$ rpki-client -vvf rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/7B96F1340C6011F088E6FD2FC4F9AE02.roa File: 7B96F1340C6011F088E6FD2FC4F9AE02.roa (raw, json) Hash identifier: etUn3zlWR2Zw860kX3JarECD9IQFwIx8V6PaqYCHfgs= Subject key identifier: 87:7C:FB:FE:93:6E:66:DF:8B:83:67:BA:64:AD:4B:CC:3A:0B:43:4B Certificate issuer: /CN=A91829E3/serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F Certificate serial: 0CB1 Authority key identifier: 23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/7B96F1340C6011F088E6FD2FC4F9AE02.roa Signing time: Thu 26 Feb 2026 19:15:34 +0000 ROA not before: Thu 26 Feb 2026 19:15:34 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 135076 IP address blocks: 43.245.244.0/22 maxlen: 24 103.208.180.0/22 maxlen: 24 103.240.248.0/22 maxlen: 24 137.59.180.0/22 maxlen: 22 137.59.180.0/23 maxlen: 23 137.59.180.0/24 maxlen: 24 137.59.181.0/24 maxlen: 24 137.59.182.0/23 maxlen: 23 137.59.182.0/24 maxlen: 24 137.59.183.0/24 maxlen: 24 221.120.96.0/21 maxlen: 24 2405:9e80::/32 maxlen: 32 2405:9e80::/36 maxlen: 36 2405:9e80:1000::/36 maxlen: 36 2405:9e80:2000::/36 maxlen: 36 2405:9e80:3000::/36 maxlen: 36 2405:9e80:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 18:44:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3249 (0xcb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91829E3, serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F Validity Not Before: Feb 26 19:15:34 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a09bd6-e3f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a1:a2:ce:c4:ef:6e:72:b2:83:a0:d9:f9:af: b1:fb:8f:1e:79:71:ff:80:91:fc:08:00:24:bd:60: 2a:24:ab:a0:7c:ff:48:06:eb:e7:b2:b2:12:24:ff: c1:4a:b5:02:ee:57:99:67:fa:f5:93:a4:03:2d:99: eb:6d:0a:07:17:2e:ad:7f:0a:24:09:c1:be:33:8e: fb:cb:68:f2:b8:53:9f:32:3c:3c:c4:eb:a6:a0:81: 93:e9:e8:9c:2b:88:8b:3a:78:f2:51:0d:de:a0:3b: b4:f6:b2:32:4b:a1:60:c5:ca:b0:78:5d:15:ad:4a: 12:89:d2:bb:e9:84:75:b0:b8:4f:38:b1:6c:f7:b9: 70:c7:2e:af:90:6a:e4:54:d5:8f:3f:e5:23:70:a8: f0:95:fe:2e:85:dd:ab:e9:9e:35:e4:ba:7f:08:3c: cc:ab:be:2e:4e:c3:a6:3d:cb:53:58:1f:09:1a:6f: e2:a7:b6:1f:d8:00:f6:69:3b:b1:c2:b1:16:59:81: 09:e4:1c:f8:4c:45:f1:20:44:0d:19:6d:48:7a:22: 2d:e9:a9:1e:3a:c4:02:a4:f3:e7:bc:5e:c6:9c:42: 04:5d:87:4c:b5:d8:5f:7e:c2:dc:f6:ba:2c:3a:0a: 27:35:48:5a:b3:12:26:aa:e5:40:0f:a6:8f:ed:94: 9a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7C:FB:FE:93:6E:66:DF:8B:83:67:BA:64:AD:4B:CC:3A:0B:43:4B X509v3 Authority Key Identifier: keyid:23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/7B96F1340C6011F088E6FD2FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.245.244.0/22 