$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/ADE3F5B635D611EB8466D634C4F9AE02.roa File: ADE3F5B635D611EB8466D634C4F9AE02.roa (raw, json) Hash identifier: vYMmHvHFJOFq0uMQC5KcOS3qLta0AmHawAY34Z2J+Lc= Subject key identifier: 2E:FF:36:F6:37:BA:4C:6E:42:AA:58:8D:65:A0:39:60:2B:5F:82:AA Certificate issuer: /CN=A91DC8F3/serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97 Certificate serial: 0838 Authority key identifier: F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/ADE3F5B635D611EB8466D634C4F9AE02.roa Signing time: Mon 12 Oct 2026 21:41:34 +0000 ROA not before: Mon 12 Oct 2026 21:41:33 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 53587 IP address blocks: 43.250.184.0/22 maxlen: 22 43.250.184.0/24 maxlen: 24 43.250.185.0/24 maxlen: 24 43.250.186.0/24 maxlen: 24 43.250.187.0/24 maxlen: 24 103.240.140.0/22 maxlen: 22 103.240.140.0/23 maxlen: 23 103.240.140.0/24 maxlen: 24 103.240.141.0/24 maxlen: 24 103.240.142.0/23 maxlen: 23 103.240.142.0/24 maxlen: 24 103.240.143.0/24 maxlen: 24 2401:a080::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Oct 2026 21:23:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2104 (0x838) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC8F3, serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97 Validity Not Before: Oct 12 21:41:33 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6acd540d-e9d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:af:2e:e7:39:8d:06:3b:4c:18:4a:af:eb:c0: 2a:53:e5:9d:af:5a:c2:cb:11:7e:02:13:83:4a:cd: ee:4c:68:9b:51:ff:70:e3:6e:56:2d:dd:c1:46:84: 40:87:7f:fe:e0:26:9c:de:11:74:36:b2:23:1e:d4: 71:59:60:80:c0:a1:a2:2f:bd:8f:c8:06:8a:72:ac: e0:9c:14:59:29:54:c9:1a:2d:1d:9e:01:01:e8:8c: cd:69:ad:ea:e3:87:87:bf:53:3a:4e:e2:2f:a9:55: 88:25:98:02:99:d5:f6:a0:c2:3b:84:91:82:4b:8f: 31:b3:9a:77:a8:c6:3f:8c:81:3c:32:d5:a8:b3:da: d2:10:54:39:34:ab:7d:eb:cd:d3:a7:1d:48:43:80: 9b:cb:e3:86:1b:83:11:c7:51:dd:e5:62:90:cc:b7: a0:b6:f5:52:e9:10:2e:7b:79:cf:b1:d3:57:24:50: 5f:d2:5c:50:6c:68:aa:2f:3d:c9:58:a6:65:d5:2c: c3:18:dd:1d:37:59:80:0d:7a:b9:8b:41:e7:8b:f7: 25:cc:a8:d2:d6:22:45:c8:73:77:72:75:9d:3a:a4: 39:74:bc:8d:d7:f5:30:d8:2b:a4:1d:9c:6e:0f:b4: 25:62:98:ac:43:8d:17:6f:e1:42:5e:91:ab:66:8f: cf:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:FF:36:F6:37:BA:4C:6E:42:AA:58:8D:65:A0:39:60:2B:5F:82:AA X509v3 Authority Key Identifier: keyid:F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/ADE3F5B635D611EB8466D634C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.250.184.0/22 