$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/4A7E2898A5C411F19C8FF2B67011F970.roa File: 4A7E2898A5C411F19C8FF2B67011F970.roa (raw, json) Hash identifier: FjThLBw2H1Vgo2XVwexsW1c+HATo1/D1xZQEZgYo2F0= Subject key identifier: F9:F8:54:0B:27:11:8E:CA:F3:6F:F0:61:02:51:C5:B2:61:B7:F0:29 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0E0C Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/4A7E2898A5C411F19C8FF2B67011F970.roa Signing time: Wed 23 Sep 2026 12:20:16 +0000 ROA not before: Wed 23 Sep 2026 12:20:16 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 4637 IP address blocks: 43.246.129.0/24 maxlen: 24 43.249.241.0/24 maxlen: 24 45.115.35.0/24 maxlen: 24 45.124.63.0/24 maxlen: 24 103.7.209.0/24 maxlen: 24 103.7.210.0/24 maxlen: 24 103.26.164.0/24 maxlen: 24 103.26.165.0/24 maxlen: 24 103.244.211.0/24 maxlen: 24 160.20.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 12:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3596 (0xe0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Sep 23 12:20:16 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6ab3c400-9400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e3:68:0b:f3:db:96:a2:27:53:33:71:28:b4: 0f:0b:e2:d6:58:ba:98:07:73:cb:d9:4b:7d:41:1d: 69:13:99:ec:b2:fb:fa:e8:34:6c:cf:12:eb:59:3b: 43:3c:d4:f1:03:ba:ba:d0:a3:f1:27:fd:b1:7a:69: db:75:a3:8f:70:f5:48:aa:3f:85:a0:cb:1d:f3:4f: bd:b3:09:3f:e6:4d:dd:b5:fc:ec:80:f4:32:09:78: 06:9e:ea:46:14:4d:71:d9:66:5c:59:46:fe:59:49: 0f:cd:0c:58:4c:93:d1:d3:57:9c:62:90:82:10:1c: 98:00:3f:81:f7:b8:b7:9e:5c:4f:da:55:64:58:f4: cd:87:f5:be:e2:66:30:db:46:bf:8d:ae:0a:29:9b: 35:f9:0f:81:98:68:bb:ba:6c:c4:6e:dc:53:ea:35: 39:49:74:8c:f8:bd:6b:49:b7:49:04:06:b0:e5:33: 2f:43:0d:fd:5a:cf:84:37:7a:ba:4a:01:67:93:d7: c3:6a:c1:72:aa:f0:f8:8f:15:57:68:bd:3c:81:4e: 84:fb:81:b7:db:56:19:22:e1:be:84:27:2e:32:9c: 0b:8a:3d:81:f4:f9:c6:06:a4:a9:13:e7:35:02:3c: 21:23:88:89:64:ea:d2:35:5b:b0:bb:5c:96:39:2b: a0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F8:54:0B:27:11:8E:CA:F3:6F:F0:61:02:51:C5:B2:61:B7:F0:29 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/4A7E2898A5C411F19C8FF2B67011F970.roa sbgp-ipAddrBlock: critical IPv4: 43.246.129.0/24 43.249.241.0/24 45.115.35.0/24 45.124.63.0/24 103.7.209.0-103.7.210.255 103.26.164.0/23 103.244.211.0/24 160.20.45.0/24 Signature Algorithm: sha256WithRSAEncryption af:4e:bb:fc:2f:78:9b:8c:ca:9a:2c:82:22:f2:76:dc:e8:da: a5:ed:4f:93:0e:61:33:b3:a2:95:f2:b7:df:3d:6e:25:01:16: cf:fd:0f:c2:95:f7:1f:e6:bd:55:e7:29:00:68:97:d1:f2:b8: 3e:63:af:da:1b:6c:34:9a:1a:6a:a1:da:e4:c6:92:bd:92:58: 1a:2e:41:3a:71:a1:12:a1:89:b0:01:7b:87:b4:5a:24:d7:0e: 1b:3a:5d:b9:44:38:d8:ea:66:2c:65:5d:4e:a0:1a:ce:e4:1b: 68:1b:86:7e:2a:3a:3c:54:bc:f5:b3:46:74:12:8b:c1:8d:d5: 5c:3d:8e:90:44:ea:b8:35:d9:e9:2e:90:a8:02:4a:30:2d:a8: 51:92:a3:65:10:d5:32:b7:d0:a8:92:23:20:96:13:b5:a6:57: 28:e7:40:7b:08:92:49:fc:0a:c8:f4:ba:d6:a6:6e:d1:7f:2c: 28:07:cd:12:76:57:97:c3:96:59:36:64:1f:d1:20:9e:76:16: e7:f5:73:a8:6c:5a:a7:15:08:75:03:b7:ed:44:38:a0:5e:2b: 60:53:19:83:cc:f7:e9:16:2a:fd:12:c7:3e:df:8f:07:35:bd: 0a:00:a1:a5:fa:63:bf:e1:77:4d:ba:8d:33:5e:c2:53:44:e7: 26:02:e8:bd -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgICDgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjYwOTIzMTIyMDE2WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YWIzYzQwMC05NDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+NoC/PblqInUzNxKLQPC+LWWLqYB3PL2Ut9QR1pE5nssvv66DRszxLrWTtD PNTxA7q60KPxJ/2xemnbdaOPcPVIqj+FoMsd80+9swk/5k3dtfzsgPQyCXgGnupG FE1x2WZcWUb+WUkPzQxYTJPR01ecYpCCEByYAD+B97i3nlxP2lVkWPTNh/W+4mYw 20a/ja4KKZs1+Q+BmGi7umzEbtxT6jU5SXSM+L1rSbdJBAaw5TMvQw39Ws+EN3q6 SgFnk9fDasFyqvD4jxVXaL08gU6E+4G321YZIuG+hCcuMpwLij2B9PnGBqSpE+c1 AjwhI4iJZOrSNVuwu1yWOSug7wIDAQABo4ICkjCCAo4wHQYDVR0OBBYEFPn4VAsn EY7K82/wYQJRxbJht/ApMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvNEE3RTI4OThB NUM0MTFGMTlDOEZGMkI2NzAxMUY5NzAucm9hMFEGCCsGAQUFBwEHAQH/BEIwQDA+ BAIAATA4AwQAK/aBAwQAK/nxAwQALXMjAwQALXw/MAwDBABnB9EDBABnB9IDBAFn GqQDBABn9NMDBACgFC0wDQYJKoZIhvcNAQELBQADggEBAK9Ou/wveJuMyposgiLy dtzo2qXtT5MOYTOzopXyt989biUBFs/9D8KV9x/mvVXnKQBol9HyuD5jr9obbDSa Gmqh2uTGkr2SWBouQTpxoRKhibABe4e0WiTXDhs6XblEONjqZixlXU6gGs7kG2gb hn4qOjxUvPWzRnQSi8GN1Vw9jpBE6rg12ekukKgCSjAtqFGSo2UQ1TK30KiSIyCW E7WmVyjnQHsIkkn8Csj0utambtF/LCgHzRJ2V5fDllk2ZB/RIJ52Fuf1c6hsWqcV CHUDt+1EOKBeK2BTGYPM9+kWKv0Sxz7fjwc1vQoAoaX6Y7/hd026jTNewlNE5yYC 6L0= -----END CERTIFICATE-----Generated at Thu Sep 24 00:45:19 2026 by rpki-client