$ rpki-client -vvf rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/17679A100BCE11EC85811A0DC4F9AE02.roa File: 17679A100BCE11EC85811A0DC4F9AE02.roa (raw, json) Hash identifier: eSZTCVmtVODIa8LqXf1+TpmSShdpmD0QiKQVkQhAeZE= Subject key identifier: 15:3C:54:A3:76:51:BC:DF:81:E1:9C:AF:96:55:AC:5C:5A:7B:8B:E8 Certificate issuer: /CN=A91852BA/serialNumber=F66964F99BC88D37761D389815D3C9E9D0A17A4D Certificate serial: 05B0 Authority key identifier: F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/17679A100BCE11EC85811A0DC4F9AE02.roa Signing time: Thu 02 Apr 2026 23:29:35 +0000 ROA not before: Thu 02 Apr 2026 23:29:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53587 IP address blocks: 43.248.168.0/22 maxlen: 22 43.248.168.0/24 maxlen: 24 43.248.169.0/24 maxlen: 24 43.248.170.0/24 maxlen: 24 43.248.171.0/24 maxlen: 24 103.228.92.0/22 maxlen: 22 103.228.92.0/24 maxlen: 24 103.228.93.0/24 maxlen: 24 103.228.94.0/24 maxlen: 24 103.228.95.0/24 maxlen: 24 2401:9d80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 22:57:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1456 (0x5b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91852BA, serialNumber=F66964F99BC88D37761D389815D3C9E9D0A17A4D Validity Not Before: Apr 2 23:29:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69cefbdf-b643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7d:5f:e6:82:4f:c1:35:c9:34:34:c9:8b:97: a0:22:af:a6:49:24:c0:c0:3c:a8:77:ba:b8:fb:cf: b9:3b:0f:0c:11:93:fc:2a:6e:28:1b:6f:57:1c:1d: f0:98:f5:81:7b:97:ef:08:57:89:f0:a8:4e:0c:94: d4:1c:e8:ad:f6:fb:91:7d:8f:44:32:0b:fe:46:3f: b6:af:75:c6:a6:5c:30:17:40:07:53:f5:a3:55:46: a3:3e:e8:f9:c5:bc:0d:70:df:a6:17:50:23:64:57: 48:10:df:0b:44:0f:5d:c2:73:87:26:5c:21:2e:46: 5d:1e:9c:f9:a8:fd:c5:94:83:98:c3:4e:1e:ca:f0: 3d:ec:85:cc:94:9f:18:66:a4:89:1c:40:0e:f3:33: 41:e3:99:29:62:e9:5e:04:da:ad:96:aa:08:a7:ea: 16:66:1a:28:b1:02:48:85:b8:7b:f3:13:3e:b6:b3: 99:d0:8b:75:f0:62:b7:eb:ff:06:dc:eb:d7:cc:37: 0a:a8:67:58:77:cc:f5:34:89:ff:1a:48:99:e0:ba: ef:52:18:e9:99:a0:b8:7e:c3:db:0c:ef:69:c5:e7: 2b:8a:58:22:ee:73:4a:e7:69:fc:0c:b7:d0:82:f8: 55:b8:d3:d8:91:db:ca:63:31:72:e8:12:c1:10:1d: f2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:3C:54:A3:76:51:BC:DF:81:E1:9C:AF:96:55:AC:5C:5A:7B:8B:E8 X509v3 Authority Key Identifier: keyid:F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/17679A100BCE11EC85811A0DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.248.168.0/22 103.228.92.0/22 IPv6: 2401:9d80::/32 Signature Algorithm: