$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/C9350D664F1E11F1B02A3F9FAD833773.roa File: C9350D664F1E11F1B02A3F9FAD833773.roa (raw, json) Hash identifier: fpG48xCdaUdNQMt55dQ4qwrwQHHc3YVMoK9lmGVCSsA= Subject key identifier: D3:BF:FB:8B:0E:C7:C6:BB:EC:B8:EF:B8:41:FD:B2:F2:F4:62:CE:C1 Certificate issuer: /CN=A91DBF0D/serialNumber=0D68DBAD600F8BD90B355B98F4B238FB9E9A57FA Certificate serial: 0914 Authority key identifier: 0D:68:DB:AD:60:0F:8B:D9:0B:35:5B:98:F4:B2:38:FB:9E:9A:57:FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/C9350D664F1E11F1B02A3F9FAD833773.roa Signing time: Wed 13 May 2026 23:03:14 +0000 ROA not before: Wed 13 May 2026 23:03:14 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 38195 IP address blocks: 43.225.48.0/24 maxlen: 24 103.65.253.0/24 maxlen: 24 103.208.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.crl rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 20:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2324 (0x914) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBF0D, serialNumber=0D68DBAD600F8BD90B355B98F4B238FB9E9A57FA Validity Not Before: May 13 23:03:14 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6a050332-502b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c6:8e:80:3d:2a:ca:c4:43:55:60:74:39:9a: 3e:6e:a2:53:38:0a:08:a7:23:20:1c:80:2e:07:f9: 95:24:be:62:d3:6b:69:45:86:e8:77:99:1a:2b:71: e5:17:5c:33:57:60:2b:2f:61:3f:b2:f5:d1:44:e4: 57:6c:81:ee:f3:85:22:23:03:cf:8b:26:b4:41:6d: e5:a3:70:a6:fa:cc:f4:a0:1e:ee:6f:4b:12:fb:99: 3d:b9:c9:4e:51:a7:02:f4:be:a1:9f:65:7e:80:d5: 8a:0c:76:b6:e2:6d:11:c6:d5:2a:ff:3e:8d:91:7b: 6b:45:47:8f:ba:61:3b:0a:72:80:04:2d:6f:c5:80: 99:99:ff:c6:a8:48:74:75:95:8c:c9:5b:de:37:75: 3e:01:c3:9d:a8:cc:30:21:3d:85:8e:92:24:47:8f: a2:fa:73:47:13:35:bd:52:f8:15:24:a0:e9:67:07: f6:34:ee:94:e4:ee:0a:18:c8:d9:6f:33:32:fd:ab: 64:bd:c9:39:92:4f:32:0d:3b:e4:6f:5f:41:58:76: 39:02:15:bb:c4:7e:56:f4:ae:37:ba:4e:80:7b:94: bc:72:cf:d0:30:a2:28:1f:7e:e7:e2:3c:23:16:96: cb:c7:5f:39:13:ed:fb:49:19:b2:a9:30:9b:08:27: a1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:BF:FB:8B:0E:C7:C6:BB:EC:B8:EF:B8:41:FD:B2:F2:F4:62:CE:C1 X509v3 Authority Key Identifier: keyid:0D:68:DB:AD:60:0F:8B:D9:0B:35:5B:98:F4:B2:38:FB:9E:9A:57:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/C9350D664F1E11F1B02A3F9FAD833773.roa sbgp-ipAddrBlock: critical IPv4: 43.225.48.0/24 103.65.253.0/24 103.208.166.