$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/ED49BD3C649A11ECBDAC9565C4F9AE02.roa File: ED49BD3C649A11ECBDAC9565C4F9AE02.roa (raw, json) Hash identifier: whz/c/1Mqo93IHVhUxazHseEQPtP0miB86XC5g8c1Is= Subject key identifier: C0:BC:5C:62:7F:CE:DF:38:16:E0:8D:24:0D:68:9D:F1:C2:B2:39:F0 Certificate issuer: /CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Certificate serial: 06B9 Authority key identifier: F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/ED49BD3C649A11ECBDAC9565C4F9AE02.roa Signing time: Thu 12 Nov 2026 22:42:38 +0000 ROA not before: Thu 12 Nov 2026 22:42:38 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 42960 IP address blocks: 43.248.8.0/22 maxlen: 24 103.39.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 22:19:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1721 (0x6b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E094D, serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Validity Not Before: Nov 12 22:42:38 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6af640de-f9a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:aa:54:95:ce:35:df:ef:09:52:8a:81:67:8d: 8f:de:b2:84:5e:e2:53:6b:e5:6f:f0:65:40:88:ea: 55:3f:3e:dd:45:0b:5c:de:52:04:98:c9:75:fb:ad: 4b:75:7f:a2:57:4d:32:f4:0a:32:52:0a:4b:27:5b: 7c:29:d1:bf:9f:a5:6c:30:6c:d3:af:07:05:62:98: 59:57:95:9e:35:e5:e1:40:d7:6c:e4:75:fa:45:e6: 93:e4:ed:5a:a2:5f:64:c1:cb:14:e5:6e:fa:ec:64: 7a:65:d5:d8:5f:04:fe:c2:27:73:81:3d:83:47:7e: e3:a2:48:ca:66:c4:82:3e:b6:d0:e0:8f:16:11:2b: a9:58:5d:34:c7:fe:c0:d2:cd:25:c5:0c:99:04:01: fa:08:61:dd:52:fe:e1:ef:46:36:49:de:4b:c1:b9: 9b:86:6f:90:a3:de:31:d3:3c:ae:2c:c4:68:c1:53: 49:57:5e:c8:5b:88:c2:f7:d2:eb:ef:72:fa:30:a5: 15:b3:1f:86:8f:53:b8:95:ac:fa:45:bb:fd:f3:47: 8c:d0:b3:78:e3:7b:06:75:93:75:9e:65:93:a7:86: 14:bc:b7:e8:e5:5d:36:33:40:78:1c:83:fb:4c:e5: 04:5e:24:f1:49:b5:1d:ed:ca:5d:14:cc:43:3d:c6: 43:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:BC:5C:62:7F:CE:DF:38:16:E0:8D:24:0D:68:9D:F1:C2:B2:39:F0 X509v3 Authority Key Identifier: keyid:F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/ED49BD3C649A11ECBDAC9565C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.248.8.0/22 103.39.78.0/23 Signature Algorithm: sha256WithRSAEncryption 23:4a:e8:63:a6:7c:5e:e1:29:c6:7b:63:9a:fa:31:ad:68:bf: 57:8a:ae:ce:8c:ff:d8:d6:96:27:22:17:67:5b:4b:5a:33:e3: f7:c0:46:49:a3:3a:b5:7c:5e:85:02:3c:c9:a8:af:30:4e:a7: 0f:a7:ee:3c:e3:bd:f1:59:4a:aa:dd:14:0d:8c:7a:54:17:b4: bb:0a:38:63:0f:cd:ca:4b:dc:03:d2:68:9c:52:e3:7b:bb:7d: 5a:ea:48:ce:3a:c3:25:85:ba:a0:52:5a:dc:c7:6a:5b:c1:00: 44:b0:3c:66:d1:cc:71:ee:ff:77:fb:05:e0:fd:20:6e:db:88: 2a:5e:93:07:c0:be:ac:c9:19:b7:17:94:2f:4c:0c:a0:e1:aa: 17:ea:e5:c7:b4:12:cf:00:b4:9f:83:52:62:80:ed:57:96:39: 74:27:11:93:87:81:71:07:69:a1:59:09:5f:b5:4d:8d:d1:36: ae:c8:69:ef:e6:0e:8f:61:63:4d:94:a2:1a:ed:20:a7:e3:eb: 72:bc:1c:03:e2:ea:59:75:2a:79:d5:56:52:8f:8c:09:09:c9: 35:14:b5:60:ac:a7:7a:6f:11:e4:48:5d:0a:c0:88:54:84:ab: cb:fb:cf:13:a9:06:76:02:b4:2d:7f:b1:bf:13:83:1a:55:a5: 85:fd:aa:1d -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA5NEQxMTAvBgNVBAUTKEYzMTcwNUU4MThFQTQ4MDNCMDkzNDE5M0Y2MUZDNkUz MzcxNzcyRUQwHhcNMjYxMTEyMjI0MjM4WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWY2NDBkZS1mOWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6pUlc413+8JUoqBZ42P3rKEXuJTa+Vv8GVAiOpVPz7dRQtc3lIEmMl1+61L dX+iV00y9AoyUgpLJ1t8KdG/n6VsMGzTrwcFYphZV5WeNeXhQNds5HX6ReaT5O1a ol9kwcsU5W767GR6ZdXYXwT+widzgT2DR37jokjKZsSCPrbQ4I8WESupWF00x/7A 0s0lxQyZBAH6CGHdUv7h70Y2Sd5Lwbmbhm+Qo94x0zyuLMRowVNJV17IW4jC99Lr 73L6MKUVsx+Gj1O4laz6Rbv980eM0LN443sGdZN1nmWTp4YUvLfo5V02M0B4HIP7 TOUEXiTxSbUd7cpdFMxDPcZDtQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFMC8XGJ/ zt84FuCNJA1onfHCsjnwMB8GA1UdIwQYMBaAFPMXBegY6kgDsJNBk/YfxuM3F3Lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDk0RC80MEI3Mzg2RURF ODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNBT3drMEdUOWhfRzR6Y1hj dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh4Y0Y2QmpxU0FPd2swR1Q5aF9HNHpjWGN1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTA5NEQvNDBCNzM4NkVERTgxMTFFQkE5RkM3RDcyQzRGOUFFMDIvRUQ0OUJEM0M2 NDlBMTFFQ0JEQUM5NTY1QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK/gIAwQBZydOMA0GCSqGSIb3DQEBCwUAA4IBAQAjSuhjpnxe4SnG e2Oa+jGtaL9Xiq7OjP/Y1pYnIhdnW0taM+P3wEZJozq1fF6FAjzJqK8wTqcPp+48 473xWUqq3RQNjHpUF7S7CjhjD83KS9wD0micUuN7u31a6kjOOsMlhbqgUlrcx2pb wQBEsDxm0cxx7v93+wXg/SBu24gqXpMHwL6syRm3F5QvTAyg4aoX6uXHtBLPALSf g1JigO1Xljl0JxGTh4FxB2mhWQlftU2N0TauyGnv5g6PYWNNlKIa7SCn4+tyvBwD 4upZdSp51VZSj4wJCck1FLVgrKd6bxHkSF0KwIhUhKvL+88TqQZ2ArQtf7G/E4Ma VaWF/aod -----END CERTIFICATE-----Generated at Sun Nov 15 11:13:16 2026 by rpki-client