$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/F42FB236896C11F1ABDFBC266B11F970.roa File: F42FB236896C11F1ABDFBC266B11F970.roa (raw, json) Hash identifier: 7QqNy76CzIOhRtacRyoTS6R/J83/tPFS1SCpQHSPA5M= Subject key identifier: 2D:80:7D:AF:60:CE:91:DF:03:23:6A:12:CE:60:E0:9D:89:DC:6F:B7 Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Certificate serial: 202A Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/F42FB236896C11F1ABDFBC266B11F970.roa Signing time: Thu 27 Aug 2026 02:23:20 +0000 ROA not before: Thu 27 Aug 2026 02:23:20 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 24429 IP address blocks: 43.102.128.0/20 maxlen: 24 43.102.144.0/20 maxlen: 24 43.109.0.0/16 maxlen: 24 43.116.128.0/20 maxlen: 24 43.116.160.0/21 maxlen: 24 43.116.168.0/21 maxlen: 24 2404:2280:100::/40 maxlen: 48 2404:2280:200::/40 maxlen: 48 2404:2280:300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 16:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8234 (0x202a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Validity Not Before: Aug 27 02:23:20 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6a8f9f98-9ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:06:57:6a:2a:d0:8f:63:9f:b5:a2:4e:df:0d: 2c:71:9b:9c:58:f0:7f:75:34:7e:27:c8:63:af:7d: 15:e6:94:c1:b9:83:3e:d6:7c:ed:d9:91:05:c9:b8: c2:59:ca:ee:39:da:db:95:34:65:70:f7:a4:b9:f9: 14:71:f3:c9:f2:dd:93:fd:6b:99:f9:ca:c6:1d:ed: 82:b5:18:79:42:24:9f:1d:67:b0:22:17:1b:1b:c6: 63:26:ce:5c:80:50:82:90:ce:10:88:24:e7:26:06: 22:15:c1:b6:52:65:3f:f5:76:c8:53:7b:99:77:23: 19:2f:7c:39:61:2d:06:a9:1a:59:94:6a:ab:d5:00: 11:61:b3:e9:4d:8e:06:6a:86:06:8b:62:1b:fa:51: f4:21:e0:3a:3b:37:d1:4a:80:30:fc:1e:6a:3f:90: d0:06:ea:1b:2a:fb:05:76:c7:bd:4d:1c:60:30:55: e1:63:f2:76:1b:d9:36:eb:30:e2:3b:bd:bd:5f:f2: 37:f6:fa:d3:35:03:00:f3:a8:2d:b1:bf:9a:bb:5b: ea:b5:74:64:33:2a:48:bb:f9:9f:e2:d5:8b:cb:8e: e9:94:76:7e:f9:66:df:6b:e8:52:76:41:3f:11:32: a4:b5:1e:f4:8c:51:25:32:7a:34:09:ed:6f:c2:ad: f6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:80:7D:AF:60:CE:91:DF:03:23:6A:12:CE:60:E0:9D:89:DC:6F:B7 X509v3 Authority Key Identifier: keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/F42FB236896C11F1ABDFBC266B11F970.roa sbgp-ipAddrBlock: critical IPv4: 43.102.128.0/19 43.109.0.0/16 43.116.128.0/20 43.116.160.0/20 IPv6: 2404:2280:100::-2404:2280:3ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 87:c4:27:cf:f9:d7:66:e8:ae:76:90:fc:4e:c8:0b:f0:8d:a3: bc:ff:02:e4:a8:61:08:86:1c:1d:77:5f:a3:14:25:1e:92:36: f8:f9:be:90:ca:eb:cc:96:b0:b5:e6:a4:a6:f6:24:9c:89:2f: 86:ce:d4:f0:ef:ad:6c:31:85:32:b8:a6:e9:61:a5:25:03:b0: 5c:83:6e:46:c0:c8:f3:7c:3a:1c:db:96:0d:45:39:7e:ac:2f: d6:23:de:4a:fb:53:05:90:13:9a:dd:c1:db:d8:93:83:64:28: 01:71:0f:aa:07:1d:97:23:de:55:60:b0:a0:59:d9:b8:78:2b: 14:3f:82:8f:c1:ed:e3:fc:22:58:d2:e6:51:42:21:76:69:91: 80:82:3b:28:1e:68:e6:90:52:bd:e0:21:42:d3:de:07:6c:70: 53:a9:a1:30:7f:d9:ef:77:5a:d1:f8:06:4e:cd:2c:f8:e0:4a: 81:35:a5:1b:21:93:b8:4f:04:6a:9b:1d:64:52:19:4c:b8:49: 6b:c2:6f:8a:e7:f8:d1:c2:90:2a:d0:eb:09:e2:a3:03:50:b5: 64:9f:63:80:5b:fb:72:c5:c9:e6:49:22:3e:97:dd:c4:66:03: e2:8c:3d:9b:30:da:85:00:a8:49:ec:87:8f:8d:27:66:8c:73: 14:d2:88:08 -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgICICowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDlFMUMzNTMxRDAwNDVFQTM4OUI2OENGRjkyODZBMDhG QkNCQkQ4QkQwHhcNMjYwODI3MDIyMzIwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YThmOWY5OC05ZmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowZXairQj2OftaJO3w0scZucWPB/dTR+J8hjr30V5pTBuYM+1nzt2ZEFybjC WcruOdrblTRlcPekufkUcfPJ8t2T/WuZ+crGHe2CtRh5QiSfHWewIhcbG8ZjJs5c gFCCkM4QiCTnJgYiFcG2UmU/9XbIU3uZdyMZL3w5YS0GqRpZlGqr1QARYbPpTY4G aoYGi2Ib+lH0IeA6OzfRSoAw/B5qP5DQBuobKvsFdse9TRxgMFXhY/J2G9k26zDi O729X/I39vrTNQMA86gtsb+au1vqtXRkMypIu/mf4tWLy47plHZ++Wbfa+hSdkE/ ETKktR70jFElMno0Ce1vwq321QIDAQABo4ICizCCAocwHQYDVR0OBBYEFC2Afa9g zpHfAyNqEs5g4J2J3G+3MB8GA1UdIwQYMBaAFJ4cNTHQBF6jibaM/5KGoI+8u9i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC85OTNGMjA5MEFC QzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhxT0p0b3pfa29hZ2o3eTcy TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25odzFNZEFFWHFPSnRvel9rb2Fnajd5NzJMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUExOTgvOTkzRjIwOTBBQkM0MTFFNkJENkJFRDE0QzRGOUFFMDIvRjQyRkIyMzY4 OTZDMTFGMUFCREZCQzI2NkIxMUY5NzAucm9hMEoGCCsGAQUFBwEHAQH/BDswOTAd BAIAATAXAwQFK2aAAwMAK20DBAQrdIADBAQrdKAwGAQCAAIwEjAQAwYAJAQigAED BgIkBCKAADANBgkqhkiG9w0BAQsFAAOCAQEAh8Qnz/nXZuiudpD8TsgL8I2jvP8C 5KhhCIYcHXdfoxQlHpI2+Pm+kMrrzJawteakpvYknIkvhs7U8O+tbDGFMrim6WGl JQOwXINuRsDI83w6HNuWDUU5fqwv1iPeSvtTBZATmt3B29iTg2QoAXEPqgcdlyPe VWCwoFnZuHgrFD+Cj8Ht4/wiWNLmUUIhdmmRgII7KB5o5pBSveAhQtPeB2xwU6mh MH/Z73da0fgGTs0s+OBKgTWlGyGTuE8EapsdZFIZTLhJa8Jviuf40cKQKtDrCeKj A1C1ZJ9jgFv7csXJ5kkiPpfdxGYD4ow9mzDahQCoSeyHj40nZoxzFNKICA== -----END CERTIFICATE-----Generated at Fri Sep 11 08:24:45 2026 by rpki-client