$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/43487B18BF1811E9A2C00E63C4F9AE02.roa File: 43487B18BF1811E9A2C00E63C4F9AE02.roa (raw, json) Hash identifier: HkRF10o7aoI0Wv8xHPaGQ1XjAXcX/MS0Fs88d0uQVd0= Subject key identifier: A6:70:4C:83:AB:74:47:FC:41:CC:8F:7A:D0:F4:15:92:21:A7:B7:63 Certificate issuer: /CN=A91E2AE5/serialNumber=B43A5A60D46806A69FFEF7C676219EC4BA8BA36D Certificate serial: 2C73 Authority key identifier: B4:3A:5A:60:D4:68:06:A6:9F:FE:F7:C6:76:21:9E:C4:BA:8B:A3:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tDpaYNRoBqaf_vfGdiGexLqLo20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/43487B18BF1811E9A2C00E63C4F9AE02.roa Signing time: Tue 28 Jul 2026 16:22:17 +0000 ROA not before: Tue 28 Jul 2026 16:22:17 +0000 ROA not after: Sat 28 Nov 2026 00:00:00 +0000 asID: 45558 IP address blocks: 43.224.43.0/24 maxlen: 24 203.215.60.0/22 maxlen: 22 203.215.60.0/24 maxlen: 24 203.215.61.0/24 maxlen: 24 203.215.62.0/24 maxlen: 24 203.215.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.crl rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tDpaYNRoBqaf_vfGdiGexLqLo20.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 15:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11379 (0x2c73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2AE5, serialNumber=B43A5A60D46806A69FFEF7C676219EC4BA8BA36D Validity Not Before: Jul 28 16:22:17 2026 GMT Not After : Nov 28 00:00:00 2026 GMT Subject: CN=6a68d739-226a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:94:a0:c9:a9:91:06:08:f1:6a:48:0b:3f:cd: 00:d6:4f:e1:1f:42:e4:c0:51:fc:5c:51:ec:7b:6c: bf:53:92:5f:a7:e2:d7:c4:2a:bc:63:b4:16:eb:04: 45:ee:59:d5:1e:bf:1a:c4:cf:bb:2d:8c:f1:4f:49: 0b:b8:ff:39:aa:f4:f4:fc:33:8c:49:85:89:bd:19: 00:eb:c3:48:95:f8:bd:e4:4f:a0:a7:1c:38:e1:d7: 97:39:79:f2:cf:ad:8f:f9:50:76:89:a2:5c:7a:0a: db:28:db:42:df:84:58:30:14:da:27:01:80:68:bf: bf:d5:bd:a8:ef:df:08:40:61:b0:2d:53:2e:1a:9e: f4:3f:17:20:6d:89:f0:80:42:f8:9e:f1:41:a0:12: 57:6d:29:f7:da:c1:7d:ea:46:67:d9:de:99:44:57: df:74:da:60:91:98:b4:7c:74:db:02:1b:2d:48:39: 97:d7:50:cb:a3:dc:51:44:3a:b4:e9:9a:1a:76:ae: ac:c1:e1:1f:6d:4e:1c:a2:23:92:1b:19:2f:99:23: 2d:0b:03:f7:6d:38:f6:ca:a4:f3:82:91:8b:38:a3: 55:8f:a1:25:8e:ed:fd:31:30:56:c6:dd:19:97:0a: b4:d6:38:46:5d:52:74:c2:2e:be:60:cb:99:2f:06: e2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:70:4C:83:AB:74:47:FC:41:CC:8F:7A:D0:F4:15:92:21:A7:B7:63 X509v3 Authority Key Identifier: keyid:B4:3A:5A:60:D4:68:06:A6:9F:FE:F7:C6:76:21:9E:C4:BA:8B:A3:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tDpaYNRoBqaf_vfGdiGexLqLo20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/43487B18BF1811E9A2C00E63C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.224.43.0/24 