$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/A84D830AA54511EAA942C683C4F9AE02.roa File: A84D830AA54511EAA942C683C4F9AE02.roa (raw, json) Hash identifier: 8yXEK3UdGW0f6JZEFNyf+NFkgLqxurhMHMCZYu52FrY= Subject key identifier: 36:43:12:3E:36:2F:33:0D:A9:C4:7D:95:83:F7:AE:D9:FA:D2:6E:18 Certificate issuer: /CN=A91C40D6/serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF Certificate serial: 0A29 Authority key identifier: 8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/A84D830AA54511EAA942C683C4F9AE02.roa Signing time: Mon 14 Sep 2026 11:39:37 +0000 ROA not before: Mon 14 Sep 2026 11:39:37 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 139750 IP address blocks: 45.253.248.0/22 maxlen: 22 45.253.248.0/24 maxlen: 24 45.253.249.0/24 maxlen: 24 45.253.250.0/24 maxlen: 24 45.253.251.0/24 maxlen: 24 45.253.252.0/22 maxlen: 22 45.253.252.0/24 maxlen: 24 45.253.253.0/24 maxlen: 24 45.253.254.0/24 maxlen: 24 45.253.255.0/24 maxlen: 24 103.144.140.0/23 maxlen: 23 103.144.140.0/24 maxlen: 24 103.144.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 19:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2601 (0xa29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C40D6, serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF Validity Not Before: Sep 14 11:39:37 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6aa7dcf9-c85f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a1:4c:f8:88:23:75:53:63:d1:c3:a6:bc:db: d8:d2:a1:52:cc:ee:a4:07:5b:84:1b:b0:a3:6d:46: 5c:4d:e5:1b:64:3e:db:95:85:8e:5a:08:ea:38:99: 5e:5c:68:2a:13:1a:47:53:80:7c:d2:4d:8e:6f:53: b1:1f:59:a5:c2:60:47:36:b7:29:88:0e:9d:1f:f8: 10:69:30:9a:52:55:8e:02:17:ee:41:3a:7a:bc:aa: aa:8a:ce:7c:a7:f1:57:2a:cb:6e:78:d0:5a:62:64: 94:29:06:e0:c3:f8:66:b8:bc:39:66:ff:34:42:0c: 08:0c:8f:bc:0a:cd:9d:81:2f:d1:90:1b:5e:92:04: bb:9d:8e:2b:d3:fc:e6:4b:c0:51:d7:7c:2a:55:c2: 5a:7d:76:c9:34:5f:df:e1:d9:93:14:96:8d:50:66: 08:fc:08:82:6f:86:10:a4:2f:d5:9c:d4:5e:fd:7e: f9:be:d0:ac:95:9b:89:e2:fa:bc:fd:96:8c:67:db: 8a:fd:87:85:2e:08:cc:c9:9b:5f:6e:1b:77:c8:f7: db:4d:ce:8b:82:9b:e0:b1:64:bc:28:55:a3:ad:30: f0:26:83:fc:6e:50:32:91:e3:e6:b5:8e:d4:39:73: 81:81:d0:d5:0f:c7:dd:d1:64:d6:0d:46:cd:b9:d4: da:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:43:12:3E:36:2F:33:0D:A9:C4:7D:95:83:F7:AE:D9:FA:D2:6E:18 X509v3 Authority Key Identifier: keyid:8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/A84D830AA54511EAA942C683C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.253.248.0/21 103.144.140.