$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/22A3D2E4E5D311EFB5545A4EC4F9AE02.roa File: 22A3D2E4E5D311EFB5545A4EC4F9AE02.roa (raw, json) Hash identifier: RaTiWiu1RIZb8U0TPXob7KKcMpsy0hYtRT5OzB1plGI= Subject key identifier: 46:03:04:E3:68:B3:C1:34:1B:60:05:AD:0B:2F:AF:FF:10:37:8E:B5 Certificate issuer: /CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Certificate serial: 06BB Authority key identifier: F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/22A3D2E4E5D311EFB5545A4EC4F9AE02.roa Signing time: Thu 12 Nov 2026 22:42:42 +0000 ROA not before: Thu 12 Nov 2026 22:42:42 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 932 IP address blocks: 43.248.8.0/22 maxlen: 24 103.39.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 22:19:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1723 (0x6bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E094D, serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Validity Not Before: Nov 12 22:42:42 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6af640e2-d399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c7:49:5e:8f:75:ed:8c:7c:f9:1f:a9:9c:cf: b1:dc:33:19:62:36:94:44:39:04:f1:08:c3:b3:d3: 58:2c:0b:60:3d:86:40:ac:94:a6:ca:74:4e:95:fb: 30:79:51:90:5f:11:f9:4d:3a:35:36:95:6c:00:fd: 3b:25:33:ed:72:2c:49:ee:2a:48:ee:a3:96:3d:e8: c3:6f:a2:bb:f1:71:4c:6b:81:ba:0f:05:87:f3:2c: 3b:e2:bd:b6:c4:bd:cb:a0:5f:94:aa:39:67:bf:8c: 4f:87:b4:05:bb:c1:4b:a6:07:d7:63:b3:25:5d:b8: 66:01:54:c4:ae:3d:d8:e1:a6:9c:2a:f2:f1:e2:f3: a5:c1:1f:e5:b1:a0:0c:df:27:9b:f6:da:0c:db:63: 5e:a9:f2:b9:30:ba:75:99:2f:4c:59:d8:4c:01:78: 95:3c:9a:32:ba:ce:a9:73:56:8e:47:66:2a:56:45: 2d:3e:b9:2f:c0:cb:2d:ab:4f:5a:12:9a:03:65:8d: 21:72:40:ea:b4:ae:84:41:3d:6b:22:35:27:4d:12: e6:71:f6:59:22:65:e3:6e:ae:c4:f4:f3:be:5c:4d: 27:92:5e:19:c5:c0:f0:6f:39:0d:d5:1f:83:ff:81: 89:ed:12:36:b9:7b:b8:3b:35:6a:e0:b9:b0:ac:20: 14:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:03:04:E3:68:B3:C1:34:1B:60:05:AD:0B:2F:AF:FF:10:37:8E:B5 X509v3 Authority Key Identifier: keyid:F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/22A3D2E4E5D311EFB5545A4EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.248.8.0/22 103.39.76.0/22 Signature Algorithm: sha256WithRSAEncryption 32:70:1d:08:b4:3d:15:ec:72:55:3f:45:0b:9a:54:89:e2:c6: 50:cd:56:81:70:29:dc:46:9a:f5:63:70:45:78:32:ef:cb:b6: 07:12:3d:69:8e:82:51:cf:c3:dd:25:74:12:b4:21:82:23:71: 15:5a:a3:44:b7:e4:d3:eb:11:70:6c:ad:6a:6c:f3:3a:06:74: 2b:26:be:c3:6a:f9:41:d4:ed:d3:6b:69:6d:5b:b6:12:78:ae: c4:a3:ad:3a:af:9a:20:0b:87:fa:0e:16:f1:d4:a5:75:bb:98: 66:b1:63:87:a5:88:39:19:1a:ae:25:61:9a:a8:b0:ad:25:d1: 92:64:09:b9:e3:a4:0b:b9:c7:96:a0:3f:78:1d:df:9b:ce:ea: 94:a7:4b:05:d6:06:51:20:14:53:bb:3e:74:97:05:3a:46:e8: 52:36:3d:de:1d:60:28:5f:24:fc:97:ac:0d:62:50:cf:eb:c7: 92:06:12:36:94:65:89:99:e1:bf:8f:9a:3d:df:d4:19:0f:b0: 7c:0d:22:58:02:0c:6e:10:8e:3a:ea:49:2c:2a:5f:eb:83:46: 45:c5:3d:a7:57:b4:a2:e6:54:86:a7:72:05:64:2e:11:9d:12: d1:cd:44:93:d1:34:d7:44:70:98:9d:27:ce:65:34:d4:0b:ad: 1d:07:7b:0d -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA5NEQxMTAvBgNVBAUTKEYzMTcwNUU4MThFQTQ4MDNCMDkzNDE5M0Y2MUZDNkUz MzcxNzcyRUQwHhcNMjYxMTEyMjI0MjQyWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWY2NDBlMi1kMzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsdJXo917Yx8+R+pnM+x3DMZYjaURDkE8QjDs9NYLAtgPYZArJSmynROlfsw eVGQXxH5TTo1NpVsAP07JTPtcixJ7ipI7qOWPejDb6K78XFMa4G6DwWH8yw74r22 xL3LoF+Uqjlnv4xPh7QFu8FLpgfXY7MlXbhmAVTErj3Y4aacKvLx4vOlwR/lsaAM 3yeb9toM22NeqfK5MLp1mS9MWdhMAXiVPJoyus6pc1aOR2YqVkUtPrkvwMstq09a EpoDZY0hckDqtK6EQT1rIjUnTRLmcfZZImXjbq7E9PO+XE0nkl4ZxcDwbzkN1R+D /4GJ7RI2uXu4OzVq4LmwrCAUOQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFEYDBONo s8E0G2AFrQsvr/8QN461MB8GA1UdIwQYMBaAFPMXBegY6kgDsJNBk/YfxuM3F3Lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDk0RC80MEI3Mzg2RURF ODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNBT3drMEdUOWhfRzR6Y1hj dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh4Y0Y2QmpxU0FPd2swR1Q5aF9HNHpjWGN1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTA5NEQvNDBCNzM4NkVERTgxMTFFQkE5RkM3RDcyQzRGOUFFMDIvMjJBM0QyRTRF NUQzMTFFRkI1NTQ1QTRFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK/gIAwQCZydMMA0GCSqGSIb3DQEBCwUAA4IBAQAycB0ItD0V7HJV P0ULmlSJ4sZQzVaBcCncRpr1Y3BFeDLvy7YHEj1pjoJRz8PdJXQStCGCI3EVWqNE t+TT6xFwbK1qbPM6BnQrJr7DavlB1O3Ta2ltW7YSeK7Eo606r5ogC4f6Dhbx1KV1 u5hmsWOHpYg5GRquJWGaqLCtJdGSZAm546QLuceWoD94Hd+bzuqUp0sF1gZRIBRT uz50lwU6RuhSNj3eHWAoXyT8l6wNYlDP68eSBhI2lGWJmeG/j5o939QZD7B8DSJY AgxuEI466kksKl/rg0ZFxT2nV7Si5lSGp3IFZC4RnRLRzUST0TTXRHCYnSfOZTTU C60dB3sN -----END CERTIFICATE-----Generated at Sun Nov 15 08:04:02 2026 by rpki-client