203.215.60.0/22 Signature Algorithm: sha256WithRSAEncryption a3:aa:15:79:38:3f:a6:d4:e3:da:8d:3f:c1:06:b8:c3:6a:25: a9:c4:5a:d8:c1:27:7d:f9:27:24:31:c3:10:9f:2f:db:4d:a7: b9:98:33:d7:97:d8:51:b8:00:81:12:85:7c:d5:82:0c:f6:07: aa:08:ce:21:87:bd:67:78:3e:84:92:e2:3d:6b:2e:f3:ee:f1: f9:d2:a8:30:93:9c:2d:a0:df:8d:f9:97:d0:7f:53:1a:b2:ab: 22:3a:04:63:ed:19:8f:a0:82:69:65:25:3e:05:ad:f3:58:3a: 53:f5:06:05:0c:41:8b:78:fa:97:26:f5:aa:83:54:71:91:a7: b8:04:7f:91:7e:5b:63:8d:d8:36:da:ed:74:67:42:d9:60:7e: 30:6d:d0:bf:95:1d:9c:11:da:6a:88:c8:2f:91:80:6e:19:be: 38:be:75:8d:eb:e6:c0:14:46:f0:aa:c8:ec:10:ab:a7:f1:27: 08:1a:78:ff:ff:7c:a9:b3:b1:14:fb:a1:1d:90:c1:c5:9f:bc: 42:6a:e4:b6:72:c6:b5:11:a0:e4:0f:87:9b:bd:3b:3d:ce:d8: 55:21:6d:6c:99:4f:b3:53:fd:30:73:e5:1a:65:23:f1:40:02: 29:15:d6:9c:b6:7c:58:f3:a7:4c:d9:00:af:eb:ca:e3:66:3e: d1:0a:12:10 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICLHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBRTUxMTAvBgNVBAUTKEI0M0E1QTYwRDQ2ODA2QTY5RkZFRjdDNjc2MjE5RUM0 QkE4QkEzNkQwHhcNMjYwNzI4MTYyMjE3WhcNMjYxMTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YTY4ZDczOS0yMjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAopSgyamRBgjxakgLP80A1k/hH0LkwFH8XFHse2y/U5Jfp+LXxCq8Y7QW6wRF 7lnVHr8axM+7LYzxT0kLuP85qvT0/DOMSYWJvRkA68NIlfi95E+gpxw44deXOXny z62P+VB2iaJcegrbKNtC34RYMBTaJwGAaL+/1b2o798IQGGwLVMuGp70PxcgbYnw gEL4nvFBoBJXbSn32sF96kZn2d6ZRFffdNpgkZi0fHTbAhstSDmX11DLo9xRRDq0 6Zoadq6sweEfbU4coiOSGxkvmSMtCwP3bTj2yqTzgpGLOKNVj6Elju39MTBWxt0Z lwq01jhGXVJ0wi6+YMuZLwbiCQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFKZwTIOr dEf8QcyPetD0FZIhp7djMB8GA1UdIwQYMBaAFLQ6WmDUaAamn/73xnYhnsS6i6Nt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkFFNS84RDNFNTRFQUVE NTkxMUUzQjA5MDExOTI1OTExRUEzMi90RHBhWU5Sb0JxYWZfdmZHZGlHZXhMcUxv MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3REcGFZTlJvQnFhZl92ZkdkaUdleExxTG8yMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTJBRTUvOEQzRTU0RUFFRDU5MTFFM0IwOTAxMTkyNTkxMUVBMzIvNDM0ODdCMThC RjE4MTFFOUEyQzAwRTYzQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAK+ArAwQCy9c8MA0GCSqGSIb3DQEBCwUAA4IBAQCjqhV5OD+m1OPa jT/BBrjDaiWpxFrYwSd9+SckMcMQny/bTae5mDPXl9hRuACBEoV81YIM9geqCM4h h71neD6EkuI9ay7z7vH50qgwk5wtoN+N+ZfQf1MasqsiOgRj7RmPoIJpZSU+Ba3z WDpT9QYFDEGLePqXJvWqg1Rxkae4BH+Rfltjjdg22u10Z0LZYH4wbdC/lR2cEdpq iMgvkYBuGb44vnWN6+bAFEbwqsjsEKun8ScIGnj//3yps7EU+6EdkMHFn7xCauS2 csa1EaDkD4ebvTs9zthVIW1smU+zU/0wc+UaZSPxQAIpFdactnxY86dM2QCv68rj Zj7RChIQ -----END CERTIFICATE-----Generated at Sun Oct 4 22:19:07 2026 by rpki-client