$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/49CAEF64D07011F08EAB2929C4F9AE02.roa File: 49CAEF64D07011F08EAB2929C4F9AE02.roa (raw, json) Hash identifier: 9yWXqNFWiFfzJFLfOdFyogGNA+hYJ2MkS7N+G+jaZ/Y= Subject key identifier: B6:0A:1C:5C:6F:D1:F1:CD:04:62:69:49:3A:80:1F:DD:54:EE:A6:AC Certificate issuer: /CN=A91D3794/serialNumber=30E589288EB65002510C877B466ABE19753BDBCE Certificate serial: 223E Authority key identifier: 30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/49CAEF64D07011F08EAB2929C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:16:32 +0000 ROA not before: Fri 30 Jan 2026 16:13:42 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 26337 IP address blocks: 43.245.52.0/22 maxlen: 24 203.17.36.0/24 maxlen: 24 203.170.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 15:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8766 (0x223e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3794, serialNumber=30E589288EB65002510C877B466ABE19753BDBCE Validity Not Before: Jan 30 16:13:42 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a48280-a7ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1a:69:10:4b:60:7b:56:88:e1:8b:98:d3:c3: b0:1b:65:f4:dc:d1:61:4c:8e:11:e1:eb:ad:90:98: 3e:fc:31:52:19:76:d7:e3:e8:c0:e7:88:5e:e4:fb: ca:96:86:06:cb:58:e4:a7:53:2a:50:55:da:b2:46: a9:0b:e5:28:46:43:92:2b:8e:23:1b:74:7d:bc:73: d1:e9:50:ce:20:3c:a8:01:5e:f9:a5:04:bc:f3:61: 6a:f7:46:d4:67:28:84:de:d5:f8:0d:47:c6:d8:2c: 21:09:a1:76:7a:ea:be:48:ce:a4:b7:58:40:46:a8: 5e:44:7e:39:10:ed:3d:a9:3a:a6:3c:19:37:b0:43: bf:ac:d3:12:c1:8c:96:55:3f:0f:8c:cd:a6:af:64: bd:e5:d8:dd:ea:b2:0d:2c:6d:e8:52:e4:4b:ad:66: 68:06:8f:41:fd:4a:06:b2:ce:1c:08:0a:98:c3:18: d1:f9:f1:ae:f5:67:03:c0:33:7c:68:86:02:e9:27: 7b:62:d6:64:68:61:67:bb:c3:ce:ce:8a:8d:18:f2: 8f:ee:2a:b7:fa:0b:1b:11:4a:a1:89:98:2c:60:ef: f0:a4:80:72:91:87:38:40:51:fb:18:d9:7b:10:a6: c5:be:71:5d:dd:09:1d:8f:c7:e2:88:d9:3e:fe:81: a5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:0A:1C:5C:6F:D1:F1:CD:04:62:69:49:3A:80:1F:DD:54:EE:A6:AC X509v3 Authority Key Identifier: keyid:30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/49CAEF64D07011F08EAB2929C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.245.52.0/22 203.17.36.0/24 203.170.80.0/21 Signature Algorithm: sha256WithRSAEncryption 47:af:8e:27:22:bf:df:86:e9:d5:1f:a7:57:87:0d:9b:03:36: 15:5d:17:3a:36:9b:24:67:5f:a5:d9:d3:34:50:5f:97:45:23: 79:0f:3d:0f:89:80:47:2a:2e:be:df:25:22:7e:7a:57:e7:72: 17:11:4f:33:b5:54:3c:70:5f:2e:a7:42:49:29:c5:9b:d0:c1: bf:b2:90:32:2e:e9:76:9b:59:ac:e6:5d:be:ff:01:19:5b:16: d2:76:ae:25:8a:ea:cf:ab:5a:56:55:c7:b4:7f:a4:3b:24:e0: 1a:24:e6:da:95:69:9a:ca:6b:37:1d:96:5b:98:b1:35:92:a8: e7:b6:90:d9:a4:0b:5e:c0:54:6d:b5:f1:30:26:df:57:2f:ab: 68:da:8c:46:fa:f3:89:24:00:fc:1e:65:91:06:2c:d0:73:e8: 0e:26:cd:ba:41:6f:fa:eb:97:18:2e:01:49:89:5b:9f:c9:82: 0d:28:bd:ec:6a:85:05:8a:3a:18:64:95:a1:cf:37:88:44:53: e1:19:02:90:6e:69:e0:63:ed:35:82:1d:64:0a:37:07:56:f1: 76:33:70:c1:74:b6:ff:11:41:62:7b:90:28:8a:66:10:6f:e6: 43:98:d5:86:01:a7:7f:ba:26:69:4e:18:66:84:39:ff:be:63: e2:85:40:30 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICIj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3OTQxMTAvBgNVBAUTKDMwRTU4OTI4OEVCNjUwMDI1MTBDODc3QjQ2NkFCRTE5 NzUzQkRCQ0UwHhcNMjYwMTMwMTYxMzQyWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODI4MC1hN2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hppEEtge1aI4YuY08OwG2X03NFhTI4R4eutkJg+/DFSGXbX4+jA54he5PvK loYGy1jkp1MqUFXaskapC+UoRkOSK44jG3R9vHPR6VDOIDyoAV75pQS882Fq90bU ZyiE3tX4DUfG2CwhCaF2euq+SM6kt1hARqheRH45EO09qTqmPBk3sEO/rNMSwYyW VT8PjM2mr2S95djd6rINLG3oUuRLrWZoBo9B/UoGss4cCAqYwxjR+fGu9WcDwDN8 aIYC6Sd7YtZkaGFnu8POzoqNGPKP7iq3+gsbEUqhiZgsYO/wpIBykYc4QFH7GNl7 EKbFvnFd3Qkdj8fiiNk+/oGlAQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFLYKHFxv 0fHNBGJpSTqAH91U7qasMB8GA1UdIwQYMBaAFDDliSiOtlACUQyHe0Zqvhl1O9vO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzc5NC8yMEZFNTYxNkU5 OEYxMUU1QTNERERDNjZDNEY5QUUwMi9NT1dKS0k2MlVBSlJESWQ3Um1xLUdYVTcy ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PV0pLSTYyVUFKUkRJZDdSbXEtR1hVNzI4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDM3OTQvMjBGRTU2MTZFOThGMTFFNUEzREREQzY2QzRGOUFFMDIvNDlDQUVGNjRE MDcwMTFGMDhFQUIyOTI5QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCK/U0AwQAyxEkAwQDy6pQMA0GCSqGSIb3DQEBCwUAA4IBAQBHr44n Ir/fhunVH6dXhw2bAzYVXRc6NpskZ1+l2dM0UF+XRSN5Dz0PiYBHKi6+3yUifnpX 53IXEU8ztVQ8cF8up0JJKcWb0MG/spAyLul2m1ms5l2+/wEZWxbSdq4liurPq1pW Vce0f6Q7JOAaJObalWmayms3HZZbmLE1kqjntpDZpAtewFRttfEwJt9XL6to2oxG +vOJJAD8HmWRBizQc+gOJs26QW/665cYLgFJiVufyYINKL3saoUFijoYZJWhzzeI RFPhGQKQbmngY+01gh1kCjcHVvF2M3DBdLb/EUFie5AoimYQb+ZDmNWGAad/uiZp ThhmhDn/vmPihUAw -----END CERTIFICATE-----Generated at Sun Mar 22 12:14:08 2026 by rpki-client