$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/F42FB236896C11F1ABDFBC266B11F970.roa File: F42FB236896C11F1ABDFBC266B11F970.roa (raw, json) Hash identifier: UNVHBnU+2V0l5QwKE9egkbd36UrDelXFEfM3yAjE9ZQ= Subject key identifier: 49:1B:FF:89:EB:88:BE:30:07:25:AB:FC:4A:CA:B5:2C:CE:C3:A8:F6 Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Certificate serial: 2010 Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/F42FB236896C11F1ABDFBC266B11F970.roa Signing time: Mon 27 Jul 2026 03:40:47 +0000 ROA not before: Mon 27 Jul 2026 03:40:47 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 24429 IP address blocks: 43.102.128.0/20 maxlen: 24 43.102.144.0/20 maxlen: 24 43.109.0.0/16 maxlen: 24 2404:2280:100::/40 maxlen: 48 2404:2280:200::/40 maxlen: 48 2404:2280:300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:14:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8208 (0x2010) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Validity Not Before: Jul 27 03:40:47 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6a66d33f-f693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:af:8b:b3:be:0f:d4:19:45:80:4c:de:06:95: c7:d7:28:c4:3c:9a:93:79:13:ea:a9:68:cb:a4:e8: 01:9d:11:41:a2:6c:45:5a:00:9d:11:b3:5c:61:be: d8:32:59:d4:f4:52:7b:80:77:b3:76:51:0d:07:c7: f0:04:8f:d2:8c:b7:54:14:ab:93:2f:f8:fc:10:bb: ff:2a:fd:32:e3:9b:54:2c:03:86:5c:0e:bf:60:aa: 39:00:be:93:de:cc:c4:67:a7:8b:d0:83:65:5c:de: 96:d7:a0:62:63:c8:e6:5b:3f:84:e8:a1:dc:39:a2: da:e6:14:d8:f0:d1:6d:27:d8:3f:37:31:91:76:3b: d6:62:b3:0f:fb:dc:6f:d4:0a:e1:80:71:30:06:bf: 3f:94:47:51:2f:a3:dc:0f:a5:e8:77:a4:63:54:61: ac:49:17:7f:21:0a:76:d6:6c:cd:36:eb:f0:8f:de: 6c:2e:fb:0b:70:02:49:e7:29:cb:26:ba:87:ef:df: 08:b4:db:eb:a8:58:7e:d2:24:1b:76:a8:d3:54:e9: 66:3a:6e:c4:b4:ac:2e:58:ac:9b:ad:0a:e6:5d:12: 12:38:cc:fe:b1:ae:2b:cf:22:87:16:db:6e:f1:d5: f1:af:ae:dd:f2:c6:11:f9:1f:4a:93:1a:61:df:1b: cd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1B:FF:89:EB:88:BE:30:07:25:AB:FC:4A:CA:B5:2C:CE:C3:A8:F6 X509v3 Authority Key Identifier: keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/F42FB236896C11F1ABDFBC266B11F970.roa sbgp-ipAddrBlock: critical IPv4: 43.102.128.0/19 43.109.0.0/16 IPv6: 2404:2280:100::-2404:2280:3ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 5e:d4:d5:8b:58:8b:32:be:4b:49:2d:cd:e9:85:59:d7:ee:34: ed:68:95:71:e3:2e:c6:53:ac:1e:75:25:76:ca:48:8e:81:06: 