$ rpki-client -vvf rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/E4FA38362D2311F1A198B1F8B7833773.roa File: E4FA38362D2311F1A198B1F8B7833773.roa (raw, json) Hash identifier: XioPrFVJE9iRgMu/wpEb87MQIymypqkVs8XZL4sAu4o= Subject key identifier: 42:AB:5A:CC:F4:BC:B5:CF:DA:EC:71:EA:7E:6A:DC:66:7B:6E:78:AD Certificate issuer: /CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Certificate serial: 08B4 Authority key identifier: D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/E4FA38362D2311F1A198B1F8B7833773.roa Signing time: Tue 31 Mar 2026 17:06:01 +0000 ROA not before: Tue 31 Mar 2026 17:06:01 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 133731 IP address blocks: 43.240.12.0/22 maxlen: 24 103.39.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:38:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2228 (0x8b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91397C2, serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Validity Not Before: Mar 31 17:06:01 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69cbfef9-70bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8f:3b:78:57:9e:aa:38:e8:fb:96:c8:66:80: a4:fe:71:e3:cd:6c:85:e6:fd:23:6d:0d:f5:ed:13: ac:00:02:b9:3f:c3:00:ea:94:63:d3:39:64:0b:aa: de:c3:5e:46:c6:b7:bc:63:c9:08:9c:79:2d:31:c5: be:c7:fd:3d:0c:66:49:24:99:61:a1:55:e2:6e:a2: cc:9f:04:5a:6a:2f:07:64:b9:cb:c6:36:2f:ca:f1: 2a:1c:29:36:26:ea:05:fd:43:c2:a9:2b:90:f2:6a: a8:42:d5:9f:32:d2:27:a7:0c:5c:0f:72:ae:93:e3: c9:34:9c:98:f3:ac:be:f2:5e:86:51:0b:29:54:4d: c9:1c:aa:ae:c5:9b:68:5e:b5:18:93:0d:ee:af:14: ed:f9:44:55:45:9c:68:e6:41:4c:15:fe:83:9e:f9: f8:e6:3e:92:27:84:76:bc:52:47:c9:7a:28:02:da: 8c:c0:65:09:46:6b:a3:87:30:08:d6:fe:8a:de:fa: 1d:99:a7:1b:66:f9:3b:43:99:3a:a5:95:5c:bb:22: 03:b4:ea:b2:b9:53:38:e1:31:be:04:49:d7:ae:e5: 2a:0a:32:b8:36:06:92:61:05:cc:d9:32:4b:ec:38: 44:e5:60:00:71:3d:c3:2e:31:e9:a0:88:db:c6:ae: 92:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AB:5A:CC:F4:BC:B5:CF:DA:EC:71:EA:7E:6A:DC:66:7B:6E:78:AD X509v3 Authority Key Identifier: keyid:D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/E4FA38362D2311F1A198B1F8B7833773.roa sbgp-ipAddrBlock: critical IPv4: 43.240.12.0/22 103.39.108.0/22 Signature Algorithm: sha256WithRSAEncryption 43:7e:ec:ba:ee:e0:d3:61:c8:cc:81:a9:95:9e:b6:95:6e:98: 79:4e:59:e6:c5:0e:38:81:da:4b:0a:21:d8:5e:40:6f:1b:60: af:34:3c:78:32:a1:c8:66:65:6a:ec:1a:c7:82:67:e6:f9:bb: 5e:3b:7a:93:4d:90:7a:43:30:e9:7b:23:84:c3:69:3d:38:5d: 94:16:26:15:16:d9:3e:46:36:15:35:23:fb:41:81:8a:ff:0d: b3:93:2d:ca:04:0a:f1:66:eb:e9:82:98:b8:07:de:02:0c:8d: c4:a7:cb:ba:4c:ca:87:d0:35:dd:65:19:65:00:50:87:69:e5: ee:b2:95:ed:37:7c:df:0a:10:01:59:6d:c7:7f:23:58:df:44: 72:5d:bd:32:1a:72:72:12:6b:a8:96:9a:3a:c1:7c:7f:a1:0f: 86:51:3d:01:eb:9d:fc:56:22:71:83:6c:a1:dd:9e:8f:d3:0d: 5e:67:b7:e0:9a:3e:c6:d5:f0:27:0d:b2:4a:d7:80:5e:3d:98: da:af:5d:68:4f:62:81:b8:30:df:90:59:de:58:95:81:3b:b0: 75:96:23:e5:8e:8b:e4:f5:cc:a8:d1:3e:82:38:c2:97:c2:75: 2a:c7:70:40:4c:09:6b:06:e0:b7:d4:0c:47:ff:35:4d:52:50: 0b:c8:06:ed -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk3QzIxMTAvBgNVBAUTKEQzRDE1QUVFOUE0RjhBRTVDMjgxMTA4QTdEMkQzQUQ4 MUQ0RTc5Q0QwHhcNMjYwMzMxMTcwNjAxWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWNiZmVmOS03MGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1I87eFeeqjjo+5bIZoCk/nHjzWyF5v0jbQ317ROsAAK5P8MA6pRj0zlkC6re w15Gxre8Y8kInHktMcW+x/09DGZJJJlhoVXibqLMnwRaai8HZLnLxjYvyvEqHCk2 JuoF/UPCqSuQ8mqoQtWfMtInpwxcD3Kuk+PJNJyY86y+8l6GUQspVE3JHKquxZto XrUYkw3urxTt+URVRZxo5kFMFf6Dnvn45j6SJ4R2vFJHyXooAtqMwGUJRmujhzAI 1v6K3vodmacbZvk7Q5k6pZVcuyIDtOqyuVM44TG+BEnXruUqCjK4NgaSYQXM2TJL 7DhE5WAAcT3DLjHpoIjbxq6S+wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFEKrWsz0 vLXP2uxx6n5q3GZ7bnitMB8GA1UdIwQYMBaAFNPRWu6aT4rlwoEQin0tOtgdTnnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTdDMi80RTQyNkRFOEZC RUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1WENnUkNLZlMwNjJCMU9l YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5RmE3cHBQaXVYQ2dSQ0tmUzA2MkIxT2VjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mzk3QzIvNEU0MjZERThGQkVBMTFFQTk0MEExRDE5QzRGOUFFMDIvRTRGQTM4MzYy RDIzMTFGMUExOThCMUY4Qjc4MzM3NzMucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK/AMAwQCZydsMA0GCSqGSIb3DQEBCwUAA4IBAQBDfuy67uDTYcjM gamVnraVbph5TlnmxQ44gdpLCiHYXkBvG2CvNDx4MqHIZmVq7BrHgmfm+bteO3qT TZB6QzDpeyOEw2k9OF2UFiYVFtk+RjYVNSP7QYGK/w2zky3KBArxZuvpgpi4B94C DI3Ep8u6TMqH0DXdZRllAFCHaeXuspXtN3zfChABWW3HfyNY30RyXb0yGnJyEmuo lpo6wXx/oQ+GUT0B6538ViJxg2yh3Z6P0w1eZ7fgmj7G1fAnDbJK14BePZjar11o T2KBuDDfkFneWJWBO7B1liPljovk9cyo0T6COMKXwnUqx3BATAlrBuC31AxH/zVN UlALyAbt -----END CERTIFICATE-----Generated at Fri Apr 17 19:09:37 2026 by rpki-client