$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/5734DF38D56811EF89A7D332C4F9AE02.roa File: 5734DF38D56811EF89A7D332C4F9AE02.roa (raw, json) Hash identifier: jCCkrbKkLwqUFRt9UsVF6wtCfFeOy+louCZgRVUIdcU= Subject key identifier: 64:B6:B3:6F:A3:B5:42:1C:4E:2C:A2:41:E3:F1:B3:AF:64:53:6F:A6 Certificate issuer: /CN=A9191B71/serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9 Certificate serial: 044F Authority key identifier: 4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/5734DF38D56811EF89A7D332C4F9AE02.roa Signing time: Wed 11 Nov 2026 00:47:35 +0000 ROA not before: Wed 11 Nov 2026 00:47:35 +0000 ROA not after: Mon 31 Jan 2028 00:00:00 +0000 asID: 153494 IP address blocks: 43.250.188.0/22 maxlen: 24 103.42.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.crl rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 23:58:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1103 (0x44f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191B71, serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9 Validity Not Before: Nov 11 00:47:35 2026 GMT Not After : Jan 31 00:00:00 2028 GMT Subject: CN=6af3bb27-a5ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0d:81:dd:08:4d:52:5a:98:f0:73:d6:39:a0: 3c:9e:fb:63:73:f8:2a:c7:cb:d9:48:8c:de:a5:7c: 26:52:c3:70:b4:02:22:23:7b:86:e0:5d:d7:fb:82: 9a:bb:2e:4b:ff:bc:c5:5b:4d:8d:64:c7:7c:d6:e9: e2:b9:fc:4a:4d:75:20:6c:a7:5f:07:74:55:d4:79: 33:c0:61:78:88:d9:46:3c:51:16:0d:f1:92:1a:05: b8:39:0a:e2:44:2b:f3:76:e2:62:14:d4:3d:d0:85: 30:5a:d5:fd:75:22:1b:a2:02:cb:8b:66:0c:fa:37: d2:0f:20:09:87:65:1b:b5:ef:96:87:54:bf:72:ad: e7:35:bd:6d:b5:28:ad:62:29:41:7f:c2:31:85:5a: 98:b8:7f:39:a7:ed:f8:f4:16:dc:c1:a1:d3:52:db: 80:e1:6c:05:44:4d:ce:3b:12:ef:89:3e:55:2f:24: 47:3a:46:64:b2:26:ef:46:63:0a:1a:a1:c8:59:19: 30:e6:aa:8e:f7:83:3b:d3:ca:a3:d9:91:f4:e3:55: 3b:cc:a7:62:4b:61:d4:af:38:d2:53:32:44:5a:60: 77:91:f9:d3:5d:fb:bc:47:31:ca:14:58:d3:d8:6f: 4b:b8:2f:de:11:f6:02:0a:96:34:3b:b0:9f:e0:92: 87:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B6:B3:6F:A3:B5:42:1C:4E:2C:A2:41:E3:F1:B3:AF:64:53:6F:A6 X509v3 Authority Key Identifier: keyid:4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/5734DF38D56811EF89A7D332C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.250.188.0/22 103.42.36.0/22 Signature Algorithm: sha256WithRSAEncryption ab:1b:f2:7b:3e:52:82:37:aa:dc:4a:3d:74:73:d6:9d:71:9f: eb:cc:90:b3:a6:70:22:6b:f5:2a:fd:06:36:4b:45:67:d8:16: 12:af:4a:36:0c:3c:20:28:33:96:1c:ef:94:8e:a3:f6:a4:c4: 36:b0:2d:1b:b1:98:88:fe:e6:db:bf:bb:15:ae:5f:79:fd:33: 4d:12:ec:56:d6:a2:4e:dc:58:17:4c:88:e5:3f:c1:b0:bf:c9: 9e:95:1a:77:f6:e3:5c:91:38:89:8d:65:58:df:96:5a:8e:c3: b0:13:3b:1f:0a:9e:c4:5c:cb:c1:03:3e:2e:fb:ef:b3:ef:01: 2d:10:8e:2e:8b:b2:5b:54:24:a4:dd:3b:31:91:d0:cd:aa:f1: 33:4c:0e:b2:97:59:aa:5a:7e:e7:fa:44:85:0a:79:a8:08:c1: 2c:92:3b:a8:23:2b:2e:f2:01:77:af:24:4f:e8:d9:ef:4c:22: 06:ef:54:15:f2:cf:a1:c4:fc:52:94:81:ab:7e:9e:4b:b9:a6: 78:58:46:48:61:13:4c:a6:26:b1:72:95:75:02:37:5b:79:37: f4:a8:8e:83:44:7d:e7:99:35:c4:21:12:c6:3d:fd:a8:03:04: 83:54:c5:18:fe:bb:57:d1:85:8d:81:42:07:bf:c4:a2:dd:34: b6:7f:89:6a -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFCNzExMTAvBgNVBAUTKDRCRjNFODdDQTJCOUFCNTk1OTc2MjBEMDRGQzA1NDEx OEQ3RUQzRDkwHhcNMjYxMTExMDA0NzM1WhcNMjgwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWYzYmIyNy1hNWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2A2B3QhNUlqY8HPWOaA8nvtjc/gqx8vZSIzepXwmUsNwtAIiI3uG4F3X+4Ka uy5L/7zFW02NZMd81uniufxKTXUgbKdfB3RV1HkzwGF4iNlGPFEWDfGSGgW4OQri RCvzduJiFNQ90IUwWtX9dSIbogLLi2YM+jfSDyAJh2Ubte+Wh1S/cq3nNb1ttSit YilBf8IxhVqYuH85p+349BbcwaHTUtuA4WwFRE3OOxLviT5VLyRHOkZksibvRmMK GqHIWRkw5qqO94M708qj2ZH041U7zKdiS2HUrzjSUzJEWmB3kfnTXfu8RzHKFFjT 2G9LuC/eEfYCCpY0O7Cf4JKH6wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFGS2s2+j tUIcTiyiQePxs69kU2+mMB8GA1UdIwQYMBaAFEvz6HyiuatZWXYg0E/AVBGNftPZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUI3MS9CODQ5QkExMkM2 MDQxMUVDQjkwNjkxNUNDNEY5QUUwMi9TX1BvZktLNXExbFpkaURRVDhCVUVZMS0w OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NfUG9mS0s1cTFsWmRpRFFUOEJVRVkxLTA5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTFCNzEvQjg0OUJBMTJDNjA0MTFFQ0I5MDY5MTVDQzRGOUFFMDIvNTczNERGMzhE NTY4MTFFRjg5QTdEMzMyQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK/q8AwQCZyokMA0GCSqGSIb3DQEBCwUAA4IBAQCrG/J7PlKCN6rc Sj10c9adcZ/rzJCzpnAia/Uq/QY2S0Vn2BYSr0o2DDwgKDOWHO+UjqP2pMQ2sC0b sZiI/ubbv7sVrl95/TNNEuxW1qJO3FgXTIjlP8Gwv8melRp39uNckTiJjWVY35Za jsOwEzsfCp7EXMvBAz4u+++z7wEtEI4ui7JbVCSk3TsxkdDNqvEzTA6yl1mqWn7n +kSFCnmoCMEskjuoIysu8gF3ryRP6NnvTCIG71QV8s+hxPxSlIGrfp5LuaZ4WEZI YRNMpiaxcpV1AjdbeTf0qI6DRH3nmTXEIRLGPf2oAwSDVMUY/rtX0YWNgUIHv8Si 3TS2f4lq -----END CERTIFICATE-----Generated at Sun Nov 15 22:35:50 2026 by rpki-client