$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/96D571D41FEB11F0A2AEE444C4F9AE02.roa File: 96D571D41FEB11F0A2AEE444C4F9AE02.roa (raw, json) Hash identifier: DKZPIfztcMjo3dPYQNcxxJwayMPT5Wl+rRNIw9dFtfA= Subject key identifier: 4F:B3:81:CF:18:6C:48:41:CE:5D:5C:E9:82:5E:EF:B3:C4:CA:2D:FB Certificate issuer: /CN=A91BA164/serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31 Certificate serial: 12D6 Authority key identifier: 2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/96D571D41FEB11F0A2AEE444C4F9AE02.roa Signing time: Tue 04 Aug 2026 17:33:44 +0000 ROA not before: Tue 04 Aug 2026 17:33:44 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 139021 IP address blocks: 43.249.0.0/23 maxlen: 24 43.249.2.0/24 maxlen: 24 43.249.3.0/24 maxlen: 24 103.24.248.0/22 maxlen: 24 103.96.148.0/23 maxlen: 24 103.96.150.0/23 maxlen: 24 103.120.80.0/23 maxlen: 24 103.120.82.0/23 maxlen: 24 2404:ccc0::/32 maxlen: 32 2404:ccc0:200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.crl rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 17:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4822 (0x12d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA164, serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31 Validity Not Before: Aug 4 17:33:44 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a722278-dac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0e:63:8f:04:39:89:ad:2e:6a:4c:8e:46:1a: 4d:7b:74:77:88:7e:8d:1a:48:d1:73:07:19:25:b4: 28:84:f8:1b:db:30:d1:09:b2:b4:92:47:61:0f:51: eb:56:56:fe:ba:25:0a:50:f4:ab:3d:10:8a:1b:5c: 25:33:04:c2:38:76:af:4c:d2:9b:a2:be:e6:1d:2d: 52:65:cb:d5:8d:3f:38:76:bb:ab:a1:e9:25:0f:0a: 9c:ba:3a:31:85:b7:f1:45:53:3a:b5:4d:7e:94:29: 74:52:26:2b:8e:a5:50:56:51:52:66:9a:bb:80:fc: aa:af:b5:37:12:46:d0:9e:9e:2a:1f:2f:d5:01:18: ca:ed:ab:30:46:28:bf:6d:ce:99:54:a7:0d:72:69: 67:3d:e8:1d:72:4a:8c:5d:0d:b4:64:b0:96:76:7e: 1e:f6:99:fc:f8:31:5a:2f:5d:9e:08:e0:e1:e0:22: bf:24:01:12:06:81:7f:bb:64:94:09:d0:57:9e:71: 6f:59:a2:85:fe:c5:57:80:15:61:7d:4d:3d:fe:ab: 1b:11:64:b6:20:2a:b6:24:45:60:f9:08:4e:c9:34: 42:cd:5f:cd:07:c4:35:8e:d1:5b:00:f7:e9:98:7d: b3:3f:6b:99:9e:61:81:f5:0f:27:5a:f2:45:fc:51: b1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B3:81:CF:18:6C:48:41:CE:5D:5C:E9:82:5E:EF:B3:C4:CA:2D:FB X509v3 Authority Key Identifier: keyid:2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/96D571D41FEB11F0A2AEE444C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.249.0.0/22 103.24.248.0/22 103.96.148.0/22 103.120.80.0/22 IPv6: 2404:ccc0::/32 Signature