$ rpki-client -vvf rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/E2D5171C2F3211ED958A415DC4F9AE02.roa File: E2D5171C2F3211ED958A415DC4F9AE02.roa (raw, json) Hash identifier: zZKkU5m5jrELsXLPpU2iKiEvYddsb6m7m0BK+ZsPDg0= Subject key identifier: 08:06:C7:5F:3D:1F:BA:5C:73:26:F4:49:76:CB:88:A2:38:AD:CA:19 Certificate issuer: /CN=A91298DA/serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD Certificate serial: 0CA2 Authority key identifier: FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/E2D5171C2F3211ED958A415DC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:25:25 +0000 ROA not before: Fri 30 May 2025 19:14:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141711 IP address blocks: 43.246.224.0/24 maxlen: 24 43.246.225.0/24 maxlen: 24 43.246.226.0/24 maxlen: 24 43.246.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3234 (0xca2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91298DA, serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD Validity Not Before: May 30 19:14:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a48495-fec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f5:91:8c:6b:ef:5b:59:19:12:ca:7c:ce:c9: 4d:da:dd:81:82:ae:f7:59:59:9f:cc:85:bc:58:56: cb:3b:7d:43:6b:81:01:10:05:3e:8b:4e:0a:58:d2: 2b:78:19:8a:a6:46:82:10:59:39:9c:5d:f6:54:9b: 14:b8:08:d3:77:75:83:1d:b4:2b:fb:01:ad:3c:2a: a7:d4:2a:6e:ea:83:06:10:84:ee:21:e5:e5:9b:da: 6b:08:3e:09:8b:ca:44:3f:a6:39:1c:ab:7c:17:27: 6c:db:f5:ba:c8:47:cc:58:f5:67:16:56:ac:5d:8a: e6:2a:81:98:18:47:3d:f2:c2:79:1d:d8:b3:c6:3d: 84:4b:a2:c0:20:bf:b9:66:1f:83:b7:8b:3e:06:ee: da:5b:98:47:4f:2a:e9:52:42:e1:32:00:0d:fe:a0: 2a:9c:75:a0:74:06:98:9d:e0:3d:46:e5:da:fa:b4: f8:d6:84:6c:2f:39:08:d7:0e:3b:c6:c4:c9:f9:6b: 49:59:21:da:df:27:d6:36:5c:d3:04:30:2d:c6:4d: a0:34:9f:3f:fc:96:d9:b8:97:3e:e9:06:57:5f:bf: a7:12:56:10:10:ad:cf:3b:ef:a2:55:a5:46:ce:c8: 07:d1:4f:c6:10:8c:f9:85:01:6d:71:55:3c:96:e8: 71:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:06:C7:5F:3D:1F:BA:5C:73:26:F4:49:76:CB:88:A2:38:AD:CA:19 X509v3 Authority Key Identifier: keyid:FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/E2D5171C2F3211ED958A415DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.246.224.0/22 Signature Algorithm: sha256WithRSAEncryption 45:2d:f3:c7:4d:2d:6e:08:dc:8d:1c:0d:36:e0:7d:aa:3b:1f: 92:bb:59:d8:48:65:28:98:9f:55:ec:e8:7a:e2:11:0b:62:17: df:d7:dc:6c:a3:c2:9a:09:32:f4:43:4f:8c:cf:84:db:1d:58: 53:2d:e5:40:e0:1c:5e:39:56:13:9b:86:d6:db:1d:c7:79:59: 07:84:eb:ee:f9:01:eb:1a:3c:bf:d4:ce:cb:35:c2:87:6a:a0: 8a:8a:5a:a0:83:38:b5:e0:4c:e5:4a:ee:3a:f3:46:ca:02:a2: 33:0c:eb:07:8e:66:57:be:10:90:5e:41:d6:cb:df:5b:13:a4: 63:66:a4:ea:17:5c:de:61:d5:4e:0f:25:6d:cd:90:e2:f5:86: 40:11:83:f9:7d:fe:a5:6e:65:67:67:89:12:72:41:d8:eb:79: 54:37:5e:95:e2:12:8b:66:dd:a1:0a:06:16:cb:fc:d8:c3:5a: d0:81:f3:90:87:47:4f:92:9e:36:58:d9:da:9e:88:b3:5c:1e: f6:2a:ce:59:65:12:54:5c:05:ce:ba:47:1a:9c:88:d0:ad:b4: 8f:ae:98:5f:04:29:b4:7f:bc:cc:2a:47:9b:38:db:84:5d:b0: 5e:a6:b9:40:da:3b:57:ed:e8:01:e8:f8:56:4f:9c:16:1e:38: 71:c9:08:f7 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk4REExMTAvBgNVBAUTKEZDQUEwODYyMjZERjAyQUY4Mzk0RkFCMjJEMUZCOTZF MEI3RDY1REQwHhcNMjUwNTMwMTkxNDEwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODQ5NS1mZWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPWRjGvvW1kZEsp8zslN2t2Bgq73WVmfzIW8WFbLO31Da4EBEAU+i04KWNIr eBmKpkaCEFk5nF32VJsUuAjTd3WDHbQr+wGtPCqn1Cpu6oMGEITuIeXlm9prCD4J i8pEP6Y5HKt8Fyds2/W6yEfMWPVnFlasXYrmKoGYGEc98sJ5Hdizxj2ES6LAIL+5 Zh+Dt4s+Bu7aW5hHTyrpUkLhMgAN/qAqnHWgdAaYneA9RuXa+rT41oRsLzkI1w47 xsTJ+WtJWSHa3yfWNlzTBDAtxk2gNJ8//JbZuJc+6QZXX7+nElYQEK3PO++iVaVG zsgH0U/GEIz5hQFtcVU8luhxJwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAgGx189 H7pccyb0SXbLiKI4rcoZMB8GA1UdIwQYMBaAFPyqCGIm3wKvg5T6si0fuW4LfWXd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOThEQS8zNEYzNjEyRTI2 ODExMUVBOTAzRDcwNThDNEY5QUUwMi9fS29JWWliZkFxLURsUHF5TFItNWJndDla ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19Lb0lZaWJmQXEtRGxQcXlMUi01Ymd0OVpkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjk4REEvMzRGMzYxMkUyNjgxMTFFQTkwM0Q3MDU4QzRGOUFFMDIvRTJENTE3MUMy RjMyMTFFRDk1OEE0MTVEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCK/bgMA0GCSqGSIb3DQEBCwUAA4IBAQBFLfPHTS1uCNyNHA024H2q Ox+Su1nYSGUomJ9V7Oh64hELYhff19xso8KaCTL0Q0+Mz4TbHVhTLeVA4BxeOVYT m4bW2x3HeVkHhOvu+QHrGjy/1M7LNcKHaqCKilqggzi14EzlSu4680bKAqIzDOsH jmZXvhCQXkHWy99bE6RjZqTqF1zeYdVODyVtzZDi9YZAEYP5ff6lbmVnZ4kSckHY 63lUN16V4hKLZt2hCgYWy/zYw1rQgfOQh0dPkp42WNnanoizXB72Ks5ZZRJUXAXO ukcanIjQrbSPrphfBCm0f7zMKkebONuEXbBeprlA2jtX7egB6PhWT5wWHjhxyQj3 -----END CERTIFICATE-----Generated at Mon Mar 2 07:39:47 2026 by rpki-client