$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/9CB5878688DD11ECAC36C11FC4F9AE02.roa File: 9CB5878688DD11ECAC36C11FC4F9AE02.roa (raw, json) Hash identifier: SkXRUE3AqHD0Q5S8SlDm2tMiu6Kalte8916wdm9fdsM= Subject key identifier: EF:28:D0:64:37:FF:48:5D:84:09:19:F3:A5:8B:C6:84:BD:1C:39:35 Certificate issuer: /CN=A91DDCB6/serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC Certificate serial: 0987 Authority key identifier: FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/9CB5878688DD11ECAC36C11FC4F9AE02.roa Signing time: Sat 26 Sep 2026 20:40:49 +0000 ROA not before: Sat 26 Sep 2026 20:40:49 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 132420 IP address blocks: 43.252.88.0/22 maxlen: 24 101.53.128.0/19 maxlen: 24 103.20.212.0/22 maxlen: 24 103.250.244.0/22 maxlen: 24 116.204.172.0/22 maxlen: 24 139.5.188.0/22 maxlen: 24 2001:df0:411::/48 maxlen: 48 2001:df4:3500::/48 maxlen: 48 2406:69c0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 20:13:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2439 (0x987) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC Validity Not Before: Sep 26 20:40:49 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ab82dd1-5021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:99:e4:ed:ca:df:34:59:82:19:59:f3:21:92: 13:73:e2:f0:a1:9e:b2:6e:ed:9a:43:37:0a:41:91: 2e:45:3d:7d:3e:59:65:00:b5:13:0a:b9:40:b4:58: 28:e9:85:3b:e2:6d:fa:bb:0c:ea:1d:02:09:7a:e5: d9:12:e8:e9:83:73:70:20:b5:72:66:f7:6b:ca:f8: ba:f4:62:c3:e4:77:63:ed:cc:d9:ae:0e:57:c1:e1: af:d5:88:d9:90:ce:53:87:67:be:44:6d:af:c1:3c: 8e:77:fd:c7:7e:d6:e4:e9:02:bb:5e:04:bd:65:f7: 5b:58:a6:44:6a:93:4e:e8:fb:76:7f:a4:ce:ac:8d: e4:08:96:81:04:34:20:de:e7:18:27:2f:fe:9d:1b: f5:95:71:25:bc:fa:b6:02:db:6a:9e:5e:e1:1f:a3: 54:96:e7:e0:b4:24:6d:df:bc:2c:c5:7f:8b:96:32: 24:4b:56:17:d8:bf:67:05:ff:6b:50:6f:a2:79:23: 51:dc:ed:5c:64:9a:53:a9:34:80:73:64:2f:6a:9c: 7b:25:29:1b:8d:d7:4f:87:23:17:f2:8b:b8:7d:5a: 07:88:d4:e3:9c:a9:ac:f1:1d:6c:d9:c1:e0:e4:f6: 9c:10:a9:c0:e9:2c:dc:e1:6b:1c:07:59:0a:ad:63: d6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:28:D0:64:37:FF:48:5D:84:09:19:F3:A5:8B:C6:84:BD:1C:39:35 X509v3 Authority Key Identifier: keyid:FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/9CB5878688DD11ECAC36C11FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.252.88.0/22 101.53.128.0/19 103.20.212.0/22 103.250.244.0/22 116.204.172.0/22 139.5.188.0/22 IPv6: 2001:df0:411::/48 2001:df4:3500::/48 2406:69c0::/32 Signature Algorithm: sha256WithRSAEncryption 