$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/5480D316764D11EA8CB5C039C4F9AE02.roa File: 5480D316764D11EA8CB5C039C4F9AE02.roa (raw, json) Hash identifier: DUmSWxjXvMqVaz5OCjZCWsLLjmpvDKB9aD6r7hfT8hM= Subject key identifier: BE:76:1F:FA:49:DF:05:13:07:63:2F:17:D3:E1:C1:C1:F4:E2:DE:AE Certificate issuer: /CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Certificate serial: 22FB Authority key identifier: 3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/5480D316764D11EA8CB5C039C4F9AE02.roa Signing time: Sat 26 Sep 2026 16:28:22 +0000 ROA not before: Sat 26 Sep 2026 16:28:22 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 56308 IP address blocks: 43.255.124.0/22 maxlen: 22 45.125.196.0/22 maxlen: 22 103.16.19.0/24 maxlen: 24 2407:8100:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 15:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8955 (0x22fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0EBF, serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Validity Not Before: Sep 26 16:28:22 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ab7f2a6-ffbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:53:e7:c4:d3:1e:bd:46:6f:50:0c:c0:9c:44: f1:9c:ad:9c:87:4a:54:b9:6d:11:48:3a:8d:17:79: c1:91:6b:66:9a:2a:73:62:11:e7:7c:cb:f1:95:f3: 95:66:3d:5c:25:ad:54:a7:47:c5:bc:b3:87:a1:f4: 74:b6:32:48:25:60:9e:42:6f:98:94:a3:7d:be:37: e0:a3:13:4b:37:c6:82:c6:50:52:e7:6c:fa:c6:1b: 9d:6c:d4:17:2a:ff:32:56:a9:09:eb:7e:28:37:3c: 2d:39:15:ea:10:92:ff:d4:4d:38:e8:dd:32:ab:c9: ae:9e:76:22:fe:25:06:66:37:63:ff:c7:32:b5:14: 2d:8a:25:8d:dd:e4:2d:0b:54:ce:45:ef:d5:99:b4: fd:2b:1c:5a:d3:40:33:fc:c6:46:ca:e7:50:43:72: 5b:52:3e:9f:9a:a4:27:2d:60:b2:89:cd:10:e8:69: 3e:eb:ea:ae:fe:b0:36:cd:81:3f:84:2e:4f:37:c0: 6d:4e:81:19:34:39:3b:a1:b5:9c:16:5a:8d:7d:a7: b8:b6:6d:21:df:8f:d9:33:3c:50:73:50:54:1c:ab: ce:dd:ca:6e:23:c1:b2:56:c8:1d:1c:e3:fa:81:ee: 82:e9:b2:e6:86:99:03:ae:e2:d4:87:49:d4:47:aa: 48:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:76:1F:FA:49:DF:05:13:07:63:2F:17:D3:E1:C1:C1:F4:E2:DE:AE X509v3 Authority Key Identifier: keyid:3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/5480D316764D11EA8CB5C039C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.255.124.0/22 45.125.196.0/22 103.16.19.0/24 IPv6: 2407:8100:5::/48 Signature Algorithm: sha256WithRSAEncryption 89:0c:b6:b8:09:e9:4e:60:60:3d:51:19:3e:26:f4:2e:06:d8: e4:5c:97:48:0d:49:ca:6b:cb:58:3c:96:39:c9:76:74:7d:12: