$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/5F649D88F27E11EE8704D12FC4F9AE02.roa File: 5F649D88F27E11EE8704D12FC4F9AE02.roa (raw, json) Hash identifier: E7gJCHO64l/SwQNJtTfMdoKvHZZkCVR7yeRccRJKNd0= Subject key identifier: 1E:ED:61:99:A8:7E:F0:D2:27:A7:50:73:00:62:48:A1:4F:F6:7F:86 Certificate issuer: /CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Certificate serial: 22F8 Authority key identifier: 3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/5F649D88F27E11EE8704D12FC4F9AE02.roa Signing time: Sat 26 Sep 2026 16:28:16 +0000 ROA not before: Sat 26 Sep 2026 16:28:16 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 16509 IP address blocks: 43.230.24.0/24 maxlen: 24 43.230.25.0/24 maxlen: 24 103.11.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 15:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8952 (0x22f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0EBF, serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Validity Not Before: Sep 26 16:28:16 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ab7f29f-c226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7d:cd:35:6e:34:b6:b1:7f:75:7e:fd:08:12: 11:2e:90:79:4a:44:8f:9b:aa:dd:9c:34:15:c5:24: e1:b0:bf:0d:92:82:bc:86:9d:90:7e:de:4f:c1:fa: cb:a0:96:d5:f0:e0:64:f6:a6:20:35:5c:a6:87:24: 6d:5d:61:bb:f2:09:84:65:96:82:40:1c:fe:c9:40: 70:ba:d2:2b:30:f6:3b:b4:01:f8:c1:2b:1d:3f:f5: 3a:0c:ac:80:0c:2a:2b:0d:67:3c:ba:4a:80:78:bf: a9:7c:19:3c:e5:f3:df:7f:a4:46:5c:d2:04:11:79: 96:c4:c3:c8:49:8e:87:99:83:2d:90:51:28:17:02: 79:81:62:9f:1c:54:f3:84:b0:bf:4b:2b:b0:46:b1: 07:86:97:7c:04:e1:1e:f4:9a:23:f8:1e:c6:c0:ad: 0b:f9:d9:18:be:28:78:d2:b7:dd:ae:76:0a:11:44: 4f:72:78:69:6d:80:e4:36:e7:9b:a9:9b:53:de:ed: c3:b1:11:67:7c:af:c0:d7:12:58:b7:3f:74:11:e0: 64:4f:53:57:90:0b:78:a2:3f:1d:ff:bf:92:91:c0: 5f:b1:c9:48:b1:87:34:18:72:dd:8c:01:50:cc:d8: f1:fb:74:31:23:69:15:d8:90:29:e9:55:7b:e6:5d: da:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:ED:61:99:A8:7E:F0:D2:27:A7:50:73:00:62:48:A1:4F:F6:7F:86 X509v3 Authority Key Identifier: keyid:3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/5F649D88F27E11EE8704D12FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.230.24.0/23 103.11.150.0/24 Signature Algorithm: sha256WithRSAEncryption 47:d2:d4:9f:9c:38:58:14:9e:89:29:3e:a2:f1:c5:84:b1:6b: 10:73:73:d0:ff:aa:15:13:df:9c:c5:29:72:1f:8f:d0:2c:77: d9:3d:42:ef:b4:45:66:c0:3f:e4:3c:01:d0:98:88:6f:bb:72: 62:38:b2:50:80:0b:fc:1e:a3:00:5f:87:0a:07:32:58:ae:09: 82:22:94:e4:eb:e8:be:7c:2e:0e:ed:c9:1e:f7:73:f7:85:36: 4b:7f:61:0d:5d:88:04:3a:07:42:b8:5e:96:77:62:2b:29:ae: 99:f2:90:5c:26:8a:35:f1:a2:37:bf:e1:ec:19:0c:2c:34:4a: 58:ff:9f:0e:7c:88:6f:3c:ac:f1:6c:a6:fb:5a:b9:e1:08:6a: ae:87:4f:59:45:71:5b:82:e0:ff:00:c4:73:30:1b:99:7e:38: 80:b6:94:f6:74:02:55:65:a5:80:20:97:23:ab:f8:6f:c7:f9: 5c:ff:ab:fd:ff:6a:39:f6:d6:dc:33:8e:65:ee:ac:56:cb:38: 7a:0e:02:d6:47:52:d0:07:f9:ff:1d:da:61:81:2f:03:77:00: d4:11:48:31:07:ff:8d:40:5c:f7:8e:eb:c6:06:2d:1e:24:39: 79:81:85:55:d9:6d:63:65:12:b0:ea:0d:dd:ef:c0:9d:12:a0: ce:3b:98:e5 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICIvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBFQkYxMTAvBgNVBAUTKDNBQ0NCNjk1MzlBQzlGNDI4OEJDRDBGMEE1NDI1MEQ1 OTJGNTQwRDQwHhcNMjYwOTI2MTYyODE2WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWI3ZjI5Zi1jMjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzn3NNW40trF/dX79CBIRLpB5SkSPm6rdnDQVxSThsL8NkoK8hp2Qft5PwfrL oJbV8OBk9qYgNVymhyRtXWG78gmEZZaCQBz+yUBwutIrMPY7tAH4wSsdP/U6DKyA DCorDWc8ukqAeL+pfBk85fPff6RGXNIEEXmWxMPISY6HmYMtkFEoFwJ5gWKfHFTz hLC/SyuwRrEHhpd8BOEe9Joj+B7GwK0L+dkYvih40rfdrnYKEURPcnhpbYDkNueb qZtT3u3DsRFnfK/A1xJYtz90EeBkT1NXkAt4oj8d/7+SkcBfsclIsYc0GHLdjAFQ zNjx+3QxI2kV2JAp6VV75l3aqQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFB7tYZmo fvDSJ6dQcwBiSKFP9n+GMB8GA1UdIwQYMBaAFDrMtpU5rJ9CiLzQ8KVCUNWS9UDU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEVCRi81Rjg0RDdEOERC ODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24wS0l2TkR3cFVKUTFaTDFR TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09zeTJsVG1zbjBLSXZORHdwVUpRMVpMMVFOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjBFQkYvNUY4NEQ3RDhEQjgwMTFFNTlBQjdFRDFFQzRGOUFFMDIvNUY2NDlEODhG MjdFMTFFRTg3MDREMTJGQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBK+YYAwQAZwuWMA0GCSqGSIb3DQEBCwUAA4IBAQBH0tSfnDhYFJ6J KT6i8cWEsWsQc3PQ/6oVE9+cxSlyH4/QLHfZPULvtEVmwD/kPAHQmIhvu3JiOLJQ gAv8HqMAX4cKBzJYrgmCIpTk6+i+fC4O7cke93P3hTZLf2ENXYgEOgdCuF6Wd2Ir Ka6Z8pBcJoo18aI3v+HsGQwsNEpY/58OfIhvPKzxbKb7WrnhCGquh09ZRXFbguD/ AMRzMBuZfjiAtpT2dAJVZaWAIJcjq/hvx/lc/6v9/2o59tbcM45l7qxWyzh6DgLW R1LQB/n/HdphgS8DdwDUEUgxB/+NQFz3juvGBi0eJDl5gYVV2W1jZRKw6g3d78Cd EqDOO5jl -----END CERTIFICATE-----Generated at Tue Oct 13 19:26:07 2026 by rpki-client