$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/61663178F88311EDB1DF555DC4F9AE02.roa File: 61663178F88311EDB1DF555DC4F9AE02.roa (raw, json) Hash identifier: n5qn/7DgUayNb0ooYS65Ved7HCxgL0W74TbOmO29GE0= Subject key identifier: 3B:1A:5E:E5:1D:94:34:44:0E:AA:79:21:ED:6B:79:42:BB:BB:FE:99 Certificate issuer: /CN=A91CFA8E/serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Certificate serial: 02BF Authority key identifier: D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/61663178F88311EDB1DF555DC4F9AE02.roa Signing time: Fri 02 Oct 2026 08:42:03 +0000 ROA not before: Fri 02 Oct 2026 08:42:03 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 56309 IP address blocks: 43.229.148.0/22 maxlen: 24 43.249.32.0/23 maxlen: 24 103.13.28.0/22 maxlen: 24 103.40.118.0/23 maxlen: 24 103.99.11.0/24 maxlen: 24 103.107.52.0/22 maxlen: 24 103.114.201.0/24 maxlen: 24 103.114.203.0/24 maxlen: 24 103.117.148.0/22 maxlen: 24 103.224.84.0/22 maxlen: 24 117.18.124.0/22 maxlen: 24 119.10.136.0/21 maxlen: 24 199.21.172.0/22 maxlen: 24 203.173.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 02:17:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 703 (0x2bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFA8E, serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Validity Not Before: Oct 2 08:42:03 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6abf6e5b-28b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9b:a4:62:a2:68:d8:f1:00:2d:04:27:a1:e3: 00:a9:3b:9b:fc:e2:a0:8a:0d:52:66:07:f0:e3:54: 45:f0:cc:e1:7c:32:5c:e6:ed:7f:74:d2:03:4d:94: 4e:88:d4:a5:28:cb:89:0c:03:8a:75:db:85:78:05: 86:00:1e:35:3a:7e:de:12:7b:86:d9:1e:54:17:61: 78:6b:80:00:05:50:9b:34:e0:ae:48:4c:c8:ad:81: b8:22:bd:2d:fe:54:a5:fd:a0:78:e6:39:7b:22:0a: a0:8e:20:6a:5c:ab:65:83:34:05:17:f1:bf:3c:7a: f7:6f:e2:77:c4:04:44:9d:82:8d:e4:1f:b6:d6:2e: e2:39:aa:1f:78:9c:45:21:e1:dd:ff:11:b7:1c:12: 91:77:2f:bb:ee:39:dc:1d:62:fc:c2:98:9e:13:0a: 89:f8:14:ec:2d:77:c7:1a:f4:8d:67:4e:2d:86:89: b9:9e:23:3d:15:1e:3a:92:88:a8:89:7d:2c:1d:d2: 00:6e:83:69:67:ca:31:66:97:51:f0:0f:fe:41:0d: 1e:6b:ea:a7:8c:b5:55:b2:b9:9b:ba:35:1d:fc:99: cb:84:78:fc:9d:dc:43:13:ea:30:e8:24:5c:71:47: 3c:45:84:51:bb:2c:38:27:cb:3a:3a:a2:28:08:56: 0b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1A:5E:E5:1D:94:34:44:0E:AA:79:21:ED:6B:79:42:BB:BB:FE:99 X509v3 Authority Key Identifier: keyid:D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/61663178F88311EDB1DF555DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.229.148.0/22 43.249.32.0/23 103.13.28.0/22 103.40.118.0/23 103.99.11.0/24 103.107.52.0/22 103.114.201.0/24 103.114.203.0/24 103.117.148.0/22 103.224.84.0/22 