$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E20C2/708CC3283E2711F1B9F4379FB5833773/5487474E3E2B11F1962E9E0BB7833773.roa File: 5487474E3E2B11F1962E9E0BB7833773.roa (raw, json) Hash identifier: a546Twy13Plo0jq2zMYdyDUc9gF2izl8ZG/Jmp2sKZo= Subject key identifier: A4:4A:A9:80:4D:1D:FF:C8:87:CC:CE:C0:D6:8A:38:AB:23:6B:F2:D1 Certificate issuer: /CN=A91E20C2/serialNumber=79E7B5978118FF9C7A96529F6C5909E3DA9240C3 Certificate serial: 53 Authority key identifier: 79:E7:B5:97:81:18:FF:9C:7A:96:52:9F:6C:59:09:E3:DA:92:40:C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eee1l4EY_5x6llKfbFkJ49qSQMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E20C2/708CC3283E2711F1B9F4379FB5833773/5487474E3E2B11F1962E9E0BB7833773.roa Signing time: Fri 25 Sep 2026 08:58:24 +0000 ROA not before: Fri 25 Sep 2026 08:58:24 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 63888 IP address blocks: 43.239.84.0/22 maxlen: 22 43.239.84.0/24 maxlen: 24 43.239.85.0/24 maxlen: 24 43.239.86.0/24 maxlen: 24 43.239.87.0/24 maxlen: 24 103.236.100.0/22 maxlen: 22 103.236.100.0/24 maxlen: 24 103.236.101.0/24 maxlen: 24 103.236.102.0/24 maxlen: 24 103.236.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E20C2/708CC3283E2711F1B9F4379FB5833773/eee1l4EY_5x6llKfbFkJ49qSQMM.crl rsync://rpki.apnic.net/member_repository/A91E20C2/708CC3283E2711F1B9F4379FB5833773/eee1l4EY_5x6llKfbFkJ49qSQMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eee1l4EY_5x6llKfbFkJ49qSQMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 08:57:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E20C2, serialNumber=79E7B5978118FF9C7A96529F6C5909E3DA9240C3 Validity Not Before: Sep 25 08:58:24 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ab637b0-f524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c1:5a:59:a8:8e:64:92:78:91:e9:88:b2:31: 70:2f:69:23:7e:16:a8:bf:06:ef:c0:02:b3:d7:eb: bb:25:9d:75:a0:c0:a8:f4:20:fb:c1:7e:68:b5:bb: f6:2d:32:99:24:cc:f5:0f:ac:4a:56:35:4b:0c:d2: 29:d9:d5:1a:78:20:de:ee:70:72:7b:2f:0f:63:c4: 72:bf:4a:25:d0:05:9e:5d:8f:26:ad:b9:05:25:3a: d2:c5:59:21:40:a5:c5:5f:fc:63:85:e7:be:ed:65: 46:c1:d2:e7:1a:eb:4a:66:9a:6f:ea:62:8a:16:70: 3b:c4:51:ff:8d:da:a6:57:33:d0:64:57:60:d7:e7: 95:d8:b4:33:80:dc:9c:92:0f:f9:83:fb:27:99:b3: e0:cb:33:99:f6:a6:4a:5c:8c:48:9e:ca:3a:5a:81: bb:da:59:1f:5e:d7:33:72:f9:6b:50:ba:9c:86:b8: ff:4a:e3:70:51:0f:36:fb:8e:9b:cf:9d:c5:63:e5: ea:6f:64:5d:59:bc:53:f5:34:e7:a1:24:e5:37:ca: f5:1b:e2:f1:e0:42:12:48:28:b5:a9:50:4c:de:3c: 9d:21:6b:c3:fe:c1:3c:8c:5b:68:cc:46:96:37:1a: 3d:f3:b0:db:22:a4:1a:af:f2:be:22:af:f3:d9:f2: 9c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:4A:A9:80:4D:1D:FF:C8:87:CC:CE:C0:D6:8A:38:AB:23:6B:F2:D1 X509v3 Authority Key Identifier: keyid:79:E7:B5:97:81:18:FF:9C:7A:96:52:9F:6C:59:09:E3:DA:92:40:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E20C2/708CC3283E2711F1B9F4379FB5833773/eee1l4EY_5x6llKfbFkJ49qSQMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eee1l4EY_5x6llKfbFkJ49qSQMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E20C2/708CC3283E2711F1B9F4379FB5833773/5487474E3E2B11F1962E9E0BB7833773.roa sbgp-ipAddrBlock: critical IPv4: 43.239.84.0/22 103.236.100.