$ rpki-client -vvvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/A12DD18E2F1C11EDA3E29B09C4F9AE02.roa File: A12DD18E2F1C11EDA3E29B09C4F9AE02.roa (raw, json) Hash identifier: UPFaKbnBvYV/oBLFHvioaYPGvQwOT3ArF5p1DrBDTCo= Subject key identifier: 2A:98:12:3C:38:9F:8D:7E:C3:D2:CC:93:7B:30:57:AF:42:52:2B:27 Certificate issuer: /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Certificate serial: 09C1 Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/A12DD18E2F1C11EDA3E29B09C4F9AE02.roa Signing time: Mon 02 Nov 2026 20:38:38 +0000 ROA not before: Mon 02 Nov 2026 20:38:38 +0000 ROA not after: Mon 31 Jan 2028 00:00:00 +0000 asID: 15412 IP address blocks: 43.248.216.0/22 maxlen: 22 103.15.116.0/22 maxlen: 22 103.144.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2497 (0x9c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91652F7, serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Validity Not Before: Nov 2 20:38:38 2026 GMT Not After : Jan 31 00:00:00 2028 GMT Subject: CN=6ae8f4ce-2c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:30:39:36:6c:71:af:5e:bf:41:96:d6:90:30: 3b:b0:08:33:0a:aa:20:1d:5e:27:dd:26:99:44:d1: 15:7b:f5:44:25:a2:81:c8:d4:67:83:fc:63:8c:4a: 8f:62:23:10:06:a0:36:68:58:4f:8f:3d:d6:05:0c: b1:8c:66:1e:e8:52:63:18:f3:bb:e8:78:51:f8:a6: 5e:16:f9:22:5a:ea:c9:49:a4:f5:85:ed:89:4d:46: d4:22:d6:19:65:79:69:47:02:9b:d5:f3:64:03:4b: 94:1e:61:e6:7d:c5:42:ea:06:47:56:56:ad:10:6b: aa:09:ad:2b:78:b0:5a:11:62:b2:0e:57:f4:89:5a: 90:82:fd:16:50:21:83:37:3f:a4:f4:74:ec:45:6a: dd:cd:97:b8:57:4a:16:7d:fa:a0:4d:2c:f2:a2:a9: e2:0e:d3:7a:09:c0:46:39:2d:85:e8:0f:28:65:96: 1e:38:43:31:df:95:42:72:e8:62:10:5d:19:b1:d7: 3d:13:09:f1:32:c4:ec:83:d9:cd:38:93:70:f5:78: 26:00:94:ff:81:05:68:db:2c:3f:5d:d9:f5:be:e0: 68:dd:11:14:e8:b1:9b:52:2a:09:8a:e1:5a:e7:39: f3:fa:34:42:ca:37:3d:09:f0:bc:17:da:d5:dc:e8: 14:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:98:12:3C:38:9F:8D:7E:C3:D2:CC:93:7B:30:57:AF:42:52:2B:27 X509v3 Authority Key Identifier: keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/A12DD18E2F1C11EDA3E29B09C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.248.216.0/22 103.15.116.0/22 103.144.202.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:eb:bc:91:06:b5:84:c2:58:6e:94:01:12:48:e5:e4:1c:65: 8e:37:5d:2d:e5:d3:a9:42:65:57:55:50:f2:76:0e:4e:c6:92: bf:70:ef:b4:ee:b7:de:b7:c2:a3:2c:2a:f0:5b:d4:77:4e:a6: b5:90:16:fb:a1:8a:00:cc:da:81:f4:b7:e9:b1:62:0b:1e:84: e1:8f:06:d3:6b:2c:55:07:6c:61:21:30:f5:c8:a0:97:33:75: e2:5e:4b:9f:f6:24:d4:e7:ce:76:26:72:88:be:42:07:b6:31: d4:49:0b:f1:26:e7:1b:3e:94:21:52:f9:18:82:ac:66:6d:aa: 9f:e4:ab:9b:e4:a7:79:26:a2:95:de:d0:90:83:70:41:52:f3: 42:57:d6:2d:d9:c8:56:49:f7:a4:d8:9f:9f:52:04:56:7e:54: e9:99:c3:22:e5:e0:6d:1c:7a:14:60:b7:f3:8c:44:82:61:f6: ae:2c:d9:15:49:37:32:7e:aa:18:e5:61:d2:77:2c:1a:3b:b9: 20:3b:f3:6c:e1:b0:c1:0e:61:43:2c:c6:9e:9e:4a:fa:f6:dc: 88:52:a1:53:b5:8b:d3:af:21:63:50:f6:c5:e5:ab:3c:62:81: e2:dc:99:41:7c:d5:96:62:0e:61:6e:bc:90:82:89:08:4a:11: f6:9e:55:58 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICCcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyRjcxMTAvBgNVBAUTKEU1MDI3NTdDNjE3QzIxRDQ3QjFCMzU1OUMwOUQ2RUE3 QzNBRkU0MDMwHhcNMjYxMTAyMjAzODM4WhcNMjgwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWU4ZjRjZS0yYzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApjA5Nmxxr16/QZbWkDA7sAgzCqogHV4n3SaZRNEVe/VEJaKByNRng/xjjEqP YiMQBqA2aFhPjz3WBQyxjGYe6FJjGPO76HhR+KZeFvkiWurJSaT1he2JTUbUItYZ ZXlpRwKb1fNkA0uUHmHmfcVC6gZHVlatEGuqCa0reLBaEWKyDlf0iVqQgv0WUCGD Nz+k9HTsRWrdzZe4V0oWffqgTSzyoqniDtN6CcBGOS2F6A8oZZYeOEMx35VCcuhi EF0Zsdc9EwnxMsTsg9nNOJNw9XgmAJT/gQVo2yw/Xdn1vuBo3REU6LGbUioJiuFa 5znz+jRCyjc9CfC8F9rV3OgUawIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFCqYEjw4 n41+w9LMk3swV69CUisnMB8GA1UdIwQYMBaAFOUCdXxhfCHUexs1WcCdbqfDr+QD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTJGNy83Q0M0NUZBRUJB QUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElkUjdHelZad0oxdXA4T3Y1 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRSjFmR0Y4SWRSN0d6Vlp3SjF1cDhPdjVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjUyRjcvN0NDNDVGQUVCQUFGMTFFQUE2REQxQTNEQzRGOUFFMDIvQTEyREQxOEUy RjFDMTFFREEzRTI5QjA5QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCK/jYAwQCZw90AwQBZ5DKMA0GCSqGSIb3DQEBCwUAA4IBAQBf67yR BrWEwlhulAESSOXkHGWON10t5dOpQmVXVVDydg5OxpK/cO+07rfet8KjLCrwW9R3 Tqa1kBb7oYoAzNqB9LfpsWILHoThjwbTayxVB2xhITD1yKCXM3XiXkuf9iTU5852 JnKIvkIHtjHUSQvxJucbPpQhUvkYgqxmbaqf5Kub5Kd5JqKV3tCQg3BBUvNCV9Yt 2chWSfek2J+fUgRWflTpmcMi5eBtHHoUYLfzjESCYfauLNkVSTcyfqoY5WHSdywa O7kgO/Ns4bDBDmFDLMaenkr69tyIUqFTtYvTryFjUPbF5as8YoHi3JlBfNWWYg5h bryQgokIShH2nlVY -----END CERTIFICATE-----Generated at Sun Nov 15 06:32:15 2026 by rpki-client