$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/43E961E013E711EE8ECA2D3CC4F9AE02.roa File: 43E961E013E711EE8ECA2D3CC4F9AE02.roa (raw, json) Hash identifier: 8KKDSMBlMVX3WIkFvdZMkpRJGKyqonScIIf8lT6mmuA= Subject key identifier: 63:92:36:E7:E6:2B:D7:3E:83:BC:97:61:30:D6:A8:BB:E8:2F:95:0F Certificate issuer: /CN=A91CFA8E/serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Certificate serial: 027F Authority key identifier: D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/43E961E013E711EE8ECA2D3CC4F9AE02.roa Signing time: Fri 05 Jun 2026 03:32:35 +0000 ROA not before: Fri 05 Jun 2026 03:32:35 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 9335 IP address blocks: 103.114.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 03:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 639 (0x27f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFA8E, serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Validity Not Before: Jun 5 03:32:35 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a224353-3f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f9:18:d8:24:c8:d8:b5:a3:a9:e0:3f:04:56: 75:0a:ab:08:cf:98:29:54:94:a6:9d:ab:9b:d3:ee: c8:78:53:a1:92:84:3e:72:08:66:52:0f:c8:45:75: 4b:39:37:4d:7e:d0:44:dc:82:2b:70:ca:c6:0f:a9: 4a:f5:44:b2:de:a5:ac:d6:fc:e1:b4:57:36:ac:6c: 8f:91:18:73:fc:77:7d:4e:ea:41:59:43:c0:8b:12: bc:5b:e4:21:f3:c4:7d:24:91:7e:d2:27:49:e8:14: 86:06:0f:9c:b0:ce:38:60:2b:21:8d:47:c2:3a:ad: 1f:c7:28:9b:69:ea:c4:65:e9:f8:af:0e:c8:ac:94: 34:2b:8e:86:42:8e:16:29:ed:e9:93:7a:4c:b7:93: 08:7c:dc:99:38:94:01:dd:85:e9:b3:42:51:f9:b5: 66:3c:40:ae:79:9e:4d:58:d4:bf:e4:44:f6:74:91: bd:3b:50:08:6b:ef:9c:a6:28:a0:a1:82:9d:a4:cf: 3c:71:b9:a1:fb:58:68:23:c9:91:65:71:c6:2c:2c: 2b:93:1b:4b:66:b0:ce:9d:4c:d1:1d:c9:66:75:00: 85:29:80:2d:b3:14:23:d6:07:36:f0:e6:ab:2d:3a: 62:00:ca:1b:4e:96:65:00:4b:1a:db:ed:85:c3:7b: cb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:92:36:E7:E6:2B:D7:3E:83:BC:97:61:30:D6:A8:BB:E8:2F:95:0F X509v3 Authority Key Identifier: keyid:D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/43E961E013E711EE8ECA2D3CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.114.200.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:a4:5c:ce:ac:34:53:7e:db:dc:61:23:c7:ec:3b:df:c0:e2: d3:2c:56:4e:17:c3:ec:ee:ec:b4:47:ad:7f:0d:25:29:a9:1d: 2f:42:35:3e:ae:9d:ed:85:6d:54:21:aa:19:97:6f:44:27:68: df:c3:ea:29:53:85:bd:b0:72:ae:8e:ca:ef:71:69:a7:70:52: 4e:41:f1:0e:55:c0:92:83:29:71:90:dc:14:23:8e:4e:b4:8c: 5b:a9:69:fb:da:e9:cf:7f:41:47:74:d1:c1:05:cc:18:83:f8: ae:42:c0:db:d8:34:f1:e8:46:bf:a0:e2:32:d4:37:6b:c5:87: e5:fa:8d:51:9b:22:59:d2:32:ea:ad:2f:bf:bf:c5:2c:98:1f: a0:86:1e:97:2e:b4:13:d8:e2:63:49:c9:36:0f:d2:dc:ca:16: 19:05:2e:db:23:f2:2f:aa:ef:ec:02:32:ca:40:08:fa:f1:12: a1:0d:4a:1c:c4:d0:d5:78:fa:c9:ff:4b:8b:d7:99:bd:8b:f0: bf:1b:d0:85:02:21:75:1b:12:f9:f5:49:eb:47:c5:a4:6b:43: 04:85:05:6a:c6:09:31:5f:78:81:4f:50:25:89:e8:98:67:f9: c0:85:35:41:6f:9c:18:4a:4d:11:22:bf:11:d6:2a:dc:38:00: db:89:2f:08 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBOEUxMTAvBgNVBAUTKEQ4ODBFRjI2NUI5NDBFMzFERkVEMUM0MkFFRjUxNDRC NjQ0MTM3MTcwHhcNMjYwNjA1MDMzMjM1WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTIyNDM1My0zZjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/kY2CTI2LWjqeA/BFZ1CqsIz5gpVJSmnaub0+7IeFOhkoQ+cghmUg/IRXVL OTdNftBE3IIrcMrGD6lK9USy3qWs1vzhtFc2rGyPkRhz/Hd9TupBWUPAixK8W+Qh 88R9JJF+0idJ6BSGBg+csM44YCshjUfCOq0fxyibaerEZen4rw7IrJQ0K46GQo4W Ke3pk3pMt5MIfNyZOJQB3YXps0JR+bVmPECueZ5NWNS/5ET2dJG9O1AIa++cpiig oYKdpM88cbmh+1hoI8mRZXHGLCwrkxtLZrDOnUzRHclmdQCFKYAtsxQj1gc28Oar LTpiAMobTpZlAEsa2+2Fw3vLgwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGOSNufm K9c+g7yXYTDWqLvoL5UPMB8GA1UdIwQYMBaAFNiA7yZblA4x3+0cQq71FEtkQTcX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkE4RS82MUJBRDhFMEY4 N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURqSGY3UnhDcnZVVVMyUkJO eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJJRHZKbHVVRGpIZjdSeENydlVVUzJSQk54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZBOEUvNjFCQUQ4RTBGODdFMTFFRDkwRDg0NDVDQzRGOUFFMDIvNDNFOTYxRTAx M0U3MTFFRThFQ0EyRDNDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ3LIMA0GCSqGSIb3DQEBCwUAA4IBAQBKpFzOrDRTftvcYSPH7Dvf wOLTLFZOF8Ps7uy0R61/DSUpqR0vQjU+rp3thW1UIaoZl29EJ2jfw+opU4W9sHKu jsrvcWmncFJOQfEOVcCSgylxkNwUI45OtIxbqWn72unPf0FHdNHBBcwYg/iuQsDb 2DTx6Ea/oOIy1DdrxYfl+o1RmyJZ0jLqrS+/v8UsmB+ghh6XLrQT2OJjSck2D9Lc yhYZBS7bI/Ivqu/sAjLKQAj68RKhDUocxNDVePrJ/0uL15m9i/C/G9CFAiF1GxL5 9UnrR8Wka0MEhQVqxgkxX3iBT1AlieiYZ/nAhTVBb5wYSk0RIr8R1ircOADbiS8I -----END CERTIFICATE-----Generated at Sat Jun 6 14:44:41 2026 by rpki-client