$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/3F4036F4866311F19554097E96A30FBC.roa File: 3F4036F4866311F19554097E96A30FBC.roa (raw, json) Hash identifier: 440YzPu5U/xoaje72vjWT28+0QonKeGYuTGrzB3EW/M= Subject key identifier: FC:AC:00:A9:C6:E3:B3:43:4A:AF:8C:DB:18:0C:6E:AD:1C:67:F0:80 Certificate issuer: /CN=A91A6F68/serialNumber=620D39B3A1837973BD13269F2B06AC9B2738820D Certificate serial: 0174 Authority key identifier: 62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/3F4036F4866311F19554097E96A30FBC.roa Signing time: Thu 05 Nov 2026 06:52:58 +0000 ROA not before: Thu 05 Nov 2026 06:52:58 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 50049 IP address blocks: 43.250.52.0/22 maxlen: 22 43.250.52.0/24 maxlen: 24 43.250.53.0/24 maxlen: 24 43.250.54.0/24 maxlen: 24 43.250.55.0/24 maxlen: 24 103.41.176.0/22 maxlen: 22 103.41.176.0/24 maxlen: 24 103.41.177.0/24 maxlen: 24 103.41.178.0/24 maxlen: 24 103.41.179.0/24 maxlen: 24 103.147.152.0/24 maxlen: 24 2406:4fc0::/32 maxlen: 32 2406:4fc0::/35 maxlen: 35 2406:4fc0:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.crl rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 05:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F68, serialNumber=620D39B3A1837973BD13269F2B06AC9B2738820D Validity Not Before: Nov 5 06:52:58 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6aec27ca-5355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e7:40:c6:2c:2d:3d:d1:e1:33:96:3e:d6:f7: fd:f4:70:95:e1:3e:bd:63:01:53:31:8f:bd:98:3c: d4:05:e1:7d:b2:f6:87:9f:2e:b6:af:99:8d:0a:9c: 09:b5:3a:1a:54:14:11:e8:82:f2:fe:8d:d7:c4:ee: 44:ad:33:4a:75:89:61:34:9b:1b:2d:73:18:ec:fe: a4:78:64:3f:9c:3c:00:97:e5:50:34:82:88:63:f9: a9:bd:9f:06:ef:8a:20:c7:6b:70:a0:38:21:99:fe: d2:b8:50:49:89:30:ce:1f:d4:ba:db:1a:ed:3d:79: a9:2e:4d:0f:72:85:62:24:34:91:b5:69:e1:ab:89: 73:0a:81:a1:46:45:bd:28:3a:23:e5:31:0f:63:5c: 60:dc:e9:bf:ec:86:a4:69:58:64:01:3a:97:ef:24: 8f:10:a9:26:73:f5:b6:2d:53:bd:65:7e:58:11:98: 92:eb:bc:12:1b:3e:de:85:dd:54:8c:1d:cd:c5:21: 75:ec:a8:12:34:fb:1c:9e:e0:52:b7:8d:1b:6b:2d: 4f:6d:b2:84:62:cf:ff:eb:cf:8a:10:1f:02:d9:b4: e8:0c:73:f2:00:a4:c7:c4:5c:12:06:69:e7:c6:b5: a7:7a:81:bf:ed:50:be:e4:c9:8c:d0:e4:68:07:87: 49:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:AC:00:A9:C6:E3:B3:43:4A:AF:8C:DB:18:0C:6E:AD:1C:67:F0:80 X509v3 Authority Key Identifier: keyid:62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/3F4036F4866311F19554097E96A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 43.250.52.0/22 