$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/3F22D06CA92411F1BA1076124011F970.roa File: 3F22D06CA92411F1BA1076124011F970.roa (raw, json) Hash identifier: z2qaROKDF1jNv1g6m7zR5yXj1DZVINyhxFSLmwMMrjA= Subject key identifier: 8A:87:39:E8:1C:25:D0:A9:56:F3:FE:1D:BA:80:1C:DF:5F:E6:FA:84 Certificate issuer: /CN=A91CCEF4/serialNumber=3DB2D423F63D0E80AB684FB25F95B32B61B2D033 Certificate serial: 02 Authority key identifier: 3D:B2:D4:23:F6:3D:0E:80:AB:68:4F:B2:5F:95:B3:2B:61:B2:D0:33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/3F22D06CA92411F1BA1076124011F970.roa Signing time: Sat 05 Sep 2026 12:20:57 +0000 ROA not before: Sat 05 Sep 2026 12:20:57 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 18229 IP address blocks: 43.227.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.crl rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCEF4, serialNumber=3DB2D423F63D0E80AB684FB25F95B32B61B2D033 Validity Not Before: Sep 5 12:20:57 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6a9c0929-213d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:05:48:aa:2a:49:f6:49:48:34:2a:39:55:37: 13:ce:ac:d5:fc:0c:bc:c7:c6:0e:cc:75:54:8c:19: c3:61:7f:9e:fa:90:68:1a:c7:50:8e:85:09:95:86: 82:3a:e6:73:97:5c:69:b2:72:bf:93:2e:ad:f0:5b: ac:00:a9:99:4e:e7:94:bd:6d:b4:bf:e2:4c:5e:cb: 44:7d:17:03:26:7f:68:9d:49:9d:3c:c6:34:c7:0a: ad:ae:2e:44:4a:c5:70:b4:7d:2c:54:0e:63:e4:4b: d1:93:be:99:8d:8a:e2:a3:c6:06:54:41:7d:22:1d: 0c:f1:5c:40:87:fc:c7:6a:88:8f:77:58:94:d5:3d: 3b:64:eb:e5:94:b2:1b:7e:0d:ef:ec:d8:96:ee:df: 46:4f:05:ba:63:91:98:54:55:cd:90:01:3d:b2:1f: 88:18:9f:d0:73:95:82:6f:5e:c3:b3:ee:cb:8c:7c: 09:35:de:46:00:d7:48:65:18:20:3a:88:71:3d:66: c2:9a:de:1b:a9:21:ea:98:41:df:5f:96:f0:29:5e: 32:7a:3c:c7:11:29:f7:b5:c3:da:d9:26:91:53:9c: 76:03:c2:ee:8c:2b:ef:10:17:c4:42:3b:2d:ef:ae: b2:a4:2c:a6:b0:52:61:56:0f:20:7f:7f:44:dc:52: 19:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:87:39:E8:1C:25:D0:A9:56:F3:FE:1D:BA:80:1C:DF:5F:E6:FA:84 X509v3 Authority Key Identifier: keyid:3D:B2:D4:23:F6:3D:0E:80:AB:68:4F:B2:5F:95:B3:2B:61:B2:D0:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/3F22D06CA92411F1BA1076124011F970.roa sbgp-ipAddrBlock: critical IPv4: 43.227.187.0/24 Signature Algorithm: sha256WithRSAEncryption 72:c5:d9:ba:b6:02:9d:22:63:ad:42:7e:e8:7d:ff:c0:6a:06: d9:b1:ce:a8:d3:2f:c1:ee:7d:fe:b7:57:79:52:04:64:98:3b: 2b:bb:b6:e8:a3:02:d5:8e:60:9d:e0:65:19:32:84:32:39:56: c0:58:a8:1d:50:26:98:d3:00:03:b3:be:ed:8d:02:ae:89:9f: f8:dd:ac:77:9c:e3:da:ff:95:98:d5:12:85:8b:68:14:4c:bf: a0:d1:2c:a9:0c:82:34:6f:b4:a6:aa:c6:6d:66:b0:cb:45:a9: 2c:77:f7:02:6b:6d:df:ab:83:fd:b5:d8:31:d1:17:dc:7c:98: ff:bb:e8:13:72:6a:70:aa:39:58:62:0a:1b:8f:d6:9e:5a:2a: c3:b0:87:e2:d2:ab:5b:66:ff:d4:22:f5:e3:cc:ab:22:22:2c: 35:56:b4:bf:87:be:37:ca:55:d4:52:e0:4c:9b:75:b0:a1:22: a5:5e:2a:92:68:da:e1:bf:d2:a8:4f:9c:1c:1d:e6:0a:4a:e6: 72:ae:b3:e4:78:ac:3c:f6:fb:34:8d:16:0b:1c:66:41:9d:31: 2c:61:68:22:d8:be:1d:c2:7c:5a:51:e1:3f:fa:2b:bc:53:90: c3:16:61:00:18:cc:e7:49:35:b8:b1:2c:08:78:b5:04:7f:4d: 63:40:49:f6 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0VGNDExMC8GA1UEBRMoM0RCMkQ0MjNGNjNEMEU4MEFCNjg0RkIyNUY5NUIzMkI2 MUIyRDAzMzAeFw0yNjA5MDUxMjIwNTdaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhOWMwOTI5LTIxM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtBUiqKkn2SUg0KjlVNxPOrNX8DLzHxg7MdVSMGcNhf576kGgax1COhQmVhoI6 5nOXXGmycr+TLq3wW6wAqZlO55S9bbS/4kxey0R9FwMmf2idSZ08xjTHCq2uLkRK xXC0fSxUDmPkS9GTvpmNiuKjxgZUQX0iHQzxXECH/MdqiI93WJTVPTtk6+WUsht+ De/s2Jbu30ZPBbpjkZhUVc2QAT2yH4gYn9BzlYJvXsOz7suMfAk13kYA10hlGCA6 iHE9ZsKa3hupIeqYQd9flvApXjJ6PMcRKfe1w9rZJpFTnHYDwu6MK+8QF8RCOy3v rrKkLKawUmFWDyB/f0TcUhldAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUioc56Bwl 0KlW8/4duoAc31/m+oQwHwYDVR0jBBgwFoAUPbLUI/Y9DoCraE+yX5WzK2Gy0DMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDRUY0LzAzQzc5NTdBQTky NDExRjE5MjYyQkI4OTNGMTFGOTcwL1BiTFVJX1k5RG9DcmFFLXlYNVd6SzJHeTBE TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUGJMVUlfWTlEb0NyYUUteVg1V3pLMkd5MERNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0VGNC8wM0M3OTU3QUE5MjQxMUYxOTI2MkJCODkzRjExRjk3MC8zRjIyRDA2Q0E5 MjQxMUYxQkExMDc2MTI0MDExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAAr47swDQYJKoZIhvcNAQELBQADggEBAHLF2bq2Ap0iY61Cfuh9/8Bq BtmxzqjTL8Huff63V3lSBGSYOyu7tuijAtWOYJ3gZRkyhDI5VsBYqB1QJpjTAAOz vu2NAq6Jn/jdrHec49r/lZjVEoWLaBRMv6DRLKkMgjRvtKaqxm1msMtFqSx39wJr bd+rg/212DHRF9x8mP+76BNyanCqOVhiChuP1p5aKsOwh+LSq1tm/9Qi9ePMqyIi LDVWtL+HvjfKVdRS4EybdbChIqVeKpJo2uG/0qhPnBwd5gpK5nKus+R4rDz2+zSN FgscZkGdMSxhaCLYvh3CfFpR4T/6K7xTkMMWYQAYzOdJNbixLAh4tQR/TWNASfY= -----END CERTIFICATE-----Generated at Fri Sep 11 16:27:34 2026 by rpki-client