$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/DD46BB92EDAB11EDBE91BB82C4F9AE02.roa File: DD46BB92EDAB11EDBE91BB82C4F9AE02.roa (raw, json) Hash identifier: Z+LqzSewpL/vsWqtL6Yo0e38jLGpTvdUpJpiQgt4Cd8= Subject key identifier: 52:9B:7C:26:31:F1:7D:E3:64:E0:9B:21:73:30:D7:18:5F:A4:26:28 Certificate issuer: /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08 Certificate serial: 06F9 Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/DD46BB92EDAB11EDBE91BB82C4F9AE02.roa Signing time: Wed 16 Sep 2026 22:44:20 +0000 ROA not before: Wed 16 Sep 2026 22:44:20 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 11158 IP address blocks: 43.248.220.0/24 maxlen: 24 117.103.120.0/24 maxlen: 24 117.103.121.0/24 maxlen: 24 117.103.122.0/24 maxlen: 24 117.103.123.0/24 maxlen: 24 117.103.126.0/24 maxlen: 24 117.103.127.0/24 maxlen: 24 119.31.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 22:13:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1785 (0x6f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE146, serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08 Validity Not Before: Sep 16 22:44:20 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aab1bc4-dd2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0c:e9:71:19:39:e8:86:e4:ea:05:a0:36:c2: 33:79:4b:5b:12:81:e7:e7:2c:b0:f1:30:54:d0:c0: 43:bb:50:9a:b9:c6:09:e9:25:c0:9d:78:55:70:a1: c2:44:c2:5a:9e:3a:27:a8:1e:6e:0f:59:db:a9:11: c7:b1:30:f9:28:d8:0c:f4:c3:65:fd:fb:52:5f:75: e5:0b:a8:34:a6:7c:1f:bd:a8:88:6e:b4:4d:35:95: 4b:a8:f2:1a:8d:60:d0:77:be:28:66:b7:28:4f:a0: fc:3a:bf:ba:32:b9:b2:c3:40:87:32:ce:c8:4f:d3: 00:12:15:b8:23:9c:55:e3:e6:59:b7:0f:3e:f6:34: a1:4c:f9:ad:61:a5:3c:00:88:b5:77:32:a8:b9:3b: 70:a0:af:a0:10:66:b0:09:19:50:b0:69:66:eb:58: 53:06:0c:e1:d6:91:80:d9:4a:5f:00:31:af:3a:cd: 16:e8:7b:49:23:65:54:fa:08:d3:a1:4e:7e:3b:34: 61:8c:24:29:c6:b0:eb:d5:73:ef:ea:d3:19:fa:bd: 2f:4b:15:96:20:c3:72:05:3e:f8:62:36:f6:9f:ab: ee:19:27:3a:75:50:10:f0:42:ae:9b:02:fb:ff:a3: 96:9d:bc:b9:34:95:f7:4d:76:33:cd:cc:8f:68:46: 73:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9B:7C:26:31:F1:7D:E3:64:E0:9B:21:73:30:D7:18:5F:A4:26:28 X509v3 Authority Key Identifier: keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/DD46BB92EDAB11EDBE91BB82C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.248.220.0/24 117.103.120.0/22 117.103.126.0/23 119.31.160.0/24 Signature Algorithm: sha256WithRSAEncryption 75:84:0c:ac:fb:d2:17:66:58:04:63:4e:f5:09:c9:1e:c5:ea: 