103.41.176.0/22 103.147.152.0/24 IPv6: 2406:4fc0::/32 Signature Algorithm: sha256WithRSAEncryption 41:aa:ba:b7:89:7b:18:d4:49:d0:63:a6:81:52:37:48:bb:02: db:c1:b4:62:64:54:96:40:7f:25:19:67:41:81:94:a2:50:d9: 36:ae:fc:83:95:59:01:6b:f7:f6:12:51:1a:fd:3c:17:19:4a: 45:c4:25:6e:97:ce:e8:91:d2:61:a2:34:5d:93:a4:9e:11:9b: a3:7d:c4:88:7c:9d:f8:99:5b:b3:a2:ba:ae:ea:1d:10:17:a1: 8c:40:72:54:ff:33:11:51:46:7b:8c:c1:30:bb:1d:e4:8f:64: cd:51:05:6d:4e:11:b1:ae:ad:48:f7:06:62:07:8a:c1:63:fa: 84:1b:9b:1b:e1:85:e8:df:51:ce:50:bb:1e:37:53:d4:ed:cc: bf:99:75:50:b8:61:8d:5a:ce:bc:ab:02:13:19:e4:67:79:a3: 87:7f:c8:fb:91:ca:89:48:df:96:bb:b6:63:3b:f9:e5:20:1f: af:24:06:83:6e:3e:9e:e6:6b:b2:e3:bf:bd:0a:6d:a7:81:de: fb:bd:77:84:64:e1:b1:ce:19:87:a6:e4:38:30:10:e7:0b:e8: b4:83:07:e3:04:03:7e:61:be:b6:71:f1:54:65:7e:0a:6b:8a: 27:b5:55:5c:96:c9:fa:8c:2f:61:90:40:87:fe:1e:5c:d7:82: 0b:6d:f2:4d -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZGNjgxMTAvBgNVBAUTKDYyMEQzOUIzQTE4Mzc5NzNCRDEzMjY5RjJCMDZBQzlC MjczODgyMEQwHhcNMjYxMTA1MDY1MjU4WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWVjMjdjYS01MzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+dAxiwtPdHhM5Y+1vf99HCV4T69YwFTMY+9mDzUBeF9svaHny62r5mNCpwJ tToaVBQR6ILy/o3XxO5ErTNKdYlhNJsbLXMY7P6keGQ/nDwAl+VQNIKIY/mpvZ8G 74ogx2twoDghmf7SuFBJiTDOH9S62xrtPXmpLk0PcoViJDSRtWnhq4lzCoGhRkW9 KDoj5TEPY1xg3Om/7IakaVhkATqX7ySPEKkmc/W2LVO9ZX5YEZiS67wSGz7ehd1U jB3NxSF17KgSNPscnuBSt40bay1PbbKEYs//68+KEB8C2bToDHPyAKTHxFwSBmnn xrWneoG/7VC+5MmM0ORoB4dJFQIDAQABo4ICezCCAncwHQYDVR0OBBYEFPysAKnG 47NDSq+M2xgMbq0cZ/CAMB8GA1UdIwQYMBaAFGINObOhg3lzvRMmnysGrJsnOIIN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkY2OC85MkUyNTk2MkRG MjExMUVGODMzRjRGMkNDNEY5QUUwMi9ZZzA1czZHRGVYTzlFeWFmS3dhc215YzRn ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lnMDVzNkdEZVhPOUV5YWZLd2FzbXljNGdnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTZGNjgvOTJFMjU5NjJERjIxMTFFRjgzM0Y0RjJDQzRGOUFFMDIvM0Y0MDM2RjQ4 NjYzMTFGMTk1NTQwOTdFOTZBMzBGQkMucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCK/o0AwQCZymwAwQAZ5OYMA0EAgACMAcDBQAkBk/AMA0GCSqGSIb3 DQEBCwUAA4IBAQBBqrq3iXsY1EnQY6aBUjdIuwLbwbRiZFSWQH8lGWdBgZSiUNk2 rvyDlVkBa/f2ElEa/TwXGUpFxCVul87okdJhojRdk6SeEZujfcSIfJ34mVuzorqu 6h0QF6GMQHJU/zMRUUZ7jMEwux3kj2TNUQVtThGxrq1I9wZiB4rBY/qEG5sb4YXo 31HOULseN1PU7cy/mXVQuGGNWs68qwITGeRneaOHf8j7kcqJSN+Wu7ZjO/nlIB+v JAaDbj6e5muy47+9Cm2ngd77vXeEZOGxzhmHpuQ4MBDnC+i0gwfjBAN+Yb62cfFU ZX4Ka4ontVVclsn6jC9hkECH/h5c14ILbfJN -----END CERTIFICATE-----Generated at Sun Nov 15 09:48:30 2026 by rpki-client