$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/08A1C0B8DC5011EF9C212C5CC4F9AE02.roa File: 08A1C0B8DC5011EF9C212C5CC4F9AE02.roa (raw, json) Hash identifier: 6sjpy6GriqELAPGgjJdFUt57xHCHCLQzT9kEpI0w6Mg= Subject key identifier: 62:70:CC:49:11:5F:70:D7:D9:92:E7:AD:58:32:05:13:4F:05:3D:2F Certificate issuer: /CN=A91DC017/serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Certificate serial: 02B8 Authority key identifier: 0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/08A1C0B8DC5011EF9C212C5CC4F9AE02.roa Signing time: Tue 07 Jul 2026 03:28:27 +0000 ROA not before: Tue 07 Jul 2026 03:28:27 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 38277 IP address blocks: 43.252.40.0/24 maxlen: 24 43.252.41.0/24 maxlen: 24 43.252.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 03:28:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 696 (0x2b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC017, serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Validity Not Before: Jul 7 03:28:27 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a4c725b-00a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bc:64:65:b4:74:6e:4c:7c:31:58:48:3a:71: e9:2e:c5:19:9c:d3:8a:a2:64:7a:7b:f6:ac:41:09: ac:32:0e:0d:99:a1:c0:f8:dc:a2:de:c1:a5:13:89: 54:78:96:19:4d:37:5f:91:2f:15:72:e9:fa:6d:43: 1b:2a:c4:a2:1c:ea:52:7b:83:07:4f:9b:34:16:ab: 40:0b:86:85:16:a4:29:6f:b0:c4:8e:9c:07:c5:3f: 8c:53:78:4c:bd:53:04:f2:be:b8:26:1e:c6:b5:f6: d6:1c:a3:93:49:39:32:bf:0e:b5:a6:d8:3d:d0:ea: 70:24:d5:01:4f:03:86:c3:fc:4a:61:0e:fc:e7:9c: 21:a7:fb:ed:5f:39:b2:57:c9:d9:43:d8:9f:1e:61: 81:97:7b:bc:a8:4a:5a:4d:0a:35:dd:e0:16:ef:26: 1f:ba:a0:27:eb:b6:a1:34:28:4a:e8:0e:26:c5:cb: 4b:f4:10:f9:79:ac:05:cb:de:a5:6b:d6:ea:7b:43: 2b:f6:70:52:27:d1:60:cc:6f:4d:59:09:b8:63:4f: 4b:74:9f:28:b4:71:17:80:af:dd:eb:78:5d:92:d9: cf:88:ae:0e:cb:ed:c3:6b:7e:2d:f8:56:96:fa:19: 48:ac:e6:fd:99:3a:6e:e3:07:bc:57:0b:19:ce:5d: c5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:70:CC:49:11:5F:70:D7:D9:92:E7:AD:58:32:05:13:4F:05:3D:2F X509v3 Authority Key Identifier: keyid:0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/08A1C0B8DC5011EF9C212C5CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.252.40.0-43.252.42.255 Signature Algorithm: sha256WithRSAEncryption bc:bf:a7:ca:45:40:9b:cc:59:7a:1f:b6:e1:99:64:b0:56:66: 34:22:61:4a:70:87:5e:12:8b:2c:23:2b:17:0e:19:33:3f:c5: 1b:7a:e5:1d:94:71:ed:4b:98:2d:54:3c:75:6f:41:3d:d2:74: d6:69:85:d0:d8:f2:00:25:85:bb:ee:bf:f0:0c:43:60:fe:42: 2d:e1:69:3b:c9:96:3e:57:0e:cc:6b:b6:04:05:d9:b1:24:a1: ab:4b:c1:af:27:18:05:ff:83:55:1f:ea:bb:97:af:da:5a:cd: eb:6f:3f:aa:1a:60:be:bd:15:75:09:a6:08:6f:7f:2c:4f:6b: a8:e5:47:49:d2:5f:81:94:12:35:ca:3c:87:99:44:ef:1c:a5: 10:22:fe:4e:0f:88:da:80:60:6e:e5:23:88:8d:40:6b:1b:bb: 17:58:e8:f5:e3:70:88:7f:37:10:55:e3:c9:e1:c8:25:6b:64: 78:64:a2:2f:01:82:70:96:28:f5:2e:84:de:98:49:6d:16:e8: 09:ae:bd:91:8f:c8:5a:1b:60:c5:f2:63:0f:09:aa:a1:f5:c3: 6a:94:c1:27:89:8c:4b:2f:66:63:3a:67:44:5f:ad:26:9d:c9: cd:2b:7e:68:93:38:bb:a8:6e:d6:7d:ba:c6:a1:c6:59:fb:93: 95:bf:3a:c9 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICArgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwMTcxMTAvBgNVBAUTKDBBQTVERTI5MjY1QTA4RTI3QTU4MUQ4OTQ0NjVCRENE QjczNzA5QkIwHhcNMjYwNzA3MDMyODI3WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRjNzI1Yi0wMGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrxkZbR0bkx8MVhIOnHpLsUZnNOKomR6e/asQQmsMg4NmaHA+Nyi3sGlE4lU eJYZTTdfkS8Vcun6bUMbKsSiHOpSe4MHT5s0FqtAC4aFFqQpb7DEjpwHxT+MU3hM vVME8r64Jh7GtfbWHKOTSTkyvw61ptg90OpwJNUBTwOGw/xKYQ7855whp/vtXzmy V8nZQ9ifHmGBl3u8qEpaTQo13eAW7yYfuqAn67ahNChK6A4mxctL9BD5eawFy96l a9bqe0Mr9nBSJ9FgzG9NWQm4Y09LdJ8otHEXgK/d63hdktnPiK4Oy+3Da34t+FaW +hlIrOb9mTpu4we8VwsZzl3FwQIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFGJwzEkR X3DX2ZLnrVgyBRNPBT0vMB8GA1UdIwQYMBaAFAql3ikmWgjielgdiURlvc23Nwm7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzAxNy8xMDVBQzhGQzkw QzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNPSjZXQjJKUkdXOXpiYzND YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxWGVLU1phQ09KNldCMkpSR1c5emJjM0Nicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REMwMTcvMTA1QUM4RkM5MEMzMTFFREJBMURDQzIzQzRGOUFFMDIvMDhBMUMwQjhE QzUwMTFFRjlDMjEyQzVDQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBAMr/CgDBAAr/CowDQYJKoZIhvcNAQELBQADggEBALy/p8pFQJvM WXoftuGZZLBWZjQiYUpwh14SiywjKxcOGTM/xRt65R2Uce1LmC1UPHVvQT3SdNZp hdDY8gAlhbvuv/AMQ2D+Qi3haTvJlj5XDsxrtgQF2bEkoatLwa8nGAX/g1Uf6ruX r9pazetvP6oaYL69FXUJpghvfyxPa6jlR0nSX4GUEjXKPIeZRO8cpRAi/k4PiNqA YG7lI4iNQGsbuxdY6PXjcIh/NxBV48nhyCVrZHhkoi8BgnCWKPUuhN6YSW0W6Amu vZGPyFobYMXyYw8JqqH1w2qUwSeJjEsvZmM6Z0RfrSadyc0rfmiTOLuobtZ9usah xln7k5W/Osk= -----END CERTIFICATE-----Generated at Wed Jul 8 21:03:37 2026 by rpki-client