$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/586B33AEF44611EBA78C117AC4F9AE02.roa File: 586B33AEF44611EBA78C117AC4F9AE02.roa (raw, json) Hash identifier: er6HKXl7FLdoikxrG89uSXtId0RqHn988XNTcZ7SGH0= Subject key identifier: 24:36:D3:7C:DB:65:29:ED:3A:73:9C:2D:36:6B:82:FA:2E:8D:3C:16 Certificate issuer: /CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Certificate serial: 22FC Authority key identifier: 3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/586B33AEF44611EBA78C117AC4F9AE02.roa Signing time: Sat 26 Sep 2026 16:28:24 +0000 ROA not before: Sat 26 Sep 2026 16:28:24 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 58436 IP address blocks: 43.230.24.0/24 maxlen: 24 43.230.25.0/24 maxlen: 24 43.255.124.0/22 maxlen: 24 45.125.196.0/22 maxlen: 22 103.5.151.0/24 maxlen: 24 103.11.143.0/24 maxlen: 24 103.11.150.0/24 maxlen: 24 103.11.151.0/24 maxlen: 24 103.16.16.0/24 maxlen: 24 103.16.17.0/24 maxlen: 24 103.16.18.0/24 maxlen: 24 103.16.19.0/24 maxlen: 24 103.194.76.0/22 maxlen: 24 124.6.56.0/22 maxlen: 24 2001:df0:24f::/48 maxlen: 48 2407:8100:1::/48 maxlen: 48 2407:8100:3::/48 maxlen: 48 2407:8100:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 15:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8956 (0x22fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0EBF, serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Validity Not Before: Sep 26 16:28:24 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ab7f2a8-ca88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6f:39:5f:24:19:4c:8c:20:06:68:ed:e1:5b: 9c:26:58:19:2d:2c:db:e6:13:08:83:bc:0f:a6:fd: e4:a4:5e:82:1d:16:ef:8a:98:5d:16:88:35:0c:cd: 81:99:90:87:bc:e8:e8:62:be:52:94:29:86:c2:bc: 2c:4b:91:60:f8:83:8f:54:1d:14:d7:9f:4b:f1:84: de:a0:36:75:eb:5d:c6:0d:67:bd:2a:9d:59:17:79: c2:46:d8:16:ad:18:c4:6c:b8:c3:eb:d8:40:18:d4: 13:b5:64:ff:c4:be:b1:5a:7d:e6:ad:5c:96:09:0e: 56:be:43:de:f2:dd:bf:b7:ee:b8:0d:5d:35:7f:7a: 15:c9:00:34:9a:2f:85:2f:77:f6:88:d2:15:45:5b: 73:c6:59:59:b5:a4:50:a7:51:b0:db:36:fd:dd:c0: a7:de:50:6e:90:d8:a9:49:f0:46:a0:06:ea:b3:4f: ff:25:af:90:af:12:0a:5d:9f:25:ee:a5:4c:70:2b: 16:ca:96:e0:cc:06:58:77:5c:94:14:98:ca:8f:8c: 28:46:3c:50:46:2c:b5:9b:c9:9a:5d:c4:76:48:f0: c5:5d:d4:8b:56:89:fe:c8:f1:92:d6:5c:59:5d:93: 5b:fa:9a:58:d3:12:d2:65:f7:3c:f6:b1:6e:b1:65: 49:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:36:D3:7C:DB:65:29:ED:3A:73:9C:2D:36:6B:82:FA:2E:8D:3C:16 X509v3 Authority Key Identifier: keyid:3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/586B33AEF44611EBA78C117AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.230.24.0/23 43.255.124.0/22 45.125.196.0/22 103.5.151.0/24 103.11.143.0/24 103.11.150.0/23 103.16.16.0/22 103.194.76.0/22 