$ rpki-client -vvf rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/A652A68C3DB911EFACDF8C75C4F9AE02.roa File: A652A68C3DB911EFACDF8C75C4F9AE02.roa (raw, json) Hash identifier: N4cKaS0mhdfetjDQpuoB6/wb9rZig3P5I710RWYjulM= Subject key identifier: 12:31:46:D2:86:B5:D8:58:BE:A8:A8:A1:52:23:CC:DD:A3:28:8F:34 Certificate issuer: /CN=A91151C9/serialNumber=875F40021C6D43B04EFE894A7FC15CC4F6ED89BA Certificate serial: 186F Authority key identifier: 87:5F:40:02:1C:6D:43:B0:4E:FE:89:4A:7F:C1:5C:C4:F6:ED:89:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/A652A68C3DB911EFACDF8C75C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:15:56 +0000 ROA not before: Tue 06 May 2025 16:54:55 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 64096 IP address blocks: 43.228.180.0/22 maxlen: 22 43.228.180.0/24 maxlen: 24 43.228.181.0/24 maxlen: 24 43.228.182.0/23 maxlen: 24 103.47.200.0/22 maxlen: 24 103.103.176.0/22 maxlen: 22 103.103.176.0/23 maxlen: 24 103.103.178.0/24 maxlen: 24 103.103.179.0/24 maxlen: 24 103.212.56.0/22 maxlen: 22 103.212.56.0/24 maxlen: 24 103.212.57.0/24 maxlen: 24 103.212.58.0/23 maxlen: 24 116.206.0.0/22 maxlen: 22 116.206.0.0/24 maxlen: 24 116.206.1.0/24 maxlen: 24 116.206.2.0/23 maxlen: 24 2404:ff80::/32 maxlen: 32 2404:ff80:100::/48 maxlen: 48 2404:ff80:101::/48 maxlen: 48 2404:ff80:1001::/48 maxlen: 48 2404:ff80:c000::/34 maxlen: 34 2404:ff80:ffe0::/44 maxlen: 48 2404:ff80:fff0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.crl rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6255 (0x186f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91151C9, serialNumber=875F40021C6D43B04EFE894A7FC15CC4F6ED89BA Validity Not Before: May 6 16:54:55 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a403cc-20e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9b:77:57:31:1e:23:e2:a7:11:0b:2c:2c:11: 9c:90:c8:d4:26:6b:9c:05:45:5b:18:c1:ea:d5:66: 29:b5:ec:de:75:96:ee:68:75:61:35:00:42:09:db: e7:43:50:38:59:ee:9f:5b:99:f3:b1:04:76:70:59: 43:aa:a9:c5:c5:49:f2:3c:7d:28:98:55:97:bb:0a: 8a:ed:b8:0d:c9:43:4e:ff:80:2c:8f:9c:cd:81:26: 40:15:53:0b:46:a1:6e:48:85:79:30:39:1c:54:2e: a5:dd:ee:78:aa:25:ab:4d:2d:8a:14:fe:97:a4:c0: 9d:4e:0a:ae:e6:09:f6:da:f6:87:9f:65:41:f9:24: 97:54:ab:15:d1:a9:31:e0:07:af:1a:4f:62:6c:cf: 6b:a6:d3:77:a0:73:56:2f:3b:62:3a:15:de:a7:43: e5:2d:97:02:ae:d9:14:1a:62:6b:d6:aa:dc:fc:6e: b1:b3:78:e3:8e:6e:34:01:37:59:83:cd:0c:b7:5f: 06:dd:5d:14:e5:f6:43:a0:fa:b0:40:c1:ab:6d:9c: 88:a5:0e:45:67:56:60:d0:2c:8d:c0:96:b9:c5:a1: 66:21:7b:b9:51:93:87:96:0b:07:b0:50:e3:24:c7: 48:cd:af:63:e4:68:b7:9a:f0:af:33:ed:7d:a1:0b: 70:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:31:46:D2:86:B5:D8:58:BE:A8:A8:A1:52:23:CC:DD:A3:28:8F:34 X509v3 Authority Key Identifier: