$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/19CBA44C173F11F08E4D594DC4F9AE02.roa File: 19CBA44C173F11F08E4D594DC4F9AE02.roa (raw, json) Hash identifier: 70vOJvI/E04woMguOqemdPVBvnWJTEUW7lYf+P0Mb74= Subject key identifier: 9A:FE:91:76:A9:14:7B:2B:57:CC:C1:E0:8D:E2:85:33:B0:9C:03:F6 Certificate issuer: /CN=A91F3C87/serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B Certificate serial: 027A Authority key identifier: EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/19CBA44C173F11F08E4D594DC4F9AE02.roa Signing time: Mon 02 Mar 2026 13:36:45 +0000 ROA not before: Fri 05 Dec 2025 01:11:02 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 197537 IP address blocks: 43.224.149.0/24 maxlen: 24 103.43.172.0/24 maxlen: 24 103.43.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 02:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 634 (0x27a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3C87, serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B Validity Not Before: Dec 5 01:11:02 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a5926d-c2ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:49:77:32:a4:3c:11:22:99:32:d7:d6:5f:af: f0:12:5b:a1:d2:df:51:fa:46:f7:bc:fc:f9:0d:3b: c2:2c:e1:d4:4c:6a:47:af:e4:0c:e4:d5:59:b8:68: 2c:bb:af:34:6b:73:bf:d2:f1:81:f7:f8:e7:9f:63: 3a:1c:3c:6f:6a:a3:e6:0f:a8:ce:c2:cf:5b:7c:19: 25:8c:d3:4d:b3:de:03:e7:57:5f:2b:b6:47:de:b5: de:e2:43:ce:bd:c7:10:d5:29:88:be:1c:f1:41:22: 4e:87:8b:8c:b9:f1:a7:70:13:c9:72:a4:92:db:f3: 61:28:8f:d2:cc:ea:43:a6:3e:4b:34:b7:59:99:20: 43:72:74:b9:73:9c:2d:ab:9a:b6:2f:73:91:b9:40: 63:22:4c:14:ed:e0:8d:62:74:91:01:61:19:0d:31: ba:14:1b:7c:86:1f:a9:ac:52:f9:ab:3e:ae:d5:09: 87:cc:91:cf:06:d1:bd:83:a5:ce:04:ae:b9:2c:62: a8:74:86:5a:a5:da:f4:0d:3a:b0:94:2d:bd:93:6a: 66:43:0c:e3:22:48:ea:d3:36:99:7b:c2:8a:55:4e: cd:1b:10:14:ca:f7:11:51:63:6b:3b:c4:c0:ca:e1: 1d:f7:47:67:a4:c5:f0:f2:e9:cd:72:99:b1:0e:3e: 85:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:FE:91:76:A9:14:7B:2B:57:CC:C1:E0:8D:E2:85:33:B0:9C:03:F6 X509v3 Authority Key Identifier: keyid:EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/19CBA44C173F11F08E4D594DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.224.149.0/24 103.43.172.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:21:b5:65:ac:3e:59:3b:6b:12:63:bc:6a:0a:ca:40:ec:7e: d0:2a:c4:a0:f0:9c:99:7e:98:9a:fb:0b:7f:47:77:6f:c0:cc: 97:e9:21:3b:13:22:4c:16:b9:fa:42:05:c6:9c:f6:30:69:26: c8:83:bc:7b:f9:93:fb:76:9b:2c:6f:da:5c:66:b1:7a:c9:e7: 93:aa:af:91:bc:e6:64:a3:e8:33:4e:12:aa:84:e1:5f:87:fc: 07:80:ba:4e:83:83:60:41:07:b8:55:81:4d:46:da:cd:7d:4c: 98:12:f7:6f:37:07:c3:c0:a6:95:85:51:6c:81:c5:ba:13:b3: 62:39:8d:82:dc:fc:b6:03:2a:0f:ad:7d:83:48:14:b8:7b:6f: 08:49:4b:68:ae:e8:89:d9:71:0b:a9:ea:1f:85:9b:38:f0:9d: ad:b1:9e:bf:cb:78:d0:04:b8:4b:e8:4a:1e:cf:1e:24:18:d5: 30:8b:d8:b5:31:e9:5d:9b:f9:83:5d:0d:91:65:00:c4:73:38: 43:e4:00:d0:9f:3b:08:7a:0d:51:3e:97:0f:8b:c6:69:e7:c9: 0c:7d:ed:8f:f5:a3:80:67:57:c8:2e:da:a3:87:1c:03:c7:10: 79:28:e7:0e:10:52:7b:67:ef:d9:30:1d:39:cb:f4:5c:f0:70: d8:e3:07:ab -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNDODcxMTAvBgNVBAUTKEVGOUZFMzgxREEzRDQyRUI3QzRFMEQwNDlDQ0FFNzIy OEUyOEZCNEIwHhcNMjUxMjA1MDExMTAyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTI2ZC1jMmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApkl3MqQ8ESKZMtfWX6/wEluh0t9R+kb3vPz5DTvCLOHUTGpHr+QM5NVZuGgs u680a3O/0vGB9/jnn2M6HDxvaqPmD6jOws9bfBkljNNNs94D51dfK7ZH3rXe4kPO vccQ1SmIvhzxQSJOh4uMufGncBPJcqSS2/NhKI/SzOpDpj5LNLdZmSBDcnS5c5wt q5q2L3ORuUBjIkwU7eCNYnSRAWEZDTG6FBt8hh+prFL5qz6u1QmHzJHPBtG9g6XO BK65LGKodIZapdr0DTqwlC29k2pmQwzjIkjq0zaZe8KKVU7NGxAUyvcRUWNrO8TA yuEd90dnpMXw8unNcpmxDj6F1QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFJr+kXap FHsrV8zB4I3ihTOwnAP2MB8GA1UdIwQYMBaAFO+f44HaPULrfE4NBJzK5yKOKPtL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0M4Ny9FNzgyODU0RUVG MEIxMUVEODFERDJENzJDNEY5QUUwMi83NV9qZ2RvOVF1dDhUZzBFbk1ybklvNG8t MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1X2pnZG85UXV0OFRnMEVuTXJuSW80by0wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjNDODcvRTc4Mjg1NEVFRjBCMTFFRDgxREQyRDcyQzRGOUFFMDIvMTlDQkE0NEMx NzNGMTFGMDhFNEQ1OTREQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAK+CVAwQBZyusMA0GCSqGSIb3DQEBCwUAA4IBAQAvIbVlrD5ZO2sS Y7xqCspA7H7QKsSg8JyZfpia+wt/R3dvwMyX6SE7EyJMFrn6QgXGnPYwaSbIg7x7 +ZP7dpssb9pcZrF6yeeTqq+RvOZko+gzThKqhOFfh/wHgLpOg4NgQQe4VYFNRtrN fUyYEvdvNwfDwKaVhVFsgcW6E7NiOY2C3Py2AyoPrX2DSBS4e28ISUtoruiJ2XEL qeofhZs48J2tsZ6/y3jQBLhL6Eoezx4kGNUwi9i1Meldm/mDXQ2RZQDEczhD5ADQ nzsIeg1RPpcPi8Zp58kMfe2P9aOAZ1fILtqjhxwDxxB5KOcOEFJ7Z+/ZMB05y/Rc 8HDY4wer -----END CERTIFICATE-----Generated at Wed Mar 4 17:27:39 2026 by rpki-client