$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/A73C0BF6D93511E6B2617F7BC4F9AE02.roa File: A73C0BF6D93511E6B2617F7BC4F9AE02.roa (raw, json) Hash identifier: +pFbpy8Dn0pTC9uC7eJS6idkPLrhGivA2+tGuCgnLro= Subject key identifier: 98:19:77:C0:9F:E8:F8:BF:E6:AC:78:43:58:7B:D9:07:D6:C0:96:F2 Certificate issuer: /CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Certificate serial: 22FA Authority key identifier: 3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/A73C0BF6D93511E6B2617F7BC4F9AE02.roa Signing time: Sat 26 Sep 2026 16:28:20 +0000 ROA not before: Sat 26 Sep 2026 16:28:20 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 54836 IP address blocks: 43.230.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 15:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8954 (0x22fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0EBF, serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Validity Not Before: Sep 26 16:28:20 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ab7f2a4-816c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0d:2b:49:e1:41:90:b2:2a:14:dd:83:ff:07: a2:2b:39:23:71:d0:ad:05:1c:d8:fb:4c:8d:c6:8a: 69:bf:07:5f:a4:55:38:c0:38:45:63:f9:56:12:72: 63:85:2c:8f:e4:86:06:21:a2:dc:6c:c3:86:23:ca: 50:c4:30:a8:3e:11:2d:3e:63:01:a2:ab:6d:e9:2e: 47:98:b4:af:d0:fd:25:ca:5f:ee:f5:c8:d6:18:a1: 94:2d:43:dc:3b:08:4a:54:13:2f:b1:f0:75:98:98: 99:74:f5:fa:e0:ee:d8:4b:73:92:2a:f2:b1:24:bb: 1f:63:c9:6b:d3:ab:e3:02:a6:da:61:b2:81:05:67: f0:74:95:ed:16:81:1d:af:18:5d:89:32:5d:29:19: 1b:82:4d:a3:63:f3:bc:5e:9c:da:8f:8f:05:2f:48: 40:02:4e:90:ee:27:19:8f:7e:fa:20:5e:29:be:f1: e1:b9:78:0c:dc:c1:1c:df:81:df:6f:92:dc:6d:88: d5:a8:12:22:e4:9c:5c:3c:75:01:2b:b8:02:75:d8: 94:5d:fa:5a:34:fe:6f:29:e7:a2:77:22:97:38:76: cb:97:90:53:e1:c1:d6:97:ae:64:a0:d0:cc:4c:c3: 71:20:d2:2c:5f:0b:94:6e:25:0c:0b:40:e8:c7:ea: a6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:19:77:C0:9F:E8:F8:BF:E6:AC:78:43:58:7B:D9:07:D6:C0:96:F2 X509v3 Authority Key Identifier: keyid:3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/A73C0BF6D93511E6B2617F7BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.230.26.0/24 Signature Algorithm: sha256WithRSAEncryption 50:b3:c6:0e:fd:51:31:fd:fc:33:2c:44:87:e7:01:16:b1:2e: 12:66:82:e4:14:a7:3d:31:70:e2:4a:80:54:6c:db:de:f4:45: fa:77:bc:26:aa:60:12:a3:1e:d4:48:53:17:cb:bf:be:5b:d9: 17:61:e3:2f:b8:79:14:1b:4b:ee:49:ed:c3:77:d0:1a:62:0b: ef:29:23:8d:e1:af:f7:52:d1:81:94:78:75:81:d8:0f:f2:a8: dc:cf:ae:61:02:2c:d9:88:5e:ca:4c:07:f9:1e:c8:6c:a8:49: bd:24:e0:18:94:38:40:d1:a7:82:24:fa:35:7b:8d:6e:11:77: 82:d2:92:7e:5f:53:a0:85:30:fc:2b:99:45:8e:e3:8b:fc:3e: 29:c5:59:5e:9d:9d:6e:3e:f5:dd:0a:b9:39:ce:81:56:04:a0: b6:f2:42:60:19:c3:cb:e3:ef:82:6a:57:b9:ca:b6:f7:1b:68: 77:07:82:90:31:30:64:01:4b:9d:8b:09:6c:69:1e:e2:f2:2a: a4:ff:8d:ab:52:ca:46:27:00:9e:2e:52:9a:16:84:50:ec:8f: 77:af:09:41:11:e0:60:42:cd:34:30:a6:2b:30:99:6b:2d:98: a3:84:9f:65:d5:88:ba:dc:a1:12:ab:e0:7b:9f:2a:28:ad:f1: d2:21:81:8d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICIvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBFQkYxMTAvBgNVBAUTKDNBQ0NCNjk1MzlBQzlGNDI4OEJDRDBGMEE1NDI1MEQ1 OTJGNTQwRDQwHhcNMjYwOTI2MTYyODIwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWI3ZjJhNC04MTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArg0rSeFBkLIqFN2D/weiKzkjcdCtBRzY+0yNxoppvwdfpFU4wDhFY/lWEnJj hSyP5IYGIaLcbMOGI8pQxDCoPhEtPmMBoqtt6S5HmLSv0P0lyl/u9cjWGKGULUPc OwhKVBMvsfB1mJiZdPX64O7YS3OSKvKxJLsfY8lr06vjAqbaYbKBBWfwdJXtFoEd rxhdiTJdKRkbgk2jY/O8Xpzaj48FL0hAAk6Q7icZj376IF4pvvHhuXgM3MEc34Hf b5LcbYjVqBIi5JxcPHUBK7gCddiUXfpaNP5vKeeidyKXOHbLl5BT4cHWl65koNDM TMNxINIsXwuUbiUMC0Dox+qmQQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJgZd8Cf 6Pi/5qx4Q1h72QfWwJbyMB8GA1UdIwQYMBaAFDrMtpU5rJ9CiLzQ8KVCUNWS9UDU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEVCRi81Rjg0RDdEOERC ODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24wS0l2TkR3cFVKUTFaTDFR TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09zeTJsVG1zbjBLSXZORHdwVUpRMVpMMVFOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjBFQkYvNUY4NEQ3RDhEQjgwMTFFNTlBQjdFRDFFQzRGOUFFMDIvQTczQzBCRjZE OTM1MTFFNkIyNjE3RjdCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK+YaMA0GCSqGSIb3DQEBCwUAA4IBAQBQs8YO/VEx/fwzLESH5wEW sS4SZoLkFKc9MXDiSoBUbNve9EX6d7wmqmASox7USFMXy7++W9kXYeMvuHkUG0vu Se3Dd9AaYgvvKSON4a/3UtGBlHh1gdgP8qjcz65hAizZiF7KTAf5HshsqEm9JOAY lDhA0aeCJPo1e41uEXeC0pJ+X1OghTD8K5lFjuOL/D4pxVlenZ1uPvXdCrk5zoFW BKC28kJgGcPL4++Cale5yrb3G2h3B4KQMTBkAUudiwlsaR7i8iqk/42rUspGJwCe LlKaFoRQ7I93rwlBEeBgQs00MKYrMJlrLZijhJ9l1Yi63KESq+B7nyoorfHSIYGN -----END CERTIFICATE-----Generated at Tue Oct 13 06:19:01 2026 by rpki-client