$ rpki-client -vvvf rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/B0A47CAE7DA711EFB7190E26C4F9AE02.roa File: B0A47CAE7DA711EFB7190E26C4F9AE02.roa (raw, json) Hash identifier: 4NeNFnTO7iWU2mdZ6+8S8qHDcXWudyOvXGQDZC7IDjE= Subject key identifier: 72:71:03:39:C8:F2:1B:66:C6:10:06:99:19:87:FB:B7:3F:B7:CD:C9 Certificate issuer: /CN=A91799A0/serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8 Certificate serial: 04B2 Authority key identifier: 37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/B0A47CAE7DA711EFB7190E26C4F9AE02.roa Signing time: Thu 17 Sep 2026 00:49:36 +0000 ROA not before: Thu 17 Sep 2026 00:49:36 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 133794 IP address blocks: 43.251.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 23:48:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1202 (0x4b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91799A0, serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8 Validity Not Before: Sep 17 00:49:36 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aab3920-52bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:32:a1:77:09:2b:6a:7d:b1:43:4e:b1:ba:a8: b3:92:4b:88:66:6a:4e:45:00:c8:3e:ef:0d:75:dc: e9:97:6d:9c:85:3e:7e:ed:e3:51:9d:d4:a4:0e:64: 3a:d3:8f:77:ff:6f:b3:32:7c:b8:b9:d8:37:4d:f4: 58:67:72:6e:4d:49:78:eb:98:73:6c:bf:ae:a5:71: 28:e1:df:72:f1:9b:37:de:cb:50:15:9b:6a:2c:9d: d3:0d:ab:3f:c3:0c:da:ed:56:d3:d9:dc:2f:88:29: 21:6a:17:26:b1:37:37:cf:5f:7f:39:0d:7a:ae:6e: 57:d6:da:fb:c3:2a:18:e1:91:3f:cd:25:05:4b:a9: 1c:58:84:8f:18:03:ee:c3:0b:ec:c8:3f:63:72:68: 89:c0:f8:ce:fe:9a:94:a6:a5:ab:0c:ea:64:b3:87: 44:72:41:32:88:c4:95:df:1c:9d:08:01:f9:fa:f6: 93:9f:70:8e:01:14:34:60:70:79:66:19:c0:4f:9e: aa:2b:17:a5:57:59:eb:14:0f:75:6d:da:d6:bb:a3: 84:00:15:55:53:2d:69:18:2b:df:75:53:10:80:55: f0:64:c7:aa:a2:36:74:d9:93:f3:d4:38:80:a9:23: cb:b5:5f:ef:fa:1a:38:d6:0d:54:33:e1:1a:b3:77: a1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:71:03:39:C8:F2:1B:66:C6:10:06:99:19:87:FB:B7:3F:B7:CD:C9 X509v3 Authority Key Identifier: keyid:37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/B0A47CAE7DA711EFB7190E26C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.251.240.0/22 Signature Algorithm: sha256WithRSAEncryption a8:6f:1a:75:39:54:50:25:9a:9a:0b:48:18:93:f1:05:6c:d7: af:3b:34:fa:67:7d:df:2e:40:48:d0:90:06:49:91:b7:f3:69: 8c:6d:f7:80:8c:4b:61:e3:e2:74:3c:e8:c3:39:cf:ce:c9:4e: b2:d7:9b:49:b9:a2:a7:40:f4:15:b9:9f:56:fe:2c:fe:7d:b7: 56:bd:ee:c2:1c:fe:45:90:f5:ab:40:1e:4a:a3:2a:4e:a7:a1: fc:a8:98:34:7f:cc:76:b4:2e:24:cb:b6:0d:57:87:87:12:f0: 6e:8f:8c:5a:69:22:d0:8a:87:69:b2:21:cd:31:0d:28:90:d2: 00:15:f6:55:61:f5:36:e6:54:38:e5:56:4c:1a:a8:11:36:25: ab:b0:e8:d0:4d:cc:b6:db:8a:3a:9d:02:67:3a:1b:4a:d9:e1: 1e:13:25:81:d5:39:0d:1a:40:0b:ea:b0:31:93:1d:dd:be:f1: 97:6d:b9:32:37:58:9b:a3:33:e4:8f:eb:69:23:18:29:fa:f9: ed:46:a2:d2:dc:56:50:1c:1a:7e:d0:7e:e0:cc:f7:b5:d5:7f: 84:0f:69:a4:fa:14:25:d4:a1:03:3f:74:ff:a7:65:b5:24:04: 0d:e0:4d:15:78:3a:3d:f2:42:d0:2c:a9:33:96:7c:38:57:f1: b9:0c:ed:36 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk5QTAxMTAvBgNVBAUTKDM3RTAzNTI0QjU4NDdEQkVBRDAwRkUzNzhDNDZBQkQw Q0E3MDQ1RjgwHhcNMjYwOTE3MDA0OTM2WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFiMzkyMC01MmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6TKhdwkran2xQ06xuqizkkuIZmpORQDIPu8Nddzpl22chT5+7eNRndSkDmQ6 0493/2+zMny4udg3TfRYZ3JuTUl465hzbL+upXEo4d9y8Zs33stQFZtqLJ3TDas/ wwza7VbT2dwviCkhahcmsTc3z19/OQ16rm5X1tr7wyoY4ZE/zSUFS6kcWISPGAPu wwvsyD9jcmiJwPjO/pqUpqWrDOpks4dEckEyiMSV3xydCAH5+vaTn3COARQ0YHB5 ZhnAT56qKxelV1nrFA91bdrWu6OEABVVUy1pGCvfdVMQgFXwZMeqojZ02ZPz1DiA qSPLtV/v+ho41g1UM+Eas3eh2wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHJxAznI 8htmxhAGmRmH+7c/t83JMB8GA1UdIwQYMBaAFDfgNSS1hH2+rQD+N4xGq9DKcEX4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTlBMC80MEVEQTExRTlB RTgxMUVDOTc0QjQ5MUNDNEY5QUUwMi9OLUExSkxXRWZiNnRBUDQzakVhcjBNcHdS ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04tQTFKTFdFZmI2dEFQNDNqRWFyME1wd1JmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Nzk5QTAvNDBFREExMUU5QUU4MTFFQzk3NEI0OTFDQzRGOUFFMDIvQjBBNDdDQUU3 REE3MTFFRkI3MTkwRTI2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCK/vwMA0GCSqGSIb3DQEBCwUAA4IBAQCobxp1OVRQJZqaC0gYk/EF bNevOzT6Z33fLkBI0JAGSZG382mMbfeAjEth4+J0POjDOc/OyU6y15tJuaKnQPQV uZ9W/iz+fbdWve7CHP5FkPWrQB5KoypOp6H8qJg0f8x2tC4ky7YNV4eHEvBuj4xa aSLQiodpsiHNMQ0okNIAFfZVYfU25lQ45VZMGqgRNiWrsOjQTcy224o6nQJnOhtK 2eEeEyWB1TkNGkAL6rAxkx3dvvGXbbkyN1ibozPkj+tpIxgp+vntRqLS3FZQHBp+ 0H7gzPe11X+ED2mk+hQl1KEDP3T/p2W1JAQN4E0VeDo98kLQLKkzlnw4V/G5DO02 -----END CERTIFICATE-----Generated at Sat Sep 26 12:20:42 2026 by rpki-client