$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/430E4E387CC311F0A55B2081C4F9AE02.roa File: 430E4E387CC311F0A55B2081C4F9AE02.roa (raw, json) Hash identifier: Lr5oonGaOp/1JBezgStkgVrxPphf7c1k8rUXUUlH1HQ= Subject key identifier: 91:91:60:A4:DD:03:9D:C2:61:04:47:7E:7F:2D:69:46:B5:5A:7C:DB Certificate issuer: /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638 Certificate serial: 047A Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/430E4E387CC311F0A55B2081C4F9AE02.roa Signing time: Sun 13 Sep 2026 01:51:25 +0000 ROA not before: Sun 13 Sep 2026 01:51:25 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 136557 IP address blocks: 45.252.189.0/24 maxlen: 24 103.214.20.0/24 maxlen: 24 103.252.109.0/24 maxlen: 24 202.37.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1146 (0x47a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6587, serialNumber=2D634077CC847B59D4048D43E04B3309698FE638 Validity Not Before: Sep 13 01:51:25 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6aa6019d-1a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f5:84:0e:42:49:ae:f6:a4:cf:c6:5d:11:85: 8a:9d:14:ab:3f:94:59:96:65:1a:e2:ab:78:67:70: 8f:b2:38:36:31:d0:1b:6d:33:7b:09:73:fe:74:90: 5d:f4:d2:fa:a7:55:4b:84:ca:54:f3:90:3b:6b:0b: 43:41:df:c4:de:81:41:16:0f:21:b0:8b:ca:fa:3e: 66:8f:29:c7:0e:e3:d7:12:2d:e8:6e:4c:3d:e5:38: b7:e7:4b:10:05:e6:a0:4b:ce:90:d3:eb:3d:99:ab: 88:bf:59:43:96:61:88:69:14:d7:51:c5:ff:81:bb: a7:e2:2f:e0:b3:4d:d4:1d:86:2a:b9:81:b0:dc:f8: 02:bf:14:69:fd:a2:7a:de:a9:e1:bd:34:09:5e:22: 49:fb:1b:9b:1c:6e:69:d1:bd:67:c4:54:ac:27:07: a8:13:1a:de:c9:9a:7a:d5:e4:87:68:ab:be:17:f3: eb:d7:f6:97:54:4b:98:72:68:32:81:66:24:42:1b: 2e:7c:89:e0:1c:2c:0a:bc:8e:f1:a5:07:6d:3c:be: 42:7f:e0:17:1a:e3:de:39:d6:49:56:67:2d:0d:e3: dc:c7:75:a8:a9:eb:04:d9:90:0b:53:6b:be:e0:15: be:98:21:a6:ff:1a:8e:29:78:be:ad:bb:13:2c:d4: 61:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:91:60:A4:DD:03:9D:C2:61:04:47:7E:7F:2D:69:46:B5:5A:7C:DB X509v3 Authority Key Identifier: keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/430E4E387CC311F0A55B2081C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.252.189.0/24 103.214.20.0/24 103.252.109.0/24 202.37.74.0/24 Signature Algorithm: sha256WithRSAEncryption 09:ee:cc:8c:ee:b9:96:46:92:dd:b0:b5:d9:56:77:35:cd:34: 0a:ff:c1:c9:b7:66:0f:29:09:aa:e6:7d:7e:1d:1c:21:a7:16: cf:3a:ed:a4:04:45:97:5a:53:2f:9c:e5:17:72:2a:e2:93:c5: 82:c0:ee:a2:36:2d:e4:e5:46:d2:9c:01:71:bb:81:fe:b5:9f: 1f:ee:ad:c8:cd:1a:12:88:6c:7a:4a:74:1e:59:89:f7:70:ac: 63:b0:fb:f4:0e:3f:b8:15:48:93:d6:cb:b4:ff:97:c5:68:a3: 7d:19:5c:f8:e2:b5:8a:88:96:a1:0f:f7:3d:a9:b7:c4:65:7b: d4:16:8c:b8:b7:fb:ba:84:ff:8c:51:a1:83:f5:60:a7:d3:eb: 84:1b:2d:08:63:ae:6c:a5:67:57:d7:fb:9d:31:f5:85:01:15: 05:22:4f:cb:b8:92:06:71:80:9d:93:5b:80:a1:71:69:66:b4: 91:f7:cb:43:80:4c:d3:7a:42:9a:23:54:f6:c2:e2:2e:d2:2b: 89:4c:b6:f9:f0:e7:10:21:93:b0:c0:e5:fe:a8:bc:74:42:e1: ec:2f:0c:c1:83:35:fa:be:7a:63:0d:2a:03:29:4e:5a:cc:28: 97:0c:5c:2b:e9:01:6e:19:1e:36:c7:5e:01:01:57:e4:fc:73: 09:a8:1b:cc -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICBHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1ODcxMTAvBgNVBAUTKDJENjM0MDc3Q0M4NDdCNTlENDA0OEQ0M0UwNEIzMzA5 Njk4RkU2MzgwHhcNMjYwOTEzMDE1MTI1WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE2MDE5ZC0xYTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fWEDkJJrvakz8ZdEYWKnRSrP5RZlmUa4qt4Z3CPsjg2MdAbbTN7CXP+dJBd 9NL6p1VLhMpU85A7awtDQd/E3oFBFg8hsIvK+j5mjynHDuPXEi3obkw95Ti350sQ BeagS86Q0+s9mauIv1lDlmGIaRTXUcX/gbun4i/gs03UHYYquYGw3PgCvxRp/aJ6 3qnhvTQJXiJJ+xubHG5p0b1nxFSsJweoExreyZp61eSHaKu+F/Pr1/aXVEuYcmgy gWYkQhsufIngHCwKvI7xpQdtPL5Cf+AXGuPeOdZJVmctDePcx3WoqesE2ZALU2u+ 4BW+mCGm/xqOKXi+rbsTLNRhkwIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFJGRYKTd A53CYQRHfn8taUa1WnzbMB8GA1UdIwQYMBaAFC1jQHfMhHtZ1ASNQ+BLMwlpj+Y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjU4Ny80MTdENzFCNDkx ODYxMUVEQTg0QTEyNERDNEY5QUUwMi9MV05BZDh5RWUxblVCSTFENEVzekNXbVA1 amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xXTkFkOHlFZTFuVUJJMUQ0RXN6Q1dtUDVqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjY1ODcvNDE3RDcxQjQ5MTg2MTFFREE4NEExMjREQzRGOUFFMDIvNDMwRTRFMzg3 Q0MzMTFGMEE1NUIyMDgxQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQALfy9AwQAZ9YUAwQAZ/xtAwQAyiVKMA0GCSqGSIb3DQEBCwUAA4IB AQAJ7syM7rmWRpLdsLXZVnc1zTQK/8HJt2YPKQmq5n1+HRwhpxbPOu2kBEWXWlMv nOUXcirik8WCwO6iNi3k5UbSnAFxu4H+tZ8f7q3IzRoSiGx6SnQeWYn3cKxjsPv0 Dj+4FUiT1su0/5fFaKN9GVz44rWKiJahD/c9qbfEZXvUFoy4t/u6hP+MUaGD9WCn 0+uEGy0IY65spWdX1/udMfWFARUFIk/LuJIGcYCdk1uAoXFpZrSR98tDgEzTekKa I1T2wuIu0iuJTLb58OcQIZOwwOX+qLx0QuHsLwzBgzX6vnpjDSoDKU5azCiXDFwr 6QFuGR42x14BAVfk/HMJqBvM -----END CERTIFICATE-----Generated at Wed Sep 23 23:34:32 2026 by rpki-client