$ rpki-client -vvf rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/2F9D268C76B211ECABA1A612C4F9AE02.roa File: 2F9D268C76B211ECABA1A612C4F9AE02.roa (raw, json) Hash identifier: uxg1Vz02k9PJduPGV4AMR2b2pATyu+ms5B8uFxBNAz8= Subject key identifier: F2:A2:D6:BF:3D:9B:9F:36:2E:A4:81:0E:3E:C6:9D:38:C5:BC:33:7C Certificate issuer: /CN=A91238EC/serialNumber=04832FBE70C7B8859CA1A0E3E05A296BB09C5D3D Certificate serial: 17D9 Authority key identifier: 04:83:2F:BE:70:C7:B8:85:9C:A1:A0:E3:E0:5A:29:6B:B0:9C:5D:3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIMvvnDHuIWcoaDj4Fopa7CcXT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/2F9D268C76B211ECABA1A612C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:34:58 +0000 ROA not before: Wed 24 Dec 2025 17:14:31 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 58736 IP address blocks: 43.229.208.0/22 maxlen: 24 103.30.188.0/22 maxlen: 24 2401:3580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.crl rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIMvvnDHuIWcoaDj4Fopa7CcXT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6105 (0x17d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91238EC, serialNumber=04832FBE70C7B8859CA1A0E3E05A296BB09C5D3D Validity Not Before: Dec 24 17:14:31 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a44e91-3431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:78:31:45:e6:af:52:e6:57:d4:52:45:19:fe: 58:f4:7b:89:60:1b:10:c8:4d:30:27:84:94:71:0b: f3:62:22:80:c7:db:23:d5:25:a5:55:bd:9d:85:e2: 74:b5:1e:6c:ce:d4:57:bb:1c:2e:e8:42:60:14:71: 03:24:01:95:af:cf:ee:5d:15:f1:48:b8:5c:d5:02: b9:92:c7:0a:ef:03:74:07:6f:ba:59:8c:25:ea:bf: f0:af:94:e9:e8:57:04:37:b6:3a:08:e5:05:f5:10: e4:5b:49:22:9e:f4:88:90:8d:dd:e9:a0:30:5b:51: dd:03:34:fd:8c:c8:4c:a8:18:ce:52:34:1e:70:55: 15:42:4d:65:20:28:8b:72:5d:4f:11:19:53:1f:30: 43:aa:8f:74:7f:f6:90:19:43:46:15:60:56:89:3c: 12:4d:af:9b:51:05:82:03:47:1a:bb:f7:1f:49:15: 36:88:09:2f:13:a2:63:cd:c9:84:1d:9a:0d:9b:9d: 4e:1c:90:2c:aa:d9:ea:4e:df:7a:cb:fb:1c:87:3a: 85:1a:cc:80:83:8d:87:71:7d:90:84:bc:a0:ea:55: b6:0f:b6:b7:5f:28:a1:95:0e:5d:d7:09:ad:8e:1b: 9d:47:47:3d:7a:64:1a:17:fc:ed:c4:23:7c:0c:2b: d5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A2:D6:BF:3D:9B:9F:36:2E:A4:81:0E:3E:C6:9D:38:C5:BC:33:7C X509v3 Authority Key Identifier: keyid:04:83:2F:BE:70:C7:B8:85:9C:A1:A0:E3:E0:5A:29:6B:B0:9C:5D:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIMvvnDHuIWcoaDj4Fopa7CcXT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/2F9D268C76B211ECABA1A612C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.229.208.0/22 