$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/15D68F5ED55011EFA0564D54C4F9AE02.roa File: 15D68F5ED55011EFA0564D54C4F9AE02.roa (raw, json) Hash identifier: O//1/dnt6OgAnJRkW/BPT1PDA56bdB9HC+ER8FMec+w= Subject key identifier: A4:48:4E:C4:83:83:9B:7C:E3:E7:BE:8D:52:3D:33:0E:03:CC:B9:05 Certificate issuer: /CN=A91CD00C/serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514 Certificate serial: 043F Authority key identifier: DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/15D68F5ED55011EFA0564D54C4F9AE02.roa Signing time: Sun 11 Oct 2026 00:50:01 +0000 ROA not before: Sun 11 Oct 2026 00:50:01 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 153494 IP address blocks: 43.248.64.0/22 maxlen: 24 103.39.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 23:58:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1087 (0x43f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD00C, serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514 Validity Not Before: Oct 11 00:50:01 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6acadd39-9f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7a:59:af:48:08:b4:78:db:68:33:7e:ad:c4: f5:94:ef:75:d0:e5:61:8d:26:fb:9d:3c:f5:88:e5: df:45:6a:0b:46:18:9f:0d:5c:4a:1d:d5:b2:ab:1a: 32:08:d2:46:98:e2:1d:ac:a6:83:a8:9d:d6:27:9a: 4a:ac:fa:63:b3:e8:c8:8c:5d:fa:73:97:f2:f0:dd: 4e:b2:bf:1a:b4:58:12:0a:f8:2a:c1:86:95:a8:16: 71:32:f3:8d:11:0d:16:74:1b:69:d1:6c:f6:81:79: 23:d2:bd:81:0e:14:b6:91:89:5f:e9:25:c0:d9:9d: 66:90:0c:d0:48:72:a7:28:4d:11:6b:bf:5c:9b:b0: 60:30:66:03:78:23:b4:05:3d:2c:aa:db:be:94:14: 3e:79:ad:1b:85:52:72:06:69:46:e8:81:3f:a2:1a: 7b:a0:13:91:23:20:1c:77:d6:ae:ef:cb:9a:8a:de: cb:a9:96:db:58:e9:71:cc:12:34:09:3c:82:fd:88: d3:02:96:68:29:77:5f:b4:45:43:56:0b:4f:26:b5: 7f:9b:b4:8d:72:bb:e7:74:22:99:8a:04:11:a9:67: 1e:27:8c:55:87:71:1a:a2:75:d3:a2:d2:aa:4a:5b: f0:b6:12:94:54:a3:4d:25:17:7e:63:f1:82:80:29: 96:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:48:4E:C4:83:83:9B:7C:E3:E7:BE:8D:52:3D:33:0E:03:CC:B9:05 X509v3 Authority Key Identifier: keyid:DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/15D68F5ED55011EFA0564D54C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.248.64.0/22 103.39.152.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:70:47:03:ee:13:01:fa:52:37:60:b0:73:78:f1:b8:c4:46: 51:b6:3f:49:58:28:57:8f:d1:1f:22:23:da:e4:c7:31:aa:4d: 0c:62:d3:a7:43:f3:ab:ba:eb:eb:d7:71:1a:e4:45:3a:e5:6c: e6:eb:b3:d6:b0:c1:f2:07:ff:0e:6e:f2:85:ef:53:11:11:87: 68:b0:65:5c:92:af:08:aa:fd:69:09:f4:97:e1:be:bc:97:e7: 0b:bd:34:38:ab:be:6d:e5:59:54:32:26:94:41:1c:1a:31:8d: 06:59:76:61:28:1a:03:b9:ea:b5:0e:ed:ab:af:40:c5:21:2b: 70:db:92:6d:f5:66:86:6b:1e:67:8c:b2:b4:75:0f:9c:9e:0e: 2d:ae:77:42:da:c9:95:4f:ab:97:04:08:3d:f8:67:fe:ed:8f: ec:77:de:a6:ea:8e:56:20:d5:df:f2:1c:ab:95:3d:26:8e:47: 1c:4f:9d:e1:55:89:7f:0f:79:54:f8:1b:86:98:c9:06:d1:4e: f9:eb:2a:d7:30:59:d3:63:bc:0a:ba:9d:de:b1:a1:64:1f:71: c1:cb:9b:6c:e7:49:31:95:e7:8c:f6:bf:b2:76:89:bf:2c:69: 77:bf:55:2b:0c:61:03:91:90:20:74:16:cd:01:a7:d5:4c:47: 43:60:28:e1 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QwMEMxMTAvBgNVBAUTKERCMkNDQ0E4M0Q4NTMyODhDNTAwQ0RGQzNBRTFFMkZF QTA0OUY1MTQwHhcNMjYxMDExMDA1MDAxWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNhZGQzOS05Zjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnpZr0gItHjbaDN+rcT1lO910OVhjSb7nTz1iOXfRWoLRhifDVxKHdWyqxoy CNJGmOIdrKaDqJ3WJ5pKrPpjs+jIjF36c5fy8N1Osr8atFgSCvgqwYaVqBZxMvON EQ0WdBtp0Wz2gXkj0r2BDhS2kYlf6SXA2Z1mkAzQSHKnKE0Ra79cm7BgMGYDeCO0 BT0sqtu+lBQ+ea0bhVJyBmlG6IE/ohp7oBORIyAcd9au78uait7LqZbbWOlxzBI0 CTyC/YjTApZoKXdftEVDVgtPJrV/m7SNcrvndCKZigQRqWceJ4xVh3EaonXTotKq SlvwthKUVKNNJRd+Y/GCgCmWSwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFKRITsSD g5t84+e+jVI9Mw4DzLkFMB8GA1UdIwQYMBaAFNsszKg9hTKIxQDN/Drh4v6gSfUU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDAwQy9DQUE4ODYxRUM2 MDExMUVDOTVGRjFFMTFDNEY5QUUwMi8yeXpNcUQyRk1vakZBTTM4T3VIaV9xQko5 UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ5ek1xRDJGTW9qRkFNMzhPdUhpX3FCSjlSUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0QwMEMvQ0FBODg2MUVDNjAxMTFFQzk1RkYxRTExQzRGOUFFMDIvMTVENjhGNUVE NTUwMTFFRkEwNTY0RDU0QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK/hAAwQCZyeYMA0GCSqGSIb3DQEBCwUAA4IBAQA8cEcD7hMB+lI3 YLBzePG4xEZRtj9JWChXj9EfIiPa5Mcxqk0MYtOnQ/Oruuvr13Ea5EU65Wzm67PW sMHyB/8ObvKF71MREYdosGVckq8Iqv1pCfSX4b68l+cLvTQ4q75t5VlUMiaUQRwa MY0GWXZhKBoDueq1Du2rr0DFIStw25Jt9WaGax5njLK0dQ+cng4trndC2smVT6uX BAg9+Gf+7Y/sd96m6o5WINXf8hyrlT0mjkccT53hVYl/D3lU+BuGmMkG0U756yrX MFnTY7wKup3esaFkH3HBy5ts50kxleeM9r+ydom/LGl3v1UrDGEDkZAgdBbNAafV TEdDYCjh -----END CERTIFICATE-----Generated at Sun Nov 15 22:34:08 2026 by rpki-client