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:0e:d2:85:8e:7b:22:18:3d:16:05:53:71:9a:c3:4e:e1:c2: 65:fc:da:70:6b:36:b2:72:2c:54:01:ba:0b:70:1d:3c:33:39: 38:8a:61:71:5a:4c:e6:72:ef:15:20:45:04:55:51:c7:71:08: 4c:f9:27:0b:a6:cc:08:b2:96:e0:d6:b2:69:aa:7e:3c:76:ad: 59:2e:e9:e9:b1:16:b7:d6:69:34:24:19:24:55:ed:65:a8:46: 3c:2c:ab:3a:26:cf:2e:ae:8d:17:ae:0c:d2:6c:60:5c:c3:67: 06:81:b8:80:ff:fd:a5:a9:a0:db:c8:ee:7e:bb:5d:fb:ca:9a: 94:dc:30:d1:52:8b:c1:0d:0b:90:67:35:39:f9:3b:57:3a:b6: d1:be:b9:61:4f:2f:d7:d8:ca:f7:9d:c1:af:0f:a2:56:09:1c: 27:bf:eb:0e:69:f6:59:fc:68:48:25:3b:9e:87:33:4b:a5:6b: 86:d4:b2:72:9e:08:67:02:fd:6f:fb:ef:1e:60:33:ef:0f:8e: 6a:81:8d:0a:00:55:d7:9f:d9:97:e2:dd:7a:b2:10:83:6f:e7: 24:2f:9e:e2:13:09:af:81:7b:ba:13:d8:18:28:bc:04:7f:7c: e2:eb:89:84:7c:59:a1:70:f9:66:b2:e0:3b:c4:c8:52:bc:c4: 3e:50:78:15 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQwRDYxMTAvBgNVBAUTKDhFNzg0MzQ5RUYyRERGNzg1NzVGRDU0Q0M3OEVEOEM0 NUM5NzZDQkYwHhcNMjYwOTE0MTEzOTM3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE3ZGNmOS1jODVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsaFM+IgjdVNj0cOmvNvY0qFSzO6kB1uEG7CjbUZcTeUbZD7blYWOWgjqOJle XGgqExpHU4B80k2Ob1OxH1mlwmBHNrcpiA6dH/gQaTCaUlWOAhfuQTp6vKqqis58 p/FXKstueNBaYmSUKQbgw/hmuLw5Zv80QgwIDI+8Cs2dgS/RkBtekgS7nY4r0/zm S8BR13wqVcJafXbJNF/f4dmTFJaNUGYI/AiCb4YQpC/VnNRe/X75vtCslZuJ4vq8 /ZaMZ9uK/YeFLgjMyZtfbht3yPfbTc6LgpvgsWS8KFWjrTDwJoP8blAykePmtY7U OXOBgdDVD8fd0WTWDUbNudTamwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFDZDEj42 LzMNqcR9lYP3rtn60m4YMB8GA1UdIwQYMBaAFI54Q0nvLd94V1/VTMeO2MRcl2y/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDBENi9DQThFN0Y3RUE1 NDQxMUVBOTREQTM2ODNDNEY5QUUwMi9qbmhEU2U4dDMzaFhYOVZNeDQ3WXhGeVhi TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2puaERTZTh0MzNoWFg5Vk14NDdZeEZ5WGJMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzQwRDYvQ0E4RTdGN0VBNTQ0MTFFQTk0REEzNjgzQzRGOUFFMDIvQTg0RDgzMEFB NTQ1MTFFQUE5NDJDNjgzQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQDLf34AwQBZ5CMMA0GCSqGSIb3DQEBCwUAA4IBAQBODtKFjnsiGD0W BVNxmsNO4cJl/NpwazaycixUAboLcB08Mzk4imFxWkzmcu8VIEUEVVHHcQhM+ScL pswIspbg1rJpqn48dq1ZLunpsRa31mk0JBkkVe1lqEY8LKs6Js8uro0XrgzSbGBc w2cGgbiA//2lqaDbyO5+u137ypqU3DDRUovBDQuQZzU5+TtXOrbRvrlhTy/X2Mr3 ncGvD6JWCRwnv+sOafZZ/GhIJTuehzNLpWuG1LJynghnAv1v++8eYDPvD45qgY0K AFXXn9mX4t16shCDb+ckL57iEwmvgXu6E9gYKLwEf3zi64mEfFmhcPlmsuA7xMhS vMQ+UHgV -----END CERTIFICATE-----Generated at Fri Sep 25 03:01:46 2026 by rpki-client