6b:34:7b:12:3b:23:dd:d3:72:5d:d9:9d:a5:8b:18:42:ab:7e: 8e:b4:29:1a:65:d0:6c:53:d0:cd:41:a1:1d:a1:62:7a:af:63: 5f:9c:d5:a4:09:65:d8:02:0e:1e:1d:bf:9d:09:01:a3:b6:ad: c0:12:8c:cc:22:c3:df:8b:99:5f:e1:c9:f8:51:bf:5c:6d:b6: 89:ad:7b:bb:2f:40:bc:56:97:22:df:fa:dd:0f:09:ed:c2:2a: 2d:cb:32:cd:72:ae:52:53:02:8b:49:a8:17:69:d8:4e:79:f6: 51:ec:ca:90:6c:79:e5:a0:ab:94:2a:25:3b:a7:60:dc:d8:77: 3d:db:79:09:5d:0c:87:c0:b7:1c:08:78:8e:eb:d0:b4:53:94: a8:de:15:fa:47:b6:26:d9:6f:c0:1b:41:69:97:07:a1:80:c9: 24:83:a4:77:4c:56:d4:b3:cc:d2:16:62:48:54:d6:e1:6c:48: d6:d0:7e:51:0c:62:62:3a:c0:3a:7e:22:34:1d:a5:54:1a:98: 79:60:52:f9:cc:f1:51:1b:68:77:ad:53:9d:41:f6:82:dc:50: 04:d9:7a:ff:c6:ff:36:11:a2:6d:f8:19:d1:97:74:62:3d:7b: 2a:3a:2a:fd:70:0a:a1:75:e7:82:ff:25:db:7f:23:2c:45:9d: 15:69:23:58 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgICCYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKEZFQTE0RjIzRkRCOTc3QUM2NDg5RDIxMDZFMzVFMDIz QjI4OTY4REMwHhcNMjYwOTI2MjA0MDQ5WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWI4MmRkMS01MDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJnk7crfNFmCGVnzIZITc+LwoZ6ybu2aQzcKQZEuRT19PlllALUTCrlAtFgo 6YU74m36uwzqHQIJeuXZEujpg3NwILVyZvdryvi69GLD5Hdj7czZrg5XweGv1YjZ kM5Th2e+RG2vwTyOd/3Hftbk6QK7XgS9ZfdbWKZEapNO6Pt2f6TOrI3kCJaBBDQg 3ucYJy/+nRv1lXElvPq2Attqnl7hH6NUlufgtCRt37wsxX+LljIkS1YX2L9nBf9r UG+ieSNR3O1cZJpTqTSAc2Qvapx7JSkbjddPhyMX8ou4fVoHiNTjnKms8R1s2cHg 5PacEKnA6Szc4WscB1kKrWPWnQIDAQABo4ICnzCCApswHQYDVR0OBBYEFO8o0GQ3 /0hdhAkZ86WLxoS9HDk1MB8GA1UdIwQYMBaAFP6hTyP9uXesZInSEG414COyiWjc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9GMDc3NTk4RUND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9fcUZQSV8yNWQ2eGtpZElRYmpYZ0k3S0ph TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19xRlBJXzI1ZDZ4a2lkSVFialhnSTdLSmFOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RERDQjYvRjA3NzU5OEVDQzNEMTFFQThCQzQ1QzI5QzRGOUFFMDIvOUNCNTg3ODY4 OEREMTFFQ0FDMzZDMTFGQzRGOUFFMDIucm9hMF4GCCsGAQUFBwEHAQH/BE8wTTAq BAIAATAkAwQCK/xYAwQFZTWAAwQCZxTUAwQCZ/r0AwQCdMysAwQCiwW8MB8EAgAC MBkDBwAgAQ3wBBEDBwAgAQ30NQADBQAkBmnAMA0GCSqGSIb3DQEBCwUAA4IBAQBr NHsSOyPd03Jd2Z2lixhCq36OtCkaZdBsU9DNQaEdoWJ6r2NfnNWkCWXYAg4eHb+d CQGjtq3AEozMIsPfi5lf4cn4Ub9cbbaJrXu7L0C8Vpci3/rdDwntwiotyzLNcq5S UwKLSagXadhOefZR7MqQbHnloKuUKiU7p2Dc2Hc923kJXQyHwLccCHiO69C0U5So 3hX6R7Ym2W/AG0FplwehgMkkg6R3TFbUs8zSFmJIVNbhbEjW0H5RDGJiOsA6fiI0 HaVUGph5YFL5zPFRG2h3rVOdQfaC3FAE2Xr/xv82EaJt+BnRl3RiPXsqOir9cAqh deeC/yXbfyMsRZ0VaSNY -----END CERTIFICATE-----Generated at Fri Oct 23 08:43:06 2026 by rpki-client