$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/1733DE66945D11F09E173B0CC4F9AE02.roa File: 1733DE66945D11F09E173B0CC4F9AE02.roa (raw, json) Hash identifier: jGd99/uD0KMVPDO9hxuubkd6aQ5e1JKb3NPzk/aPXxE= Subject key identifier: ED:35:31:53:15:E0:CC:F9:7B:92:3F:F5:67:48:E1:E7:93:AD:01:11 Certificate issuer: /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Certificate serial: 35B4 Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/1733DE66945D11F09E173B0CC4F9AE02.roa Signing time: Tue 06 Oct 2026 15:16:25 +0000 ROA not before: Tue 06 Oct 2026 15:16:25 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 17559 IP address blocks: 43.224.60.0/22 maxlen: 22 103.80.40.0/24 maxlen: 24 103.80.43.0/24 maxlen: 24 202.68.169.0/24 maxlen: 24 203.14.245.0/24 maxlen: 24 2406:7300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 15:16:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13748 (0x35b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD8CB, serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Validity Not Before: Oct 6 15:16:25 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ac510c8-2cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ad:c4:ba:b1:fb:78:68:89:7c:ae:17:2a:b9: 11:cc:83:1c:92:b4:f0:da:cb:81:e2:33:26:0e:ac: 74:b2:e2:9f:2b:6d:df:75:5a:08:18:61:03:ef:f0: c1:be:83:30:a5:06:68:77:ab:47:e9:bc:45:f1:c4: 94:57:7f:d1:0c:3e:24:8c:fa:d1:e7:fa:f5:51:d0: c5:d7:79:09:e7:2e:6c:d8:f3:fe:d1:b1:7c:e9:f0: 36:36:6f:88:07:4e:22:37:54:89:4e:5c:26:be:2e: 2e:c9:39:b0:d0:24:42:df:25:92:84:4f:ab:1f:24: 3a:c3:f1:77:b3:31:db:a8:a2:ac:b0:59:d6:ba:12: 3c:ef:9f:e3:e7:a1:ac:9c:8b:96:13:61:2a:35:ec: 5b:7c:89:60:6f:19:79:ac:41:b6:ef:69:7e:b2:97: fc:e9:5b:f2:22:57:3a:f1:d1:10:5a:8d:d2:78:c1: 2e:32:a0:fe:1f:6e:6d:82:1a:86:1a:49:d5:c2:d5: 1e:85:b0:27:1e:82:88:17:f6:f1:05:69:6e:f1:79: 4f:83:85:83:67:cc:53:1e:dd:01:3c:4f:87:2a:87: 5e:e5:d1:b7:34:0e:92:d5:f2:dc:51:0d:7a:08:84: cf:21:a5:3a:a0:97:90:54:15:ba:f4:fc:aa:1b:f9: 6f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:35:31:53:15:E0:CC:F9:7B:92:3F:F5:67:48:E1:E7:93:AD:01:11 X509v3 Authority Key Identifier: keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/1733DE66945D11F09E173B0CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.224.60.0/22 103.80.40.0/24 103.80.43.0/24 202.68.169.0/24 203.14.245.0/24 IPv6: 2406:7300::/32 Signature Algorithm: sha256WithRSAEncryption de:a1:ba:56:84:9e:9f:ea:bc:50:73:ff:e9:aa:e0:f7:b7:b8: 