$ rpki-client -vvvf rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/F23251501D1A11F1B3DF5E87103D8C67.roa File: F23251501D1A11F1B3DF5E87103D8C67.roa (raw, json) Hash identifier: mz9UKWkuiJrFpRnaeaMg8OM3K+wuun2W3xdMzsv7kig= Subject key identifier: 52:A8:92:5D:19:D4:42:49:BD:46:5F:F3:82:B2:9C:02:C3:34:6C:7D Certificate issuer: /CN=A91958FF/serialNumber=F24F1471723A64E4D570DBB0D44C824305426266 Certificate serial: 98 Authority key identifier: F2:4F:14:71:72:3A:64:E4:D5:70:DB:B0:D4:4C:82:43:05:42:62:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/F23251501D1A11F1B3DF5E87103D8C67.roa Signing time: Thu 03 Sep 2026 07:59:19 +0000 ROA not before: Thu 03 Sep 2026 07:59:19 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 152194 IP address blocks: 43.243.68.0/22 maxlen: 24 103.12.148.0/22 maxlen: 24 2400:1c80::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 07:32:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91958FF, serialNumber=F24F1471723A64E4D570DBB0D44C824305426266 Validity Not Before: Sep 3 07:59:19 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a9928d7-a4d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c4:a3:3f:53:6c:37:07:db:30:69:17:ff:e8: a8:96:56:c8:e2:31:cf:71:3e:7d:db:f1:9e:fa:b2: 40:59:fa:f1:6c:9b:d6:f6:41:d7:58:e4:fc:60:98: 44:6d:4e:f2:b5:f3:63:0a:d7:a3:bd:7a:a5:5c:5f: 06:a0:94:98:cc:92:bf:54:73:d4:64:53:11:f9:3f: 0f:8e:1d:2f:56:43:e2:57:90:c1:4b:d2:ba:40:b9: 00:14:24:2c:1f:b9:77:bf:45:63:d7:b4:8b:86:d4: fb:43:32:1d:03:d1:f0:8c:92:12:c8:23:fc:b3:c4: f2:d0:57:80:6c:dd:5e:c0:05:0c:84:f4:e4:8d:7f: d3:2e:d0:6a:4f:6a:49:34:a9:ad:ae:9a:8d:9d:56: 18:49:4b:ee:de:f4:13:d3:82:72:f1:f3:ea:cb:6f: de:49:28:cf:66:13:dc:d0:34:f8:19:19:ac:fb:22: 5c:3f:32:44:4e:c5:9c:bb:2f:c2:2e:74:d9:e8:1a: 66:36:39:39:d9:b1:2c:2c:e5:61:17:9a:42:37:9a: 36:38:57:a1:ad:29:bc:25:e7:fe:8e:4d:24:db:35: cf:8a:28:e0:4f:c6:51:a3:bc:4a:49:fd:9b:56:eb: 1f:75:b9:92:e3:18:21:e9:cf:ce:41:18:ff:4f:1e: 4c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A8:92:5D:19:D4:42:49:BD:46:5F:F3:82:B2:9C:02:C3:34:6C:7D X509v3 Authority Key Identifier: keyid:F2:4F:14:71:72:3A:64:E4:D5:70:DB:B0:D4:4C:82:43:05:42:62:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/F23251501D1A11F1B3DF5E87103D8C67.roa sbgp-ipAddrBlock: critical IPv4: 43.243.68.0/22 103.12.148.0/22 IPv6: 2400:1c80::/32 Signature Algorithm: sha256WithRSAEncryption 1c:a7:40:82:93:a4:df:56:dc:04:ce:9b:2c:9b:5b:02:fa:ad: