$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6CA0/C185C03475DD11F1B7D5E4A06DA30FBC/E83F3D4A769611F1B4A8F44568A30FBC.roa File: E83F3D4A769611F1B4A8F44568A30FBC.roa (raw, json) Hash identifier: mwRw+te8N8Tfr8Fref9XjkMHkxw9JaGnt839b3ney+E= Subject key identifier: 74:37:B6:BF:44:32:02:BF:9F:6E:62:AB:89:6F:81:23:2F:CD:89:43 Certificate issuer: /CN=A91B6CA0/serialNumber=6D70BA1AD2D049CCB366D2278325E1B2122CAE77 Certificate serial: 03 Authority key identifier: 6D:70:BA:1A:D2:D0:49:CC:B3:66:D2:27:83:25:E1:B2:12:2C:AE:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXC6GtLQScyzZtIngyXhshIsrnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6CA0/C185C03475DD11F1B7D5E4A06DA30FBC/E83F3D4A769611F1B4A8F44568A30FBC.roa Signing time: Fri 03 Jul 2026 04:23:14 +0000 ROA not before: Fri 03 Jul 2026 04:23:14 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 56074 IP address blocks: 43.252.128.0/24 maxlen: 24 43.252.130.0/24 maxlen: 24 103.4.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6CA0/C185C03475DD11F1B7D5E4A06DA30FBC/bXC6GtLQScyzZtIngyXhshIsrnc.crl rsync://rpki.apnic.net/member_repository/A91B6CA0/C185C03475DD11F1B7D5E4A06DA30FBC/bXC6GtLQScyzZtIngyXhshIsrnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXC6GtLQScyzZtIngyXhshIsrnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:13:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6CA0, serialNumber=6D70BA1AD2D049CCB366D2278325E1B2122CAE77 Validity Not Before: Jul 3 04:23:14 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6a473932-8119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e5:06:af:38:34:ff:fa:8d:30:23:b0:f3:ed: 0a:c1:e5:4b:96:e6:1b:a7:dc:21:3a:57:85:d2:16: d7:f6:72:9f:d6:8e:85:eb:af:2b:bf:fb:f0:36:eb: 27:55:f1:78:5e:d9:27:d4:76:f3:82:3c:3d:8b:21: 38:d3:f5:17:64:4a:ca:21:64:b4:9c:e8:8a:ce:ad: bf:b2:2e:f2:8b:ae:ec:e4:78:6c:f3:fa:df:15:e8: 9a:68:70:12:43:7d:02:c6:e8:31:24:84:62:16:c6: 4c:2c:d0:23:f8:58:24:27:17:14:f6:db:94:4a:72: 8c:e1:f0:fb:2f:6b:73:11:a9:3e:a2:84:24:67:f0: 25:67:7c:ed:65:47:62:6e:12:69:0c:ad:7a:3f:dc: 52:73:1e:56:af:4d:e2:5b:3b:9e:94:67:3f:8b:c3: 35:40:ac:34:5d:46:22:dc:4d:b3:7f:db:2e:7b:aa: 75:e1:4a:cf:a7:01:ec:4b:ac:54:df:95:56:1b:ba: e8:fe:1c:4f:7c:4b:85:17:36:a3:0b:40:4b:44:aa: b6:3b:60:99:d0:df:a7:ed:07:5c:49:6e:97:51:9b: 34:fa:46:d5:fe:c6:17:8c:d9:5f:52:a0:9a:0d:17: 2c:f2:58:67:25:d1:9c:88:87:3f:3d:fb:84:d5:3d: 19:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:37:B6:BF:44:32:02:BF:9F:6E:62:AB:89:6F:81:23:2F:CD:89:43 X509v3 Authority Key Identifier: keyid:6D:70:BA:1A:D2:D0:49:CC:B3:66:D2:27:83:25:E1:B2:12:2C:AE:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6CA0/C185C03475DD11F1B7D5E4A06DA30FBC/bXC6GtLQScyzZtIngyXhshIsrnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXC6GtLQScyzZtIngyXhshIsrnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6CA0/C185C03475DD11F1B7D5E4A06DA30FBC/E83F3D4A769611F1B4A8F44568A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 43.252.128.0/24 43.252.130.0/24 103.4.86.0/24 Signature Algorithm: sha256WithRSAEncryption a7:39:bc:0d:ee:21:e4:1c:b1:aa:13:44:35:cd:ad:c6:75:82: 4a:88:63:1c:52:11:89:e0:00:4d:b5:66:c8:8d:9f:c7:74:45: 55:14:56:8e:03:d0:b0:84:07:5d:3c:1b:f8:a9:e4:ba:76:27: e1:b6:5a:3c:a8:47:45:28:1d:aa:82:53:f7:f0:69:1e:2d:d7: 4d:2d:37:80:e3:9e:80:93:a4:3d:b6:cf:f7:10:40:3b:3c:83: d1:6f:b2:24:6f:36:88:b6:1a:41:cb:6b:2e:0c:a3:0a:b8:23: 4e:8a:48:c8:be:76:fb:ed:b4:69:97:84:59:92:be:c0:b8:11: a2:bb:a0:79:0c:9d:a1:20:f8:f1:77:d7:55:9e:79:1f:83:40: 97:66:fc:00:0f:c3:66:26:54:19:74:70:64:bc:bb:cf:dc:53: fe:4b:e3:49:58:3a:75:3a:18:e1:4c:19:9f:31:88:d8:f0:c6: 1c:fe:07:93:91:45:de:f4:99:9e:d3:83:73:d9:ea:7a:c6:7e: 3c:73:04:35:80:b2:25:54:58:97:21:59:a3:46:48:c0:f4:0b: 82:ab:d2:e1:f0:ed:81:e7:6f:6d:c5:74:97:7d:00:b1:10:c9: f7:52:9d:79:2f:cc:bf:83:ba:8f:8e:0c:40:54:6e:ac:5b:7d: 0b:95:b2:29 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NkNBMDExMC8GA1UEBRMoNkQ3MEJBMUFEMkQwNDlDQ0IzNjZEMjI3ODMyNUUxQjIx MjJDQUU3NzAeFw0yNjA3MDMwNDIzMTRaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNDczOTMyLTgxMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDk5QavODT/+o0wI7Dz7QrB5UuW5hun3CE6V4XSFtf2cp/WjoXrryu/+/A26ydV 8Xhe2SfUdvOCPD2LITjT9RdkSsohZLSc6IrOrb+yLvKLruzkeGzz+t8V6JpocBJD fQLG6DEkhGIWxkws0CP4WCQnFxT225RKcozh8Psva3MRqT6ihCRn8CVnfO1lR2Ju EmkMrXo/3FJzHlavTeJbO56UZz+LwzVArDRdRiLcTbN/2y57qnXhSs+nAexLrFTf lVYbuuj+HE98S4UXNqMLQEtEqrY7YJnQ36ftB1xJbpdRmzT6RtX+xheM2V9SoJoN FyzyWGcl0ZyIhz89+4TVPRmtAgMBAAGjggJsMIICaDAdBgNVHQ4EFgQUdDe2v0Qy Ar+fbmKriW+BIy/NiUMwHwYDVR0jBBgwFoAUbXC6GtLQScyzZtIngyXhshIsrncw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2Q0EwL0MxODVDMDM0NzVE RDExRjFCN0Q1RTRBMDZEQTMwRkJDL2JYQzZHdExRU2N5elp0SW5neVhoc2hJc3Ju Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYlhDNkd0TFFTY3l6WnRJbmd5WGhzaElzcm5jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkNBMC9DMTg1QzAzNDc1REQxMUYxQjdENUU0QTA2REEzMEZCQy9FODNGM0Q0QTc2 OTYxMUYxQjRBOEY0NDU2OEEzMEZCQy5yb2EwKwYIKwYBBQUHAQcBAf8EHDAaMBgE AgABMBIDBAAr/IADBAAr/IIDBABnBFYwDQYJKoZIhvcNAQELBQADggEBAKc5vA3u IeQcsaoTRDXNrcZ1gkqIYxxSEYngAE21ZsiNn8d0RVUUVo4D0LCEB108G/ip5Lp2 J+G2WjyoR0UoHaqCU/fwaR4t100tN4DjnoCTpD22z/cQQDs8g9FvsiRvNoi2GkHL ay4Mowq4I06KSMi+dvvttGmXhFmSvsC4EaK7oHkMnaEg+PF311WeeR+DQJdm/AAP w2YmVBl0cGS8u8/cU/5L40lYOnU6GOFMGZ8xiNjwxhz+B5ORRd70mZ7Tg3PZ6nrG fjxzBDWAsiVUWJchWaNGSMD0C4Kr0uHw7YHnb23FdJd9ALEQyfdSnXkvzL+Duo+O DEBUbqxbfQuVsik= -----END CERTIFICATE-----Generated at Fri Jul 24 19:25:08 2026 by rpki-client