$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/43BCAA10601011F1B53A223F8947A888.roa File: 43BCAA10601011F1B53A223F8947A888.roa (raw, json) Hash identifier: PvaMnipjN2/6D2XT8nCMTCBYamBVEvFMuHbwXiaCqBQ= Subject key identifier: 7A:05:0F:97:6D:DF:44:1A:C2:16:D2:7C:5F:48:FA:05:69:F7:76:C2 Certificate issuer: /CN=A91D4834/serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083 Certificate serial: 0988 Authority key identifier: A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/43BCAA10601011F1B53A223F8947A888.roa Signing time: Thu 08 Oct 2026 20:40:25 +0000 ROA not before: Thu 08 Oct 2026 20:40:25 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 154114 IP address blocks: 45.125.50.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 20:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2440 (0x988) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4834, serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083 Validity Not Before: Oct 8 20:40:25 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6ac7ffb9-654a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e6:66:ed:b5:3d:76:73:e7:04:a8:fd:a6:db: ee:1a:97:2b:85:03:2e:70:8d:35:92:09:3b:f0:85: dd:e3:18:e7:55:9d:97:eb:46:ef:06:22:e4:ae:61: 63:4a:7c:4c:82:c6:43:ee:d6:28:3a:80:14:d8:37: 11:4a:60:6a:49:36:0b:cd:f4:50:f3:6c:01:61:e0: 55:db:65:e5:51:33:8f:73:23:49:19:86:b6:93:23: 07:c5:51:b7:69:4f:34:fe:aa:95:bb:d5:83:62:d0: 43:ae:14:e5:5a:e4:40:39:8f:89:21:2e:52:cf:ae: e8:3f:c0:b2:da:49:77:3a:b4:bf:97:35:42:93:e9: ed:a3:31:15:9b:62:cc:38:bc:79:89:9d:83:ce:7b: be:40:32:c6:f2:4d:0b:a8:d3:fb:8c:b6:03:50:cf: 8f:b8:cd:c0:d3:a4:f8:a4:36:87:d7:65:e1:6b:1e: cf:1e:dc:e6:04:e2:02:38:c7:0d:d3:98:4b:f8:54: ef:82:6d:7d:96:cf:df:ce:32:0d:30:8b:de:e6:cb: 62:2e:9a:f4:16:d1:5a:ae:70:03:b0:e6:4f:eb:0e: 49:eb:c9:18:60:37:60:fc:94:b9:4d:a6:e5:af:d4: ad:78:91:ed:36:25:e4:68:41:2f:e9:ef:b7:aa:6a: 06:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:05:0F:97:6D:DF:44:1A:C2:16:D2:7C:5F:48:FA:05:69:F7:76:C2 X509v3 Authority Key Identifier: keyid:A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/43BCAA10601011F1B53A223F8947A888.roa sbgp-ipAddrBlock: critical IPv4: 45.125.50.0/23 Signature Algorithm: sha256WithRSAEncryption 46:76:02:d9:b2:3a:fd:e0:4d:01:a7:94:5d:dc:32:01:54:ff: 4f:56:02:bf:a4:8c:f5:6a:3d:9d:5c:8b:04:be:74:4d:9a:9c: 15:03:f3:18:87:ab:c0:17:2d:c9:07:51:64:6a:a4:34:f9:43: 7b:31:55:c6:67:7d:90:ff:9a:39:4e:44:71:ce:e1:a6:81:30: fb:c3:16:a8:0f:70:a2:c2:31:f6:a1:f4:9c:3e:57:72:e3:f4: ca:68:94:77:2d:90:3d:d4:8d:3d:ff:ed:21:21:33:99:24:cb: 6c:ee:ed:4b:f2:12:67:fe:1b:02:12:88:ad:19:28:4f:eb:d1: 80:65:fa:cc:9a:03:bb:7a:f0:8b:da:20:4f:27:f8:5c:02:a5: 5c:dc:db:c6:83:f3:84:3f:4f:75:7d:18:14:d5:ba:4f:e3:39: 95:ff:0e:ff:38:f0:0e:db:90:5e:50:74:8b:e1:0a:34:fd:56: bc:5f:53:c3:1d:14:0b:ba:98:96:75:9e:04:52:5a:be:d7:e3: dd:82:1e:44:83:fe:fc:3d:d1:49:f1:e9:55:6e:be:74:ca:c9: 45:f2:9a:3b:5e:e9:89:9c:cc:d2:89:53:f1:c0:c5:eb:23:8e: de:79:ef:f1:94:d7:d0:11:bc:8f:c7:4d:5a:34:37:1c:82:e9: cc:2e:56:6d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ4MzQxMTAvBgNVBAUTKEEzNTBGQUYzQjZGMTRCQzhFRTFCMjk5NkVFRDQ4RTI3 MDIwRTEwODMwHhcNMjYxMDA4MjA0MDI1WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWM3ZmZiOS02NTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6OZm7bU9dnPnBKj9ptvuGpcrhQMucI01kgk78IXd4xjnVZ2X60bvBiLkrmFj SnxMgsZD7tYoOoAU2DcRSmBqSTYLzfRQ82wBYeBV22XlUTOPcyNJGYa2kyMHxVG3 aU80/qqVu9WDYtBDrhTlWuRAOY+JIS5Sz67oP8Cy2kl3OrS/lzVCk+ntozEVm2LM OLx5iZ2Dznu+QDLG8k0LqNP7jLYDUM+PuM3A06T4pDaH12Xhax7PHtzmBOICOMcN 05hL+FTvgm19ls/fzjINMIve5stiLpr0FtFarnADsOZP6w5J68kYYDdg/JS5Tabl r9SteJHtNiXkaEEv6e+3qmoGYwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHoFD5dt 30QawhbSfF9I+gVp93bCMB8GA1UdIwQYMBaAFKNQ+vO28UvI7hsplu7UjicCDhCD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDgzNC81MUJFREZDNEND OEQxMUVBQUZGRURCMzZDNEY5QUUwMi9vMUQ2ODdieFM4anVHeW1XN3RTT0p3SU9F SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28xRDY4N2J4UzhqdUd5bVc3dFNPSndJT0VJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDQ4MzQvNTFCRURGQzRDQzhEMTFFQUFGRkVEQjM2QzRGOUFFMDIvNDNCQ0FBMTA2 MDEwMTFGMUI1M0EyMjNGODk0N0E4ODgucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBLX0yMA0GCSqGSIb3DQEBCwUAA4IBAQBGdgLZsjr94E0Bp5Rd3DIB VP9PVgK/pIz1aj2dXIsEvnRNmpwVA/MYh6vAFy3JB1FkaqQ0+UN7MVXGZ32Q/5o5 TkRxzuGmgTD7wxaoD3CiwjH2ofScPldy4/TKaJR3LZA91I09/+0hITOZJMts7u1L 8hJn/hsCEoitGShP69GAZfrMmgO7evCL2iBPJ/hcAqVc3NvGg/OEP091fRgU1bpP 4zmV/w7/OPAO25BeUHSL4Qo0/Va8X1PDHRQLupiWdZ4EUlq+1+Pdgh5Eg/78PdFJ 8elVbr50yslF8po7XumJnMzSiVPxwMXrI47eee/xlNfQEbyPx01aNDccgunMLlZt -----END CERTIFICATE-----Generated at Wed Oct 14 11:54:33 2026 by rpki-client