$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/4F467C58D3AA11ED91B0C532C4F9AE02.roa File: 4F467C58D3AA11ED91B0C532C4F9AE02.roa (raw, json) Hash identifier: vF4Alq/C7G9DCvRKcjCjRoH9i6udd05/xt+Mvpi8FbY= Subject key identifier: 3F:0F:2D:89:60:64:6D:71:EB:E5:F0:5F:6B:E8:4B:0B:4D:88:94:CD Certificate issuer: /CN=A91DA389/serialNumber=48F50E16B8305AA2C756D21C8F0FD509338A5C29 Certificate serial: 027A Authority key identifier: 48:F5:0E:16:B8:30:5A:A2:C7:56:D2:1C:8F:0F:D5:09:33:8A:5C:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/4F467C58D3AA11ED91B0C532C4F9AE02.roa Signing time: Mon 03 Aug 2026 03:51:18 +0000 ROA not before: Mon 03 Aug 2026 03:51:18 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 45352 IP address blocks: 43.228.244.0/22 maxlen: 24 103.67.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 01:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 634 (0x27a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA389, serialNumber=48F50E16B8305AA2C756D21C8F0FD509338A5C29 Validity Not Before: Aug 3 03:51:18 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a701036-5f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7e:5f:cb:0c:d4:2c:cf:20:25:cb:a0:64:9a: ed:e2:e1:a4:50:83:b8:a9:3f:4c:b1:f9:47:d8:8a: e0:28:c5:07:29:5b:0e:1f:a9:80:89:84:e3:ef:7d: 09:2e:eb:d0:57:3e:b8:05:43:d0:f3:fd:2d:0b:1f: fe:3c:fe:02:07:d9:91:5c:0b:0a:0c:d0:cf:a8:3b: 1c:5e:d6:f0:5a:ae:3e:c6:62:34:fa:98:62:34:13: b3:8b:6c:a8:d6:77:7c:4b:4c:6c:be:42:a6:22:72: e3:dd:cf:ec:fc:2e:d1:f5:81:61:8c:0d:2c:fc:7a: 12:53:07:3d:cc:21:33:70:03:6a:0a:c7:34:39:22: 5e:80:c4:ee:1d:a4:63:8e:ef:59:9a:7e:16:97:85: ff:ca:de:f1:b1:1c:ef:ba:fc:af:a0:7e:f7:2f:08: d8:01:be:8d:7c:ed:c3:c2:ba:9e:ba:83:81:4c:d2: e2:da:ed:64:0d:7b:cf:b6:45:88:f6:39:87:2d:22: c2:fe:a0:cc:59:58:63:c4:6c:aa:b3:21:2e:e7:4a: d9:ea:5a:13:ef:33:8f:de:44:a8:75:66:05:29:4e: a6:a9:b2:97:63:c6:0f:96:33:fc:32:31:6c:88:b5: b8:7c:68:dd:aa:d2:69:b9:a6:f0:2c:d2:5d:63:fa: d0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:0F:2D:89:60:64:6D:71:EB:E5:F0:5F:6B:E8:4B:0B:4D:88:94:CD X509v3 Authority Key Identifier: keyid:48:F5:0E:16:B8:30:5A:A2:C7:56:D2:1C:8F:0F:D5:09:33:8A:5C:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/4F467C58D3AA11ED91B0C532C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.228.244.0/22 103.67.36.0/22 Signature Algorithm: sha256WithRSAEncryption