$ rpki-client -vvf rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/16C56390B6FF11F096DEAA71C4F9AE02.roa File: 16C56390B6FF11F096DEAA71C4F9AE02.roa (raw, json) Hash identifier: /XLi+JoFopcNaQS+dz0I9QQbByJLgyqvV+UDc3RM9XQ= Subject key identifier: AB:AA:B2:14:05:7B:8D:43:A2:0A:DB:40:55:04:B4:3C:C6:5B:AA:79 Certificate issuer: /CN=A91298DA/serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD Certificate serial: 0CA3 Authority key identifier: FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/16C56390B6FF11F096DEAA71C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:25:26 +0000 ROA not before: Sat 01 Nov 2025 08:45:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 140900 IP address blocks: 43.230.92.0/24 maxlen: 24 43.230.93.0/24 maxlen: 24 43.230.94.0/24 maxlen: 24 43.230.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3235 (0xca3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91298DA, serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD Validity Not Before: Nov 1 08:45:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a48496-881a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:00:39:6d:83:69:76:d9:5d:5c:17:ed:ea:36: c5:86:db:a4:11:88:9f:13:a6:0d:25:e5:1e:d2:f0: fe:60:b1:89:ce:df:d5:1f:93:b2:cd:e8:3e:5b:28: aa:f6:93:42:4f:ab:e7:e5:eb:12:a6:6b:2d:57:92: 76:24:f7:fb:6d:ca:2f:ec:7b:95:6a:b1:57:b9:33: 3b:64:a7:d7:0c:66:00:87:89:d2:11:4a:56:d7:e7: 66:5a:59:ac:65:d0:d3:28:60:35:00:5e:8a:2b:e4: fa:0f:e8:73:97:4a:b8:27:5b:c4:8f:34:3c:0c:31: f8:2c:1a:c9:ee:71:46:68:c3:80:91:8a:ed:93:46: 28:37:a9:07:50:85:e8:c1:91:26:cf:96:73:ab:ec: 6c:2b:92:4d:67:bb:d4:9f:36:a2:33:f3:93:31:78: 4a:b7:12:9a:a3:56:f1:4d:a8:4d:9d:2b:df:10:37: f1:02:13:f2:26:f4:b3:fb:7e:3e:83:7d:9b:83:ea: 93:4e:5f:17:08:ca:31:26:ad:20:7b:05:da:58:d4: 17:eb:d3:c2:97:84:61:14:25:78:78:0f:9a:c5:61: 41:a3:53:19:a6:ea:a1:56:40:fd:85:0c:35:07:25: 94:8f:f2:fd:b6:31:3d:34:f3:6a:48:cb:8f:a2:1c: c7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:AA:B2:14:05:7B:8D:43:A2:0A:DB:40:55:04:B4:3C:C6:5B:AA:79 X509v3 Authority Key Identifier: keyid:FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/16C56390B6FF11F096DEAA71C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.230.92.0/22 Signature Algorithm: sha256WithRSAEncryption 03:65:a4:7c:01:6b:08:42:99:16:35:f1:96:b7:0c:66:9f:27: ae:09:cb:9d:fe:2b:aa:2b:f4:c3:57:49:f7:4e:02:54:0c:e1: a8:5e:00:e7:91:35:e9:4a:a7:dc:1d:75:bd:1a:56:43:bd:d7: f1:42:cf:4c:c0:b2:3d:e3:da:a8:2d:4b:6e:04:65:ab:82:cb: 7d:c4:a8:e4:a8:ad:7e:1b:5e:6e:e2:68:28:4b:42:e6:96:ec: 51:ad:35:71:a7:e1:b8:9c:b2:98:cd:cc:86:91:94:97:39:3f: 62:0a:bb:84:56:bb:30:fb:10:20:f3:e7:e9:17:7b:5d:58:94: c0:25:a6:fc:8f:6a:9b:ad:fc:7c:ff:1b:c2:db:e9:f6:f4:ca: da:d2:0e:f1:6e:0d:3a:91:7a:75:11:2c:b7:2e:4b:d5:1f:50: b4:52:97:d5:8e:d1:58:c7:ca:16:68:fe:79:15:fb:cb:19:b1: 1f:79:ef:c8:1a:30:8a:40:20:ad:ce:2c:f4:5a:db:68:98:8b: 07:6a:d3:9a:41:44:23:a1:4f:8f:42:4a:18:53:53:03:b0:58: c6:87:3f:b6:4b:94:86:c3:16:f2:47:f0:66:62:89:26:1b:a9: 02:b5:4a:5e:60:70:b2:10:44:55:af:58:fa:86:35:db:08:ef: 40:2b:9b:e9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk4REExMTAvBgNVBAUTKEZDQUEwODYyMjZERjAyQUY4Mzk0RkFCMjJEMUZCOTZF MEI3RDY1REQwHhcNMjUxMTAxMDg0NTE2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODQ5Ni04ODFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQA5bYNpdtldXBft6jbFhtukEYifE6YNJeUe0vD+YLGJzt/VH5Oyzeg+Wyiq 9pNCT6vn5esSpmstV5J2JPf7bcov7HuVarFXuTM7ZKfXDGYAh4nSEUpW1+dmWlms ZdDTKGA1AF6KK+T6D+hzl0q4J1vEjzQ8DDH4LBrJ7nFGaMOAkYrtk0YoN6kHUIXo wZEmz5Zzq+xsK5JNZ7vUnzaiM/OTMXhKtxKao1bxTahNnSvfEDfxAhPyJvSz+34+ g32bg+qTTl8XCMoxJq0gewXaWNQX69PCl4RhFCV4eA+axWFBo1MZpuqhVkD9hQw1 ByWUj/L9tjE9NPNqSMuPohzHpwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKuqshQF e41DogrbQFUEtDzGW6p5MB8GA1UdIwQYMBaAFPyqCGIm3wKvg5T6si0fuW4LfWXd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOThEQS8zNEYzNjEyRTI2 ODExMUVBOTAzRDcwNThDNEY5QUUwMi9fS29JWWliZkFxLURsUHF5TFItNWJndDla ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19Lb0lZaWJmQXEtRGxQcXlMUi01Ymd0OVpkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjk4REEvMzRGMzYxMkUyNjgxMTFFQTkwM0Q3MDU4QzRGOUFFMDIvMTZDNTYzOTBC NkZGMTFGMDk2REVBQTcxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCK+ZcMA0GCSqGSIb3DQEBCwUAA4IBAQADZaR8AWsIQpkWNfGWtwxm nyeuCcud/iuqK/TDV0n3TgJUDOGoXgDnkTXpSqfcHXW9GlZDvdfxQs9MwLI949qo LUtuBGWrgst9xKjkqK1+G15u4mgoS0LmluxRrTVxp+G4nLKYzcyGkZSXOT9iCruE Vrsw+xAg8+fpF3tdWJTAJab8j2qbrfx8/xvC2+n29Mra0g7xbg06kXp1ESy3LkvV H1C0UpfVjtFYx8oWaP55FfvLGbEfee/IGjCKQCCtziz0WttomIsHatOaQUQjoU+P QkoYU1MDsFjGhz+2S5SGwxbyR/BmYokmG6kCtUpeYHCyEERVr1j6hjXbCO9AK5vp -----END CERTIFICATE-----Generated at Mon Mar 2 14:09:20 2026 by rpki-client