103.30.188.0/22 IPv6: 2401:3580::/32 Signature Algorithm: sha256WithRSAEncryption 6b:ed:d5:c8:b3:d7:66:ca:0d:52:e8:c1:41:3e:92:39:17:55: 0e:d2:f0:16:67:79:5d:08:58:89:73:dc:6c:b6:10:be:d3:0c: eb:ad:7d:57:7a:b5:5a:c6:62:65:2e:6e:60:09:45:a9:60:8a: aa:ad:32:6e:a7:f7:3f:d2:2a:d0:bb:ed:e3:f4:0a:7b:5d:df: f6:4f:39:c1:66:74:12:f2:4b:d6:7f:50:41:69:bd:bd:e0:2b: 73:35:72:14:f2:78:85:03:19:9d:ef:90:f6:a6:55:a8:54:f1: 1c:a7:37:9c:42:9a:ca:cc:8f:4c:aa:fc:4a:c1:69:83:0e:38: 47:a5:9f:68:13:37:76:4b:67:d1:0f:d2:15:2d:97:74:11:74: 5d:1b:68:7d:74:28:b8:24:ed:f4:06:46:11:61:12:fe:ac:76: 16:ba:08:4b:48:f6:70:e9:cb:25:27:42:c7:de:b2:79:c7:01: 6d:66:9a:e5:bf:15:cb:cf:e2:ca:d9:80:79:52:84:35:e3:14: 83:1e:4e:7f:dd:8a:0a:bb:85:b1:fe:e8:63:81:48:32:d6:d9: ab:11:28:1b:4f:28:bb:64:a1:4a:83:0f:9d:6e:3c:b5:2e:c4: 1d:e4:48:98:e9:43:ea:6d:b3:83:f9:be:47:17:b7:50:35:35: 5a:9a:90:0e -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICF9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4RUMxMTAvBgNVBAUTKDA0ODMyRkJFNzBDN0I4ODU5Q0ExQTBFM0UwNUEyOTZC QjA5QzVEM0QwHhcNMjUxMjI0MTcxNDMxWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGU5MS0zNDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXgxReavUuZX1FJFGf5Y9HuJYBsQyE0wJ4SUcQvzYiKAx9sj1SWlVb2dheJ0 tR5sztRXuxwu6EJgFHEDJAGVr8/uXRXxSLhc1QK5kscK7wN0B2+6WYwl6r/wr5Tp 6FcEN7Y6COUF9RDkW0kinvSIkI3d6aAwW1HdAzT9jMhMqBjOUjQecFUVQk1lICiL cl1PERlTHzBDqo90f/aQGUNGFWBWiTwSTa+bUQWCA0cau/cfSRU2iAkvE6JjzcmE HZoNm51OHJAsqtnqTt96y/schzqFGsyAg42HcX2QhLyg6lW2D7a3XyihlQ5d1wmt jhudR0c9emQaF/ztxCN8DCvV2wIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFPKi1r89 m582LqSBDj7GnTjFvDN8MB8GA1UdIwQYMBaAFASDL75wx7iFnKGg4+BaKWuwnF09 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzhFQy82MUQ0RjQ4QUUz RTYxMUU3QUYyRjYxNUVDNEY5QUUwMi9CSU12dm5ESHVJV2NvYURqNEZvcGE3Q2NY VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JJTXZ2bkRIdUlXY29hRGo0Rm9wYTdDY1hUMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjM4RUMvNjFENEY0OEFFM0U2MTFFN0FGMkY2MTVFQzRGOUFFMDIvMkY5RDI2OEM3 NkIyMTFFQ0FCQTFBNjEyQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCK+XQAwQCZx68MA0EAgACMAcDBQAkATWAMA0GCSqGSIb3DQEBCwUA A4IBAQBr7dXIs9dmyg1S6MFBPpI5F1UO0vAWZ3ldCFiJc9xsthC+0wzrrX1XerVa xmJlLm5gCUWpYIqqrTJup/c/0irQu+3j9Ap7Xd/2TznBZnQS8kvWf1BBab294Ctz NXIU8niFAxmd75D2plWoVPEcpzecQprKzI9MqvxKwWmDDjhHpZ9oEzd2S2fRD9IV LZd0EXRdG2h9dCi4JO30BkYRYRL+rHYWughLSPZw6cslJ0LH3rJ5xwFtZprlvxXL z+LK2YB5UoQ14xSDHk5/3YoKu4Wx/uhjgUgy1tmrESgbTyi7ZKFKgw+dbjy1LsQd 5EiY6UPqbbOD+b5HF7dQNTVampAO -----END CERTIFICATE-----Generated at Mon Mar 2 12:12:30 2026 by rpki-client