103.240.140.0/22 IPv6: 2401:a080::/32 Signature Algorithm: sha256WithRSAEncryption be:73:68:73:f2:75:fc:6c:61:b7:3c:c5:d9:7b:e4:09:03:9d: b2:f7:31:b2:e8:29:f2:c7:62:82:60:cb:66:7b:3f:a9:5d:5a: 7a:be:90:b5:64:60:b7:cd:f6:93:93:ba:ad:de:bc:4b:6f:1b: f3:18:23:19:13:e1:ff:b9:e0:c2:f2:7a:72:4f:c3:8c:b9:17: f2:23:53:7a:7c:8e:b8:8c:dd:34:e8:60:91:c5:43:a8:2e:35: 54:a4:1c:8b:6f:98:59:5d:85:e2:ce:48:e5:e1:7a:e7:db:ed: a1:ba:7a:ee:bd:09:74:0c:21:3f:53:8f:31:6b:a6:6d:e4:1a: a6:4a:9f:0f:bc:2f:2e:e4:88:3c:41:b6:97:f9:50:b0:67:4a: 67:1e:8b:95:2a:f8:1b:a4:5d:e8:50:65:1f:98:d6:72:86:0d: 33:f7:4e:a2:16:2a:7c:81:49:d8:f6:94:51:f5:92:6e:02:7b: 77:d0:b0:5a:d5:49:8d:7a:fb:ed:bc:81:16:83:89:02:6b:4f: 50:ec:5b:e3:30:b4:36:65:d8:45:d9:6b:72:fd:28:de:85:77: fa:f6:bd:b9:77:51:44:79:26:25:b3:cb:94:ca:69:61:d4:24: 28:85:62:e6:44:d9:2f:3b:dc:22:e3:df:2e:78:d5:3b:58:49: df:ab:af:07 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4RjMxMTAvBgNVBAUTKEYxNTlBQzA0QjVCODkzNzkwNUU2OUQxQkYyNUY0RDUz QjM1NDVDOTcwHhcNMjYxMDEyMjE0MTMzWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNkNTQwZC1lOWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApq8u5zmNBjtMGEqv68AqU+Wdr1rCyxF+AhODSs3uTGibUf9w425WLd3BRoRA h3/+4Cac3hF0NrIjHtRxWWCAwKGiL72PyAaKcqzgnBRZKVTJGi0dngEB6IzNaa3q 44eHv1M6TuIvqVWIJZgCmdX2oMI7hJGCS48xs5p3qMY/jIE8MtWos9rSEFQ5NKt9 683Tpx1IQ4Cby+OGG4MRx1Hd5WKQzLegtvVS6RAue3nPsdNXJFBf0lxQbGiqLz3J WKZl1SzDGN0dN1mADXq5i0Hni/clzKjS1iJFyHN3cnWdOqQ5dLyN1/Uw2CukHZxu D7QlYpisQ40Xb+FCXpGrZo/PVwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFC7/NvY3 ukxuQqpYjWWgOWArX4KqMB8GA1UdIwQYMBaAFPFZrAS1uJN5BeadG/JfTVOzVFyX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzhGMy9FOUQzMEM4MDM1 RDQxMUVCQkUyNzdGMzNDNEY5QUUwMi84Vm1zQkxXNGsza0Y1cDBiOGw5TlU3TlVY SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhWbXNCTFc0azNrRjVwMGI4bDlOVTdOVVhKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REM4RjMvRTlEMzBDODAzNUQ0MTFFQkJFMjc3RjMzQzRGOUFFMDIvQURFM0Y1QjYz NUQ2MTFFQjg0NjZENjM0QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCK/q4AwQCZ/CMMA0EAgACMAcDBQAkAaCAMA0GCSqGSIb3DQEBCwUA A4IBAQC+c2hz8nX8bGG3PMXZe+QJA52y9zGy6Cnyx2KCYMtmez+pXVp6vpC1ZGC3 zfaTk7qt3rxLbxvzGCMZE+H/ueDC8npyT8OMuRfyI1N6fI64jN006GCRxUOoLjVU pByLb5hZXYXizkjl4Xrn2+2hunruvQl0DCE/U48xa6Zt5BqmSp8PvC8u5Ig8QbaX +VCwZ0pnHouVKvgbpF3oUGUfmNZyhg0z906iFip8gUnY9pRR9ZJuAnt30LBa1UmN evvtvIEWg4kCa09Q7FvjMLQ2ZdhF2Wty/SjehXf69r25d1FEeSYls8uUymlh1CQo hWLmRNkvO9wi498ueNU7WEnfq68H -----END CERTIFICATE-----Generated at Thu Oct 15 15:28:28 2026 by rpki-client