$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/51273D9A08EE11E99E30172AC4F9AE02.roa File: 51273D9A08EE11E99E30172AC4F9AE02.roa (raw, json) Hash identifier: /gFPuZArkGe71y+RmxZKgGm693+bY0y50nJRlydDJi4= Subject key identifier: D0:A0:D8:05:19:B6:38:26:22:95:2A:03:E5:24:EE:EC:A6:E4:F8:7C Certificate issuer: /CN=A91D7454/serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Certificate serial: 11F8 Authority key identifier: 33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/51273D9A08EE11E99E30172AC4F9AE02.roa Signing time: Thu 02 Apr 2026 17:21:47 +0000 ROA not before: Thu 02 Apr 2026 17:21:47 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 132615 IP address blocks: 43.250.224.0/22 maxlen: 22 103.17.20.0/22 maxlen: 22 103.17.20.0/24 maxlen: 24 103.17.21.0/24 maxlen: 24 103.17.22.0/24 maxlen: 24 103.17.23.0/24 maxlen: 24 2001:df0:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4600 (0x11f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7454, serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Validity Not Before: Apr 2 17:21:47 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69cea5ab-4446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d1:4d:7a:9e:31:14:e1:76:b8:ab:7f:c2:2b: aa:59:d9:87:1f:e9:92:d3:89:f5:90:66:38:b7:d8: 72:6d:68:09:26:da:d3:23:81:64:b8:20:88:b6:be: 2e:54:21:48:de:06:45:61:ce:c8:5f:16:3f:eb:5a: c3:cb:6c:8b:6d:ef:e9:5b:2a:dd:ae:02:c2:59:9b: d8:f3:5c:af:ef:29:a3:ef:86:d4:f0:f9:8e:ba:a9: 62:06:ba:67:79:cb:2a:63:06:3b:05:bb:f0:d0:a2: 3f:62:5f:eb:6a:df:fb:61:a6:14:11:37:74:ef:33: 32:54:0d:3d:b6:b9:25:2b:20:98:b6:13:ad:4d:9a: af:4e:ca:c0:32:73:d7:3a:66:a0:d4:37:15:11:0b: cb:a5:ff:fc:fb:6f:a7:cf:f6:6f:91:10:7f:31:46: ba:88:e1:f6:ae:5b:3b:af:cf:8d:83:bd:a0:f3:46: e5:c7:7c:ab:fd:b0:1e:aa:ba:fd:7b:cc:f1:ca:2e: 76:dd:9c:26:f2:34:74:dc:11:4f:c5:a0:1d:01:35: c5:b1:88:47:eb:20:29:f3:91:2e:a0:0b:42:b2:7d: b6:9b:1f:3b:a4:73:77:e2:17:90:1f:61:74:4b:57: 5a:c6:5a:55:91:00:14:ba:f9:f2:af:20:93:5e:51: f0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A0:D8:05:19:B6:38:26:22:95:2A:03:E5:24:EE:EC:A6:E4:F8:7C X509v3 Authority Key Identifier: keyid:33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/51273D9A08EE11E99E30172AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.250.224.0/22 103.17.20.0/22 IPv6: 2001:df0:3000::/48 Signature Algorithm: sha256WithRSAEncryption 39:d6:76:fc:5a:d9:f2:1a:ea:1d:08:57:ff:cd:2e:c4:26:14: 02:43:e1:85:7e:37:ab:a6:68:0a:d2:3e:f6:2b:2f:ac:ad:51: d9:f6:be:89:fc:09:61:b2:dd:42:a7:bd:18:8a:ec:38:1a:68: b8:f7:64:f4:16:47:41:d9:6e:de:92:b8:3f:a3:cd:26:9d:c5: 3c:72:c4:9b:47:12:7d:db:db:77:b0:ca:61:25:3d:5d:21:07: 5d:b5:69:db:b2:e6:48:f0:df:ed:8e:11:3d:b2:1b:8e:16:d7: eb:df:3d:31:bd:68:b4:6b:a2:3e:a7:7e:b1:ce:d3:18:5e:86: fc:77:5d:4a:ff:45:da:6b:30:59:5e:0a:a4:5d:0d:3f:64:ec: 81:a0:0a:59:a7:75:72:d6:84:07:3c:28:19:97:64:73:f0:45: fa:7a:33:67:5b:a4:2d:a8:bc:fc:a0:c1:86:1d:f2:c3:ff:cd: 06:4c:49:40:e3:03:82:ec:9f:9f:8e:a3:6c:d3:36:f6:0b:4c: 14:49:d8:dc:54:de:fe:37:90:6b:f5:81:37:2a:de:2b:67:f1: 63:14:0a:35:98:ff:d0:f8:2d:da:18:f7:8c:cd:95:c9:73:f4: 97:72:4b:db:55:64:d4:c5:63:a2:f9:bd:78:0e:b5:81:ff:2c: c4:f3:0f:34 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICEfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc0NTQxMTAvBgNVBAUTKDMzMTFCRjk3RTIxQjcyNkE5QzAwNTZCQkU0QTg1QjFG N0YyOTVGMzUwHhcNMjYwNDAyMTcyMTQ3WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWNlYTVhYi00NDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudFNep4xFOF2uKt/wiuqWdmHH+mS04n1kGY4t9hybWgJJtrTI4FkuCCItr4u VCFI3gZFYc7IXxY/61rDy2yLbe/pWyrdrgLCWZvY81yv7ymj74bU8PmOuqliBrpn ecsqYwY7Bbvw0KI/Yl/rat/7YaYUETd07zMyVA09trklKyCYthOtTZqvTsrAMnPX Omag1DcVEQvLpf/8+2+nz/ZvkRB/MUa6iOH2rls7r8+Ng72g80blx3yr/bAeqrr9 e8zxyi523Zwm8jR03BFPxaAdATXFsYhH6yAp85EuoAtCsn22mx87pHN34heQH2F0 S1daxlpVkQAUuvnyryCTXlHwrQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFNCg2AUZ tjgmIpUqA+Uk7uym5Ph8MB8GA1UdIwQYMBaAFDMRv5fiG3JqnABWu+SoWx9/KV81 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzQ1NC83OUM2MUU3QzA4 RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNtcWNBRmE3NUtoYkgzOHBY elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL014R19sLUliY21xY0FGYTc1S2hiSDM4cFh6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDc0NTQvNzlDNjFFN0MwOEVCMTFFOUFGOEJDRDIzQzRGOUFFMDIvNTEyNzNEOUEw OEVFMTFFOTlFMzAxNzJBQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQCK/rgAwQCZxEUMA8EAgACMAkDBwAgAQ3wMAAwDQYJKoZIhvcNAQEL BQADggEBADnWdvxa2fIa6h0IV//NLsQmFAJD4YV+N6umaArSPvYrL6ytUdn2von8 CWGy3UKnvRiK7DgaaLj3ZPQWR0HZbt6SuD+jzSadxTxyxJtHEn3b23ewymElPV0h B121aduy5kjw3+2OET2yG44W1+vfPTG9aLRroj6nfrHO0xhehvx3XUr/RdprMFle CqRdDT9k7IGgClmndXLWhAc8KBmXZHPwRfp6M2dbpC2ovPygwYYd8sP/zQZMSUDj A4Lsn5+Oo2zTNvYLTBRJ2NxU3v43kGv1gTcq3itn8WMUCjWY/9D4LdoY94zNlclz 9JdyS9tVZNTFY6L5vXgOtYH/LMTzDzQ= -----END CERTIFICATE-----Generated at Mon Apr 6 09:54:29 2026 by rpki-client