$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/0E1EAB66961011ECA540626AC4F9AE02.roa File: 0E1EAB66961011ECA540626AC4F9AE02.roa (raw, json) Hash identifier: pftvQJDlDN9u1tW0H1ZfbUWnvbLvbOVKva+/361jxJc= Subject key identifier: 99:B7:F0:97:92:82:FA:2A:BE:65:15:4E:C5:10:FC:F2:AE:4D:7F:78 Certificate issuer: /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB Certificate serial: 04CA Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/0E1EAB66961011ECA540626AC4F9AE02.roa Signing time: Fri 23 Oct 2026 00:47:33 +0000 ROA not before: Fri 23 Oct 2026 00:47:33 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 133199 IP address blocks: 43.255.28.0/24 maxlen: 24 43.255.29.0/24 maxlen: 24 43.255.30.0/24 maxlen: 24 43.255.31.0/24 maxlen: 24 103.74.192.0/24 maxlen: 24 103.74.193.0/24 maxlen: 24 103.74.194.0/24 maxlen: 24 103.74.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 23:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1226 (0x4ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2A61, serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB Validity Not Before: Oct 23 00:47:33 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6adaaea5-6c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d2:23:50:c6:1e:72:cb:c6:80:00:f9:1a:5e: 18:a8:dd:2d:a5:96:77:7f:08:ea:74:2f:d8:36:e8: 18:a2:d7:e4:62:74:e3:47:49:a4:ff:8a:52:97:22: 44:7a:fb:c7:0c:20:af:5c:fa:6f:71:c2:ca:b0:87: 0d:bd:09:6f:3d:fc:7f:c9:da:f0:cc:0d:d6:b7:a3: 6b:63:02:84:87:1b:b1:42:bf:b4:4b:e7:14:f8:c6: 94:82:ff:8e:76:d4:4e:83:4d:b8:3c:96:6b:e6:6d: eb:2c:a6:d9:2a:af:d5:82:33:95:9f:98:b8:6e:a3: ed:d8:14:4f:02:3a:ea:28:99:e1:de:17:13:0a:20: bf:c3:1e:1c:f5:f4:5c:ba:e5:3c:6c:c0:e5:4c:e9: 71:39:f6:0c:ea:91:c7:a3:c5:fb:5a:0a:22:94:04: 3b:f4:ff:fa:73:41:7d:74:1b:cb:09:a8:df:e2:87: 34:b3:77:bd:2f:e8:9d:2c:49:a4:ea:19:79:8b:24: 52:fd:8b:6e:1b:3c:b2:e7:d7:b6:dc:fe:22:b9:50: 58:51:1e:b4:81:b5:94:fa:b7:90:c2:e1:93:00:ca: 03:8f:ae:62:d6:cf:39:98:b4:2c:46:90:5c:a8:f1: 9c:2d:8c:ce:24:00:b6:1f:16:08:e4:53:6c:87:8d: 80:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B7:F0:97:92:82:FA:2A:BE:65:15:4E:C5:10:FC:F2:AE:4D:7F:78 X509v3 Authority Key Identifier: keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/0E1EAB66961011ECA540626AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.255.28.0/22 103.74.192.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:6d:29:9f:a8:40:91:f1:da:53:b4:54:79:f8:42:1b:13:ca: a4:c4:83:40:ae:b9:9e:9a:9c:a1:c0:a8:01:35:c5:ac:2c:c4: 41:63:08:75:d7:99:63:fc:05:7d:a9:b4:cd:9e:36:37:9d:ab: 57:d3:99:b7:2e:b5:0f:2e:2d:33:11:54:db:9a:91:71:5a:26: ef:11:c6:20:e6:66:85:ce:54:0a:b1:67:68:6a:4c:cd:3b:34: 18:86:f4:ba:84:2c:45:0b:fb:de:cf:3d:54:e0:c8:f2:5c:d6: 4e:86:74:d7:77:9d:7e:a2:37:2e:ff:c9:45:ae:70:77:97:3d: 48:b0:de:6f:eb:0d:10:c0:04:4f:48:55:b9:aa:59:d4:be:92: f0:52:ca:42:6a:16:0c:70:08:82:ff:57:8d:2f:c6:fb:96:73: eb:52:ec:3c:89:06:72:00:64:e0:8a:d1:fc:6c:2b:f7:53:0f: f4:e2:dc:b4:2f:5d:4c:0e:ef:3c:80:7e:1c:a1:22:fd:b7:13: d7:13:79:5d:b6:f7:58:81:14:16:43:b6:52:ba:4b:3b:a0:75: 43:75:0d:e8:fa:28:c6:15:01:32:5e:2f:a7:06:22:c0:b6:23: 93:0e:d4:c9:15:76:12:9b:b5:b8:57:20:d0:a3:9a:6e:c8:27: 38:e0:97:5b -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBNjExMTAvBgNVBAUTKDJCNTE3QzZCNzlFM0NFQjAzODlENDFBQkM1RUNFMjEw N0ZFQzUzRkIwHhcNMjYxMDIzMDA0NzMzWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWRhYWVhNS02YzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9IjUMYecsvGgAD5Gl4YqN0tpZZ3fwjqdC/YNugYotfkYnTjR0mk/4pSlyJE evvHDCCvXPpvccLKsIcNvQlvPfx/ydrwzA3Wt6NrYwKEhxuxQr+0S+cU+MaUgv+O dtROg024PJZr5m3rLKbZKq/VgjOVn5i4bqPt2BRPAjrqKJnh3hcTCiC/wx4c9fRc uuU8bMDlTOlxOfYM6pHHo8X7WgoilAQ79P/6c0F9dBvLCajf4oc0s3e9L+idLEmk 6hl5iyRS/YtuGzyy59e23P4iuVBYUR60gbWU+reQwuGTAMoDj65i1s85mLQsRpBc qPGcLYzOJAC2HxYI5FNsh42AIwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFJm38JeS gvoqvmUVTsUQ/PKuTX94MB8GA1UdIwQYMBaAFCtRfGt5486wOJ1Bq8Xs4hB/7FP7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkE2MS9FREMwOEZFNjk2 MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpyQTRuVUdyeGV6aUVIX3NV X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxRjhhM25qenJBNG5VR3J4ZXppRUhfc1Vfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTJBNjEvRURDMDhGRTY5NjBCMTFFQ0JCRTRCRTY0QzRGOUFFMDIvMEUxRUFCNjY5 NjEwMTFFQ0E1NDA2MjZBQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK/8cAwQCZ0rAMA0GCSqGSIb3DQEBCwUAA4IBAQB6bSmfqECR8dpT tFR5+EIbE8qkxINArrmempyhwKgBNcWsLMRBYwh115lj/AV9qbTNnjY3natX05m3 LrUPLi0zEVTbmpFxWibvEcYg5maFzlQKsWdoakzNOzQYhvS6hCxFC/vezz1U4Mjy XNZOhnTXd51+ojcu/8lFrnB3lz1IsN5v6w0QwARPSFW5qlnUvpLwUspCahYMcAiC /1eNL8b7lnPrUuw8iQZyAGTgitH8bCv3Uw/04ty0L11MDu88gH4coSL9txPXE3ld tvdYgRQWQ7ZSuks7oHVDdQ3o+ijGFQEyXi+nBiLAtiOTDtTJFXYSm7W4VyDQo5pu yCc44Jdb -----END CERTIFICATE-----Generated at Sun Nov 15 10:39:12 2026 by rpki-client