$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/63BFE4C0292811EEAF894530C4F9AE02.roa File: 63BFE4C0292811EEAF894530C4F9AE02.roa (raw, json) Hash identifier: n49HYQFs+n+UQYY5FL252SsROTNSrZW0k/I/T/iUp6U= Subject key identifier: C7:DD:62:1B:6D:3E:AE:2D:81:1A:C6:05:84:B2:C4:1E:CB:CE:BF:E7 Certificate issuer: /CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Certificate serial: 22F9 Authority key identifier: 3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/63BFE4C0292811EEAF894530C4F9AE02.roa Signing time: Sat 26 Sep 2026 16:28:18 +0000 ROA not before: Sat 26 Sep 2026 16:28:18 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 31898 IP address blocks: 43.230.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 15:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8953 (0x22f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0EBF, serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Validity Not Before: Sep 26 16:28:18 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ab7f2a2-af29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fa:ba:7f:02:67:20:7e:1e:38:86:3c:5d:17: cf:0d:c0:ae:ed:65:77:43:e9:c2:1b:f2:7a:5f:7d: fd:ff:52:2b:73:5a:0c:50:4d:47:bf:ae:fb:80:aa: a6:c2:b8:38:02:72:9f:6b:0c:60:49:83:19:80:7f: 6d:0e:17:72:e7:52:32:af:1e:ef:06:c2:38:04:e5: 72:5d:1e:f7:6a:a4:0a:02:e4:86:d6:42:75:44:45: 73:85:20:91:2f:98:ad:83:5b:9c:3c:83:21:65:7a: f1:6b:7f:fd:4e:c5:27:56:86:71:ff:83:a0:93:22: 3c:20:22:db:45:7d:b3:57:54:11:15:01:bf:cd:03: a5:77:f6:69:be:ed:e5:84:c6:0a:2b:d5:e9:a9:1a: d9:34:f3:e7:34:84:fa:1d:a9:2d:d2:6c:8f:1f:f8: 07:07:32:d5:03:a5:57:0e:ff:66:35:ae:33:fa:d4: 2c:c5:19:26:7f:24:7f:cb:11:b8:07:2e:f6:1f:e6: 46:ab:7e:d8:eb:1f:94:32:7e:72:1d:d0:11:2e:5b: 7e:fe:34:aa:fd:ad:70:41:1f:ff:31:14:e5:cb:c6: 7e:af:43:36:4b:ea:41:1a:45:d8:b5:ba:09:2b:42: 69:76:c9:0c:30:a5:5e:13:3d:55:d3:61:50:54:40: 4a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:DD:62:1B:6D:3E:AE:2D:81:1A:C6:05:84:B2:C4:1E:CB:CE:BF:E7 X509v3 Authority Key Identifier: keyid:3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/63BFE4C0292811EEAF894530C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.230.26.0/24 Signature Algorithm: sha256WithRSAEncryption 96:70:0d:37:b9:36:6a:66:bd:6a:48:09:e9:60:e4:91:60:89: 72:98:4b:40:cb:78:aa:2c:59:07:a9:0e:e8:f9:9b:f4:7d:21: 84:75:eb:01:fa:21:09:65:ed:98:be:21:5d:a2:8d:e0:82:28: 9d:e3:d8:37:11:14:69:83:36:31:9e:d7:56:36:71:04:34:1e: bf:fd:5c:e7:c4:c4:22:51:8e:43:fc:82:5c:ee:22:0a:84:3e: b9:c0:5a:41:6a:6b:bf:96:27:b8:ef:cb:68:e5:ff:5a:c7:20: e8:44:99:38:e3:f3:73:a1:20:74:3d:0e:3a:09:0f:cb:02:31: 81:6a:70:7e:7c:52:3a:fc:81:83:47:58:03:5b:97:d2:95:d5: 9f:32:a8:28:3e:a8:5b:07:de:d3:4a:20:be:ac:3f:db:bd:ba: f3:f6:da:96:03:7c:06:74:95:92:e7:6d:d5:86:23:e1:52:49: 49:f0:1e:73:42:7b:d1:8f:b1:0c:9b:57:97:7b:78:27:ca:28: f0:77:f2:f9:57:76:b3:1b:0f:0a:08:90:9c:41:0e:ac:ad:1b: 08:f5:f6:fa:3d:c8:de:6c:53:7a:ab:98:3c:4d:f0:2b:b4:45: 6e:9c:32:33:d7:01:d9:f4:0e:17:10:1f:be:d7:86:ff:c8:17: d4:6a:1d:5e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICIvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBFQkYxMTAvBgNVBAUTKDNBQ0NCNjk1MzlBQzlGNDI4OEJDRDBGMEE1NDI1MEQ1 OTJGNTQwRDQwHhcNMjYwOTI2MTYyODE4WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWI3ZjJhMi1hZjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhPq6fwJnIH4eOIY8XRfPDcCu7WV3Q+nCG/J6X339/1Irc1oMUE1Hv677gKqm wrg4AnKfawxgSYMZgH9tDhdy51Iyrx7vBsI4BOVyXR73aqQKAuSG1kJ1REVzhSCR L5itg1ucPIMhZXrxa3/9TsUnVoZx/4OgkyI8ICLbRX2zV1QRFQG/zQOld/Zpvu3l hMYKK9XpqRrZNPPnNIT6Hakt0myPH/gHBzLVA6VXDv9mNa4z+tQsxRkmfyR/yxG4 By72H+ZGq37Y6x+UMn5yHdARLlt+/jSq/a1wQR//MRTly8Z+r0M2S+pBGkXYtboJ K0JpdskMMKVeEz1V02FQVEBKVQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMfdYhtt Pq4tgRrGBYSyxB7Lzr/nMB8GA1UdIwQYMBaAFDrMtpU5rJ9CiLzQ8KVCUNWS9UDU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEVCRi81Rjg0RDdEOERC ODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24wS0l2TkR3cFVKUTFaTDFR TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09zeTJsVG1zbjBLSXZORHdwVUpRMVpMMVFOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjBFQkYvNUY4NEQ3RDhEQjgwMTFFNTlBQjdFRDFFQzRGOUFFMDIvNjNCRkU0QzAy OTI4MTFFRUFGODk0NTMwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK+YaMA0GCSqGSIb3DQEBCwUAA4IBAQCWcA03uTZqZr1qSAnpYOSR YIlymEtAy3iqLFkHqQ7o+Zv0fSGEdesB+iEJZe2YviFdoo3ggiid49g3ERRpgzYx ntdWNnEENB6//VznxMQiUY5D/IJc7iIKhD65wFpBamu/lie478to5f9axyDoRJk4 4/NzoSB0PQ46CQ/LAjGBanB+fFI6/IGDR1gDW5fSldWfMqgoPqhbB97TSiC+rD/b vbrz9tqWA3wGdJWS523VhiPhUklJ8B5zQnvRj7EMm1eXe3gnyijwd/L5V3azGw8K CJCcQQ6srRsI9fb6PcjebFN6q5g8TfArtEVunDIz1wHZ9A4XEB++14b/yBfUah1e -----END CERTIFICATE-----Generated at Mon Oct 12 00:47:43 2026 by rpki-client