$ rpki-client -vvf rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/F2826A504FCF11EB88444467C4F9AE02.roa File: F2826A504FCF11EB88444467C4F9AE02.roa (raw, json) Hash identifier: mfbNnHkGQfEzmbx5mnkWRdxSzdOXfwYbg2Dz8Uggeow= Subject key identifier: A8:C2:FB:BF:1F:C3:28:C5:F4:1C:1B:F4:57:BD:2C:42:07:FC:05:C2 Certificate issuer: /CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Certificate serial: 0E8D Authority key identifier: 1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/F2826A504FCF11EB88444467C4F9AE02.roa Signing time: Mon 06 Jul 2026 19:18:59 +0000 ROA not before: Mon 06 Jul 2026 19:18:58 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 55933 IP address blocks: 43.243.168.0/23 maxlen: 23 43.243.168.0/24 maxlen: 24 43.243.169.0/24 maxlen: 24 103.38.255.0/24 maxlen: 24 103.90.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3725 (0xe8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91568F6, serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Validity Not Before: Jul 6 19:18:58 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a4bffa2-5dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:22:e8:f8:01:2b:2c:0a:c3:60:cf:21:0d:0d: f9:20:fc:34:98:5e:70:f6:9b:21:ac:27:bd:d4:88: 6f:cf:53:21:a3:4b:34:74:a5:e3:4d:72:ee:33:7e: 94:0e:f7:70:02:9d:c6:6d:58:b0:54:c7:91:71:55: 95:5f:ed:fe:fb:0f:5b:62:2e:5e:74:c5:b4:d1:b5: 4d:0e:85:ef:14:09:90:2b:f6:3b:4b:43:b8:47:ac: 53:d2:3f:00:77:26:f6:29:64:ed:53:5f:d6:d9:11: d2:82:34:67:57:cb:36:1e:18:17:20:23:ef:03:b3: 83:17:cc:08:d8:79:cc:fe:31:39:60:af:cc:00:7f: 90:ad:42:07:2e:b6:7d:e3:0a:12:1c:c2:ef:ab:05: 8d:70:fd:67:1c:7a:87:a8:b3:93:12:f3:a0:eb:00: 97:54:ee:6b:32:b7:f9:94:da:97:0d:70:fa:15:79: 69:18:dd:56:5f:53:15:8c:6c:9f:82:8b:9c:32:a4: 20:98:b8:10:f1:79:5c:f6:95:a8:24:cf:28:01:60: 3e:f7:97:29:a7:e6:ae:a0:4d:e3:f2:86:01:5f:c9: ed:1d:c3:d3:ef:56:02:6c:cf:59:eb:ff:3c:67:c7: 2e:8c:17:fb:9c:f0:87:11:2c:d3:40:a4:a8:e0:cb: d1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C2:FB:BF:1F:C3:28:C5:F4:1C:1B:F4:57:BD:2C:42:07:FC:05:C2 X509v3 Authority Key Identifier: keyid:1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/F2826A504FCF11EB88444467C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.243.168.0/23 103.38.255.0/24 103.90.203.0/24 Signature Algorithm: sha256WithRSAEncryption 19:f5:54:3c:c5:cc:d7:73:5d:03:6e:75:8a:8b:53:45:4c:be: c1:bf:71:f0:ff:32:1b:b8:01:31:3c:c2:e7:ed:ae:70:7d:2d: 78:f3:05:f3:26:53:8c:11:91:c3:f2:f5:c7:1b:74:0c:bb:ba: 3c:7a:19:83:3c:2d:cc:a6:ba:4f:3a:f2:a2:e8:17:9d:57:40: 68:8e:2f:03:f2:c6:ce:10:c3:4d:c1:60:60:fa:ab:33:02:3f: f8:2f:1e:5d:91:79:3d:7b:4d:37:07:0d:e3:68:90:af:0f:67: f7:7d:e6:c1:ec:13:18:e9:87:cf:6b:e9:e1:fa:fb:81:e3:45: 92:86:7e:60:5d:74:b1:e7:3c:6f:e9:e8:fb:f5:4e:ee:17:fa: 8d:3a:cf:f6:93:34:be:5e:a9:a4:a0:c5:27:80:32:1d:29:3c: 1d:66:d7:c9:41:03:5b:12:4e:bf:94:2a:e5:77:b1:7c:9e:53: 10:c8:59:27:de:94:d6:75:e4:3d:54:a2:4a:ec:ba:57:37:00: fa:18:ab:d5:16:21:44:b6:25:ac:7e:88:d1:0c:f4:e5:7f:68: 8e:18:3b:e5:55:aa:7c:f3:fc:a0:97:68:7f:61:54:03:68:a4: 40:8e:c4:12:e9:f8:7a:f2:49:ef:42:30:8a:45:ec:62:27:f9: b3:ba:33:ee -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICDo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY4RjYxMTAvBgNVBAUTKDFFMzI5RTk4RjY3NjkyRTlCNTc2MDIzQTJGQkM1NTdE NTdERDU1NkMwHhcNMjYwNzA2MTkxODU4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZmZhMi01ZGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSLo+AErLArDYM8hDQ35IPw0mF5w9pshrCe91Ihvz1Mho0s0dKXjTXLuM36U DvdwAp3GbViwVMeRcVWVX+3++w9bYi5edMW00bVNDoXvFAmQK/Y7S0O4R6xT0j8A dyb2KWTtU1/W2RHSgjRnV8s2HhgXICPvA7ODF8wI2HnM/jE5YK/MAH+QrUIHLrZ9 4woSHMLvqwWNcP1nHHqHqLOTEvOg6wCXVO5rMrf5lNqXDXD6FXlpGN1WX1MVjGyf goucMqQgmLgQ8Xlc9pWoJM8oAWA+95cpp+auoE3j8oYBX8ntHcPT71YCbM9Z6/88 Z8cujBf7nPCHESzTQKSo4MvRlwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFKjC+78f wyjF9Bwb9Fe9LEIH/AXCMB8GA1UdIwQYMBaAFB4ynpj2dpLptXYCOi+8VX1X3VVs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjhGNi8zN0QwM0RGNkNF MjgxMUU5QTZCNkMxN0JDNEY5QUUwMi9IaktlbVBaMmt1bTFkZ0k2TDd4VmZWZmRW V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hqS2VtUFoya3VtMWRnSTZMN3hWZlZmZFZXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTY4RjYvMzdEMDNERjZDRTI4MTFFOUE2QjZDMTdCQzRGOUFFMDIvRjI4MjZBNTA0 RkNGMTFFQjg4NDQ0NDY3QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQBK/OoAwQAZyb/AwQAZ1rLMA0GCSqGSIb3DQEBCwUAA4IBAQAZ9VQ8 xczXc10DbnWKi1NFTL7Bv3Hw/zIbuAExPMLn7a5wfS148wXzJlOMEZHD8vXHG3QM u7o8ehmDPC3MprpPOvKi6BedV0Boji8D8sbOEMNNwWBg+qszAj/4Lx5dkXk9e003 Bw3jaJCvD2f3febB7BMY6YfPa+nh+vuB40WShn5gXXSx5zxv6ej79U7uF/qNOs/2 kzS+XqmkoMUngDIdKTwdZtfJQQNbEk6/lCrld7F8nlMQyFkn3pTWdeQ9VKJK7LpX NwD6GKvVFiFEtiWsfojRDPTlf2iOGDvlVap88/ygl2h/YVQDaKRAjsQS6fh68knv QjCKRexiJ/mzujPu -----END CERTIFICATE-----Generated at Fri Jul 24 00:10:15 2026 by rpki-client