124.6.56.0/22 IPv6: 2001:df0:24f::/48 2407:8100:1::/48 2407:8100:3::/48 2407:8100:6::/48 Signature Algorithm: sha256WithRSAEncryption 65:79:dc:ca:31:df:d8:ff:10:33:56:77:3d:c0:ca:58:ad:c3: c1:a4:fe:41:ce:d4:17:67:b1:ae:13:db:24:e4:cd:a0:a2:ed: 23:30:b8:f3:bd:71:40:60:84:3f:29:97:14:9f:bc:de:1c:e2: 9e:20:fd:cb:eb:ee:18:c4:18:91:f1:92:06:5b:98:71:a6:ae: fa:67:10:bc:36:03:f2:47:31:34:58:88:23:5a:7a:3e:bc:4e: b5:77:34:14:15:25:2c:d6:31:4d:23:bf:4b:ac:ae:4c:a6:91: 38:ae:11:9a:ca:0e:ee:c7:3d:77:e8:7b:95:fb:dd:a6:d8:7c: cc:48:14:6b:eb:c5:d2:a9:97:44:b3:dc:71:29:9b:55:85:ea: 16:31:ea:57:03:f4:3e:b6:d7:cd:2e:24:4b:26:cc:44:d7:f1: d8:3f:bb:c0:33:9c:11:48:98:6e:46:c4:7c:93:ab:0e:47:a3: 16:02:d4:ea:79:07:a7:68:ef:ca:4f:75:41:85:9b:a9:aa:a0: 9d:98:93:b3:87:35:3e:ba:d0:f9:51:c4:86:14:4d:e6:46:2f: f0:76:ac:67:2e:98:45:4a:93:84:dc:a8:a6:7e:4f:d8:5b:89: 0b:f5:69:3a:be:f4:9f:58:f6:af:9c:95:e9:91:cd:d8:2e:0e: 21:6f:61:f6 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgICIvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBFQkYxMTAvBgNVBAUTKDNBQ0NCNjk1MzlBQzlGNDI4OEJDRDBGMEE1NDI1MEQ1 OTJGNTQwRDQwHhcNMjYwOTI2MTYyODI0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWI3ZjJhOC1jYTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmW85XyQZTIwgBmjt4VucJlgZLSzb5hMIg7wPpv3kpF6CHRbviphdFog1DM2B mZCHvOjoYr5SlCmGwrwsS5Fg+IOPVB0U159L8YTeoDZ1613GDWe9Kp1ZF3nCRtgW rRjEbLjD69hAGNQTtWT/xL6xWn3mrVyWCQ5WvkPe8t2/t+64DV01f3oVyQA0mi+F L3f2iNIVRVtzxllZtaRQp1Gw2zb93cCn3lBukNipSfBGoAbqs0//Ja+QrxIKXZ8l 7qVMcCsWypbgzAZYd1yUFJjKj4woRjxQRiy1m8maXcR2SPDFXdSLVon+yPGS1lxZ XZNb+ppY0xLSZfc89rFusWVJtwIDAQABo4ICvDCCArgwHQYDVR0OBBYEFCQ203zb ZSntOnOcLTZrgvoujTwWMB8GA1UdIwQYMBaAFDrMtpU5rJ9CiLzQ8KVCUNWS9UDU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEVCRi81Rjg0RDdEOERC ODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24wS0l2TkR3cFVKUTFaTDFR TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09zeTJsVG1zbjBLSXZORHdwVUpRMVpMMVFOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjBFQkYvNUY4NEQ3RDhEQjgwMTFFNTlBQjdFRDFFQzRGOUFFMDIvNTg2QjMzQUVG NDQ2MTFFQkE3OEMxMTdBQzRGOUFFMDIucm9hMHsGCCsGAQUFBwEHAQH/BGwwajA8 BAIAATA2AwQBK+YYAwQCK/98AwQCLX3EAwQAZwWXAwQAZwuPAwQBZwuWAwQCZxAQ AwQCZ8JMAwQCfAY4MCoEAgACMCQDBwAgAQ3wAk8DBwAkB4EAAAEDBwAkB4EAAAMD BwAkB4EAAAYwDQYJKoZIhvcNAQELBQADggEBAGV53Mox39j/EDNWdz3Aylitw8Gk /kHO1Bdnsa4T2yTkzaCi7SMwuPO9cUBghD8plxSfvN4c4p4g/cvr7hjEGJHxkgZb mHGmrvpnELw2A/JHMTRYiCNaej68TrV3NBQVJSzWMU0jv0usrkymkTiuEZrKDu7H PXfoe5X73abYfMxIFGvrxdKpl0Sz3HEpm1WF6hYx6lcD9D62180uJEsmzETX8dg/ u8AznBFImG5GxHyTqw5HoxYC1Op5B6do78pPdUGFm6mqoJ2Yk7OHNT660PlRxIYU TeZGL/B2rGcumEVKk4TcqKZ+T9hbiQv1aTq+9J9Y9q+clemRzdguDiFvYfY= -----END CERTIFICATE-----Generated at Tue Oct 13 06:17:11 2026 by rpki-client