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:79:0c:06:cf:d5:5f:46:82:14:5b:b9:13:2d:72:b3:a4:cf: 49:f8:04:8f:1c:78:6c:93:e7:57:a6:df:bb:bf:e4:11:04:9c: ce:73:e2:ae:47:3e:44:60:34:cb:6a:de:c0:77:99:e6:23:c3: b7:20:81:a8:7b:64:50:70:26:39:b4:49:ff:c3:b2:6b:b1:e2: 85:3a:e9:8e:36:d5:9c:64:b8:dd:92:8b:e7:8d:8d:01:30:ac: 74:6c:41:46:a4:4c:ab:94:3b:e2:e1:35:71:94:ab:ab:97:2f: 90:d9:fe:d7:db:f2:87:dd:30:8b:6a:fa:88:a1:45:e8:ab:35: 54:f9:0c:46:15:7f:e9:d0:ca:d9:b1:f7:d5:5f:dc:df:0c:6d: 24:d2:90:03:91:a9:77:e6:fd:1b:15:ce:fb:35:f6:d0:2a:cb: fa:4e:08:85:1b:0e:aa:a7:d0:13:e0:23:1a:f1:42:57:9d:d4: be:39:af:da:cd:0e:52:a8:21:6d:c2:41:30:b1:d3:75:28:3c: 31:bf:75:53:18:0b:d4:c2:c7:42:f0:58:85:45:f0:88:d8:70: c9:b7:94:ec:a8:bb:7f:6f:87:75:39:4f:87:db:1d:a3:5d:91: 50:a1:cc:b7:e7:f5:e8:56:84:4e:09:2e:1b:a0:98:08:87:cd: e1:9b:ce:98 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICCRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJGMEQxMTAvBgNVBAUTKDBENjhEQkFENjAwRjhCRDkwQjM1NUI5OEY0QjIzOEZC OUU5QTU3RkEwHhcNMjYwNTEzMjMwMzE0WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTA1MDMzMi01MDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0MaOgD0qysRDVWB0OZo+bqJTOAoIpyMgHIAuB/mVJL5i02tpRYbod5kaK3Hl F1wzV2ArL2E/svXRRORXbIHu84UiIwPPiya0QW3lo3Cm+sz0oB7ub0sS+5k9uclO UacC9L6hn2V+gNWKDHa24m0RxtUq/z6NkXtrRUePumE7CnKABC1vxYCZmf/GqEh0 dZWMyVveN3U+AcOdqMwwIT2FjpIkR4+i+nNHEzW9UvgVJKDpZwf2NO6U5O4KGMjZ bzMy/atkvck5kk8yDTvkb19BWHY5AhW7xH5W9K43uk6Ae5S8cs/QMKIoH37n4jwj FpbLx185E+37SRmyqTCbCCehSQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFNO/+4sO x8a77LjvuEH9svL0Ys7BMB8GA1UdIwQYMBaAFA1o261gD4vZCzVbmPSyOPuemlf6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkYwRC81Nzk2NEQ0QUNC MEUxMUVBQTEwRjMzMURDNEY5QUUwMi9EV2picldBUGk5a0xOVnVZOUxJNC01NmFW X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RXamJyV0FQaTlrTE5WdVk5TEk0LTU2YVZfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REJGMEQvNTc5NjRENEFDQjBFMTFFQUExMEYzMzFEQzRGOUFFMDIvQzkzNTBENjY0 RjFFMTFGMUIwMkEzRjlGQUQ4MzM3NzMucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAK+EwAwQAZ0H9AwQAZ9CmMA0GCSqGSIb3DQEBCwUAA4IBAQAaeQwG z9VfRoIUW7kTLXKzpM9J+ASPHHhsk+dXpt+7v+QRBJzOc+KuRz5EYDTLat7Ad5nm I8O3IIGoe2RQcCY5tEn/w7JrseKFOumONtWcZLjdkovnjY0BMKx0bEFGpEyrlDvi 4TVxlKurly+Q2f7X2/KH3TCLavqIoUXoqzVU+QxGFX/p0MrZsffVX9zfDG0k0pAD kal35v0bFc77NfbQKsv6TgiFGw6qp9AT4CMa8UJXndS+Oa/azQ5SqCFtwkEwsdN1 KDwxv3VTGAvUwsdC8FiFRfCI2HDJt5TsqLt/b4d1OU+H2x2jXZFQocy35/XoVoRO CS4boJgIh83hm86Y -----END CERTIFICATE-----Generated at Thu May 21 11:12:11 2026 by rpki-client