$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/4D484C7CA5C711F1BA649E117111F970.roa File: 4D484C7CA5C711F1BA649E117111F970.roa (raw, json) Hash identifier: MkaruhcqUVkoYgDtUgcF8530pcnt0hGYiHI2mosA5lQ= Subject key identifier: DD:8E:C3:ED:2A:39:6A:D3:F3:9D:F8:5C:2B:F9:F7:F1:E9:D4:04:FA Certificate issuer: /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Certificate serial: 0C9E Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/4D484C7CA5C711F1BA649E117111F970.roa Signing time: Tue 01 Sep 2026 05:38:04 +0000 ROA not before: Tue 01 Sep 2026 05:38:04 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 4637 IP address blocks: 43.239.104.0/24 maxlen: 24 45.124.204.0/24 maxlen: 24 45.124.205.0/24 maxlen: 24 45.124.206.0/24 maxlen: 24 45.124.207.0/24 maxlen: 24 103.25.100.0/24 maxlen: 24 103.25.101.0/24 maxlen: 24 103.25.102.0/24 maxlen: 24 103.25.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 18:47:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3230 (0xc9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Validity Not Before: Sep 1 05:38:04 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6a9664bc-e5c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:07:04:29:f6:f3:de:d6:4e:91:ea:6e:45:cc: 3b:7a:dd:68:98:97:11:b7:28:25:e3:d4:dd:e7:00: 7f:e8:df:fd:ed:bf:92:77:1d:5b:7f:a3:7e:ae:13: db:d5:8e:0d:fb:e1:eb:14:8c:e6:67:7e:fe:24:18: 30:1e:ab:59:6e:f1:4f:63:64:14:43:5b:5c:b5:3c: ed:7d:4f:b1:4b:60:aa:e3:9c:4e:b9:d6:a3:e7:a5: aa:7a:df:85:cb:88:d5:ea:16:49:f7:44:21:1c:e7: 01:fd:11:fa:75:7d:a3:13:ed:eb:76:8c:92:47:80: df:23:11:71:7d:e2:a5:3d:02:7f:5d:00:2a:3a:a3: b9:16:53:db:e0:73:ce:ac:d4:4d:28:8e:f4:49:f4: 38:68:55:8b:eb:9f:64:cf:33:c8:b8:33:b4:2a:3f: 80:0b:f1:e4:54:12:cc:eb:4c:16:1c:ea:f1:86:44: 70:23:3a:fc:02:53:35:a2:78:54:75:2a:7a:f6:37: 23:5a:45:fe:c0:ae:3e:f9:86:76:1d:67:8a:64:77: 34:c9:35:f5:d7:c4:8b:3d:04:83:32:25:50:4a:20: 7c:57:92:e9:8c:9c:1d:ae:bd:bd:81:c4:6a:31:58: 38:5f:33:a3:ce:9a:e5:6a:92:d0:c7:78:2f:64:fe: a0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8E:C3:ED:2A:39:6A:D3:F3:9D:F8:5C:2B:F9:F7:F1:E9:D4:04:FA X509v3 Authority Key Identifier: keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/4D484C7CA5C711F1BA649E117111F970.roa sbgp-ipAddrBlock: critical IPv4: 43.239.104.0/24 45.124.204.0/22 103.25.100.0/22 Signature Algorithm: sha256WithRSAEncryption 81:33:0b:2b:13:1b:d9:2f:03:30:37:d6:01:61:f5:37:41:89: 