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:d5:2c:3e:30:df:3c:3f:d2:1e:70:21:b0:9c:a6:dc:98:47: 80:62:a0:f0:25:0c:0f:48:6d:1f:a6:93:ca:52:0c:88:ce:70: bc:21:e0:24:66:2e:83:d7:7e:41:99:4c:76:9c:ae:c2:8a:8d: 2c:84:c5:23:15:03:81:57:8c:b8:77:b8:21:45:8a:84:70:69: 7e:6a:7d:b1:2a:f1:52:8e:b7:70:ab:f8:3a:c5:06:94:9c:db: a0:83:6c:17:c3:86:b8:e1:07:ab:e3:6f:a6:f4:9f:08:a1:b0: 13:fc:3f:ba:df:9b:33:42:9a:fe:9b:8f:15:52:0b:a5:37:82: 5e:35:cd:2c:3b:20:b2:f3:8d:39:ca:b1:88:f3:29:ca:90:be: 63:70:df:a4:ea:06:72:47:fd:72:a8:49:da:e5:c7:e1:ca:9d: 1d:8c:54:c3:e0:8a:78:bd:9b:0c:74:2b:e0:cd:d1:39:ca:59: c2:08:b1:f5:cb:92:e1:d6:db:2b:63:b5:a1:a6:97:b3:14:ad: fc:a1:65:94:12:61:f3:ad:53:77:fb:25:c3:21:5e:88:08:11: d0:8b:e9:7e:ca:34:36:8f:2e:70:9f:53:56:64:78:00:ea:b1: 75:b4:50:3a:d3:45:fe:d0:c0:be:fe:fd:80:76:82:dc:ee:98: 09:85:d1:de -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MjBDMjExMC8GA1UEBRMoNzlFN0I1OTc4MTE4RkY5QzdBOTY1MjlGNkM1OTA5RTNE QTkyNDBDMzAeFw0yNjA5MjUwODU4MjRaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYjYzN2IwLWY1MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDwVpZqI5kkniR6YiyMXAvaSN+Fqi/Bu/AArPX67slnXWgwKj0IPvBfmi1u/Yt MpkkzPUPrEpWNUsM0inZ1Rp4IN7ucHJ7Lw9jxHK/SiXQBZ5djyatuQUlOtLFWSFA pcVf/GOF577tZUbB0uca60pmmm/qYooWcDvEUf+N2qZXM9BkV2DX55XYtDOA3JyS D/mD+yeZs+DLM5n2pkpcjEieyjpagbvaWR9e1zNy+WtQupyGuP9K43BRDzb7jpvP ncVj5epvZF1ZvFP1NOehJOU3yvUb4vHgQhJIKLWpUEzePJ0ha8P+wTyMW2jMRpY3 Gj3zsNsipBqv8r4ir/PZ8pyrAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQUpEqpgE0d /8iHzM7A1oo4qyNr8tEwHwYDVR0jBBgwFoAUeee1l4EY/5x6llKfbFkJ49qSQMMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUyMEMyLzcwOENDMzI4M0Uy NzExRjFCOUY0Mzc5RkI1ODMzNzczL2VlZTFsNEVZXzV4NmxsS2ZiRmtKNDlxU1FN TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZWVlMWw0RVlfNXg2bGxLZmJGa0o0OXFTUU1NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjBDMi83MDhDQzMyODNFMjcxMUYxQjlGNDM3OUZCNTgzMzc3My81NDg3NDc0RTNF MkIxMUYxOTYyRTlFMEJCNzgzMzc3My5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBAIr71QDBAJn7GQwDQYJKoZIhvcNAQELBQADggEBAJ/VLD4w3zw/0h5w IbCcptyYR4BioPAlDA9IbR+mk8pSDIjOcLwh4CRmLoPXfkGZTHacrsKKjSyExSMV A4FXjLh3uCFFioRwaX5qfbEq8VKOt3Cr+DrFBpSc26CDbBfDhrjhB6vjb6b0nwih sBP8P7rfmzNCmv6bjxVSC6U3gl41zSw7ILLzjTnKsYjzKcqQvmNw36TqBnJH/XKo Sdrlx+HKnR2MVMPgini9mwx0K+DN0TnKWcIIsfXLkuHW2ytjtaGml7MUrfyhZZQS YfOtU3f7JcMhXogIEdCL6X7KNDaPLnCfU1ZkeADqsXW0UDrTRf7QwL7+/YB2gtzu mAmF0d4= -----END CERTIFICATE-----Generated at Mon Oct 5 04:58:10 2026 by rpki-client