$ rpki-client -vvf rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/4A2FDB94DA3F11F0A550B47F8ED3641D.roa File: 4A2FDB94DA3F11F0A550B47F8ED3641D.roa (raw, json) Hash identifier: L00xAVyMdi4yq57cuojf8StF3IqtNwJ5mRR+k9KIHc4= Subject key identifier: B9:2A:51:2A:41:01:EC:99:0A:78:37:24:19:17:41:26:B1:D7:15:38 Certificate issuer: /CN=A91471A0/serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD Certificate serial: 31 Authority key identifier: DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/4A2FDB94DA3F11F0A550B47F8ED3641D.roa Signing time: Sun 01 Mar 2026 05:55:09 +0000 ROA not before: Tue 03 Feb 2026 08:26:13 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 152194 IP address blocks: 43.226.20.0/24 maxlen: 24 43.226.21.0/24 maxlen: 24 43.226.23.0/24 maxlen: 24 103.45.68.0/24 maxlen: 24 103.45.69.0/24 maxlen: 24 103.45.70.0/24 maxlen: 24 103.45.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91471A0, serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD Validity Not Before: Feb 3 08:26:13 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a3d4bd-6181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2a:8f:81:43:c6:b5:57:92:0f:e3:d0:59:15: 54:72:34:48:ab:33:30:35:87:de:0c:28:44:f4:c9: 51:b8:91:1d:92:7d:7d:87:dd:8c:0d:6c:79:a9:ad: 3b:08:6c:e4:0f:d8:e5:d9:de:e7:45:5d:33:73:5b: 11:55:3f:76:01:6a:9a:a4:a7:b1:dd:4d:8b:7e:07: 0a:25:75:17:a8:68:ff:dd:f9:e5:c6:ab:f8:82:ad: 99:71:90:11:b5:60:6a:89:b6:15:fd:53:f4:4b:57: 79:c7:ae:d5:60:1d:55:f8:7e:85:45:d9:49:95:31: 03:df:db:81:a2:2c:fd:32:a1:de:7d:61:a7:45:71: 18:1e:2e:6d:12:c8:bc:dd:5d:fb:9b:f6:ae:ce:1a: b2:5c:6d:c6:1d:75:8b:be:c3:76:ca:d5:5e:01:5f: 08:43:46:14:d4:b8:b9:89:7e:1d:b3:a8:94:e1:92: d5:a1:84:f6:5f:df:da:53:28:18:27:45:1e:8b:0f: 25:ec:2d:07:55:d7:12:a8:d3:1d:d7:11:ed:53:de: bc:da:73:85:9f:f7:bc:56:39:5c:f9:20:06:0d:59: 25:73:cd:68:84:4c:4b:a7:4f:a6:5e:5e:bf:30:a3: 67:d0:f9:bd:d0:a9:76:a2:9b:2c:1f:5f:24:63:4a: b2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:2A:51:2A:41:01:EC:99:0A:78:37:24:19:17:41:26:B1:D7:15:38 X509v3 Authority Key Identifier: keyid:DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/4A2FDB94DA3F11F0A550B47F8ED3641D.roa sbgp-ipAddrBlock: critical IPv4: 43.226.20.0/23 43.226.23.0/24 103.45.68.