Algorithm: sha256WithRSAEncryption 52:40:92:a5:4b:aa:49:53:62:83:ab:32:70:6f:18:27:13:6e: d7:fb:c5:ca:a0:0f:37:96:6d:6b:d0:54:a4:b6:f4:36:16:2e: a1:b4:c4:80:83:c0:c9:c5:5b:4b:3f:71:ec:82:f6:36:88:54: 97:9c:08:69:b6:5b:49:00:3c:77:b9:91:7e:39:c5:1a:ff:da: 54:4b:1a:1d:f0:81:5d:e5:12:cb:20:ac:dc:29:ec:a3:c1:00: e3:51:bd:4e:b6:40:5d:28:1a:04:7e:7f:d3:6b:cc:43:71:3d: ac:08:18:4b:e4:82:0b:62:2c:16:56:5a:75:e8:03:f9:6e:70: c7:69:60:e6:5e:1e:a9:e0:aa:6e:0f:6a:b7:ea:0b:8c:7a:4f: 49:8b:8e:ca:b4:79:48:d7:67:e7:86:bf:d5:3e:bd:35:b6:f3: 7e:20:c1:b4:ae:0a:30:78:ee:73:30:94:55:97:10:ad:9a:0e: 1d:05:28:cd:ff:e9:55:da:ff:bc:9c:44:fd:58:47:23:04:8f: 12:b0:35:4a:f6:3a:30:a9:ee:6e:12:13:8d:fe:2e:8a:41:1c: 49:fe:19:ba:eb:64:a4:89:05:1b:9e:56:f5:b7:1e:ae:45:72: 7b:fc:69:65:6a:96:36:17:27:a3:24:c8:d5:01:8a:55:a6:f7: be:73:7a:7f -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICEtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExNjQxMTAvBgNVBAUTKDJFQzQ0QjlGQzE2NUMzQkM4Mjg1ODEyQzMxM0NDNzgw MTk4OEZGMzEwHhcNMjYwODA0MTczMzQ0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTcyMjI3OC1kYWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlA5jjwQ5ia0uakyORhpNe3R3iH6NGkjRcwcZJbQohPgb2zDRCbK0kkdhD1Hr Vlb+uiUKUPSrPRCKG1wlMwTCOHavTNKbor7mHS1SZcvVjT84druroeklDwqcujox hbfxRVM6tU1+lCl0UiYrjqVQVlFSZpq7gPyqr7U3EkbQnp4qHy/VARjK7aswRii/ bc6ZVKcNcmlnPegdckqMXQ20ZLCWdn4e9pn8+DFaL12eCODh4CK/JAESBoF/u2SU CdBXnnFvWaKF/sVXgBVhfU09/qsbEWS2ICq2JEVg+QhOyTRCzV/NB8Q1jtFbAPfp mH2zP2uZnmGB9Q8nWvJF/FGxtQIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFE+zgc8Y bEhBzl1c6YJe77PEyi37MB8GA1UdIwQYMBaAFC7ES5/BZcO8goWBLDE8x4AZiP8x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTE2NC9BRkM1OTJFQ0Yz MUUxMUU4ODNFQjdCNzlDNEY5QUUwMi9Mc1JMbjhGbHc3eUNoWUVzTVR6SGdCbUlf ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xzUkxuOEZsdzd5Q2hZRXNNVHpIZ0JtSV96RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkExNjQvQUZDNTkyRUNGMzFFMTFFODgzRUI3Qjc5QzRGOUFFMDIvOTZENTcxRDQx RkVCMTFGMEEyQUVFNDQ0QzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQCK/kAAwQCZxj4AwQCZ2CUAwQCZ3hQMA0EAgACMAcDBQAkBMzAMA0G CSqGSIb3DQEBCwUAA4IBAQBSQJKlS6pJU2KDqzJwbxgnE27X+8XKoA83lm1r0FSk tvQ2Fi6htMSAg8DJxVtLP3HsgvY2iFSXnAhptltJADx3uZF+OcUa/9pUSxod8IFd 5RLLIKzcKeyjwQDjUb1OtkBdKBoEfn/Ta8xDcT2sCBhL5IILYiwWVlp16AP5bnDH aWDmXh6p4KpuD2q36guMek9Ji47KtHlI12fnhr/VPr01tvN+IMG0rgoweO5zMJRV lxCtmg4dBSjN/+lV2v+8nET9WEcjBI8SsDVK9jowqe5uEhON/i6KQRxJ/hm662Sk iQUbnlb1tx6uRXJ7/GllapY2FyejJMjVAYpVpve+c3p/ -----END CERTIFICATE-----Generated at Sat Aug 29 07:13:04 2026 by rpki-client