$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/F688C1749A0311F1B9C2572E4E11F970.roa File: F688C1749A0311F1B9C2572E4E11F970.roa (raw, json) Hash identifier: rMICtWH0y9tZq97pzfYK4czkA8rayZVUzNP4XQaSqh0= Subject key identifier: 49:E4:F4:C0:CD:A1:B1:00:A9:23:F2:E9:4C:B8:44:99:DB:A7:48:B8 Certificate issuer: /CN=A91DDCB6/serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC Certificate serial: 0988 Authority key identifier: FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/F688C1749A0311F1B9C2572E4E11F970.roa Signing time: Sat 26 Sep 2026 20:40:51 +0000 ROA not before: Sat 26 Sep 2026 20:40:51 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 17439 IP address blocks: 43.252.88.0/22 maxlen: 24 101.53.128.0/19 maxlen: 24 103.20.212.0/22 maxlen: 24 2001:df0:411::/48 maxlen: 48 2406:69c0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 20:13:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2440 (0x988) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC Validity Not Before: Sep 26 20:40:51 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ab82dd3-a789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:02:5d:5b:19:31:65:cc:ec:b2:46:63:c6:0a: 61:4f:db:7a:4b:53:8d:20:d8:20:b4:ea:c0:79:d5: 55:25:f3:1a:9b:ac:9e:12:e3:fc:52:89:27:fa:5c: 9d:f6:d8:af:d3:bb:af:b2:e9:11:da:c0:c3:64:6b: f5:63:c9:60:fd:99:0b:94:6d:dd:79:a8:0f:2c:7b: 4e:61:bc:f9:3a:0a:61:e2:44:42:85:15:32:15:1c: cc:88:de:f2:37:d0:3f:dd:f0:8c:d3:60:d8:1d:8c: 74:f8:be:c1:05:7e:43:b6:44:e1:c2:1d:b2:39:dc: 3a:86:1b:ff:93:a1:4d:fa:73:0b:11:07:c7:24:45: a1:f6:d6:81:8d:12:cd:d4:f6:fd:81:2a:e3:cb:8a: 02:d0:69:1a:79:4d:81:14:5b:d4:c9:3c:00:ea:d3: 32:15:db:3d:2e:2f:01:fd:cc:e8:e1:ed:de:a1:70: db:a1:53:f0:7a:7e:a7:b9:59:70:cf:dc:06:34:06: 3e:c5:bd:ac:50:a2:4f:91:7e:95:aa:cd:44:c6:33: 7c:eb:58:77:7c:2c:f3:72:49:f9:0f:db:55:b2:d9: e2:2d:df:9f:6e:93:09:3b:c9:ac:d5:91:3b:6f:2a: 08:81:cf:33:9b:69:e0:f6:2e:c5:8a:f8:3b:cb:a4: 16:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E4:F4:C0:CD:A1:B1:00:A9:23:F2:E9:4C:B8:44:99:DB:A7:48:B8 X509v3 Authority Key Identifier: keyid:FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/F688C1749A0311F1B9C2572E4E11F970.roa sbgp-ipAddrBlock: critical IPv4: 43.252.88.0/22 101.53.128.0/19 103.20.212.0/22 IPv6: 2001:df0:411::/48 2406:69c0::/32 Signature Algorithm: sha256WithRSAEncryption 17:b8:6c:83:c2:e7:7b:29:b0:e6:85:b3:aa:12:22:b0:22:5c: 