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:b2:0c:ee:ed:5d:3b:b4:51:8c:9b:21:59:0a:30:27:c2:13: b4:f0:04:5d:1e:13:9e:c9:80:19:78:50:b6:32:33:44:1f:7b: a1:2e:64:f0:0d:06:ee:89:bf:17:a6:78:d7:2f:ef:81:96:85: 65:23:76:d4:e9:17:a6:81:cb:41:fb:1d:6a:c1:93:54:b2:16: 85:98:0b:01:62:89:f2:39:69:1b:bf:01:8c:22:91:12:9c:b8: 09:3c:c9:c9:e8:ea:b0:19:0d:a5:d9:fb:fa:4f:c1:c5:2b:88: 22:c5:24:88:50:24:cc:89:e0:ff:f3:3a:a8:7a:b9:89:d3:97: ee:b0:2c:fd:6b:0d:48:bb:7a:62:12:c4:b0:44:e9:9d:2e:f1: 92:97:d9:3a:9b:51:04:fb:ce:28:56:d5:0a:19:97:b2:d7:1c: 54:21:21:43:bc:b7:1c:25:36:cb:2a:11:0a:ff:1f:42:4e:74: c5:46:be:92:fe:a2:bf:b7:6d:73:14:15:59:97:3a:d8:34:f5: d4:23:58:f8:5d:79:d3:9e:67:18:b6:d9:50:79:10:98:57:2d: 5c:26:a4:d0:66:57:e7:79:9c:a2:7c:d9:c4:ce:af:a4:1c:cb: 7b:7f:56:49:c1:4c:a2:56:df:ed:21:6b:c4:91:7f:bc:71:03: 0e:85:1e:31 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzFBMDExMC8GA1UEBRMoREU4QzExNjU1MTA0MkJFOEU3MjY0QkVEQjU4MkYwQTM3 N0JCMjRCRDAeFw0yNjAyMDMwODI2MTNaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkNGJkLTYxODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdKo+BQ8a1V5IP49BZFVRyNEirMzA1h94MKET0yVG4kR2SfX2H3YwNbHmprTsI bOQP2OXZ3udFXTNzWxFVP3YBapqkp7HdTYt+BwoldReoaP/d+eXGq/iCrZlxkBG1 YGqJthX9U/RLV3nHrtVgHVX4foVF2UmVMQPf24GiLP0yod59YadFcRgeLm0SyLzd Xfub9q7OGrJcbcYddYu+w3bK1V4BXwhDRhTUuLmJfh2zqJThktWhhPZf39pTKBgn RR6LDyXsLQdV1xKo0x3XEe1T3rzac4Wf97xWOVz5IAYNWSVzzWiETEunT6ZeXr8w o2fQ+b3QqXaimywfXyRjSrKNAgMBAAGjggJsMIICaDAdBgNVHQ4EFgQUuSpRKkEB 7JkKeDckGRdBJrHXFTgwHwYDVR0jBBgwFoAU3owRZVEEK+jnJkvttYLwo3e7JL0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MUEwL0Q2OTk0REU2REEz RTExRjA4MUY1QTQ1NzhFRDM2NDFELzNvd1JaVkVFSy1qbkprdnR0WUx3bzNlN0pM MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM293UlpWRUVLLWpuSmt2dHRZTHdvM2U3SkwwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzFBMC9ENjk5NERFNkRBM0UxMUYwODFGNUE0NTc4RUQzNjQxRC80QTJGREI5NERB M0YxMUYwQTU1MEI0N0Y4RUQzNjQxRC5yb2EwKwYIKwYBBQUHAQcBAf8EHDAaMBgE AgABMBIDBAEr4hQDBAAr4hcDBAJnLUQwDQYJKoZIhvcNAQELBQADggEBACqyDO7t XTu0UYybIVkKMCfCE7TwBF0eE57JgBl4ULYyM0Qfe6EuZPANBu6JvxemeNcv74GW hWUjdtTpF6aBy0H7HWrBk1SyFoWYCwFiifI5aRu/AYwikRKcuAk8ycno6rAZDaXZ +/pPwcUriCLFJIhQJMyJ4P/zOqh6uYnTl+6wLP1rDUi7emISxLBE6Z0u8ZKX2Tqb UQT7zihW1QoZl7LXHFQhIUO8txwlNssqEQr/H0JOdMVGvpL+or+3bXMUFVmXOtg0 9dQjWPhdedOeZxi22VB5EJhXLVwmpNBmV+d5nKJ82cTOr6Qcy3t/VknBTKJW3+0h a8SRf7xxAw6FHjE= -----END CERTIFICATE-----Generated at Mon Mar 2 06:32:13 2026 by rpki-client