$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/B8CCCFC8FE4711EF9822D46AC4F9AE02.roa File: B8CCCFC8FE4711EF9822D46AC4F9AE02.roa (raw, json) Hash identifier: I7wXHkY5j/EtijYfTfESbTv7xxO7L2sl+cvxEqYUd2s= Subject key identifier: 6E:34:19:29:53:F6:FC:01:41:9A:9D:61:9C:DA:54:DA:F0:B4:A4:BA Certificate issuer: /CN=A91F3C87/serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B Certificate serial: 0278 Authority key identifier: EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/B8CCCFC8FE4711EF9822D46AC4F9AE02.roa Signing time: Mon 02 Mar 2026 13:36:44 +0000 ROA not before: Fri 05 Dec 2025 01:11:00 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 141153 IP address blocks: 43.224.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 02:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 632 (0x278) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3C87, serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B Validity Not Before: Dec 5 01:11:00 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a5926b-fbe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:91:0b:52:b0:c4:47:99:17:59:5d:b1:09:c5: 69:5a:c3:21:6b:22:d4:08:85:5a:ea:4b:8d:68:c3: 70:86:44:9f:19:38:17:9d:63:06:c9:d4:f5:db:60: 78:e5:11:25:45:8c:38:87:0c:1d:c3:9a:a6:5d:0e: d6:99:5d:20:1a:b5:9d:25:0a:34:4d:be:55:d6:19: 42:41:83:10:6f:9c:2c:98:7c:3a:e0:5c:6d:9f:5f: 0d:60:7c:af:88:9f:45:8e:52:5c:29:f6:54:de:2f: 6a:10:0f:2a:b2:3f:0e:20:e8:36:42:11:1a:50:ef: 59:60:ab:2d:86:b9:3e:34:e2:8a:37:3e:ca:b0:be: 02:f1:44:d9:73:2a:b4:fb:f7:3e:1a:95:4e:40:34: 1f:fe:69:40:46:8e:27:3d:17:90:f3:3a:1a:7b:2c: f7:31:35:9a:a3:13:54:7a:7f:c9:ed:b2:eb:d5:be: 31:d0:c5:cd:9d:50:9f:01:a4:67:a5:11:e8:27:78: 86:6d:0c:7b:77:ca:bd:91:ae:d0:a5:f6:5f:69:b6: 36:0b:9e:04:f3:c8:e4:f8:76:7e:32:ea:7c:dc:8b: 09:7a:d2:44:09:f2:89:a1:1b:ff:3a:9c:de:d2:80: a0:ff:6c:cf:51:c3:dc:da:84:f5:bc:87:c2:e3:9c: 67:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:34:19:29:53:F6:FC:01:41:9A:9D:61:9C:DA:54:DA:F0:B4:A4:BA X509v3 Authority Key Identifier: keyid:EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/B8CCCFC8FE4711EF9822D46AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.224.148.0/24 Signature Algorithm: sha256WithRSAEncryption 72:7f:df:f3:a9:58:a2:53:66:66:fa:bc:b2:ac:25:97:a1:6a: 93:94:53:35:97:58:5b:05:90:6c:3b:22:8a:9f:8b:a4:40:3d: 64:fd:e8:e3:85:da:bb:a9:6d:47:9f:f4:3f:d8:36:fb:9c:d6: 0f:e0:f3:d9:ba:89:51:91:0f:4d:b0:6d:7a:17:18:07:d9:70: 89:74:b3:a3:b0:bd:5b:0d:17:5c:5f:bc:88:5b:6e:2a:57:0e: 82:1c:a7:f8:14:3d:47:35:2c:c1:81:69:3c:ad:c2:96:73:ea: 88:bf:e8:18:19:6c:4f:6d:bc:7e:c4:5b:c3:ed:5a:37:e7:12: 00:02:97:16:b0:8f:2a:80:32:56:30:33:8d:c1:a9:76:fd:c7: c4:f1:d3:12:09:be:94:ff:6d:7c:7a:8c:ab:d9:6b:cf:ff:4b: 71:4d:a4:f6:54:2a:42:34:86:0b:15:ac:b6:19:d2:60:92:ff: ec:64:30:85:80:65:b8:99:7f:bf:a6:e8:42:3c:7e:aa:c9:8e: e2:64:81:eb:0e:fe:ef:b8:cf:f0:a9:da:3d:19:1b:c7:0e:65: 03:49:43:15:6e:f8:88:7c:40:1c:b4:3c:46:48:f8:5e:8c:ad: 5d:31:14:d7:75:5a:09:11:f1:44:3b:dd:94:5a:d9:c5:f4:83: c3:af:bd:53 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNDODcxMTAvBgNVBAUTKEVGOUZFMzgxREEzRDQyRUI3QzRFMEQwNDlDQ0FFNzIy OEUyOEZCNEIwHhcNMjUxMjA1MDExMTAwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTI2Yi1mYmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupELUrDER5kXWV2xCcVpWsMhayLUCIVa6kuNaMNwhkSfGTgXnWMGydT122B4 5RElRYw4hwwdw5qmXQ7WmV0gGrWdJQo0Tb5V1hlCQYMQb5wsmHw64Fxtn18NYHyv iJ9FjlJcKfZU3i9qEA8qsj8OIOg2QhEaUO9ZYKsthrk+NOKKNz7KsL4C8UTZcyq0 +/c+GpVOQDQf/mlARo4nPReQ8zoaeyz3MTWaoxNUen/J7bLr1b4x0MXNnVCfAaRn pRHoJ3iGbQx7d8q9ka7QpfZfabY2C54E88jk+HZ+Mup83IsJetJECfKJoRv/Opze 0oCg/2zPUcPc2oT1vIfC45xnGQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFG40GSlT 9vwBQZqdYZzaVNrwtKS6MB8GA1UdIwQYMBaAFO+f44HaPULrfE4NBJzK5yKOKPtL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0M4Ny9FNzgyODU0RUVG MEIxMUVEODFERDJENzJDNEY5QUUwMi83NV9qZ2RvOVF1dDhUZzBFbk1ybklvNG8t MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1X2pnZG85UXV0OFRnMEVuTXJuSW80by0wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjNDODcvRTc4Mjg1NEVFRjBCMTFFRDgxREQyRDcyQzRGOUFFMDIvQjhDQ0NGQzhG RTQ3MTFFRjk4MjJENDZBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK+CUMA0GCSqGSIb3DQEBCwUAA4IBAQByf9/zqViiU2Zm+ryyrCWX oWqTlFM1l1hbBZBsOyKKn4ukQD1k/ejjhdq7qW1Hn/Q/2Db7nNYP4PPZuolRkQ9N sG16FxgH2XCJdLOjsL1bDRdcX7yIW24qVw6CHKf4FD1HNSzBgWk8rcKWc+qIv+gY GWxPbbx+xFvD7Vo35xIAApcWsI8qgDJWMDONwal2/cfE8dMSCb6U/218eoyr2WvP /0txTaT2VCpCNIYLFay2GdJgkv/sZDCFgGW4mX+/puhCPH6qyY7iZIHrDv7vuM/w qdo9GRvHDmUDSUMVbviIfEActDxGSPhejK1dMRTXdVoJEfFEO92UWtnF9IPDr71T -----END CERTIFICATE-----Generated at Wed Mar 4 17:27:39 2026 by rpki-client