$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/D0EFCFE4CFB311F1AB5B34BD1266CEF9.roa File: D0EFCFE4CFB311F1AB5B34BD1266CEF9.roa (raw, json) Hash identifier: Xv4A2UHbkPKc0Tu8lLIROPKzU1pVUfhJIBd858ONNJM= Subject key identifier: 6D:C8:AE:6E:48:8A:AC:85:51:D4:C6:AF:F4:9A:AE:43:E3:26:B0:62 Certificate issuer: /CN=A91CC0C9/serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Certificate serial: 0144 Authority key identifier: 47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/D0EFCFE4CFB311F1AB5B34BD1266CEF9.roa Signing time: Sat 24 Oct 2026 14:04:24 +0000 ROA not before: Sat 24 Oct 2026 14:04:24 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 64013 IP address blocks: 43.224.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 06:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC0C9, serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Validity Not Before: Oct 24 14:04:24 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6adcbae8-a726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:81:43:bc:68:6f:79:94:7e:90:60:53:fc:2c: 64:8c:59:7d:86:d6:b2:fd:61:b6:76:93:95:3e:02: 71:ff:d5:95:ae:81:31:fb:e1:75:e0:63:91:b3:53: 91:20:1c:d1:18:4c:94:27:5d:ed:38:c0:bb:75:7e: 33:c3:ed:82:91:6e:25:f6:fb:3f:a1:89:b0:23:79: f0:9a:59:de:8e:e5:df:87:8e:68:15:5b:3d:b4:46: 43:9f:8b:5e:64:5b:c2:33:d8:a4:9f:a6:a5:61:73: 02:1a:74:3e:9d:c4:c7:61:76:3d:0e:44:c0:13:84: 3d:23:de:c7:d5:20:be:e0:3a:30:f2:aa:93:20:5f: 4e:59:4d:a2:b1:1e:9a:80:64:30:19:5a:b3:b5:23: 68:0a:ee:6b:bb:5f:9e:4b:d8:fd:48:50:40:3f:41: 16:26:4c:29:8f:e3:8a:9c:c1:02:dc:ad:66:6a:45: 41:64:d6:f5:aa:5d:62:f6:d8:b6:6f:eb:eb:b0:44: 09:6a:c0:b6:23:c9:f7:3d:57:7c:df:cb:ec:23:6f: 50:c1:f0:3c:c6:cb:75:29:76:d4:e6:67:f9:88:e3: 65:65:8b:b1:07:a5:c3:91:cc:15:10:a2:f9:b6:08: be:29:cb:e1:eb:2e:ba:fb:5d:93:f7:e4:c6:bd:4c: a1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C8:AE:6E:48:8A:AC:85:51:D4:C6:AF:F4:9A:AE:43:E3:26:B0:62 X509v3 Authority Key Identifier: keyid:47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/D0EFCFE4CFB311F1AB5B34BD1266CEF9.roa sbgp-ipAddrBlock: critical IPv4: 43.224.30.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:c5:68:c7:78:c2:78:0f:36:5e:45:13:ba:66:ac:85:d6:43: e5:14:bf:81:a9:df:e7:70:c1:e6:b7:ac:72:0c:83:2f:0f:70: ba:69:68:ed:62:e1:a8:2c:97:bd:c6:c3:28:11:e3:64:31:fb: 85:28:0a:56:0c:31:cc:22:e0:da:00:99:82:83:66:dd:8d:06: 08:d5:c8:24:8a:52:d0:12:95:7c:db:0e:58:86:41:cd:a1:1c: d4:35:68:24:fc:7f:d0:24:c2:d7:73:f5:21:b6:70:ae:cf:88: f5:9c:ce:a7:21:70:f3:57:e1:f8:b7:0e:a6:80:b2:74:7d:0f: cb:e3:98:ea:b0:2e:a9:b8:99:51:f4:78:e2:1e:32:c9:92:50: 8b:01:57:87:93:bc:15:77:d3:7c:17:a0:1f:c3:ac:b0:f5:f8: e5:e1:69:b9:19:f4:c7:53:cf:cc:c1:0f:52:0f:90:a8:70:26: 2a:5b:a9:54:0f:c7:ab:3a:a0:21:33:47:84:5d:62:51:87:5b: 55:0f:78:fc:bd:ff:9f:c3:a8:f7:79:43:b7:b6:b2:2c:18:94: 3c:8c:43:1a:57:c6:3f:c9:b9:25:a7:56:37:d6:bd:44:a6:95: af:07:13:11:81:f2:2d:3c:b2:7d:d3:5f:7e:e0:b8:e9:16:57: e7:05:5d:f8 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MwQzkxMTAvBgNVBAUTKDQ3QjU3N0I5QzhBQkUyQzM2MDBDNUI0RTc5M0ZGNEQ0 N0I2NTA2MjAwHhcNMjYxMDI0MTQwNDI0WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWRjYmFlOC1hNzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4FDvGhveZR+kGBT/CxkjFl9htay/WG2dpOVPgJx/9WVroEx++F14GORs1OR IBzRGEyUJ13tOMC7dX4zw+2CkW4l9vs/oYmwI3nwmlnejuXfh45oFVs9tEZDn4te ZFvCM9ikn6alYXMCGnQ+ncTHYXY9DkTAE4Q9I97H1SC+4Dow8qqTIF9OWU2isR6a gGQwGVqztSNoCu5ru1+eS9j9SFBAP0EWJkwpj+OKnMEC3K1makVBZNb1ql1i9ti2 b+vrsEQJasC2I8n3PVd838vsI29QwfA8xst1KXbU5mf5iONlZYuxB6XDkcwVEKL5 tgi+Kcvh6y66+12T9+TGvUyh+QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFG3Irm5I iqyFUdTGr/SarkPjJrBiMB8GA1UdIwQYMBaAFEe1d7nIq+LDYAxbTnk/9NR7ZQYg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzBDOS9DNURBQkVFQTVG QjQxMUYwODIwMzQ0N0RDNEY5QUUwMi9SN1YzdWNpcjRzTmdERnRPZVRfMDFIdGxC aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I3VjN1Y2lyNHNOZ0RGdE9lVF8wMUh0bEJpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0MwQzkvQzVEQUJFRUE1RkI0MTFGMDgyMDM0NDdEQzRGOUFFMDIvRDBFRkNGRTRD RkIzMTFGMUFCNUIzNEJEMTI2NkNFRjkucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK+AeMA0GCSqGSIb3DQEBCwUAA4IBAQBfxWjHeMJ4DzZeRRO6ZqyF 1kPlFL+Bqd/ncMHmt6xyDIMvD3C6aWjtYuGoLJe9xsMoEeNkMfuFKApWDDHMIuDa AJmCg2bdjQYI1cgkilLQEpV82w5YhkHNoRzUNWgk/H/QJMLXc/UhtnCuz4j1nM6n IXDzV+H4tw6mgLJ0fQ/L45jqsC6puJlR9HjiHjLJklCLAVeHk7wVd9N8F6Afw6yw 9fjl4Wm5GfTHU8/MwQ9SD5CocCYqW6lUD8erOqAhM0eEXWJRh1tVD3j8vf+fw6j3 eUO3trIsGJQ8jEMaV8Y/ybklp1Y31r1EppWvBxMRgfItPLJ9019+4LjpFlfnBV34 -----END CERTIFICATE-----Generated at Sun Nov 15 14:55:22 2026 by rpki-client