a6 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgICDfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjYwOTA0MTE1ODI3WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YTlhYjI2My1iNzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4T9Aa6mWxPTjva8hJ2e0OjlFH8CgdoivLaA2gUpK4w4IofcXC/Qf7oTLcmO0 3FAKkShzhXjGdh0b04A8eqZ++IATXXQ4gr1ilj+b2WFIhm+OZq6bzfVmbclsYKXJ uevFwpZQHrxX7I+TdT1G+BSFLQ5b8Fcxf3dOjb64db+a8dv2+la98x9k+ugvEbzV tRqaxgIivcU3+baD7rhBbCkpw/zGqH3ltLyFq6BGHyrBPJz/GhE6RlDhCO90lO/2 i5g9e6z8riAb8u8Xa9Wy7MwGiGZ374a6Py97YvtcQDf/w0gxtajCIXb+O8KrAC3z UYYURaEMOCPPu6/KZ31AoDpAMQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMJFXt45 +vZkDlTvZczJ0AAlsARHMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvRjA0QzkwOEFB ODU3MTFGMThGRkNBQzBENDAxMUY5NzAucm9hMGEGCCsGAQUFBwEHAQH/BFIwUDBO BAIAATBIAwQAK/u7AwQALXw8AwQALXw+AwQAZwd0MAwDBABnDDUDBABnDDYDBABn DRIwDAMEBWcYoAMEAGcYojAMAwQAZ/TRAwQAZ/TSMA0GCSqGSIb3DQEBCwUAA4IB AQDF6FWwzPAxfpgKlFg00AydCuI+Ux8d04BQcH8Shzpt1QFlSULoSSrkxoX4mH1R wsemoJfJI3di5oTlI0h0WCj9Z6/kI2uqgRxlO9eTgvjdpFlExqW6C+oEA0tpW+Cx /m7HMwfQEMtCejt82S8C1NQRzEDPLc0kjbjcv22+XGdbERRU3pyvI/EG65KVTM42 rb40x9XY8r81MwzrTirr8ubdp/68v8mJOO4yLDJow6fc/VMbIyTlG3Q+rPdEtgDz vR06lSB6J3XtSjuvx0ER7WfORgDKBNUMo/5HaEsLyXkC2XF3BOyCtKJLSWPoILCW uBFdmCiLjtCLI1QWkW9uTxWm -----END CERTIFICATE-----Generated at Sat Sep 5 00:56:15 2026 by rpki-client