$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/DA45147EB35E11EE8EED0E37C4F9AE02.roa File: DA45147EB35E11EE8EED0E37C4F9AE02.roa (raw, json) Hash identifier: Bluwv17U0E3bQxLMX6DjEXL7fkRDMsWwu/v38ekvil0= Subject key identifier: 3D:8D:2B:99:A4:A5:C7:C9:2D:EC:FA:AE:54:EC:EE:1B:CC:E2:2D:7D Certificate issuer: /CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB Certificate serial: 0790 Authority key identifier: 0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/DA45147EB35E11EE8EED0E37C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:04:33 +0000 ROA not before: Tue 02 Dec 2025 21:24:43 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 133073 IP address blocks: 43.251.118.0/24 maxlen: 24 43.251.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1936 (0x790) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7C04, serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB Validity Not Before: Dec 2 21:24:43 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a471a1-12b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:74:d8:78:a2:00:70:ca:6c:7d:0c:7c:c7:26: a2:a6:3d:cc:55:ac:c2:4e:a1:27:9f:1f:9e:1d:e1: fc:46:33:5d:7a:c2:fa:54:23:a1:70:81:2e:76:e2: f2:aa:c3:c5:d7:c7:df:a7:f6:74:2e:4e:db:b6:d6: 96:9d:7a:5f:b7:7e:45:af:50:79:b9:57:70:ee:9b: 42:d7:f6:2b:4e:53:9f:e9:8a:ca:ad:35:7e:1c:77: 47:f9:ad:70:5f:44:2c:2a:e4:ac:79:d9:b0:d4:d3: b4:39:27:94:97:e1:b4:f5:cc:f7:06:17:7b:87:87: 2e:e0:73:1d:09:4a:26:91:81:f2:59:4a:ce:dc:a1: c7:0e:d0:40:b2:d2:07:b1:4a:64:b8:e5:99:f9:8e: 08:c5:94:c2:ce:83:ca:8d:12:ce:38:61:7a:13:af: 04:d4:f2:bd:3a:dc:86:82:ca:d3:25:4b:65:79:73: bf:88:35:f0:8e:1f:07:58:2e:f3:6d:50:3f:3b:c7: ee:85:34:13:f4:d7:bd:e6:15:99:0e:2c:be:a1:89: 61:52:0d:d1:de:b9:89:e1:59:90:c7:c9:21:1f:24: 40:49:2b:3f:fd:a3:7f:a5:51:9a:39:64:1c:4e:1e: da:1f:48:0e:ff:d5:4c:31:a0:c8:0e:e1:1f:c4:4a: 2e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:8D:2B:99:A4:A5:C7:C9:2D:EC:FA:AE:54:EC:EE:1B:CC:E2:2D:7D X509v3 Authority Key Identifier: keyid:0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/DA45147EB35E11EE8EED0E37C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.251.118.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:45:9d:d9:a4:d2:2d:27:9b:38:4a:34:8b:06:bf:16:96:1c: b4:c3:68:de:07:0d:26:ef:56:28:60:03:f7:69:31:20:38:5b: 40:a9:26:22:3d:ff:94:2e:3c:1d:cf:08:a5:56:4b:ee:8d:8c: de:fe:f4:f5:fa:db:cc:69:ae:72:3a:cd:31:ff:6f:78:f4:a6: 8d:66:9b:d5:12:c1:38:93:b9:be:12:11:1d:09:e4:fd:8f:cc: 67:d9:4e:60:fe:d1:90:2d:e9:f1:de:35:16:e4:14:87:91:72: c9:d6:a5:23:cb:bb:d7:2f:a0:a7:a9:57:7e:74:77:78:9b:ef: e5:6e:c6:c3:71:2f:3d:c8:de:60:72:8e:49:bf:e5:62:44:13: eb:50:f8:b5:5a:ee:a1:23:fe:d2:f3:02:bc:52:eb:0e:a3:6d: 9e:8c:69:ba:72:d8:93:25:91:06:a3:7b:2c:fa:4a:d3:6b:56: 90:aa:21:25:11:ce:4d:fb:e3:dc:92:f5:d6:41:23:c0:57:4f: 2b:e8:0f:d1:e6:b6:63:13:d3:3c:73:c1:8a:65:af:7a:01:46: 81:b3:bb:51:6c:a6:2d:62:c2:59:21:ba:e1:da:ed:36:b7:e4: 11:af:99:da:b8:34:62:75:70:d0:2e:29:ca:77:50:62:0f:b0: 33:1c:34:40 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICB5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdDMDQxMTAvBgNVBAUTKDBBRTIyMkVDNUUxN0E2RTYzMkI1NTlENDlDNUIxRUYz MzJEQTQzQ0IwHhcNMjUxMjAyMjEyNDQzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzFhMS0xMmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp3TYeKIAcMpsfQx8xyaipj3MVazCTqEnnx+eHeH8RjNdesL6VCOhcIEuduLy qsPF18ffp/Z0Lk7bttaWnXpft35Fr1B5uVdw7ptC1/YrTlOf6YrKrTV+HHdH+a1w X0QsKuSsedmw1NO0OSeUl+G09cz3Bhd7h4cu4HMdCUomkYHyWUrO3KHHDtBAstIH sUpkuOWZ+Y4IxZTCzoPKjRLOOGF6E68E1PK9OtyGgsrTJUtleXO/iDXwjh8HWC7z bVA/O8fuhTQT9Ne95hWZDiy+oYlhUg3R3rmJ4VmQx8khHyRASSs//aN/pVGaOWQc Th7aH0gO/9VMMaDIDuEfxEouJQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFD2NK5mk pcfJLez6rlTs7hvM4i19MB8GA1UdIwQYMBaAFAriIuxeF6bmMrVZ1JxbHvMy2kPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0MwNC9BMERCMzU1MjVG QjQxMUVCQUI3QzZBMjNDNEY5QUUwMi9DdUlpN0Y0WHB1WXl0Vm5VbkZzZTh6TGFR OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N1SWk3RjRYcHVZeXRWblVuRnNlOHpMYVE4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzdDMDQvQTBEQjM1NTI1RkI0MTFFQkFCN0M2QTIzQzRGOUFFMDIvREE0NTE0N0VC MzVFMTFFRThFRUQwRTM3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBK/t2MA0GCSqGSIb3DQEBCwUAA4IBAQAMRZ3ZpNItJ5s4SjSLBr8W lhy0w2jeBw0m71YoYAP3aTEgOFtAqSYiPf+ULjwdzwilVkvujYze/vT1+tvMaa5y Os0x/2949KaNZpvVEsE4k7m+EhEdCeT9j8xn2U5g/tGQLenx3jUW5BSHkXLJ1qUj y7vXL6CnqVd+dHd4m+/lbsbDcS89yN5gco5Jv+ViRBPrUPi1Wu6hI/7S8wK8UusO o22ejGm6ctiTJZEGo3ss+krTa1aQqiElEc5N++PckvXWQSPAV08r6A/R5rZjE9M8 c8GKZa96AUaBs7tRbKYtYsJZIbrh2u02t+QRr5nauDRidXDQLinKd1BiD7AzHDRA -----END CERTIFICATE-----Generated at Sat Mar 21 20:13:59 2026 by rpki-client