sha256WithRSAEncryption ab:4c:5d:a9:94:4f:f9:2e:2e:da:c2:9e:5b:9b:ff:c0:12:60: 3d:9c:c6:c9:32:e9:04:ad:e6:cd:2c:ca:bc:37:37:56:b6:d8: 42:b7:3c:6f:10:22:fa:53:4b:5e:11:29:96:ed:ef:4e:21:df: 1c:1e:b6:5e:cb:db:b2:85:6f:0b:27:0c:84:d9:71:69:e1:92: ae:8b:2d:fe:64:6f:e0:a4:1d:09:c8:ed:15:09:c2:24:a8:ff: ef:d2:9b:47:bc:b3:7c:3f:cd:8d:6f:bd:cc:a9:d2:f0:03:bd: 8b:fc:d1:14:22:7d:bd:8b:f7:f8:2d:a7:9d:46:1e:ee:2c:60: cc:74:38:80:35:e6:59:8c:ae:be:d1:89:14:cb:aa:96:6d:f3: 2c:49:a8:9d:a1:3f:3c:c3:96:08:24:92:ae:42:0e:3f:9a:c5: c9:a1:0c:3d:99:63:61:75:41:4a:68:2f:55:6f:be:a0:02:f1: 5d:d0:73:60:7c:60:fb:b2:75:f0:e2:6d:ff:34:37:20:ea:b9: 3f:1a:ed:02:1a:93:a2:a3:86:16:a6:b7:01:23:e9:ed:64:4d: c4:72:a9:47:ae:0e:19:e4:b5:1d:e1:11:19:0f:b9:6a:21:dc: f9:7f:5b:58:5a:e3:57:d1:7b:ba:da:2f:86:2b:31:32:e2:93: e3:22:55:7d -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICBbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUyQkExMTAvBgNVBAUTKEY2Njk2NEY5OUJDODhEMzc3NjFEMzg5ODE1RDNDOUU5 RDBBMTdBNEQwHhcNMjYwNDAyMjMyOTM1WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWNlZmJkZi1iNjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz31f5oJPwTXJNDTJi5egIq+mSSTAwDyod7q4+8+5Ow8MEZP8Km4oG29XHB3w mPWBe5fvCFeJ8KhODJTUHOit9vuRfY9EMgv+Rj+2r3XGplwwF0AHU/WjVUajPuj5 xbwNcN+mF1AjZFdIEN8LRA9dwnOHJlwhLkZdHpz5qP3FlIOYw04eyvA97IXMlJ8Y ZqSJHEAO8zNB45kpYuleBNqtlqoIp+oWZhoosQJIhbh78xM+trOZ0It18GK36/8G 3OvXzDcKqGdYd8z1NIn/GkiZ4LrvUhjpmaC4fsPbDO9pxecrilgi7nNK52n8DLfQ gvhVuNPYkdvKYzFy6BLBEB3y2QIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFBU8VKN2 UbzfgeGcr5ZVrFxae4voMB8GA1UdIwQYMBaAFPZpZPmbyI03dh04mBXTyenQoXpN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTJCQS84NTY1MTdDMDBC Q0IxMUVDQkQ5QzIwMEJDNEY5QUUwMi85bWxrLVp2SWpUZDJIVGlZRmRQSjZkQ2hl azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzltbGstWnZJalRkMkhUaVlGZFBKNmRDaGVrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODUyQkEvODU2NTE3QzAwQkNCMTFFQ0JEOUMyMDBCQzRGOUFFMDIvMTc2NzlBMTAw QkNFMTFFQzg1ODExQTBEQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCK/ioAwQCZ+RcMA0EAgACMAcDBQAkAZ2AMA0GCSqGSIb3DQEBCwUA A4IBAQCrTF2plE/5Li7awp5bm//AEmA9nMbJMukErebNLMq8NzdWtthCtzxvECL6 U0teESmW7e9OId8cHrZey9uyhW8LJwyE2XFp4ZKuiy3+ZG/gpB0JyO0VCcIkqP/v 0ptHvLN8P82Nb73MqdLwA72L/NEUIn29i/f4LaedRh7uLGDMdDiANeZZjK6+0YkU y6qWbfMsSaidoT88w5YIJJKuQg4/msXJoQw9mWNhdUFKaC9Vb76gAvFd0HNgfGD7 snXw4m3/NDcg6rk/Gu0CGpOio4YWprcBI+ntZE3EcqlHrg4Z5LUd4REZD7lqIdz5 f1tYWuNX0Xu62i+GKzEy4pPjIlV9 -----END CERTIFICATE-----Generated at Mon Apr 6 09:54:38 2026 by rpki-client