$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/457D2B5A28DC11ED839D6243C4F9AE02.roa File: 457D2B5A28DC11ED839D6243C4F9AE02.roa (raw, json) Hash identifier: +71qtrh/tqgRVVNXca71/GAnHXZsZjxryYOXglEr9vw= Subject key identifier: 43:7F:FF:3F:FE:03:B4:52:37:7C:12:3C:E2:8C:49:0B:6D:9A:0B:CA Certificate issuer: /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB Certificate serial: 04CB Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/457D2B5A28DC11ED839D6243C4F9AE02.roa Signing time: Fri 23 Oct 2026 00:47:36 +0000 ROA not before: Fri 23 Oct 2026 00:47:36 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 133861 IP address blocks: 43.255.28.0/24 maxlen: 24 43.255.29.0/24 maxlen: 24 43.255.30.0/24 maxlen: 24 43.255.31.0/24 maxlen: 24 103.74.192.0/24 maxlen: 24 103.74.193.0/24 maxlen: 24 103.74.194.0/24 maxlen: 24 103.74.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 23:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1227 (0x4cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2A61, serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB Validity Not Before: Oct 23 00:47:36 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6adaaea8-8315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c9:15:5c:d8:77:2e:9c:a7:a1:9e:85:aa:34: 55:7d:f0:cd:67:31:47:e6:f5:3f:77:ea:31:ec:61: 4d:a0:99:28:6e:6e:ad:02:b7:41:cd:32:aa:0a:3d: be:42:15:4d:d4:34:1d:2f:b6:12:e2:d9:fb:ae:dd: 7c:02:8a:e3:fa:e1:6b:be:42:f7:1b:52:73:47:a3: 34:0f:f1:24:04:48:f4:ef:7d:36:c6:6b:08:24:8d: 25:95:51:fc:db:36:e4:ae:15:22:08:f4:e3:ca:14: c9:1e:8c:22:c7:68:9a:87:c5:a0:f6:af:6f:1c:80: b1:a6:9b:ae:2f:d0:74:cc:e1:b1:b4:68:cd:5a:1e: 3e:9b:60:13:b6:37:41:11:27:2e:98:6d:ba:45:54: 9f:36:83:93:8c:1b:d3:7b:11:cc:cf:d9:96:17:39: 7a:62:b4:ee:11:01:a0:f4:b1:9b:38:0b:f5:9e:57: e9:9c:7c:33:c1:e1:15:35:dc:5c:c9:8e:60:c0:25: e0:39:24:69:f4:e3:4f:a5:36:f2:bf:76:0c:99:9c: 26:d8:79:c9:02:38:6e:c0:5c:5e:cf:a5:30:16:3f: 77:54:b1:97:54:27:cb:e7:5a:af:21:e8:53:23:46: 51:46:b9:7d:96:9f:0c:7e:b8:c3:b2:5b:8f:37:26: a5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:7F:FF:3F:FE:03:B4:52:37:7C:12:3C:E2:8C:49:0B:6D:9A:0B:CA X509v3 Authority Key Identifier: keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/457D2B5A28DC11ED839D6243C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.255.28.0/22 103.74.192.0/22 Signature Algorithm: sha256WithRSAEncryption 65:5e:f2:5e:40:a1:e1:62:68:99:97:86:32:5d:50:56:90:02: 01:7b:e8:2a:e9:56:47:c5:7d:67:77:7f:8d:d1:5b:ef:a1:33: 6c:4a:88:1a:3b:ff:3c:f1:20:48:92:5a:2e:b4:95:8f:ac:9f: 81:d9:0f:09:72:10:bf:bf:26:c8:9e:98:83:03:33:00:a8:9a: fb:0f:72:10:99:64:61:4a:a2:8d:56:65:c8:6b:60:5a:2a:b6: 10:71:c3:38:c8:47:09:4b:38:53:7e:c8:5e:8d:64:f8:7b:30: 82:ae:60:3f:42:8c:ff:6b:bf:98:eb:92:75:d6:3c:45:6d:c1: 6a:ff:1b:5a:82:2c:0a:0b:1d:5e:08:74:f0:4c:92:a6:80:51: c3:b6:75:f2:a1:ba:95:db:bb:e1:31:64:62:76:38:a2:ee:b2: f3:e0:a2:71:dd:b1:25:b4:ce:52:0c:b3:81:12:4f:91:56:64: 53:6e:61:b8:d0:58:15:77:90:7a:cb:57:00:f5:f8:3c:1b:fa: a4:c7:31:21:a0:55:24:43:23:ad:7d:cb:22:d4:bc:b8:a2:43: 33:eb:35:92:93:ec:39:d8:ea:5e:3c:68:dd:ea:15:38:e4:e5: 3b:26:47:76:1c:e0:82:28:c5:55:8c:f0:f3:6b:df:6f:55:80: 4e:d3:1b:66 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBNjExMTAvBgNVBAUTKDJCNTE3QzZCNzlFM0NFQjAzODlENDFBQkM1RUNFMjEw N0ZFQzUzRkIwHhcNMjYxMDIzMDA0NzM2WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWRhYWVhOC04MzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAgskVXNh3LpynoZ6FqjRVffDNZzFH5vU/d+ox7GFNoJkobm6tArdBzTKqCj2+ QhVN1DQdL7YS4tn7rt18Aorj+uFrvkL3G1JzR6M0D/EkBEj07302xmsIJI0llVH8 2zbkrhUiCPTjyhTJHowix2iah8Wg9q9vHICxppuuL9B0zOGxtGjNWh4+m2ATtjdB EScumG26RVSfNoOTjBvTexHMz9mWFzl6YrTuEQGg9LGbOAv1nlfpnHwzweEVNdxc yY5gwCXgOSRp9ONPpTbyv3YMmZwm2HnJAjhuwFxez6UwFj93VLGXVCfL51qvIehT I0ZRRrl9lp8MfrjDsluPNyal2QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFEN//z/+ A7RSN3wSPOKMSQttmgvKMB8GA1UdIwQYMBaAFCtRfGt5486wOJ1Bq8Xs4hB/7FP7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkE2MS9FREMwOEZFNjk2 MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpyQTRuVUdyeGV6aUVIX3NV X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxRjhhM25qenJBNG5VR3J4ZXppRUhfc1Vfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTJBNjEvRURDMDhGRTY5NjBCMTFFQ0JCRTRCRTY0QzRGOUFFMDIvNDU3RDJCNUEy OERDMTFFRDgzOUQ2MjQzQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK/8cAwQCZ0rAMA0GCSqGSIb3DQEBCwUAA4IBAQBlXvJeQKHhYmiZ l4YyXVBWkAIBe+gq6VZHxX1nd3+N0VvvoTNsSogaO/888SBIkloutJWPrJ+B2Q8J chC/vybInpiDAzMAqJr7D3IQmWRhSqKNVmXIa2BaKrYQccM4yEcJSzhTfshejWT4 ezCCrmA/Qoz/a7+Y65J11jxFbcFq/xtagiwKCx1eCHTwTJKmgFHDtnXyobqV27vh MWRidjii7rLz4KJx3bEltM5SDLOBEk+RVmRTbmG40FgVd5B6y1cA9fg8G/qkxzEh oFUkQyOtfcsi1Ly4okMz6zWSk+w52OpePGjd6hU45OU7Jkd2HOCCKMVVjPDza99v VYBO0xtm -----END CERTIFICATE-----Generated at Sun Nov 15 08:31:54 2026 by rpki-client