103.208.180.0/22 103.240.248.0/22 137.59.180.0/22 221.120.96.0/21 IPv6: 2405:9e80::/32 Signature Algorithm: sha256WithRSAEncryption 04:a3:e1:f4:12:1b:1b:22:8d:d3:2d:58:35:94:6c:fd:05:18: a3:15:ac:1d:26:bc:fe:e4:7b:de:e4:43:62:a3:fe:36:53:4c: f8:b5:20:c1:78:9f:b6:d1:d4:58:11:76:c4:ed:5b:a0:51:0b: 51:1a:5c:4d:84:08:47:ba:de:db:44:0d:a5:83:d0:3c:1d:b2: d0:44:a2:c8:cf:0c:94:6a:36:b2:ef:c7:9f:5b:a1:d6:dd:ff: 25:c6:96:af:17:8f:94:3f:9e:31:70:7b:eb:96:6e:1a:15:16: 4b:81:ee:bf:c6:2c:83:80:92:40:da:35:96:b4:2e:07:b4:9d: b6:ed:79:37:64:8f:b7:ce:65:55:59:78:b8:b2:97:0b:67:6f: 6e:ae:b5:a4:9f:03:c6:d2:b8:68:56:99:67:08:c2:0e:95:71: db:d8:17:e7:1a:94:e7:91:f5:12:40:36:de:69:55:46:c9:7f: 5e:25:21:6c:e1:a2:75:82:5b:21:6e:25:ab:2c:09:9a:93:7f: 99:9d:b1:c2:5e:2a:bb:94:e5:c6:65:d3:4d:d9:79:20:9e:6a: 47:61:d4:e3:4d:a8:79:50:1e:f4:c0:39:ed:41:69:ef:e6:91: 56:79:ad:5b:a2:f8:33:70:f5:58:37:2b:ae:fe:40:0b:35:40: 58:38:45:67 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgICDLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI5RTMxMTAvBgNVBAUTKDIzRDIwREEyMDlDODk1QzMwMEVFNkI2NTlCNkIxODI5 OTI1RkJENEYwHhcNMjYwMjI2MTkxNTM0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OWEwOWJkNi1lM2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqGizsTvbnKyg6DZ+a+x+48eeXH/gJH8CAAkvWAqJKugfP9IBuvnsrISJP/B SrUC7leZZ/r1k6QDLZnrbQoHFy6tfwokCcG+M477y2jyuFOfMjw8xOumoIGT6eic K4iLOnjyUQ3eoDu09rIyS6FgxcqweF0VrUoSidK76YR1sLhPOLFs97lwxy6vkGrk VNWPP+UjcKjwlf4uhd2r6Z415Lp/CDzMq74uTsOmPctTWB8JGm/ip7Yf2AD2aTux wrEWWYEJ5Bz4TEXxIEQNGW1IeiIt6akeOsQCpPPnvF7GnEIEXYdMtdhffsLc9ros OgonNUhasxImquVAD6aP7ZSaPwIDAQABo4IChzCCAoMwHQYDVR0OBBYEFId8+/6T bmbfi4NnumStS8w6C0NLMB8GA1UdIwQYMBaAFCPSDaIJyJXDAO5rZZtrGCmSX71P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjlFMy9DNDVGNjBEQTE0 MzcxMUVBQUNGOUZBMzNDNEY5QUUwMi9JOUlOb2duSWxjTUE3bXRsbTJzWUtaSmZ2 VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k5SU5vZ25JbGNNQTdtdGxtMnNZS1pKZnZVOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODI5RTMvQzQ1RjYwREExNDM3MTFFQUFDRjlGQTMzQzRGOUFFMDIvN0I5NkYxMzQw QzYwMTFGMDg4RTZGRDJGQzRGOUFFMDIucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAk BAIAATAeAwQCK/X0AwQCZ9C0AwQCZ/D4AwQCiTu0AwQD3XhgMA0EAgACMAcDBQAk BZ6AMA0GCSqGSIb3DQEBCwUAA4IBAQAEo+H0EhsbIo3TLVg1lGz9BRijFawdJrz+ 5Hve5ENio/42U0z4tSDBeJ+20dRYEXbE7VugUQtRGlxNhAhHut7bRA2lg9A8HbLQ RKLIzwyUajay78efW6HW3f8lxpavF4+UP54xcHvrlm4aFRZLge6/xiyDgJJA2jWW tC4HtJ227Xk3ZI+3zmVVWXi4spcLZ29urrWknwPG0rhoVplnCMIOlXHb2BfnGpTn kfUSQDbeaVVGyX9eJSFs4aJ1glshbiWrLAmak3+ZnbHCXiq7lOXGZdNN2XkgnmpH YdTjTah5UB70wDntQWnv5pFWea1bovgzcPVYNyuu/kALNUBYOEVn -----END CERTIFICATE-----Generated at Mon Mar 2 00:22:15 2026 by rpki-client