$ rpki-client -vvf rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/4EF1DE0E822A11EDB2081A49C4F9AE02.roa File: 4EF1DE0E822A11EDB2081A49C4F9AE02.roa (raw, json) Hash identifier: kuKfhwok7IV2xZV+q15Uru1Qvlc7Ty7LyqYda2rZjaY= Subject key identifier: 01:F1:2D:0B:49:4E:5F:BC:BE:FC:E5:03:7D:E0:6D:81:D8:A5:F9:61 Certificate issuer: /CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Certificate serial: 0E30 Authority key identifier: 1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/4EF1DE0E822A11EDB2081A49C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:27:41 +0000 ROA not before: Tue 06 May 2025 18:27:29 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 134176 IP address blocks: 43.243.170.0/24 maxlen: 24 43.243.171.0/24 maxlen: 24 103.38.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3632 (0xe30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91568F6, serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Validity Not Before: May 6 18:27:29 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a468fd-396a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:08:79:a6:1c:1b:33:37:58:e3:45:27:04:d0: bc:6e:34:30:51:4d:31:54:53:51:8f:97:05:40:6a: 25:2e:59:22:35:6b:66:b0:3a:07:84:4c:7b:72:18: 90:1a:4d:6a:d3:be:af:e6:fc:da:1a:11:1e:8a:a2: b3:cf:d3:90:eb:8a:53:7f:9b:34:bf:ba:b2:07:e8: b8:85:1a:cb:a1:71:03:0e:a2:e6:9f:9f:8f:64:1e: 13:15:3b:95:18:1d:b7:ff:1d:f3:30:05:cc:ae:b5: 45:c4:25:8e:53:f6:5c:5d:63:2f:5d:17:8f:93:9c: 6a:27:9d:64:a7:55:6a:da:76:5c:a7:4c:0c:78:62: ef:73:c1:b5:3b:7d:0a:82:57:24:b2:5b:22:e4:a8: c9:33:5c:3f:a3:b7:af:3c:b5:7a:c9:26:dd:e3:28: ef:5e:87:a3:57:a4:1c:64:2f:af:39:f5:cc:bb:7d: bf:1f:b9:23:2a:d5:f1:14:96:fd:36:04:f1:3f:85: 00:d4:c2:98:d4:61:3f:78:8a:87:df:1b:ce:48:65: 96:39:d1:7d:f6:6f:34:99:40:f2:d6:98:cf:50:98: b1:45:87:99:66:27:ca:bf:e3:ae:dc:90:94:cd:be: e6:e5:31:b2:17:74:b4:2d:3f:e1:ba:73:f3:61:ac: 95:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F1:2D:0B:49:4E:5F:BC:BE:FC:E5:03:7D:E0:6D:81:D8:A5:F9:61 X509v3 Authority Key Identifier: keyid:1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/4EF1DE0E822A11EDB2081A49C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.243.170.0/23 103.38.254.0/24 Signature Algorithm: sha256WithRSAEncryption 36:60:f9:02:64:7b:90:4d:af:77:65:60:e4:78:4c:a4:ad:ae: 7d:68:01:3b:10:50:b4:ef:aa:a8:2f:50:c0:27:ad:04:ca:32: f2:56:69:79:47:86:6d:ad:68:4b:9a:df:f0:04:32:89:5a:2d: fd:00:0d:f6:97:cb:8f:59:42:cb:15:28:cb:50:d1:e3:3a:d6: f2:a9:56:57:79:b9:10:92:24:cf:2d:ae:db:c2:6d:18:74:b6: 95:cb:31:a2:c8:30:88:82:f7:07:40:ec:e9:4b:a9:8a:3f:5b: ee:26:12:75:45:31:2a:69:f0:75:59:da:66:52:3d:af:ce:70: 81:f7:11:00:c7:96:bd:24:95:5d:29:23:c9:1b:c7:ef:24:24: d4:c5:9f:c0:0f:a7:e3:c1:b0:6b:fc:6b:c0:c9:8b:dd:b8:3e: f1:a0:2b:a7:a3:db:26:1e:9d:f0:f3:06:0b:61:b9:ee:ae:a7: 23:bb:43:cb:a2:78:30:aa:cc:27:dd:b8:4e:d8:01:8a:bc:8d: e6:3c:f3:b1:e7:8c:13:b4:98:3f:be:0c:70:5a:31:92:c2:85: ae:0c:ee:21:da:6b:ca:e9:ad:06:b4:c7:97:30:1a:a0:c3:77: c4:4f:8a:ef:7a:a3:36:b6:0c:58:a6:35:50:81:45:87:96:6a: 2a:9f:3f:da -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICDjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY4RjYxMTAvBgNVBAUTKDFFMzI5RTk4RjY3NjkyRTlCNTc2MDIzQTJGQkM1NTdE NTdERDU1NkMwHhcNMjUwNTA2MTgyNzI5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjhmZC0zOTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAh5phwbMzdY40UnBNC8bjQwUU0xVFNRj5cFQGolLlkiNWtmsDoHhEx7chiQ Gk1q076v5vzaGhEeiqKzz9OQ64pTf5s0v7qyB+i4hRrLoXEDDqLmn5+PZB4TFTuV GB23/x3zMAXMrrVFxCWOU/ZcXWMvXRePk5xqJ51kp1Vq2nZcp0wMeGLvc8G1O30K glckslsi5KjJM1w/o7evPLV6ySbd4yjvXoejV6QcZC+vOfXMu32/H7kjKtXxFJb9 NgTxP4UA1MKY1GE/eIqH3xvOSGWWOdF99m80mUDy1pjPUJixRYeZZifKv+Ou3JCU zb7m5TGyF3S0LT/hunPzYayVtQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFAHxLQtJ Tl+8vvzlA33gbYHYpflhMB8GA1UdIwQYMBaAFB4ynpj2dpLptXYCOi+8VX1X3VVs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjhGNi8zN0QwM0RGNkNF MjgxMUU5QTZCNkMxN0JDNEY5QUUwMi9IaktlbVBaMmt1bTFkZ0k2TDd4VmZWZmRW V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hqS2VtUFoya3VtMWRnSTZMN3hWZlZmZFZXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTY4RjYvMzdEMDNERjZDRTI4MTFFOUE2QjZDMTdCQzRGOUFFMDIvNEVGMURFMEU4 MjJBMTFFREIyMDgxQTQ5QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBK/OqAwQAZyb+MA0GCSqGSIb3DQEBCwUAA4IBAQA2YPkCZHuQTa93 ZWDkeEykra59aAE7EFC076qoL1DAJ60EyjLyVml5R4ZtrWhLmt/wBDKJWi39AA32 l8uPWULLFSjLUNHjOtbyqVZXebkQkiTPLa7bwm0YdLaVyzGiyDCIgvcHQOzpS6mK P1vuJhJ1RTEqafB1WdpmUj2vznCB9xEAx5a9JJVdKSPJG8fvJCTUxZ/AD6fjwbBr /GvAyYvduD7xoCuno9smHp3w8wYLYbnurqcju0PLongwqswn3bhO2AGKvI3mPPOx 54wTtJg/vgxwWjGSwoWuDO4h2mvK6a0GtMeXMBqgw3fET4rveqM2tgxYpjVQgUWH lmoqnz/a -----END CERTIFICATE-----Generated at Mon Mar 2 07:43:08 2026 by rpki-client