$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/9739E6F4085511EF9BCE8F39C4F9AE02.roa File: 9739E6F4085511EF9BCE8F39C4F9AE02.roa (raw, json) Hash identifier: fjPsSTXHCwq9dYW/T8+PnWa4nkvEbsqfSwtShP7NsbU= Subject key identifier: 04:8B:56:5B:41:EF:86:02:C2:07:93:4E:5C:7A:D2:C5:79:0C:03:19 Certificate issuer: /CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Certificate serial: 077A Authority key identifier: FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/9739E6F4085511EF9BCE8F39C4F9AE02.roa Signing time: Mon 28 Sep 2026 07:25:09 +0000 ROA not before: Mon 28 Sep 2026 07:25:09 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 59374 IP address blocks: 43.255.240.0/23 maxlen: 24 103.70.5.0/24 maxlen: 24 103.70.6.0/24 maxlen: 24 103.233.192.0/24 maxlen: 24 103.233.193.0/24 maxlen: 24 103.233.194.0/24 maxlen: 24 103.233.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 22:30:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1914 (0x77a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A46B0, serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Validity Not Before: Sep 28 07:25:09 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6aba1655-989c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4c:c0:29:70:cc:5c:1c:5b:f4:6d:7e:96:7a: c6:48:8d:2b:86:06:0a:38:4a:65:89:11:59:02:50: b5:e3:39:f2:2b:e8:d0:b5:14:bb:38:de:dc:fa:3b: 8a:fc:8c:bf:c1:c8:c0:f3:44:a3:f9:c1:35:75:f0: d5:e9:4d:74:c5:79:cd:f9:39:06:8d:e4:8f:ec:b3: 33:bc:a1:b3:7e:f2:4c:02:ed:4e:4c:90:08:ce:52: be:5c:ed:bf:73:e9:bc:d1:0b:8e:b1:34:a8:5c:8f: a1:9e:8e:42:30:90:5f:58:fb:14:8f:27:7b:ef:29: 59:29:4b:67:de:17:8a:6d:60:cb:75:9f:58:eb:59: 9d:ac:06:ad:48:a3:04:21:33:c9:12:1a:6b:a6:fb: 3e:84:1c:f8:8c:39:9e:dc:9d:09:72:5d:18:d0:d3: 02:b2:57:7e:5b:d3:eb:e4:56:de:71:cd:ac:53:df: 3e:14:d6:0e:17:79:d5:5b:ac:02:5e:05:8b:77:cf: ba:f6:38:80:64:f7:ab:14:6b:80:d7:31:49:4d:5a: 64:8a:89:97:53:ca:c3:70:14:b3:2d:80:e3:ff:5c: e9:49:a0:ce:86:39:07:07:16:10:4f:47:95:5c:1d: d6:4a:4e:52:74:65:5f:65:79:2f:8f:39:68:19:8a: 62:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:8B:56:5B:41:EF:86:02:C2:07:93:4E:5C:7A:D2:C5:79:0C:03:19 X509v3 Authority Key Identifier: keyid:FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/9739E6F4085511EF9BCE8F39C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.255.240.0/23 103.70.5.0-103.70.6.255 103.233.192.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:a5:ad:18:60:1d:0e:31:ae:1a:1d:24:64:a9:ba:f4:61:56: 41:d6:cc:5d:ae:96:b9:f5:32:9b:03:5e:14:fb:f1:5c:88:1e: 95:d6:5b:b8:68:be:15:95:76:65:6d:15:29:5a:6d:f4:d4:b7: 42:d9:25:74:06:7a:4b:f0:b3:3a:c5:41:6a:cd:87:75:9a:79: 8c:27:85:76:2b:ec:57:cc:02:97:9e:c9:43:b6:05:b3:07:0a: f3:fb:95:96:b2:a9:4f:8f:70:a2:1c:b6:e8:b9:aa:11:f1:d4: d5:c3:90:38:3e:0f:a3:6c:fb:01:3a:09:d3:74:26:40:cf:37: 54:f0:13:9a:1e:3a:0a:fe:5e:e5:b0:c4:ae:37:a8:e4:25:48: 74:dc:01:db:a7:95:ef:78:63:1c:92:70:c8:27:55:4d:cc:75: 2b:0b:6a:4c:26:ad:f7:b0:11:b7:e6:59:8f:fa:f2:e6:af:ca: 5a:5f:67:1f:be:61:a0:75:7d:81:6f:57:e6:7a:34:e1:2b:94: fa:e4:a8:b3:71:1f:ca:38:b3:1a:b5:c1:c1:25:d0:9d:86:83: 86:f7:d8:61:91:32:21:99:83:14:c0:4e:b1:f0:48:33:6e:0e: d9:ed:5e:55:a3:55:cc:29:a5:89:25:89:be:fe:a6:b2:4a:5c: a7:7e:0e:47 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICB3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2QjAxMTAvBgNVBAUTKEZGNjgyREY4RDQ0ODY0QjM0MUQ5Q0I3QjZDMDY1OUJG RkFBQ0M5QzcwHhcNMjYwOTI4MDcyNTA5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJhMTY1NS05ODljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEzAKXDMXBxb9G1+lnrGSI0rhgYKOEpliRFZAlC14znyK+jQtRS7ON7c+juK /Iy/wcjA80Sj+cE1dfDV6U10xXnN+TkGjeSP7LMzvKGzfvJMAu1OTJAIzlK+XO2/ c+m80QuOsTSoXI+hno5CMJBfWPsUjyd77ylZKUtn3heKbWDLdZ9Y61mdrAatSKME ITPJEhprpvs+hBz4jDme3J0Jcl0Y0NMCsld+W9Pr5Fbecc2sU98+FNYOF3nVW6wC XgWLd8+69jiAZPerFGuA1zFJTVpkiomXU8rDcBSzLYDj/1zpSaDOhjkHBxYQT0eV XB3WSk5SdGVfZXkvjzloGYpiSQIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFASLVltB 74YCwgeTTlx60sV5DAMZMB8GA1UdIwQYMBaAFP9oLfjUSGSzQdnLe2wGWb/6rMnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDZCMC8zMkU5ODczQ0JG QzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpMTkIyY3Q3YkFaWnZfcXN5 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18yZ3QtTlJJWkxOQjJjdDdiQVpadl9xc3ljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ2QjAvMzJFOTg3M0NCRkM4MTFFQkI5RTRFQjZFQzRGOUFFMDIvOTczOUU2RjQw ODU1MTFFRjlCQ0U4RjM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg BAIAATAaAwQBK//wMAwDBABnRgUDBABnRgYDBAJn6cAwDQYJKoZIhvcNAQELBQAD ggEBAB2lrRhgHQ4xrhodJGSpuvRhVkHWzF2ulrn1MpsDXhT78VyIHpXWW7hovhWV dmVtFSlabfTUt0LZJXQGekvwszrFQWrNh3WaeYwnhXYr7FfMApeeyUO2BbMHCvP7 lZayqU+PcKIctui5qhHx1NXDkDg+D6Ns+wE6CdN0JkDPN1TwE5oeOgr+XuWwxK43 qOQlSHTcAdunle94YxyScMgnVU3MdSsLakwmrfewEbfmWY/68uavylpfZx++YaB1 fYFvV+Z6NOErlPrkqLNxH8o4sxq1wcEl0J2Gg4b32GGRMiGZgxTATrHwSDNuDtnt XlWjVcwppYklib7+prJKXKd+Dkc= -----END CERTIFICATE-----Generated at Wed Nov 4 11:17:38 2026 by rpki-client