38:e0:ab:80:ee:89:b2:00:50:7e:2e:5b:e1:11:65:3f:26:25: 34:f8:eb:e4:6a:92:e1:81:1e:98:d5:f2:e7:6f:3f:28:c2:37: bd:e4:74:5d:c9:8c:f0:f6:a7:aa:9a:ed:0c:ea:cd:b9:c3:a2: 23:73:43:d8:a5:d3:4c:46:6d:bc:af:77:d7:69:85:46:b3:04: 4b:ca:32:ff:6f:11:92:06:80:98:40:e0:71:c3:13:21:69:f1: 76:61:60:e8:f9:f1:bc:e0:c3:fb:f8:a7:02:41:ad:a0:89:e8: a3:d1:5f:40:32:67:c8:3b:78:2c:b6:35:b4:f1:cc:97:bc:92: 62:f7:fd:d3:e4:be:ba:f6:3f:f3:ff:fc:4f:ac:b1:e5:1e:2f: 72:c2:8c:bd:8a:7b:8d:d7:f4:c6:68:cd:8e:75:68:59:35:3b: d9:24:fd:cd:bb:c1:8a:b6:a0:88:8c:10:b3:50:76:73:6a:9b: c0:0d:d9:02:66:cc:9c:5f:9b:fb:47:48:f8:bc:e8:99:bb:4a: 12:16:33:8b:66:ab:cd:a9:fb:3f:95:c2:36:de:c3:d5:26:7b: f3:99:4e:cd:ba:b9:a6:be:24:0a:11:d9:d5:58:fe:2f:fc:c0: fe:e1:dd:2e -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgICCYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKEZFQTE0RjIzRkRCOTc3QUM2NDg5RDIxMDZFMzVFMDIz QjI4OTY4REMwHhcNMjYwOTI2MjA0MDUxWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWI4MmRkMy1hNzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQJdWxkxZczsskZjxgphT9t6S1ONINggtOrAedVVJfMam6yeEuP8Uokn+lyd 9tiv07uvsukR2sDDZGv1Y8lg/ZkLlG3deagPLHtOYbz5Ogph4kRChRUyFRzMiN7y N9A/3fCM02DYHYx0+L7BBX5DtkThwh2yOdw6hhv/k6FN+nMLEQfHJEWh9taBjRLN 1Pb9gSrjy4oC0GkaeU2BFFvUyTwA6tMyFds9Li8B/czo4e3eoXDboVPwen6nuVlw z9wGNAY+xb2sUKJPkX6Vqs1ExjN861h3fCzzckn5D9tVstniLd+fbpMJO8ms1ZE7 byoIgc8zm2ng9i7Fivg7y6QWnQIDAQABo4IChDCCAoAwHQYDVR0OBBYEFEnk9MDN obEAqSPy6Uy4RJnbp0i4MB8GA1UdIwQYMBaAFP6hTyP9uXesZInSEG414COyiWjc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9GMDc3NTk4RUND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9fcUZQSV8yNWQ2eGtpZElRYmpYZ0k3S0ph TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19xRlBJXzI1ZDZ4a2lkSVFialhnSTdLSmFOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RERDQjYvRjA3NzU5OEVDQzNEMTFFQThCQzQ1QzI5QzRGOUFFMDIvRjY4OEMxNzQ5 QTAzMTFGMUI5QzI1NzJFNEUxMUY5NzAucm9hMEMGCCsGAQUFBwEHAQH/BDQwMjAY BAIAATASAwQCK/xYAwQFZTWAAwQCZxTUMBYEAgACMBADBwAgAQ3wBBEDBQAkBmnA MA0GCSqGSIb3DQEBCwUAA4IBAQAXuGyDwud7KbDmhbOqEiKwIlw44KuA7omyAFB+ LlvhEWU/JiU0+OvkapLhgR6Y1fLnbz8owje95HRdyYzw9qeqmu0M6s25w6Ijc0PY pdNMRm28r3fXaYVGswRLyjL/bxGSBoCYQOBxwxMhafF2YWDo+fG84MP7+KcCQa2g ieij0V9AMmfIO3gstjW08cyXvJJi9/3T5L669j/z//xPrLHlHi9ywoy9inuN1/TG aM2OdWhZNTvZJP3Nu8GKtqCIjBCzUHZzapvADdkCZsycX5v7R0j4vOiZu0oSFjOL ZqvNqfs/lcI23sPVJnvzmU7NurmmviQKEdnVWP4v/MD+4d0u -----END CERTIFICATE-----Generated at Sat Oct 24 20:49:05 2026 by rpki-client