117.18.124.0/22 119.10.136.0/21 199.21.172.0/22 203.173.80.0/21 Signature Algorithm: sha256WithRSAEncryption 2d:7c:4a:d1:2c:d2:f9:9a:1c:d1:0b:5e:72:26:ce:37:e5:51: ed:3c:c1:5c:90:ec:e1:ba:78:0f:05:b4:93:3c:fc:b6:21:09: 6c:a3:fd:1c:99:01:88:0a:3b:92:c0:f0:9d:f0:3e:25:70:f3: fb:e6:6d:20:d7:23:fe:f9:9c:fc:57:9a:03:a0:39:57:5f:23: e1:b8:52:6c:32:7b:d9:b6:a5:e0:12:30:ec:d9:fe:c5:8e:cd: 8e:ca:8f:64:ab:82:0c:d5:70:93:89:e5:22:32:c5:7a:27:b8: 2f:8c:98:97:4b:bc:c7:6d:50:14:83:05:16:74:67:b2:18:45: 31:ea:d1:ed:90:51:44:3d:5a:14:1d:8f:ee:1b:1d:6a:69:7a: 90:c9:22:da:85:9a:7b:9b:d1:2c:db:a2:9d:dc:25:95:ef:13: 45:90:3d:46:17:06:c6:d1:17:34:64:95:1a:42:6f:47:1c:94: 94:55:bb:1f:95:8f:b7:48:47:67:06:b3:96:a4:ec:bf:0a:3e: 46:e8:45:01:19:4c:d0:dd:79:74:31:b2:34:d4:e6:cf:53:a2: 6f:1a:f4:11:e7:36:41:09:86:28:f3:ba:d2:96:df:bd:bb:da: 73:d3:72:f2:36:ab:76:46:77:7b:e6:75:5a:26:72:5b:08:52: eb:ac:e2:cb -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgICAr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBOEUxMTAvBgNVBAUTKEQ4ODBFRjI2NUI5NDBFMzFERkVEMUM0MkFFRjUxNDRC NjQ0MTM3MTcwHhcNMjYxMDAyMDg0MjAzWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmNmU1Yi0yOGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJukYqJo2PEALQQnoeMAqTub/OKgig1SZgfw41RF8MzhfDJc5u1/dNIDTZRO iNSlKMuJDAOKdduFeAWGAB41On7eEnuG2R5UF2F4a4AABVCbNOCuSEzIrYG4Ir0t /lSl/aB45jl7IgqgjiBqXKtlgzQFF/G/PHr3b+J3xAREnYKN5B+21i7iOaofeJxF IeHd/xG3HBKRdy+77jncHWL8wpieEwqJ+BTsLXfHGvSNZ04thom5niM9FR46koio iX0sHdIAboNpZ8oxZpdR8A/+QQ0ea+qnjLVVsrmbujUd/JnLhHj8ndxDE+ow6CRc cUc8RYRRuyw4J8s6OqIoCFYLKwIDAQABo4ICrjCCAqowHQYDVR0OBBYEFDsaXuUd lDREDqp5Ie1reUK7u/6ZMB8GA1UdIwQYMBaAFNiA7yZblA4x3+0cQq71FEtkQTcX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkE4RS82MUJBRDhFMEY4 N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURqSGY3UnhDcnZVVVMyUkJO eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJJRHZKbHVVRGpIZjdSeENydlVVUzJSQk54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZBOEUvNjFCQUQ4RTBGODdFMTFFRDkwRDg0NDVDQzRGOUFFMDIvNjE2NjMxNzhG ODgzMTFFREIxREY1NTVEQzRGOUFFMDIucm9hMG0GCCsGAQUFBwEHAQH/BF4wXDBa BAIAATBUAwQCK+WUAwQBK/kgAwQCZw0cAwQBZyh2AwQAZ2MLAwQCZ2s0AwQAZ3LJ AwQAZ3LLAwQCZ3WUAwQCZ+BUAwQCdRJ8AwQDdwqIAwQCxxWsAwQDy61QMA0GCSqG SIb3DQEBCwUAA4IBAQAtfErRLNL5mhzRC15yJs435VHtPMFckOzhungPBbSTPPy2 IQlso/0cmQGICjuSwPCd8D4lcPP75m0g1yP++Zz8V5oDoDlXXyPhuFJsMnvZtqXg EjDs2f7Fjs2Oyo9kq4IM1XCTieUiMsV6J7gvjJiXS7zHbVAUgwUWdGeyGEUx6tHt kFFEPVoUHY/uGx1qaXqQySLahZp7m9Es26Kd3CWV7xNFkD1GFwbG0Rc0ZJUaQm9H HJSUVbsflY+3SEdnBrOWpOy/Cj5G6EUBGUzQ3Xl0MbI01ObPU6JvGvQR5zZBCYYo 87rSlt+9u9pz03LyNqt2Rnd75nVaJnJbCFLrrOLL -----END CERTIFICATE-----Generated at Sat Oct 24 14:34:20 2026 by rpki-client