65:3a:4f:35:ce:71:28:a6:61:bf:35:f9:27:0d:d4:3e:18:f5: 1b:6b:15:12:a2:2a:e5:1c:5c:b9:a5:43:8e:d8:cf:e9:04:52: 9a:bf:a3:a6:07:50:f7:b5:3e:63:94:14:f8:6c:43:31:66:21: 30:68:6d:89:6e:03:0d:c9:50:cb:65:34:d8:db:e0:2b:31:cf: 49:f0:b1:0e:f6:c5:e3:2e:3f:db:82:11:d2:c7:8f:30:94:50: d3:db:8a:6f:fd:db:9e:8f:1d:22:b3:38:11:8c:67:7b:97:e9: a2:6b:1b:5f:64:b0:04:54:5b:8c:44:c4:ae:2a:b1:3c:b2:51: f1:9a:97:b3:ca:ab:02:cc:b0:94:d4:ba:53:df:37:15:56:3f: 1d:a2:17:84:7c:e2:5b:4d:34:5a:dc:6b:dc:bd:f8:97:3f:3b: ff:27:a8:1f:2e:48:6a:b6:2c:50:7f:cb:b4:e4:57:b8:16:82: be:b8:2b:8c:5e:64:ad:83:a0:85:5a:ca:bd:93:27:40:35:2d: 1e:57:c8:2a:80:d4:c4:7b:ac:4d:21:6f:31:59:61:c4:c0:59: 0b:b1:79:02:fb:c1:11:68:55:62:c7:75:35:f8:12:2e:0f:a0: 33:ea:d0:7d -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICDJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNEMzAxMTAvBgNVBAUTKDAxRUUwODlERDQ4NjdCMkNCMjc2NTgyQUE5N0IzMThG NTA5RUE2RUUwHhcNMjYwOTAxMDUzODA0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk2NjRiYy1lNWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQcEKfbz3tZOkepuRcw7et1omJcRtygl49Td5wB/6N/97b+Sdx1bf6N+rhPb 1Y4N++HrFIzmZ37+JBgwHqtZbvFPY2QUQ1tctTztfU+xS2Cq45xOudaj56Wqet+F y4jV6hZJ90QhHOcB/RH6dX2jE+3rdoySR4DfIxFxfeKlPQJ/XQAqOqO5FlPb4HPO rNRNKI70SfQ4aFWL659kzzPIuDO0Kj+AC/HkVBLM60wWHOrxhkRwIzr8AlM1onhU dSp69jcjWkX+wK4++YZ2HWeKZHc0yTX118SLPQSDMiVQSiB8V5LpjJwdrr29gcRq MVg4XzOjzprlapLQx3gvZP6gZwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFN2Ow+0q OWrT8534XCv59/Hp1AT6MB8GA1UdIwQYMBaAFAHuCJ3UhnsssnZYKql7MY9Qnqbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0QzMC9FM0RGNDY5QzQx NjgxMUVBQUU4QTc3NTBDNEY5QUUwMi9BZTRJbmRTR2V5eXlkbGdxcVhzeGoxQ2Vw dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FlNEluZFNHZXl5eWRsZ3FxWHN4ajFDZXB1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjNEMzAvRTNERjQ2OUM0MTY4MTFFQUFFOEE3NzUwQzRGOUFFMDIvNEQ0ODRDN0NB NUM3MTFGMUJBNjQ5RTExNzExMUY5NzAucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAK+9oAwQCLXzMAwQCZxlkMA0GCSqGSIb3DQEBCwUAA4IBAQCBMwsr ExvZLwMwN9YBYfU3QYllOk81znEopmG/NfknDdQ+GPUbaxUSoirlHFy5pUOO2M/p BFKav6OmB1D3tT5jlBT4bEMxZiEwaG2JbgMNyVDLZTTY2+ArMc9J8LEO9sXjLj/b ghHSx48wlFDT24pv/duejx0iszgRjGd7l+miaxtfZLAEVFuMRMSuKrE8slHxmpez yqsCzLCU1LpT3zcVVj8doheEfOJbTTRa3GvcvfiXPzv/J6gfLkhqtixQf8u05Fe4 FoK+uCuMXmStg6CFWsq9kydANS0eV8gqgNTEe6xNIW8xWWHEwFkLsXkC+8ERaFVi x3U1+BIuD6Az6tB9 -----END CERTIFICATE-----Generated at Sat Sep 5 06:27:17 2026 by rpki-client