ce:a9:ee:b8:98:01:47:af:17:c5:86:59:85:53:80:e6:2b:0f: a7:79:60:95:bc:b0:9a:e7:29:72:ba:85:49:82:c0:e2:70:7f: 56:11:21:92:28:d9:c8:1d:5c:b2:20:5a:ce:cb:76:92:63:ee: 68:99:37:c3:98:c2:a2:2a:04:34:d5:e7:cd:9f:51:57:7a:62: 7d:10:c8:e3:d4:f9:a3:98:af:77:e8:f5:91:03:99:94:e3:81: a7:e1:d4:95:8f:a9:3e:6d:a7:d8:71:6d:d2:10:75:22:62:36: eb:97:f3:90:fb:42:ca:c3:d5:53:89:48:6b:65:4f:93:43:dc: 6d:84:46:6c:c7:64:21:47:97:ef:ac:7e:92:25:23:02:a4:6b: 6a:71:90:8f:8b:1a:d7:1c:ec:a4:c5:ef:13:aa:c8:51:df:da: b1:c6:d8:8b:42:ea:9d:d5:ce:a2:dd:28:80:e7:a1:89:81:2c: 18:39:b8:84:d7:75:ff:58:31:05:c2:9c:41:51:88:38:0d:3e: 90:b0:1a:c5:4e:e8:72:bb:a6:3c:20:23:77:f6:6c:2c:7e:20: 84:8b:6d:49 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgICIvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBFQkYxMTAvBgNVBAUTKDNBQ0NCNjk1MzlBQzlGNDI4OEJDRDBGMEE1NDI1MEQ1 OTJGNTQwRDQwHhcNMjYwOTI2MTYyODIyWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWI3ZjJhNi1mZmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAplPnxNMevUZvUAzAnETxnK2ch0pUuW0RSDqNF3nBkWtmmipzYhHnfMvxlfOV Zj1cJa1Up0fFvLOHofR0tjJIJWCeQm+YlKN9vjfgoxNLN8aCxlBS52z6xhudbNQX Kv8yVqkJ634oNzwtORXqEJL/1E046N0yq8munnYi/iUGZjdj/8cytRQtiiWN3eQt C1TORe/VmbT9Kxxa00Az/MZGyudQQ3JbUj6fmqQnLWCyic0Q6Gk+6+qu/rA2zYE/ hC5PN8BtToEZNDk7obWcFlqNfae4tm0h34/ZMzxQc1BUHKvO3cpuI8GyVsgdHOP6 ge6C6bLmhpkDruLUh0nUR6pIawIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFL52H/pJ 3wUTB2MvF9PhwcH04t6uMB8GA1UdIwQYMBaAFDrMtpU5rJ9CiLzQ8KVCUNWS9UDU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEVCRi81Rjg0RDdEOERC ODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24wS0l2TkR3cFVKUTFaTDFR TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09zeTJsVG1zbjBLSXZORHdwVUpRMVpMMVFOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjBFQkYvNUY4NEQ3RDhEQjgwMTFFNTlBQjdFRDFFQzRGOUFFMDIvNTQ4MEQzMTY3 NjREMTFFQThDQjVDMDM5QzRGOUFFMDIucm9hMDwGCCsGAQUFBwEHAQH/BC0wKzAY BAIAATASAwQCK/98AwQCLX3EAwQAZxATMA8EAgACMAkDBwAkB4EAAAUwDQYJKoZI hvcNAQELBQADggEBAIkMtrgJ6U5gYD1RGT4m9C4G2ORcl0gNScpry1g8ljnJdnR9 Es6p7riYAUevF8WGWYVTgOYrD6d5YJW8sJrnKXK6hUmCwOJwf1YRIZIo2cgdXLIg Ws7LdpJj7miZN8OYwqIqBDTV582fUVd6Yn0QyOPU+aOYr3fo9ZEDmZTjgafh1JWP qT5tp9hxbdIQdSJiNuuX85D7QsrD1VOJSGtlT5ND3G2ERmzHZCFHl++sfpIlIwKk a2pxkI+LGtcc7KTF7xOqyFHf2rHG2ItC6p3VzqLdKIDnoYmBLBg5uITXdf9YMQXC nEFRiDgNPpCwGsVO6HK7pjwgI3f2bCx+IISLbUk= -----END CERTIFICATE-----Generated at Tue Oct 13 08:11:55 2026 by rpki-client