$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/94FE3AB6D55011EF8A1E1855C4F9AE02.roa File: 94FE3AB6D55011EF8A1E1855C4F9AE02.roa (raw, json) Hash identifier: 0+6i6a8iPNCo/SPAgboscHCEPQTW98JVYh3mOIcUWL4= Subject key identifier: 73:47:2B:8F:32:AF:F5:2E:28:4A:C2:8A:79:E8:7F:99:F4:38:69:6C Certificate issuer: /CN=A91C7A69/serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Certificate serial: 043F Authority key identifier: CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/94FE3AB6D55011EF8A1E1855C4F9AE02.roa Signing time: Sun 11 Oct 2026 00:50:25 +0000 ROA not before: Sun 11 Oct 2026 00:50:25 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 153494 IP address blocks: 43.249.76.0/22 maxlen: 24 103.40.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 23:58:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1087 (0x43f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7A69, serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Validity Not Before: Oct 11 00:50:25 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6acadd51-1bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:65:c4:cb:aa:3b:33:2e:ce:d2:52:d9:26:d8: fb:18:e2:54:c8:7a:af:4f:32:93:96:a4:89:c5:1c: 34:a8:10:28:19:6d:1b:72:33:39:0b:f0:47:ab:f6: dc:2b:83:1a:77:e2:21:4e:d0:4c:8c:79:00:d6:4b: da:5b:1e:df:2d:8b:e0:36:e6:5b:a4:5b:fd:d8:13: 34:41:47:78:6b:2e:31:85:86:7a:97:51:e6:db:e1: d9:26:9b:2a:30:0a:cf:f5:ba:71:17:ab:42:b0:97: bd:75:f4:6d:46:47:05:21:5a:1e:5e:e5:c7:33:e9: 10:cf:5e:80:18:33:c6:bf:cc:cb:4e:cd:3f:45:da: fc:5b:0a:07:31:66:78:25:b5:b6:ee:a4:4e:f0:4c: ff:b8:58:29:81:ed:8b:33:08:08:1a:99:1f:27:c5: 19:b6:9d:f4:4d:4e:5b:17:57:61:8d:e6:4e:a3:d6: 39:59:b5:42:18:10:72:01:be:55:4a:aa:e8:49:95: 78:3f:d5:dc:7f:02:f7:03:6c:33:95:a8:6a:3c:3b: 3a:9b:5a:e2:26:d2:23:fa:6b:14:b4:6e:e8:0a:1d: e7:5d:d1:69:ff:e6:e7:5c:66:00:21:f4:82:87:d4: c7:af:e9:01:9d:ab:a1:cd:0d:06:6e:41:15:17:f4: d7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:47:2B:8F:32:AF:F5:2E:28:4A:C2:8A:79:E8:7F:99:F4:38:69:6C X509v3 Authority Key Identifier: keyid:CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/94FE3AB6D55011EF8A1E1855C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.249.76.0/22 103.40.152.0/22 Signature Algorithm: sha256WithRSAEncryption 11:fc:50:ff:fd:8f:1a:83:fd:c7:87:18:d4:28:c1:15:c9:04: 84:66:bf:70:53:65:30:ce:e0:14:2e:6a:4d:60:08:a3:ee:77: 25:01:4b:80:d7:d8:cf:b9:a0:69:bc:96:22:74:1a:f7:d8:1b: 1e:31:27:e2:84:41:b0:7b:26:27:8f:d6:6c:83:df:d1:65:00: 35:99:46:57:a0:60:e2:48:d3:fc:da:26:5b:d8:9e:ff:fa:36: fe:1f:d7:3f:6c:f0:a4:7c:2f:f7:2b:a4:0a:8e:4f:6d:c7:3f: cc:0c:bf:22:60:33:a8:7e:80:21:4a:bb:ed:15:cc:ad:bd:f2: 74:e2:38:14:b4:3e:0e:2f:6c:97:c2:e9:9a:86:5d:b2:09:8e: 2e:3a:e2:f3:76:da:d1:99:45:28:cb:b7:bb:bc:e3:f1:f2:51: f9:d1:ea:02:6d:25:c4:2a:4c:0e:68:14:c3:66:51:d5:c4:bc: fc:dc:cd:b6:4a:19:61:a1:a2:ce:16:32:fa:17:1b:70:95:03: 84:91:95:db:8b:62:ea:86:73:50:3f:46:56:7e:c6:97:c0:1c: 1f:43:e5:2f:8b:55:04:05:ed:21:24:70:90:f7:45:9b:2b:f0: 45:fb:9c:29:e3:37:c4:47:c7:0b:39:7f:39:ba:a1:c7:e3:33: a9:3c:84:27 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdBNjkxMTAvBgNVBAUTKENCOUQ0MUE2REE5NkY3NkE0RkYwNTg2QjVFOEE4ODlG QzAyMzU0NTcwHhcNMjYxMDExMDA1MDI1WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNhZGQ1MS0xYmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGXEy6o7My7O0lLZJtj7GOJUyHqvTzKTlqSJxRw0qBAoGW0bcjM5C/BHq/bc K4Mad+IhTtBMjHkA1kvaWx7fLYvgNuZbpFv92BM0QUd4ay4xhYZ6l1Hm2+HZJpsq MArP9bpxF6tCsJe9dfRtRkcFIVoeXuXHM+kQz16AGDPGv8zLTs0/Rdr8WwoHMWZ4 JbW27qRO8Ez/uFgpge2LMwgIGpkfJ8UZtp30TU5bF1dhjeZOo9Y5WbVCGBByAb5V SqroSZV4P9XcfwL3A2wzlahqPDs6m1riJtIj+msUtG7oCh3nXdFp/+bnXGYAIfSC h9THr+kBnauhzQ0GbkEVF/TXGwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFHNHK48y r/UuKErCinnof5n0OGlsMB8GA1UdIwQYMBaAFMudQabalvdqT/BYa16KiJ/AI1RX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0E2OS84QUYzRDVCMkM2 MDMxMUVDOEIwRDVEM0RDNEY5QUUwMi95NTFCcHRxVzkycFA4RmhyWG9xSW44QWpW RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1MUJwdHFXOTJwUDhGaHJYb3FJbjhBalZGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzdBNjkvOEFGM0Q1QjJDNjAzMTFFQzhCMEQ1RDNEQzRGOUFFMDIvOTRGRTNBQjZE NTUwMTFFRjhBMUUxODU1QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK/lMAwQCZyiYMA0GCSqGSIb3DQEBCwUAA4IBAQAR/FD//Y8ag/3H hxjUKMEVyQSEZr9wU2UwzuAULmpNYAij7nclAUuA19jPuaBpvJYidBr32BseMSfi hEGweyYnj9Zsg9/RZQA1mUZXoGDiSNP82iZb2J7/+jb+H9c/bPCkfC/3K6QKjk9t xz/MDL8iYDOofoAhSrvtFcytvfJ04jgUtD4OL2yXwumahl2yCY4uOuLzdtrRmUUo y7e7vOPx8lH50eoCbSXEKkwOaBTDZlHVxLz83M22ShlhoaLOFjL6FxtwlQOEkZXb i2LqhnNQP0ZWfsaXwBwfQ+Uvi1UEBe0hJHCQ90WbK/BF+5wp4zfER8cLOX85uqHH 4zOpPIQn -----END CERTIFICATE-----Generated at Sun Nov 15 22:33:39 2026 by rpki-client