keyid:87:5F:40:02:1C:6D:43:B0:4E:FE:89:4A:7F:C1:5C:C4:F6:ED:89:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/A652A68C3DB911EFACDF8C75C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.228.180.0/22 103.47.200.0/22 103.103.176.0/22 103.212.56.0/22 116.206.0.0/22 IPv6: 2404:ff80::/32 Signature Algorithm: sha256WithRSAEncryption a6:01:d1:72:e1:9a:cf:76:22:0c:1b:ff:c0:13:82:b2:26:c8: 91:3f:01:79:36:af:1d:89:5f:c1:7d:b8:d6:a2:df:c0:db:a6: 1e:a6:d9:50:9a:db:6f:92:a6:3e:91:fb:5b:bb:7d:f4:70:d4: e7:16:75:3c:ed:07:7c:94:53:d3:aa:58:33:06:e3:7d:5a:1b: a3:be:53:c3:f8:cb:5b:e2:84:80:49:e7:fc:62:bb:aa:eb:47: 21:a9:fe:bd:f3:be:82:63:f5:17:40:1f:dc:41:c5:0c:05:83: ba:19:d6:12:a3:0e:08:33:e4:b3:73:cb:0b:04:f8:ab:c1:72: c7:58:57:d5:17:14:9f:80:d2:c7:40:21:94:ac:38:db:11:46: 9d:54:e6:90:74:e2:e9:0a:d4:c7:af:c3:e3:72:7c:04:27:f2: fd:7c:a6:c5:ee:a4:03:78:d4:d2:82:a4:e8:58:86:65:f7:07: a9:2f:56:c4:55:0b:2e:db:13:61:d5:93:eb:57:ea:8f:12:7a: f9:1c:52:09:a2:00:ba:54:28:f5:a9:4a:f1:30:2b:16:84:2b: 36:e6:cc:0a:a5:34:22:e1:9a:49:f9:13:e2:09:10:ad:12:43: bd:06:67:cb:62:28:e4:61:7d:8b:63:4b:0a:18:7e:40:9d:2b: 62:85:ff:69 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgICGG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTUxQzkxMTAvBgNVBAUTKDg3NUY0MDAyMUM2RDQzQjA0RUZFODk0QTdGQzE1Q0M0 RjZFRDg5QkEwHhcNMjUwNTA2MTY1NDU1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDNjYy0yMGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJt3VzEeI+KnEQssLBGckMjUJmucBUVbGMHq1WYptezedZbuaHVhNQBCCdvn Q1A4We6fW5nzsQR2cFlDqqnFxUnyPH0omFWXuwqK7bgNyUNO/4Asj5zNgSZAFVML RqFuSIV5MDkcVC6l3e54qiWrTS2KFP6XpMCdTgqu5gn22vaHn2VB+SSXVKsV0akx 4AevGk9ibM9rptN3oHNWLztiOhXep0PlLZcCrtkUGmJr1qrc/G6xs3jjjm40ATdZ g80Mt18G3V0U5fZDoPqwQMGrbZyIpQ5FZ1Zg0CyNwJa5xaFmIXu5UZOHlgsHsFDj JMdIza9j5Gi3mvCvM+19oQtwQwIDAQABo4IChzCCAoMwHQYDVR0OBBYEFBIxRtKG tdhYvqiooVIjzN2jKI80MB8GA1UdIwQYMBaAFIdfQAIcbUOwTv6JSn/BXMT27Ym6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTFDOS9DMzAwQzJDRUM2 RkExMUU3QUFBQkNDMEJDNEY5QUUwMi9oMTlBQWh4dFE3Qk9fb2xLZjhGY3hQYnRp Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gxOUFBaHh0UTdCT19vbEtmOEZjeFBidGliby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTUxQzkvQzMwMEMyQ0VDNkZBMTFFN0FBQUJDQzBCQzRGOUFFMDIvQTY1MkE2OEMz REI5MTFFRkFDREY4Qzc1QzRGOUFFMDIucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAk BAIAATAeAwQCK+S0AwQCZy/IAwQCZ2ewAwQCZ9Q4AwQCdM4AMA0EAgACMAcDBQAk BP+AMA0GCSqGSIb3DQEBCwUAA4IBAQCmAdFy4ZrPdiIMG//AE4KyJsiRPwF5Nq8d iV/BfbjWot/A26YeptlQmttvkqY+kftbu330cNTnFnU87Qd8lFPTqlgzBuN9Whuj vlPD+Mtb4oSASef8Yruq60chqf69876CY/UXQB/cQcUMBYO6GdYSow4IM+Szc8sL BPirwXLHWFfVFxSfgNLHQCGUrDjbEUadVOaQdOLpCtTHr8PjcnwEJ/L9fKbF7qQD eNTSgqToWIZl9wepL1bEVQsu2xNh1ZPrV+qPEnr5HFIJogC6VCj1qUrxMCsWhCs2 5swKpTQi4ZpJ+RPiCRCtEkO9BmfLYijkYX2LY0sKGH5AnStihf9p -----END CERTIFICATE-----Generated at Mon Mar 2 11:34:13 2026 by rpki-client