87:5a:88:05:59:31:78:70:b7:4f:95:6e:6f:5f:75:24:fd:1e: ce:d9:69:35:23:00:cd:0e:82:28:56:5d:3b:db:6b:30:2b:1c: 5a:a9:3c:01:b3:66:4a:14:be:46:0d:4b:6b:0e:6f:55:64:57: 33:66:af:cc:21:41:16:70:74:0a:5b:97:33:d6:3c:fc:ab:b7: 80:e7:63:b8:39:d6:ff:e4:58:f8:62:af:64:a8:d4:cd:30:fa: d4:89:91:5f:8d:8e:7f:d5:07:8f:8d:5a:43:17:03:b3:3d:3c: ef:3e:e7:2a:c5:38:93:b9:4e:99:d6:53:73:6c:69:8c:e7:9e: 1d:f5:17:00:d5:94:23:34:bd:d8:81:f8:ff:f7:9e:76:52:7c: fe:0d:72:b9:ee:03:ab:8f:91:39:6d:dd:d1:d7:6b:a2:e1:71: a2:29:e2:bf:33:43:4b:45:ce:4c:bb:8e:2a:ef:42:19:75:aa: bd:f1:cc:43:48:17:55:33:a4:75:1c:0f:db:b6:9f:ba:34:cd: e4:48:c9:76:35:99:b3:b8:ae:28:05:26:5a:69:9e:91:a0:8a: a1:15:44:a2:db:3c:ea:70:23:b0:2d:cb:47:12:41:05:59:36: a0:1e:e5:82 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgICNbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ4Q0IxMTAvBgNVBAUTKEUwMkRDNDNBRjhBREY4RDFEQjJFNzRFNEE2QzI4RUY5 NjE1NUJGMTUwHhcNMjYxMDA2MTUxNjI1WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWM1MTBjOC0yY2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlK3EurH7eGiJfK4XKrkRzIMckrTw2suB4jMmDqx0suKfK23fdVoIGGED7/DB voMwpQZod6tH6bxF8cSUV3/RDD4kjPrR5/r1UdDF13kJ5y5s2PP+0bF86fA2Nm+I B04iN1SJTlwmvi4uyTmw0CRC3yWShE+rHyQ6w/F3szHbqKKssFnWuhI875/j56Gs nIuWE2EqNexbfIlgbxl5rEG272l+spf86VvyIlc68dEQWo3SeMEuMqD+H25tghqG GknVwtUehbAnHoKIF/bxBWlu8XlPg4WDZ8xTHt0BPE+HKode5dG3NA6S1fLcUQ16 CITPIaU6oJeQVBW69PyqG/lvfQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFO01MVMV 4Mz5e5I/9WdI4eeTrQERMB8GA1UdIwQYMBaAFOAtxDr4rfjR2y505KbCjvlhVb8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDhDQi8zMjhFRDE1NDFE OEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1OSGJMblRrcHNLTy1XRlZ2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDM0VPdml0LU5IYkxuVGtwc0tPLVdGVnZ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUQ4Q0IvMzI4RUQxNTQxRDhCMTFFMjkwNDlCQ0U1MDhCMDJDRDIvMTczM0RFNjY5 NDVEMTFGMDlFMTczQjBDQzRGOUFFMDIucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAk BAIAATAeAwQCK+A8AwQAZ1AoAwQAZ1ArAwQAykSpAwQAyw71MA0EAgACMAcDBQAk BnMAMA0GCSqGSIb3DQEBCwUAA4IBAQDeobpWhJ6f6rxQc//pquD3t7iHWogFWTF4 cLdPlW5vX3Uk/R7O2Wk1IwDNDoIoVl0722swKxxaqTwBs2ZKFL5GDUtrDm9VZFcz Zq/MIUEWcHQKW5cz1jz8q7eA52O4Odb/5Fj4Yq9kqNTNMPrUiZFfjY5/1QePjVpD FwOzPTzvPucqxTiTuU6Z1lNzbGmM554d9RcA1ZQjNL3Ygfj/9552Unz+DXK57gOr j5E5bd3R12ui4XGiKeK/M0NLRc5Mu44q70IZdaq98cxDSBdVM6R1HA/btp+6NM3k SMl2NZmzuK4oBSZaaZ6RoIqhFUSi2zzqcCOwLctHEkEFWTagHuWC -----END CERTIFICATE-----Generated at Wed Oct 7 19:27:30 2026 by rpki-client