$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/7CDB77C68D7511F1B81A5A6E3211F970.roa File: 7CDB77C68D7511F1B81A5A6E3211F970.roa (raw, json) Hash identifier: qV41HhWJkk9bGNMXnKLZx7jPUgw0pOayrAqVgkbP6uY= Subject key identifier: A4:50:6C:21:32:C5:5D:F4:72:5C:4F:03:14:FB:15:18:C4:5D:9D:EF Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0E0A Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/7CDB77C68D7511F1B81A5A6E3211F970.roa Signing time: Wed 23 Sep 2026 12:20:12 +0000 ROA not before: Wed 23 Sep 2026 12:20:12 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 23532 IP address blocks: 43.246.129.0/24 maxlen: 24 43.249.241.0/24 maxlen: 24 103.7.209.0/24 maxlen: 24 103.7.210.0/24 maxlen: 24 103.26.164.0/24 maxlen: 24 103.26.165.0/24 maxlen: 24 103.244.211.0/24 maxlen: 24 160.20.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 12:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3594 (0xe0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Sep 23 12:20:12 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6ab3c3fc-f9af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:ae:2b:1a:ff:9b:6d:40:bd:02:5b:87:b8:17: 80:be:d7:11:9b:6c:ad:d9:e8:65:ef:04:d0:54:de: 6b:59:0b:52:3a:72:91:c7:6f:cc:f7:ce:0f:ff:9e: 6a:b7:9a:28:02:bc:bb:64:a5:28:ed:7a:85:4e:2a: 19:07:22:a4:73:99:2a:29:5e:da:1d:a1:7c:13:5c: bc:bb:13:d5:d0:09:f4:e7:6d:06:c6:d0:be:f4:99: 95:20:47:3c:92:18:62:92:73:ad:b3:2b:bd:9e:3d: ff:39:fb:93:46:24:9b:63:1f:60:10:34:f8:0c:64: d1:55:5f:e7:aa:cd:ec:20:0c:1e:0a:65:ed:76:95: e9:a5:27:66:5c:8f:05:46:5a:07:36:dd:a2:28:d2: 32:36:3b:88:6b:f4:98:5f:6b:88:72:db:58:98:1e: 35:c2:e0:d4:22:90:05:6c:c9:5d:02:61:e8:97:1d: 0a:7d:d4:21:67:ec:c4:47:6a:95:72:ec:ad:74:80: 2c:56:0e:12:54:88:46:93:fe:de:b8:b0:49:24:12: 1b:7b:38:2b:c3:e3:30:c2:c1:b9:14:d5:22:05:c7: 79:dd:62:47:ba:6f:e0:1f:50:8f:ea:43:6d:07:55: 37:44:be:28:93:dd:c1:c9:fe:8d:c6:76:e0:bd:a2: 12:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:50:6C:21:32:C5:5D:F4:72:5C:4F:03:14:FB:15:18:C4:5D:9D:EF X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/7CDB77C68D7511F1B81A5A6E3211F970.roa sbgp-ipAddrBlock: critical IPv4: 43.246.129.0/24 43.249.241.0/24 103.7.209.0-103.7.210.255 103.26.164.0/23 103.244.211.0/24 160.20.45.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:bd:b0:98:50:c1:f7:64:86:de:cc:72:32:b9:38:67:6a:f4: cd:4e:13:d1:92:9f:26:78:7a:e2:4d:86:3a:64:57:48:dc:24: df:35:aa:53:2f:dc:62:00:1c:2f:94:0f:03:44:00:a4:5c:74: 3a:87:ef:bf:44:d7:10:9d:e4:ee:aa:2b:d4:e9:fb:7a:a9:66: 97:bf:16:fe:8c:b8:29:6b:2a:66:58:06:ed:62:91:59:3f:a5: 54:dc:ad:f8:28:5f:4e:9b:a6:cf:c5:a6:a6:f1:5d:29:3a:09: bf:9f:72:ef:c8:c3:0f:a0:44:22:f1:52:d3:57:68:83:ed:99: ab:d4:b7:54:6e:b4:60:83:04:26:29:37:ca:4c:c5:0b:7b:3b: 76:73:b4:47:d7:6a:40:08:71:04:ee:d5:c2:fb:32:99:cb:eb: 73:88:d9:1b:47:21:df:f8:c9:02:98:88:94:44:5b:75:0f:71: bf:c3:2e:1f:5f:11:a7:a2:fc:1e:14:6c:f1:6f:cf:77:b6:ee: e1:d8:af:97:6f:0f:ec:d7:9c:e0:0e:8b:d3:5d:c0:53:a1:13: 40:79:42:7e:8d:b5:ee:0a:b5:60:1a:88:77:8a:cc:54:87:5f: 1f:5b:57:3d:36:9f:91:f3:62:00:f5:af:88:97:b7:09:03:5b: bd:4f:0a:be -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgICDgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjYwOTIzMTIyMDEyWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YWIzYzNmYy1mOWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9q4rGv+bbUC9AluHuBeAvtcRm2yt2ehl7wTQVN5rWQtSOnKRx2/M984P/55q t5ooAry7ZKUo7XqFTioZByKkc5kqKV7aHaF8E1y8uxPV0An0520GxtC+9JmVIEc8 khhiknOtsyu9nj3/OfuTRiSbYx9gEDT4DGTRVV/nqs3sIAweCmXtdpXppSdmXI8F RloHNt2iKNIyNjuIa/SYX2uIcttYmB41wuDUIpAFbMldAmHolx0KfdQhZ+zER2qV cuytdIAsVg4SVIhGk/7euLBJJBIbezgrw+MwwsG5FNUiBcd53WJHum/gH1CP6kNt B1U3RL4ok93Byf6NxnbgvaISYwIDAQABo4IChjCCAoIwHQYDVR0OBBYEFKRQbCEy xV30clxPAxT7FRjEXZ3vMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvN0NEQjc3QzY4 RDc1MTFGMUI4MUE1QTZFMzIxMUY5NzAucm9hMEUGCCsGAQUFBwEHAQH/BDYwNDAy BAIAATAsAwQAK/aBAwQAK/nxMAwDBABnB9EDBABnB9IDBAFnGqQDBABn9NMDBACg FC0wDQYJKoZIhvcNAQELBQADggEBAFq9sJhQwfdkht7McjK5OGdq9M1OE9GSnyZ4 euJNhjpkV0jcJN81qlMv3GIAHC+UDwNEAKRcdDqH779E1xCd5O6qK9Tp+3qpZpe/ Fv6MuClrKmZYBu1ikVk/pVTcrfgoX06bps/FpqbxXSk6Cb+fcu/Iww+gRCLxUtNX aIPtmavUt1RutGCDBCYpN8pMxQt7O3ZztEfXakAIcQTu1cL7MpnL63OI2RtHId/4 yQKYiJREW3UPcb/DLh9fEaei/B4UbPFvz3e27uHYr5dvD+zXnOAOi9NdwFOhE0B5 Qn6Nte4KtWAaiHeKzFSHXx9bVz02n5HzYgD1r4iXtwkDW71PCr4= -----END CERTIFICATE-----Generated at Thu Sep 24 02:08:27 2026 by rpki-client