ff:f8:6a:19:fc:bd:57:16:69:57:89:68:21:15:a7:13:fb:c1: 3d:c6:bc:03:a3:ed:91:9b:1f:dd:01:85:39:fb:7d:57:b3:70: 24:6a:b9:35:c5:9f:d3:d7:29:98:93:b4:b6:49:b6:62:7b:4a: 25:1e:3c:6f:83:58:8f:a7:a8:41:2a:b2:02:70:11:60:bf:b0: ed:83:80:ca:12:05:86:e9:97:5c:31:1c:cd:05:3c:89:c0:80: cf:ef:c2:ab:a1:39:74:65:0e:96:6b:56:60:27:82:70:6b:88: 2a:ba:92:5e:b2:95:d5:b7:39:f4:41:16:0c:fa:61:74:41:bf: 55:6e:5b:dc:4b:3e:70:b9:91:af:3f:8b:88:f4:4d:85:a6:98: 98:3c:aa:00:6c:db:9d:96:3a:f2:6d:0f:55:b4:a0:a1:20:07: e8:86:18:25:96:dd:ed:7c:90:88:83:99:73:cc:b9:7c:b3:64: 8b:32:cc:e8:f1:d3:10:bd:32:ad:23:d1:11:95:42:bf:e2:34: 7c:49:65:24:95:2f:5f:02:b3:02:2d:db:02:3a:1e:f6:ed:93: c6:22:2c:fb:d2:7d:9e:0f:10:b6:01:ae:67:b5:d4:f8:c0:55: 93:f3:70:11 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU4RkYxMTAvBgNVBAUTKEYyNEYxNDcxNzIzQTY0RTRENTcwREJCMEQ0NEM4MjQz MDU0MjYyNjYwHhcNMjYwOTAzMDc1OTE5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk5MjhkNy1hNGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn8SjP1NsNwfbMGkX/+iollbI4jHPcT592/Ge+rJAWfrxbJvW9kHXWOT8YJhE bU7ytfNjCtejvXqlXF8GoJSYzJK/VHPUZFMR+T8Pjh0vVkPiV5DBS9K6QLkAFCQs H7l3v0Vj17SLhtT7QzIdA9HwjJISyCP8s8Ty0FeAbN1ewAUMhPTkjX/TLtBqT2pJ NKmtrpqNnVYYSUvu3vQT04Jy8fPqy2/eSSjPZhPc0DT4GRms+yJcPzJETsWcuy/C LnTZ6BpmNjk52bEsLOVhF5pCN5o2OFehrSm8Jef+jk0k2zXPiijgT8ZRo7xKSf2b VusfdbmS4xgh6c/OQRj/Tx5MuQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFFKokl0Z 1EJJvUZf84KynALDNGx9MB8GA1UdIwQYMBaAFPJPFHFyOmTk1XDbsNRMgkMFQmJm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NThGRi80RTNDQjZDMEQ3 MUIxMUYwOUExNDhEMjU5QUQzNjQxRC84azhVY1hJNlpPVFZjTnV3MUV5Q1F3VkNZ bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhrOFVjWEk2Wk9UVmNOdXcxRXlDUXdWQ1ltWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTU4RkYvNEUzQ0I2QzBENzFCMTFGMDlBMTQ4RDI1OUFEMzY0MUQvRjIzMjUxNTAx RDFBMTFGMUIzREY1RTg3MTAzRDhDNjcucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCK/NEAwQCZwyUMA0EAgACMAcDBQAkAByAMA0GCSqGSIb3DQEBCwUA A4IBAQAcp0CCk6TfVtwEzpssm1sC+q3/+GoZ/L1XFmlXiWghFacT+8E9xrwDo+2R mx/dAYU5+31Xs3Akark1xZ/T1ymYk7S2SbZie0olHjxvg1iPp6hBKrICcBFgv7Dt g4DKEgWG6ZdcMRzNBTyJwIDP78KroTl0ZQ6Wa1ZgJ4Jwa4gqupJespXVtzn0QRYM +mF0Qb9VblvcSz5wuZGvP4uI9E2FppiYPKoAbNudljrybQ9VtKChIAfohhgllt3t fJCIg5lzzLl8s2SLMszo8dMQvTKtI9ERlUK/4jR8SWUklS9fArMCLdsCOh727ZPG Iiz70n2eDxC2Aa5ntdT4wFWT83AR -----END CERTIFICATE-----Generated at Sun Sep 27 08:20:18 2026 by rpki-client