$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/17BB4C20F17E11EAA3CC597BC4F9AE02.roa File: 17BB4C20F17E11EAA3CC597BC4F9AE02.roa (raw, json) Hash identifier: 5zmLwSOmImvC+YLgmA6GXXWh7nSyfsbicMoFk5aD+g8= Subject key identifier: 2B:80:B2:90:A2:8F:A8:8B:00:87:C8:E8:33:56:8E:49:3C:BB:6A:2C Certificate issuer: /CN=A91EB45A/serialNumber=C1422A0C4CFF248D517358EBDF7B4E802BACC0E7 Certificate serial: 3595 Authority key identifier: C1:42:2A:0C:4C:FF:24:8D:51:73:58:EB:DF:7B:4E:80:2B:AC:C0:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/17BB4C20F17E11EAA3CC597BC4F9AE02.roa Signing time: Fri 18 Sep 2026 15:17:03 +0000 ROA not before: Fri 18 Sep 2026 15:17:03 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 45945 IP address blocks: 43.245.124.0/22 maxlen: 22 43.245.124.0/24 maxlen: 24 43.245.125.0/24 maxlen: 24 43.245.126.0/24 maxlen: 24 43.245.127.0/24 maxlen: 24 103.1.148.0/22 maxlen: 22 103.1.148.0/24 maxlen: 24 103.1.149.0/24 maxlen: 24 103.1.150.0/24 maxlen: 24 103.1.151.0/24 maxlen: 24 124.150.140.0/22 maxlen: 22 124.150.140.0/24 maxlen: 24 124.150.141.0/24 maxlen: 24 124.150.142.0/24 maxlen: 24 124.150.143.0/24 maxlen: 24 2401:fd00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.crl rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 15:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13717 (0x3595) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB45A, serialNumber=C1422A0C4CFF248D517358EBDF7B4E802BACC0E7 Validity Not Before: Sep 18 15:17:03 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aad55ef-f97e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:13:7f:f3:53:48:57:82:58:5d:d1:1c:9b:e9: 80:ce:1b:ed:9a:5e:b3:56:8b:7b:c9:99:dc:16:8a: 5b:29:8e:d7:e0:8a:30:6f:ef:c9:88:df:ee:fc:8c: 09:17:a0:e1:8c:88:f8:85:f6:e6:81:ba:44:1d:ed: f0:6d:e0:1d:59:5a:3f:80:47:f1:9b:a4:0c:c6:e3: 73:63:01:53:6a:68:39:f9:b4:fd:a1:3f:1e:6d:30: b0:34:c1:44:48:5d:61:57:ad:58:88:52:22:f1:25: 18:f9:61:c5:1c:75:3b:a7:d6:df:30:83:c1:1b:63: 69:b0:6e:49:c0:8e:49:c8:cd:1d:13:02:7c:52:22: 81:b4:fb:77:1f:59:51:6a:11:da:85:66:b5:bb:22: 7d:73:9d:24:2c:f9:80:0d:5a:e1:fe:85:3d:f6:0d: e0:2d:21:66:2a:b1:f2:df:41:51:d8:fb:59:6d:18: ca:11:ac:9f:2a:49:9e:fa:bb:57:75:7f:32:f8:78: 4c:d8:bf:2c:e4:b2:3e:e6:a3:69:20:e3:bb:22:ad: 44:9e:be:5f:57:86:46:fd:30:5e:db:ed:3c:6e:fb: c6:f2:3c:2a:a9:2e:36:34:5f:99:f3:49:dd:f6:e5: 6c:bd:e0:ad:ef:2e:42:c7:bd:fc:9c:62:0e:3e:c2: a0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:80:B2:90:A2:8F:A8:8B:00:87:C8:E8:33:56:8E:49:3C:BB:6A:2C X509v3 Authority Key Identifier: keyid:C1:42:2A:0C:4C:FF:24:8D:51:73:58:EB:DF:7B:4E:80:2B:AC:C0:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/17BB4C20F17E11EAA3CC597BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.245.124.0/22 