$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/76BF01E88EF511F0BA815369C4F9AE02.roa File: 76BF01E88EF511F0BA815369C4F9AE02.roa (raw, json) Hash identifier: rfIVMs6AUfnF9P9/mHach4AIencfTT3AboN2vIjJlGQ= Subject key identifier: 98:A1:18:EF:B3:F0:1A:9E:44:F2:BE:80:1A:C4:19:E1:14:5C:CD:A9 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0D4F Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/76BF01E88EF511F0BA815369C4F9AE02.roa Signing time: Mon 30 Mar 2026 08:15:37 +0000 ROA not before: Mon 30 Mar 2026 08:15:36 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 40605 IP address blocks: 43.249.242.0/24 maxlen: 24 43.250.88.0/24 maxlen: 24 103.7.117.0/24 maxlen: 24 103.12.55.0/24 maxlen: 24 103.13.17.0/24 maxlen: 24 103.15.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:46:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3407 (0xd4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Mar 30 08:15:36 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69ca3128-9805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:47:d5:42:38:9e:3a:07:86:28:f6:55:21:ad: 6f:c3:2a:f0:f9:6f:1f:23:dd:a1:b6:b0:28:ac:4c: 29:b8:c0:f0:10:e9:a6:80:8b:82:4a:56:3b:32:9e: 45:d4:94:e3:18:86:f8:90:3d:38:9f:ae:91:cb:4b: 61:55:09:72:84:87:67:86:57:dc:34:20:f1:a7:e1: ea:8f:2a:64:6e:7f:39:f6:31:ea:c8:8b:1f:49:c5: 6e:8e:96:d5:c8:8f:c9:7d:64:2e:32:3b:37:bb:6f: 98:ba:91:84:74:19:0e:3e:f5:21:c5:e5:26:1e:4f: c3:dd:17:85:91:66:86:1c:92:ba:1a:c0:74:27:57: 9b:64:3d:96:27:36:b1:37:87:01:f8:11:c6:4d:8d: a5:89:76:19:8f:16:d2:f4:b9:0b:85:b1:28:94:af: e0:23:b5:c2:07:eb:a2:fd:67:0c:61:b0:58:a9:6b: 50:7d:73:17:16:4a:f1:9e:b3:60:69:a4:72:b9:17: d3:70:da:d3:34:74:88:f8:56:f8:86:67:60:03:c6: 2f:8b:bf:83:44:69:d9:7f:a8:64:9b:65:02:b3:c8: d5:ba:c4:dc:d9:98:0d:ff:1a:84:9e:38:4e:77:ec: 61:7a:b2:f7:1d:0b:9d:19:28:6b:cc:8c:a2:57:b7: 09:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A1:18:EF:B3:F0:1A:9E:44:F2:BE:80:1A:C4:19:E1:14:5C:CD:A9 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/76BF01E88EF511F0BA815369C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.249.242.0/24 43.250.88.0/24 103.7.117.0/24 103.12.55.0/24 103.13.17.0/24 103.15.33.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:f6:d5:b2:c8:76:55:0c:cf:e4:12:91:51:0b:26:0b:63:eb: 8a:32:9b:f9:c1:e9:12:51:9c:8e:e2:5e:b3:65:80:13:d9:e3: 80:a1:aa:bc:fd:12:99:16:54:d4:71:d6:7a:06:a7:70:c6:12: cd:69:e8:3f:c2:cf:1f:12:93:a3:60:48:45:ce:8e:ee:cb:db: 86:40:8d:a2:b9:97:8e:16:93:55:1a:e9:c0:20:8e:1c:00:d1: f5:88:02:aa:56:40:8b:98:73:26:e5:4b:7a:14:e6:5c:fe:d8: 75:ca:b1:52:81:64:8d:3d:85:e6:f5:48:b6:df:cf:50:11:80: e7:d2:ec:49:f3:6c:e9:e2:b0:27:16:10:6f:3e:5e:64:61:d8: 7a:16:a3:4f:93:7f:bd:5c:4f:47:dc:02:73:ef:67:13:1c:74: 0d:f4:7d:58:06:a0:d2:0e:7a:35:8d:2e:96:d6:64:fd:16:ea: 38:ab:6a:f7:9a:20:bb:7a:81:18:8e:f4:0c:52:1a:bb:76:fd: 3f:42:3f:e4:f6:42:a7:56:5a:5c:6d:55:a8:dc:e0:02:8c:3e: 5b:03:81:98:15:27:e7:28:8f:5d:54:e1:87:5d:a1:6b:8c:04: c8:eb:af:63:70:24:61:a6:05:fa:4e:4a:03:be:85:dc:79:5a: a6:c3:d1:72 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICDU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjYwMzMwMDgxNTM2WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWNhMzEyOC05ODA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0fVQjieOgeGKPZVIa1vwyrw+W8fI92htrAorEwpuMDwEOmmgIuCSlY7Mp5F 1JTjGIb4kD04n66Ry0thVQlyhIdnhlfcNCDxp+Hqjypkbn859jHqyIsfScVujpbV yI/JfWQuMjs3u2+YupGEdBkOPvUhxeUmHk/D3ReFkWaGHJK6GsB0J1ebZD2WJzax N4cB+BHGTY2liXYZjxbS9LkLhbEolK/gI7XCB+ui/WcMYbBYqWtQfXMXFkrxnrNg aaRyuRfTcNrTNHSI+Fb4hmdgA8Yvi7+DRGnZf6hkm2UCs8jVusTc2ZgN/xqEnjhO d+xherL3HQudGShrzIyiV7cJ6wIDAQABo4ICfjCCAnowHQYDVR0OBBYEFJihGO+z 8BqeRPK+gBrEGeEUXM2pMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvNzZCRjAxRTg4 RUY1MTFGMEJBODE1MzY5QzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAq BAIAATAkAwQAK/nyAwQAK/pYAwQAZwd1AwQAZww3AwQAZw0RAwQAZw8hMA0GCSqG SIb3DQEBCwUAA4IBAQCK9tWyyHZVDM/kEpFRCyYLY+uKMpv5wekSUZyO4l6zZYAT 2eOAoaq8/RKZFlTUcdZ6BqdwxhLNaeg/ws8fEpOjYEhFzo7uy9uGQI2iuZeOFpNV GunAII4cANH1iAKqVkCLmHMm5Ut6FOZc/th1yrFSgWSNPYXm9Ui2389QEYDn0uxJ 82zp4rAnFhBvPl5kYdh6FqNPk3+9XE9H3AJz72cTHHQN9H1YBqDSDno1jS6W1mT9 Fuo4q2r3miC7eoEYjvQMUhq7dv0/Qj/k9kKnVlpcbVWo3OACjD5bA4GYFSfnKI9d VOGHXaFrjATI669jcCRhpgX6TkoDvoXceVqmw9Fy -----END CERTIFICATE-----Generated at Mon Apr 6 12:24:13 2026 by rpki-client