$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/E0A8B344173E11F093E0F04CC4F9AE02.roa File: E0A8B344173E11F093E0F04CC4F9AE02.roa (raw, json) Hash identifier: D+QMa0Uc3Otd40w0FvJo8RpF7NChFyDZ65fKp82N1NM= Subject key identifier: D7:5E:1A:84:8B:67:52:98:A7:36:BA:E8:BB:25:CC:40:54:2D:4D:26 Certificate issuer: /CN=A91F3C87/serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B Certificate serial: 0277 Authority key identifier: EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/E0A8B344173E11F093E0F04CC4F9AE02.roa Signing time: Mon 02 Mar 2026 13:36:43 +0000 ROA not before: Fri 05 Dec 2025 01:10:59 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 10103 IP address blocks: 43.224.149.0/24 maxlen: 24 103.43.172.0/24 maxlen: 24 103.43.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 02:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 631 (0x277) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3C87, serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B Validity Not Before: Dec 5 01:10:59 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a5926b-35a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ca:bd:cc:5d:d2:a1:1e:00:a1:51:a3:00:3b: e3:1a:8e:10:bf:16:b8:92:e6:b3:01:4c:5b:b7:b2: cd:05:cb:af:6b:6c:4b:d3:73:4c:0f:b0:a9:10:68: 67:3e:16:1a:86:f2:ec:75:7f:ab:fd:31:e8:d5:27: ac:c1:0d:f1:e5:c3:39:e8:b2:7c:f0:96:07:ed:ed: 94:e2:1f:1a:c8:4d:a0:eb:b7:ce:c3:69:d7:9e:b7: 58:8f:b9:e5:e7:51:c2:9c:42:a3:39:04:71:16:74: be:6d:29:e0:94:2f:b6:c9:51:dc:6d:c4:b5:95:32: cd:fa:d2:5d:dc:12:b1:03:3d:f5:e6:b4:e5:8c:e9: e6:29:e4:6f:e0:a0:e3:0f:7f:0b:3b:58:20:c1:22: 47:d7:8b:57:a3:1e:2f:a7:49:d4:31:69:1b:a4:fa: 3f:f3:cc:6e:61:06:08:19:56:d6:e6:1f:27:bf:3f: 60:09:16:9a:8c:3d:b5:70:4b:a4:f3:80:a6:da:c1: a1:d1:bd:83:62:74:42:bc:36:79:a1:85:17:ba:22: b5:9b:7b:c4:98:9f:5f:e0:91:aa:63:ee:49:f3:81: ef:45:7f:25:03:11:e4:bb:f0:49:f3:7f:11:84:57: 38:66:b5:9d:c8:c4:8b:c8:be:0c:b7:20:8d:cd:a9: 68:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:5E:1A:84:8B:67:52:98:A7:36:BA:E8:BB:25:CC:40:54:2D:4D:26 X509v3 Authority Key Identifier: keyid:EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/E0A8B344173E11F093E0F04CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.224.149.0/24 103.43.172.0/23 Signature Algorithm: sha256WithRSAEncryption 45:98:94:c5:ad:95:f3:94:56:1c:aa:7d:21:bd:d6:5b:56:5c: 22:d6:e5:f7:d6:cb:84:5c:9a:4e:8b:a8:a3:fd:94:e6:0a:c3: 66:06:33:d8:34:12:a9:3a:49:76:f4:5c:59:47:1e:0e:2a:68: 1f:6f:8f:90:57:f6:ac:de:aa:52:2e:81:1c:ca:7d:28:62:be: 78:e0:e5:1e:a6:a7:3c:02:53:31:0d:b9:a1:25:48:81:9c:3a: b4:05:1c:7e:f1:28:bf:74:ef:63:15:e0:aa:a9:e6:93:23:48: 42:85:87:4f:8e:fb:9a:8f:f3:5f:91:fa:3f:80:fa:6a:26:83: f4:2e:f7:47:dd:69:7d:0c:0c:9d:6f:7b:07:30:05:46:0d:cc: 3f:07:37:99:d0:2d:c1:d8:d8:bb:a6:2a:9a:1f:ed:1c:3b:00: cd:cd:a8:81:73:cf:96:84:0b:1e:db:57:d0:0a:bc:1b:3e:ee: e8:9f:a5:9c:0d:ac:63:ab:e6:3a:cf:5b:a1:39:61:c5:c0:ed: c9:f3:51:2f:0c:4a:c2:09:be:ab:fd:64:6c:8b:c7:20:5d:9a: 8f:a7:ea:4a:3a:17:bf:e2:cb:32:b7:4f:25:9c:49:80:ae:39: d9:e9:c3:e9:3a:f6:39:2e:0e:ce:08:67:a3:e2:42:8b:10:8a: f3:6e:ec:ba -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNDODcxMTAvBgNVBAUTKEVGOUZFMzgxREEzRDQyRUI3QzRFMEQwNDlDQ0FFNzIy OEUyOEZCNEIwHhcNMjUxMjA1MDExMDU5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTI2Yi0zNWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMq9zF3SoR4AoVGjADvjGo4Qvxa4kuazAUxbt7LNBcuva2xL03NMD7CpEGhn PhYahvLsdX+r/THo1SeswQ3x5cM56LJ88JYH7e2U4h8ayE2g67fOw2nXnrdYj7nl 51HCnEKjOQRxFnS+bSnglC+2yVHcbcS1lTLN+tJd3BKxAz315rTljOnmKeRv4KDj D38LO1ggwSJH14tXox4vp0nUMWkbpPo/88xuYQYIGVbW5h8nvz9gCRaajD21cEuk 84Cm2sGh0b2DYnRCvDZ5oYUXuiK1m3vEmJ9f4JGqY+5J84HvRX8lAxHku/BJ838R hFc4ZrWdyMSLyL4MtyCNzalo7wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFNdeGoSL Z1KYpza66LslzEBULU0mMB8GA1UdIwQYMBaAFO+f44HaPULrfE4NBJzK5yKOKPtL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0M4Ny9FNzgyODU0RUVG MEIxMUVEODFERDJENzJDNEY5QUUwMi83NV9qZ2RvOVF1dDhUZzBFbk1ybklvNG8t MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1X2pnZG85UXV0OFRnMEVuTXJuSW80by0wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjNDODcvRTc4Mjg1NEVFRjBCMTFFRDgxREQyRDcyQzRGOUFFMDIvRTBBOEIzNDQx NzNFMTFGMDkzRTBGMDRDQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAK+CVAwQBZyusMA0GCSqGSIb3DQEBCwUAA4IBAQBFmJTFrZXzlFYc qn0hvdZbVlwi1uX31suEXJpOi6ij/ZTmCsNmBjPYNBKpOkl29FxZRx4OKmgfb4+Q V/as3qpSLoEcyn0oYr544OUepqc8AlMxDbmhJUiBnDq0BRx+8Si/dO9jFeCqqeaT I0hChYdPjvuaj/Nfkfo/gPpqJoP0LvdH3Wl9DAydb3sHMAVGDcw/BzeZ0C3B2Ni7 piqaH+0cOwDNzaiBc8+WhAse21fQCrwbPu7on6WcDaxjq+Y6z1uhOWHFwO3J81Ev DErCCb6r/WRsi8cgXZqPp+pKOhe/4ssyt08lnEmArjnZ6cPpOvY5Lg7OCGej4kKL EIrzbuy6 -----END CERTIFICATE-----Generated at Wed Mar 4 17:28:37 2026 by rpki-client