103.1.148.0/22 124.150.140.0/22 IPv6: 2401:fd00::/32 Signature Algorithm: sha256WithRSAEncryption 5f:df:18:77:ad:af:31:66:e4:8e:3a:4e:2e:98:3d:d9:fd:07: 85:32:9d:4d:c9:64:19:e3:74:6d:3a:63:f6:a3:c3:6c:42:ba: 28:65:54:59:b2:31:df:95:10:0b:8e:54:2f:36:96:03:7c:3c: 5e:bc:cc:7b:d9:9a:c3:7a:f0:94:29:4b:3b:8d:ce:80:38:72: 69:25:29:ae:8a:71:ac:64:ac:12:88:47:24:0b:b1:23:3d:d5: 71:83:6e:be:97:eb:10:77:23:9c:7e:cd:35:ec:de:eb:b8:60: df:2e:e5:c7:52:13:14:cf:77:32:ec:2e:9f:66:c8:4a:6a:07: 8d:64:7e:7e:fc:28:f9:2e:76:00:33:be:02:9b:de:4d:ad:8b: 90:33:69:36:5f:10:0d:42:7d:c0:9e:49:50:19:90:fd:55:86: 2c:88:34:2a:6a:f1:f4:24:b6:17:85:da:98:34:41:bf:9f:43: 34:84:fd:38:39:8c:e7:ce:f5:44:69:e4:5a:de:a9:dd:35:47: cb:fa:36:b5:87:7f:28:9b:7f:e2:22:e5:82:f0:4f:d1:5e:dd: 23:e3:a5:3e:51:46:64:db:53:3a:00:8f:ee:87:cc:8e:39:37: 86:07:b7:eb:3a:cf:36:2c:f9:5a:12:04:dd:5d:7e:14:c5:ca: be:56:53:53 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICNZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI0NUExMTAvBgNVBAUTKEMxNDIyQTBDNENGRjI0OEQ1MTczNThFQkRGN0I0RTgw MkJBQ0MwRTcwHhcNMjYwOTE4MTUxNzAzWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFkNTVlZi1mOTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhN/81NIV4JYXdEcm+mAzhvtml6zVot7yZncFopbKY7X4Iowb+/JiN/u/IwJ F6DhjIj4hfbmgbpEHe3wbeAdWVo/gEfxm6QMxuNzYwFTamg5+bT9oT8ebTCwNMFE SF1hV61YiFIi8SUY+WHFHHU7p9bfMIPBG2NpsG5JwI5JyM0dEwJ8UiKBtPt3H1lR ahHahWa1uyJ9c50kLPmADVrh/oU99g3gLSFmKrHy30FR2PtZbRjKEayfKkme+rtX dX8y+HhM2L8s5LI+5qNpIOO7Iq1Enr5fV4ZG/TBe2+08bvvG8jwqqS42NF+Z80nd 9uVsveCt7y5Cx738nGIOPsKgdQIDAQABo4ICezCCAncwHQYDVR0OBBYEFCuAspCi j6iLAIfI6DNWjkk8u2osMB8GA1UdIwQYMBaAFMFCKgxM/ySNUXNY6997ToArrMDn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjQ1QS8xRTQ0OEE0ODFE QTExMUUyOUY1NjA3OTMwOEIwMkNEMi93VUlxREV6X0pJMVJjMWpyMzN0T2dDdXN3 T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVSXFERXpfSkkxUmMxanIzM3RPZ0N1c3dPYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUI0NUEvMUU0NDhBNDgxREExMTFFMjlGNTYwNzkzMDhCMDJDRDIvMTdCQjRDMjBG MTdFMTFFQUEzQ0M1OTdCQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCK/V8AwQCZwGUAwQCfJaMMA0EAgACMAcDBQAkAf0AMA0GCSqGSIb3 DQEBCwUAA4IBAQBf3xh3ra8xZuSOOk4umD3Z/QeFMp1NyWQZ43RtOmP2o8NsQroo ZVRZsjHflRALjlQvNpYDfDxevMx72ZrDevCUKUs7jc6AOHJpJSmuinGsZKwSiEck C7EjPdVxg26+l+sQdyOcfs017N7ruGDfLuXHUhMUz3cy7C6fZshKageNZH5+/Cj5 LnYAM74Cm95NrYuQM2k2XxANQn3AnklQGZD9VYYsiDQqavH0JLYXhdqYNEG/n0M0 hP04OYznzvVEaeRa3qndNUfL+ja1h38om3/iIuWC8E/RXt0j46U+UUZk21M6AI/u h8yOOTeGB7frOs82LPlaEgTdXX4Uxcq+VlNT -----END CERTIFICATE-----Generated at Fri Sep 25 22:35:41 2026 by rpki-client