ad:f4:a9:cd:ee:0a:b7:1b:4a:b6:11:02:ec:94:0b:41:54:bc: 90:18:da:68:8c:71:c0:54:c9:dc:74:31:98:cb:51:79:0d:98: e3:df:8d:6d:51:56:c6:35:c0:34:88:58:ed:8b:76:ab:f2:d2: c0:fc:a4:66:15:74:78:d9:e0:de:5f:a2:b5:ac:bd:c2:01:ea: 3c:83:13:7e:39:f8:36:3c:4f:bf:d8:f0:49:ec:0e:28:bc:e9: 94:2a:c2:4b:6a:09:91:32:94:24:26:9d:04:a9:93:9f:c5:2e: 7e:4e:68:c2:e1:68:16:0f:fa:71:5d:c0:4b:aa:d0:f7:17:34: 86:58:8f:40:d4:8a:5f:4c:e2:18:e8:57:66:b9:b5:0f:06:12: 40:4b:35:dc:5f:7f:a8:c5:b8:fe:c5:6c:1d:45:58:d2:dd:04: fc:33:86:87:c9:b4:15:0b:e7:2f:ea:b9:8d:e8:34:80:9d:eb: 51:33:e7:f0:b7:ae:ff:ae:b1:3e:5f:d7:6b:b0:09:aa:02:78: 24:83:7d:dc:25:8e:ba:de:ef:f6:79:eb:a0:bf:ea:b0:1b:ec: 39:9a:fc:b3:5d:b6:84:1b:c9:be:2e:02:93:c9:89:65:16:bd: c6:b5:a9:7f:17:14:df:1c:4e:b8:85:71:ca:70:cf:8a:3e:dd: e6:ee:f8:d1 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEzODkxMTAvBgNVBAUTKDQ4RjUwRTE2QjgzMDVBQTJDNzU2RDIxQzhGMEZENTA5 MzM4QTVDMjkwHhcNMjYwODAzMDM1MTE4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTcwMTAzNi01ZjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp35fywzULM8gJcugZJrt4uGkUIO4qT9MsflH2IrgKMUHKVsOH6mAiYTj730J LuvQVz64BUPQ8/0tCx/+PP4CB9mRXAsKDNDPqDscXtbwWq4+xmI0+phiNBOzi2yo 1nd8S0xsvkKmInLj3c/s/C7R9YFhjA0s/HoSUwc9zCEzcANqCsc0OSJegMTuHaRj ju9Zmn4Wl4X/yt7xsRzvuvyvoH73LwjYAb6NfO3DwrqeuoOBTNLi2u1kDXvPtkWI 9jmHLSLC/qDMWVhjxGyqsyEu50rZ6loT7zOP3kSodWYFKU6mqbKXY8YPljP8MjFs iLW4fGjdqtJpuabwLNJdY/rQxQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFD8PLYlg ZG1x6+XwX2voSwtNiJTNMB8GA1UdIwQYMBaAFEj1Dha4MFqix1bSHI8P1Qkzilwp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTM4OS9CMjE3MEI3NEQz QTMxMUVEODgwNkFDMTFDNEY5QUUwMi9TUFVPRnJnd1dxTEhWdEljandfVkNUT0tY Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQVU9Gcmd3V3FMSFZ0SWNqd19WQ1RPS1hDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REEzODkvQjIxNzBCNzREM0EzMTFFRDg4MDZBQzExQzRGOUFFMDIvNEY0NjdDNThE M0FBMTFFRDkxQjBDNTMyQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK+T0AwQCZ0MkMA0GCSqGSIb3DQEBCwUAA4IBAQCt9KnN7gq3G0q2 EQLslAtBVLyQGNpojHHAVMncdDGYy1F5DZjj341tUVbGNcA0iFjti3ar8tLA/KRm FXR42eDeX6K1rL3CAeo8gxN+Ofg2PE+/2PBJ7A4ovOmUKsJLagmRMpQkJp0EqZOf xS5+TmjC4WgWD/pxXcBLqtD3FzSGWI9A1IpfTOIY6FdmubUPBhJASzXcX3+oxbj+ xWwdRVjS3QT8M4aHybQVC+cv6rmN6DSAnetRM+fwt67/rrE+X9drsAmqAngkg33c JY663u/2eeugv+qwG+w5mvyzXbaEG8m+LgKTyYllFr3Gtal/FxTfHE64hXHKcM+K Pt3m7vjR -----END CERTIFICATE-----Generated at Sat Sep 5 04:53:18 2026 by rpki-client