$ rpki-client -vvf rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/29BC840E002711EB8FA6A142C4F9AE02.roa File: 29BC840E002711EB8FA6A142C4F9AE02.roa (raw, json) Hash identifier: exHqTstkURQu3VvXhhXKw9Xn1SBFnETfF6G5C83h/GI= Subject key identifier: 1B:2E:3F:53:9C:40:3D:5E:71:14:3B:5F:63:25:A4:34:5A:78:B9:1F Certificate issuer: /CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Certificate serial: 0891 Authority key identifier: D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/29BC840E002711EB8FA6A142C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:35:38 +0000 ROA not before: Mon 24 Mar 2025 21:31:44 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 134176 IP address blocks: 43.240.14.0/24 maxlen: 24 103.51.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:19:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2193 (0x891) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91397C2, serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Validity Not Before: Mar 24 21:31:44 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a478ea-dfc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9e:52:cd:d3:50:6b:f9:58:11:d9:eb:d7:5a: 1b:bd:76:10:15:90:ec:f1:a3:a5:4c:f7:3e:99:99: 49:95:40:d2:b0:27:d7:cd:f9:27:bf:8c:0c:f5:ac: c6:c7:a6:ec:ab:90:63:ce:d3:3e:ba:9b:0c:6b:a6: 79:ab:8a:c3:4a:9b:4f:d0:2a:31:c9:1c:ad:3e:db: b3:b6:e9:6d:c3:d4:89:20:80:ef:8c:cd:5f:b1:9c: b6:8a:30:25:9f:b3:71:7f:4a:35:9d:6e:51:1b:01: 27:a9:ed:d4:3a:93:30:d8:d1:50:d0:08:7a:20:6e: a4:86:92:1a:ed:7d:aa:84:80:67:38:95:de:a2:14: ee:ee:cb:b3:df:2a:7f:00:c4:d6:75:7f:ac:8b:bf: ce:5c:78:be:2a:ad:97:34:fe:8b:96:47:ca:1b:e5: f2:71:3e:ef:92:55:e3:93:a5:3b:29:7e:8a:8c:0e: f6:80:8a:fd:ff:6d:f3:ef:56:9a:2f:11:6c:5e:f9: 1e:c6:74:ae:52:61:fc:76:29:26:fc:ec:31:cd:1b: a2:9f:38:a7:07:87:33:cf:a0:7d:99:dd:8e:bb:e8: e1:29:59:4a:82:9c:05:1c:0d:54:95:1a:0b:5a:15: a1:31:22:d2:2e:f0:d2:07:33:f5:08:ae:f2:2a:ad: 71:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2E:3F:53:9C:40:3D:5E:71:14:3B:5F:63:25:A4:34:5A:78:B9:1F X509v3 Authority Key Identifier: keyid:D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/29BC840E002711EB8FA6A142C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.240.14.0/24 103.51.146.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:51:5d:44:85:2b:fa:ea:12:4f:8a:52:ed:75:62:f6:68:51: 98:4d:3a:b2:01:23:c0:47:b8:33:02:ae:1f:40:4d:81:68:fe: 9d:5f:7d:b4:54:25:f7:38:de:6d:d5:6c:90:08:6e:5a:7e:eb: 87:24:eb:13:73:a3:81:ca:54:88:f9:a1:23:9e:30:e0:09:e2: 87:72:54:b7:03:15:4b:f6:ee:ff:e6:e3:09:81:e6:ae:ca:94: 5b:cd:d8:7f:b8:da:76:39:28:45:19:1f:44:dc:b1:96:03:20: d1:bc:69:0f:d3:0d:16:1f:7f:2c:1e:52:79:39:b2:61:a1:5e: cf:bf:df:93:04:74:b6:f4:07:19:82:9c:9d:b8:2a:0a:fa:ab: 63:ce:00:01:5c:8b:26:d5:78:2d:54:c8:88:7c:00:76:0b:51: 94:82:0e:22:9c:27:3e:ca:6d:0b:80:1e:56:cf:86:8f:5a:9b: 5d:3b:ba:eb:e2:fd:1f:9d:eb:f0:b6:be:1b:6b:18:31:b7:65: d6:c0:26:c1:ac:32:9a:df:d5:d1:14:20:28:49:bc:c4:0e:90: 19:19:71:f9:09:eb:79:53:d5:d5:cc:b5:57:de:a7:fd:2d:b6: 9d:f2:5a:bd:e5:9b:21:eb:8a:3d:3d:0c:cb:fe:b7:41:b7:4c: f4:57:6b:59 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk3QzIxMTAvBgNVBAUTKEQzRDE1QUVFOUE0RjhBRTVDMjgxMTA4QTdEMkQzQUQ4 MUQ0RTc5Q0QwHhcNMjUwMzI0MjEzMTQ0WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzhlYS1kZmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy55SzdNQa/lYEdnr11obvXYQFZDs8aOlTPc+mZlJlUDSsCfXzfknv4wM9azG x6bsq5BjztM+upsMa6Z5q4rDSptP0CoxyRytPtuztultw9SJIIDvjM1fsZy2ijAl n7Nxf0o1nW5RGwEnqe3UOpMw2NFQ0Ah6IG6khpIa7X2qhIBnOJXeohTu7suz3yp/ AMTWdX+si7/OXHi+Kq2XNP6LlkfKG+XycT7vklXjk6U7KX6KjA72gIr9/23z71aa LxFsXvkexnSuUmH8dikm/OwxzRuinzinB4czz6B9md2Ou+jhKVlKgpwFHA1UlRoL WhWhMSLSLvDSBzP1CK7yKq1x7QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFBsuP1Oc QD1ecRQ7X2MlpDRaeLkfMB8GA1UdIwQYMBaAFNPRWu6aT4rlwoEQin0tOtgdTnnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTdDMi80RTQyNkRFOEZC RUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1WENnUkNLZlMwNjJCMU9l YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5RmE3cHBQaXVYQ2dSQ0tmUzA2MkIxT2VjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mzk3QzIvNEU0MjZERThGQkVBMTFFQTk0MEExRDE5QzRGOUFFMDIvMjlCQzg0MEUw MDI3MTFFQjhGQTZBMTQyQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAK/AOAwQAZzOSMA0GCSqGSIb3DQEBCwUAA4IBAQAfUV1EhSv66hJP ilLtdWL2aFGYTTqyASPAR7gzAq4fQE2BaP6dX320VCX3ON5t1WyQCG5afuuHJOsT c6OBylSI+aEjnjDgCeKHclS3AxVL9u7/5uMJgeauypRbzdh/uNp2OShFGR9E3LGW AyDRvGkP0w0WH38sHlJ5ObJhoV7Pv9+TBHS29AcZgpyduCoK+qtjzgABXIsm1Xgt VMiIfAB2C1GUgg4inCc+ym0LgB5Wz4aPWptdO7rr4v0fnevwtr4baxgxt2XWwCbB rDKa39XRFCAoSbzEDpAZGXH5Cet5U9XVzLVX3qf9Lbad8lq95Zsh64o9PQzL/rdB t0z0V2tZ -----END CERTIFICATE-----Generated at Mon Mar 2 13:55:18 2026 by rpki-client