89:65:8f:52:3a:b0:f2:0c:e5:94:77:dc:a1:93:67:60:5d:1f: 07:1d:ff:de:1b:76:c2:34:a9:dc:c2:91:53:69:00:12:90:4b: bb:fe:c0:6d:e0:6d:bf:49:6f:db:9e:9b:80:25:ee:a2:43:3f: 6c:d2:68:e9:32:a3:30:17:b7:e1:9d:79:67:fb:55:d9:dc:5f: 18:d3:18:2a:3e:68:94:42:29:bc:8e:52:97:b0:5f:61:53:09: ff:01:17:18:f5:2e:ea:0f:24:82:55:4a:29:6b:6f:5e:49:10: bc:58:92:80:74:9f:be:b0:e3:80:f6:7b:7d:21:3d:bc:1c:85: 46:5f:7f:e4:5b:e3:24:c8:b4:16:12:52:8a:e8:5a:8f:d9:18: 08:3c:7d:8f:6d:45:ea:72:55:2b:17:e3:8b:36:18:9c:c8:fe: bf:15:32:19:2b:43:48:8b:6c:85:5b:9c:55:f6:df:c7:5e:7c: e7:ab:d5:1e:83:74:25:9e:87:72:ee:f7:1d:1f:e7:04:7b:39: 19:21:56:6e:d0:c1:12:78:e4:f0:9e:fa:1d:b5:1d:44:7f:7c: 95:3e:58:c4:cb:9e:51:e8:20:73:ba:de:51:b7:c9:4b:c6:b4: b1:f3:78:b9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICBvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUxNDYxMTAvBgNVBAUTKDQzRUEzQTJEQzA4QzVFMUYyQ0Q2ODQxMTY0NEEwNUMw NzZFODhDMDgwHhcNMjYwOTE2MjI0NDIwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFiMWJjNC1kZDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqAzpcRk56Ibk6gWgNsIzeUtbEoHn5yyw8TBU0MBDu1CaucYJ6SXAnXhVcKHC RMJanjonqB5uD1nbqRHHsTD5KNgM9MNl/ftSX3XlC6g0pnwfvaiIbrRNNZVLqPIa jWDQd74oZrcoT6D8Or+6Mrmyw0CHMs7IT9MAEhW4I5xV4+ZZtw8+9jShTPmtYaU8 AIi1dzKouTtwoK+gEGawCRlQsGlm61hTBgzh1pGA2UpfADGvOs0W6HtJI2VU+gjT oU5+OzRhjCQpxrDr1XPv6tMZ+r0vSxWWIMNyBT74Yjb2n6vuGSc6dVAQ8EKumwL7 /6OWnby5NJX3TXYzzcyPaEZzmwIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFFKbfCYx 8X3jZOCbIXMw1xhfpCYoMB8GA1UdIwQYMBaAFEPqOi3AjF4fLNaEEWRKBcB26IwI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTE0Ni9FNDFBQjQyQUJE MzExMUVCQkZDM0Y5MjFDNEY5QUUwMi9RLW82TGNDTVhoOHMxb1FSWkVvRndIYm9q QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtbzZMY0NNWGg4czFvUVJaRW9Gd0hib2pBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkUxNDYvRTQxQUI0MkFCRDMxMTFFQkJGQzNGOTIxQzRGOUFFMDIvREQ0NkJCOTJF REFCMTFFREJFOTFCQjgyQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAK/jcAwQCdWd4AwQBdWd+AwQAdx+gMA0GCSqGSIb3DQEBCwUAA4IB AQB1hAys+9IXZlgEY071CckexeqJZY9SOrDyDOWUd9yhk2dgXR8HHf/eG3bCNKnc wpFTaQASkEu7/sBt4G2/SW/bnpuAJe6iQz9s0mjpMqMwF7fhnXln+1XZ3F8Y0xgq PmiUQim8jlKXsF9hUwn/ARcY9S7qDySCVUopa29eSRC8WJKAdJ++sOOA9nt9IT28 HIVGX3/kW+MkyLQWElKK6FqP2RgIPH2PbUXqclUrF+OLNhicyP6/FTIZK0NIi2yF W5xV9t/HXnznq9Ueg3Qlnody7vcdH+cEezkZIVZu0MESeOTwnvodtR1Ef3yVPljE y55R6CBzut5Rt8lLxrSx83i5 -----END CERTIFICATE-----Generated at Sat Sep 26 12:56:53 2026 by rpki-client