$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/F5E1478E822411F088762570C4F9AE02.roa File: F5E1478E822411F088762570C4F9AE02.roa (raw, json) Hash identifier: XOOFVhR+X9ay6WkgnJIVnO7Un1zvha+xlStC4yqXXU4= Subject key identifier: FC:FE:19:E6:BA:F6:DF:FD:A4:CE:4A:4E:5B:0A:95:B5:9F:F0:FB:88 Certificate issuer: /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Certificate serial: 0C23 Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/F5E1478E822411F088762570C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:48:34 +0000 ROA not before: Wed 07 Jan 2026 07:58:49 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 197537 IP address blocks: 43.239.104.0/24 maxlen: 24 43.239.105.0/24 maxlen: 24 45.124.204.0/24 maxlen: 24 45.124.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 18:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3107 (0xc23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Validity Not Before: Jan 7 07:58:49 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a48a01-5a95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e4:d1:c7:76:d9:aa:2b:3e:dd:41:5b:bc:87: 8f:47:b1:3c:f9:f9:b9:73:f6:26:9e:b6:37:21:72: 14:20:48:b5:a6:e7:23:c2:0e:b3:c9:bf:71:42:ab: 4e:2d:73:f5:4d:fd:5a:4e:6b:5e:26:02:80:61:b1: c0:1b:7c:a0:32:70:0d:7b:45:d1:1a:a5:2f:43:76: db:af:79:fa:7c:98:22:f5:9f:cb:09:03:fb:6e:e9: d0:1c:da:b0:ee:dd:d3:90:fc:25:b7:f4:01:4b:29: 5e:04:f0:c1:04:93:a1:27:60:f8:7d:93:4f:90:80: b3:c7:a1:e3:b3:a1:90:b8:5c:ef:99:fd:e0:99:e4: 44:80:b8:a0:88:99:6f:a8:0e:85:a4:62:74:f0:1f: c5:24:61:b6:e4:a3:0e:78:31:c9:42:8b:76:23:e9: 6e:fc:ba:09:2f:df:06:f5:65:20:65:06:d3:b9:fa: 1e:ce:10:f3:4e:1e:4f:f0:0f:4c:fb:61:17:cf:2e: 0d:0b:1d:6e:0c:42:0f:aa:84:f5:52:51:67:b4:ff: de:37:0f:01:45:dd:d4:69:0a:44:1c:ad:2b:ea:c4: f6:1f:f1:cf:03:f5:fb:fd:05:47:71:c6:8f:fa:43: 12:ac:db:0b:27:90:29:75:6c:81:b6:a2:88:0f:d1: b7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:FE:19:E6:BA:F6:DF:FD:A4:CE:4A:4E:5B:0A:95:B5:9F:F0:FB:88 X509v3 Authority Key Identifier: keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/F5E1478E822411F088762570C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.239.104.0/23 45.124.204.0/23 Signature Algorithm: sha256WithRSAEncryption 56:2e:cf:45:7a:48:c8:5a:54:81:e9:fb:e7:53:92:c2:3b:6d: 83:e6:3c:0e:f7:6e:71:24:fb:64:f7:71:2f:75:0e:e3:d4:c4: b6:26:3c:da:fc:08:b3:0f:4e:11:e5:e7:e6:f1:cd:20:9a:ec: 7a:4b:cc:4b:3e:d2:60:fe:f3:3c:3d:f6:49:0a:11:21:a1:6a: 67:50:3c:44:2c:ca:53:26:45:ac:db:a7:02:40:d4:87:ea:4e: d1:12:9c:0e:73:d4:74:3c:22:92:72:fd:e4:c8:a0:00:28:7d: 33:63:a9:8e:4b:17:32:19:a7:d3:87:df:db:16:fe:91:91:a6: f4:44:d1:1d:3c:c6:95:e7:f8:c6:35:a0:6c:01:36:7e:97:bf: b9:c0:c0:f8:6e:ec:2b:c1:36:ea:d2:60:c6:a7:41:e9:07:c2: b6:91:7f:2c:8e:b4:44:20:f8:bd:e2:77:55:70:e4:0b:d1:f7: 29:15:4a:62:e9:4c:8c:56:20:d0:44:6e:6d:2b:30:b2:d3:d7: 4e:55:22:ae:d0:03:14:0b:91:80:e0:96:d8:49:10:ac:a5:29: c5:e4:a8:4d:de:91:d8:b8:6f:b1:cc:74:48:ae:b0:fa:43:73: 3a:3c:42:6c:4a:3e:ec:e1:44:04:02:2c:93:69:86:be:7c:fb: 52:8b:76:f4 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICDCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNEMzAxMTAvBgNVBAUTKDAxRUUwODlERDQ4NjdCMkNCMjc2NTgyQUE5N0IzMThG NTA5RUE2RUUwHhcNMjYwMTA3MDc1ODQ5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGEwMS01YTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4OTRx3bZqis+3UFbvIePR7E8+fm5c/YmnrY3IXIUIEi1pucjwg6zyb9xQqtO LXP1Tf1aTmteJgKAYbHAG3ygMnANe0XRGqUvQ3bbr3n6fJgi9Z/LCQP7bunQHNqw 7t3TkPwlt/QBSyleBPDBBJOhJ2D4fZNPkICzx6Hjs6GQuFzvmf3gmeREgLigiJlv qA6FpGJ08B/FJGG25KMOeDHJQot2I+lu/LoJL98G9WUgZQbTufoezhDzTh5P8A9M +2EXzy4NCx1uDEIPqoT1UlFntP/eNw8BRd3UaQpEHK0r6sT2H/HPA/X7/QVHccaP +kMSrNsLJ5ApdWyBtqKID9G3eQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFPz+Gea6 9t/9pM5KTlsKlbWf8PuIMB8GA1UdIwQYMBaAFAHuCJ3UhnsssnZYKql7MY9Qnqbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0QzMC9FM0RGNDY5QzQx NjgxMUVBQUU4QTc3NTBDNEY5QUUwMi9BZTRJbmRTR2V5eXlkbGdxcVhzeGoxQ2Vw dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FlNEluZFNHZXl5eWRsZ3FxWHN4ajFDZXB1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjNEMzAvRTNERjQ2OUM0MTY4MTFFQUFFOEE3NzUwQzRGOUFFMDIvRjVFMTQ3OEU4 MjI0MTFGMDg4NzYyNTcwQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBK+9oAwQBLXzMMA0GCSqGSIb3DQEBCwUAA4IBAQBWLs9FekjIWlSB 6fvnU5LCO22D5jwO925xJPtk93EvdQ7j1MS2Jjza/AizD04R5efm8c0gmux6S8xL PtJg/vM8PfZJChEhoWpnUDxELMpTJkWs26cCQNSH6k7REpwOc9R0PCKScv3kyKAA KH0zY6mOSxcyGafTh9/bFv6Rkab0RNEdPMaV5/jGNaBsATZ+l7+5wMD4buwrwTbq 0mDGp0HpB8K2kX8sjrREIPi94ndVcOQL0fcpFUpi6UyMViDQRG5tKzCy09dOVSKu 0AMUC5GA4JbYSRCspSnF5KhN3pHYuG+xzHRIrrD6Q3M6PEJsSj7s4UQEAiyTaYa+ fPtSi3b0 -----END CERTIFICATE-----Generated at Wed Mar 4 19:18:55 2026 by rpki-client