88:79:73:3d:bb:b5:97:06:04:6c:e0:0f:87:0b:b1:e5:cc:28: 01:33:03:72:61:b7:22:ec:28:b3:a6:a8:1d:60:fe:eb:9b:67: 1e:cf:7e:7f:40:f1:57:fa:77:3e:4b:c1:f0:ad:f2:65:ae:00: 10:46:15:b1:c7:5c:ef:36:2f:33:99:f3:ec:d1:ab:23:e5:80: 9b:8c:2e:a1:ec:74:91:a7:16:a3:7e:60:09:f5:bb:de:a9:4f: 0e:80:2e:88:5c:46:56:8f:69:cf:43:b2:26:f1:b3:81:b7:7c: b9:33:1a:27:f7:bf:36:49:6b:3a:fe:c1:e7:e4:ff:46:10:e5: e4:59:75:5c:a9:ca:d4:17:8b:f0:d1:a2:c4:f5:bc:d1:9c:5a: f5:f6:f1:38:a8:e8:92:88:25:40:81:18:b4:62:c2:e4:12:84: ed:b9:8d:9e:d0:2d:68:aa:8c:a6:48:9a:9e:d1:49:ca:18:bf: 37:5a:30:69:7d:c3:34:37:ce:52:d2:68:9a:bf:55:9c:7e:df: b7:1f:9d:81:3b:48:21:e3:2f:c0:5c:bc:c0:56:ce:c6:d0:24: 9e:0b:c4:c6 -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgICIBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDlFMUMzNTMxRDAwNDVFQTM4OUI2OENGRjkyODZBMDhG QkNCQkQ4QkQwHhcNMjYwNzI3MDM0MDQ3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY2ZDMzZi1mNjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwK+Ls74P1BlFgEzeBpXH1yjEPJqTeRPqqWjLpOgBnRFBomxFWgCdEbNcYb7Y MlnU9FJ7gHezdlENB8fwBI/SjLdUFKuTL/j8ELv/Kv0y45tULAOGXA6/YKo5AL6T 3szEZ6eL0INlXN6W16BiY8jmWz+E6KHcOaLa5hTY8NFtJ9g/NzGRdjvWYrMP+9xv 1ArhgHEwBr8/lEdRL6PcD6Xod6RjVGGsSRd/IQp21mzNNuvwj95sLvsLcAJJ5ynL JrqH798ItNvrqFh+0iQbdqjTVOlmOm7EtKwuWKybrQrmXRISOMz+sa4rzyKHFttu 8dXxr67d8sYR+R9Kkxph3xvN5wIDAQABo4ICfzCCAnswHQYDVR0OBBYEFEkb/4nr iL4wByWr/ErKtSzOw6j2MB8GA1UdIwQYMBaAFJ4cNTHQBF6jibaM/5KGoI+8u9i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC85OTNGMjA5MEFC QzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhxT0p0b3pfa29hZ2o3eTcy TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25odzFNZEFFWHFPSnRvel9rb2Fnajd5NzJMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUExOTgvOTkzRjIwOTBBQkM0MTFFNkJENkJFRDE0QzRGOUFFMDIvRjQyRkIyMzY4 OTZDMTFGMUFCREZCQzI2NkIxMUY5NzAucm9hMD4GCCsGAQUFBwEHAQH/BC8wLTAR BAIAATALAwQFK2aAAwMAK20wGAQCAAIwEjAQAwYAJAQigAEDBgIkBCKAADANBgkq hkiG9w0BAQsFAAOCAQEAXtTVi1iLMr5LSS3N6YVZ1+407WiVceMuxlOsHnUldspI joEGiHlzPbu1lwYEbOAPhwux5cwoATMDcmG3Iuwos6aoHWD+65tnHs9+f0DxV/p3 PkvB8K3yZa4AEEYVscdc7zYvM5nz7NGrI+WAm4wuoex0kacWo35gCfW73qlPDoAu iFxGVo9pz0OyJvGzgbd8uTMaJ/e/NklrOv7B5+T/RhDl5Fl1XKnK1BeL8NGixPW8 0Zxa9fbxOKjokoglQIEYtGLC5BKE7bmNntAtaKqMpkiantFJyhi/N1owaX3DNDfO UtJomr9VnH7ftx+dgTtIIeMvwFy8wFbOxtAkngvExg== -----END CERTIFICATE-----Generated at Mon Jul 27 14:27:44 2026 by rpki-client