$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/C8436A008D7B11EDB7EB7F37C4F9AE02.roa File: C8436A008D7B11EDB7EB7F37C4F9AE02.roa (raw, json) Hash identifier: oSu7opmD3HBYoBwJbIsmMaGXMM1R4NMeIhfp2irZM0Y= Subject key identifier: 8A:A1:E6:D0:C6:4A:23:0A:85:9E:11:10:86:BD:C7:BD:2B:C8:99:3C Certificate issuer: /CN=A91B2492/serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2 Certificate serial: 0C10 Authority key identifier: 73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/C8436A008D7B11EDB7EB7F37C4F9AE02.roa Signing time: Sun 26 Jul 2026 19:38:21 +0000 ROA not before: Sun 26 Jul 2026 19:38:21 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 6507 IP address blocks: 43.229.64.0/22 maxlen: 24 103.240.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 19:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3088 (0xc10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2492, serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2 Validity Not Before: Jul 26 19:38:21 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a66622d-7978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f1:cf:1b:12:98:19:cc:76:fa:74:8c:2a:02: a3:fc:04:36:01:14:6f:f4:67:60:47:7b:4f:bb:1f: b0:30:38:d5:a4:16:ab:74:34:0b:e5:20:96:b9:91: a8:ce:34:07:c0:7b:05:2e:20:94:b3:cb:29:60:66: 03:91:bd:01:d9:b0:33:1a:82:22:91:ad:75:33:7d: 80:d1:c0:be:bf:b8:26:4f:de:96:bd:1d:c1:96:5e: 81:c8:9f:d7:45:ae:57:4e:70:0c:2b:d7:1f:e3:3e: 99:b6:37:0d:27:9b:39:01:c5:c0:4c:1b:a9:ef:c3: 0f:17:da:0d:05:34:01:9c:89:19:de:5f:a8:d0:25: 43:7c:66:a2:de:d3:59:9f:39:a0:96:c9:58:56:5d: 01:11:7a:bf:d9:76:c8:41:fc:d5:a3:37:b8:cc:92: ef:1c:2f:a0:5f:32:81:3e:69:c3:82:83:5a:51:ee: fd:71:67:8c:59:f0:a8:8c:6d:f4:c2:36:cd:a1:95: f0:0d:a0:35:2e:8a:4b:79:64:b3:d1:10:aa:e4:86: 3e:c4:01:43:09:a2:e0:c4:49:bb:8e:19:47:8a:28: 2d:a2:4c:3b:33:ca:24:f1:d1:07:f0:05:9b:19:b9: 37:9f:fd:b1:ef:79:c8:4e:55:2c:66:c5:1b:f8:a6: f7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A1:E6:D0:C6:4A:23:0A:85:9E:11:10:86:BD:C7:BD:2B:C8:99:3C X509v3 Authority Key Identifier: keyid:73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/C8436A008D7B11EDB7EB7F37C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.229.64.0/22 103.240.224.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:54:17:bf:55:ae:9f:72:a8:11:27:f4:3d:6f:57:45:41:a1: 04:92:b4:7a:64:d2:31:e4:06:4d:c4:9f:f6:59:79:ae:23:19: a5:a2:40:db:0b:ac:ff:c9:23:fc:5d:bd:b9:9c:ac:7d:91:3a: ea:4c:8b:33:07:2b:47:91:f3:a6:d1:4f:d8:ec:63:d2:8f:a0: 3e:42:14:4b:5a:78:c4:aa:7e:00:96:3d:41:38:83:e9:e3:55: 83:df:90:bc:8e:0b:f7:3b:60:3b:b6:ad:a5:97:ac:98:ae:00: 49:39:ce:2a:09:fb:cf:79:7d:4b:77:40:6b:4c:5e:a1:aa:1d: 8d:32:4c:3b:ab:fc:c1:09:43:b0:da:f5:20:d0:7d:84:64:b0: 77:c3:74:57:eb:2d:f5:fd:dc:ac:73:19:c1:ea:d2:b6:ef:18: fc:82:ca:dc:45:63:f1:05:14:d3:99:19:b2:fe:62:50:b4:8c: ea:1a:72:ea:3a:a6:2b:1d:91:78:ed:7f:56:9c:30:e6:b7:2c: 8c:68:5e:91:7b:0d:6b:96:e8:bf:d0:51:97:e5:fb:9e:3b:76: fa:6b:f7:6e:af:58:cc:3b:f2:5d:3e:8b:28:ed:b7:39:a2:36: 44:f7:3a:cd:4c:32:20:09:bc:57:36:39:e9:df:cd:f5:29:28: 6f:d5:47:87 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICDBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI0OTIxMTAvBgNVBAUTKDczQjU2MURGM0E1ODk3NkY3RkFEOTk3QTlCQThERTVG Njc2RENGQjIwHhcNMjYwNzI2MTkzODIxWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY2NjIyZC03OTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvHPGxKYGcx2+nSMKgKj/AQ2ARRv9GdgR3tPux+wMDjVpBardDQL5SCWuZGo zjQHwHsFLiCUs8spYGYDkb0B2bAzGoIika11M32A0cC+v7gmT96WvR3Bll6ByJ/X Ra5XTnAMK9cf4z6ZtjcNJ5s5AcXATBup78MPF9oNBTQBnIkZ3l+o0CVDfGai3tNZ nzmglslYVl0BEXq/2XbIQfzVoze4zJLvHC+gXzKBPmnDgoNaUe79cWeMWfCojG30 wjbNoZXwDaA1LopLeWSz0RCq5IY+xAFDCaLgxEm7jhlHiigtokw7M8ok8dEH8AWb Gbk3n/2x73nITlUsZsUb+Kb3ZwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFIqh5tDG SiMKhZ4REIa9x70ryJk8MB8GA1UdIwQYMBaAFHO1Yd86WJdvf62Zepuo3l9nbc+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjQ5Mi9EQUQ1MTBENDND QjUxMUVBQjgyQ0NDNkNDNEY5QUUwMi9jN1ZoM3pwWWwyOV9yWmw2bTZqZVgyZHR6 N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3VmgzenBZbDI5X3JabDZtNmplWDJkdHo3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjI0OTIvREFENTEwRDQzQ0I1MTFFQUI4MkNDQzZDQzRGOUFFMDIvQzg0MzZBMDA4 RDdCMTFFREI3RUI3RjM3QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK+VAAwQCZ/DgMA0GCSqGSIb3DQEBCwUAA4IBAQB6VBe/Va6fcqgR J/Q9b1dFQaEEkrR6ZNIx5AZNxJ/2WXmuIxmlokDbC6z/ySP8Xb25nKx9kTrqTIsz BytHkfOm0U/Y7GPSj6A+QhRLWnjEqn4Alj1BOIPp41WD35C8jgv3O2A7tq2ll6yY rgBJOc4qCfvPeX1Ld0BrTF6hqh2NMkw7q/zBCUOw2vUg0H2EZLB3w3RX6y31/dys cxnB6tK27xj8gsrcRWPxBRTTmRmy/mJQtIzqGnLqOqYrHZF47X9WnDDmtyyMaF6R ew1rlui/0FGX5fueO3b6a/dur1jMO/JdPoso7bc5ojZE9zrNTDIgCbxXNjnp3831 KShv1UeH -----END CERTIFICATE-----Generated at Mon Jul 27 09:35:42 2026 by rpki-client