$ rpki-client -vvf rpki.apnic.net/member_repository/A91843C3/7928DCDCD90B11F0A47591C87CD3641D/3D9726E6D90C11F0BF8A78EF7CD3641D.roa File: 3D9726E6D90C11F0BF8A78EF7CD3641D.roa (raw, json) Hash identifier: HVoJUMJALp2b44yiBiWY0p6zIczWziuPIhvMQ6tAzpY= Subject key identifier: 5B:35:BC:B0:C0:C5:6C:6C:EB:14:79:E6:EA:06:99:A9:C7:39:1A:88 Certificate issuer: /CN=A91843C3/serialNumber=BAFA22FFB8E9B22592955C299A9B19CB4EACFA6E Certificate serial: 2A Authority key identifier: BA:FA:22:FF:B8:E9:B2:25:92:95:5C:29:9A:9B:19:CB:4E:AC:FA:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvoi_7jpsiWSlVwpmpsZy06s-m4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91843C3/7928DCDCD90B11F0A47591C87CD3641D/3D9726E6D90C11F0BF8A78EF7CD3641D.roa Signing time: Sun 01 Mar 2026 05:51:52 +0000 ROA not before: Sun 14 Dec 2025 16:45:04 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 152194 IP address blocks: 43.226.124.0/24 maxlen: 24 43.226.125.0/24 maxlen: 24 43.226.126.0/24 maxlen: 24 43.226.127.0/24 maxlen: 24 103.254.108.0/22 maxlen: 22 103.254.108.0/24 maxlen: 24 103.254.109.0/24 maxlen: 24 103.254.110.0/24 maxlen: 24 103.254.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91843C3/7928DCDCD90B11F0A47591C87CD3641D/uvoi_7jpsiWSlVwpmpsZy06s-m4.crl rsync://rpki.apnic.net/member_repository/A91843C3/7928DCDCD90B11F0A47591C87CD3641D/uvoi_7jpsiWSlVwpmpsZy06s-m4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvoi_7jpsiWSlVwpmpsZy06s-m4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91843C3, serialNumber=BAFA22FFB8E9B22592955C299A9B19CB4EACFA6E Validity Not Before: Dec 14 16:45:04 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a3d3f7-8247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3f:1f:59:82:72:d4:7f:85:03:e3:ab:40:d2: cf:ae:56:f6:63:48:5f:f5:ac:1b:0a:f0:ad:9e:c1: ea:a2:20:06:51:cc:f9:24:f7:ca:bb:fe:f3:8f:71: 25:78:11:24:71:0a:6c:27:39:8f:b2:f0:cd:65:f4: 49:ef:cc:d6:ef:46:9c:9b:a7:d1:47:8c:7d:41:22: f4:63:2c:16:10:73:a0:5d:9b:59:af:ce:1b:e4:f6: 67:b2:22:f5:86:0d:93:27:53:85:1d:d4:88:7b:d7: ae:ad:75:64:03:ac:f6:1c:4a:73:8c:0b:a7:0f:7b: 4e:8e:80:1e:e0:31:2e:40:5c:af:48:dd:48:32:28: cf:55:87:87:07:0b:39:66:d0:9a:bc:52:e1:4c:6e: 72:d2:a0:87:c1:96:58:00:1b:35:66:26:4d:b9:cb: 93:79:f6:84:eb:cb:75:88:7c:fc:6c:2b:cb:31:8b: bd:1f:20:db:1b:8e:33:a5:32:ec:37:21:b0:99:8c: 3a:81:4a:5d:21:c4:93:58:b4:95:74:06:60:81:48: d2:2b:60:42:cf:3b:6d:16:9f:b1:67:08:ad:52:7f: a5:4c:9e:07:f4:dd:12:e0:c8:9e:43:a1:05:c9:d5: b3:85:f4:52:82:36:f4:fd:52:35:84:a2:65:bd:17: 65:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:35:BC:B0:C0:C5:6C:6C:EB:14:79:E6:EA:06:99:A9:C7:39:1A:88 X509v3 Authority Key Identifier: keyid:BA:FA:22:FF:B8:E9:B2:25:92:95:5C:29:9A:9B:19:CB:4E:AC:FA:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91843C3/7928DCDCD90B11F0A47591C87CD3641D/uvoi_7jpsiWSlVwpmpsZy06s-m4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvoi_7jpsiWSlVwpmpsZy06s-m4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91843C3/7928DCDCD90B11F0A47591C87CD3641D/3D9726E6D90C11F0BF8A78EF7CD3641D.roa sbgp-ipAddrBlock: critical IPv4: 43.226.124.0/22 103.254.108.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:fb:44:12:10:22:8e:e7:4d:85:66:8e:c6:3c:c7:8c:e9:22: aa:6f:4a:64:b8:44:cd:63:02:4e:ef:ee:64:39:7d:99:2c:2f: 6e:36:3b:54:38:30:b8:ea:4a:f6:a7:0c:f8:11:12:46:a9:8b: a2:f3:0e:fe:2a:4b:19:40:52:60:70:a3:23:57:d0:d0:43:7f: 4b:54:1d:d1:f4:2d:4e:9b:6b:ae:a5:79:04:85:a9:51:db:fc: 14:85:6e:88:81:27:71:d4:52:9d:be:59:49:5a:3b:57:2f:47: d8:25:f7:39:80:df:87:91:62:fb:b6:04:6e:9b:98:0d:b5:e5: 76:3a:99:67:25:45:be:08:63:94:25:cd:ff:44:be:26:14:c8: b7:ae:d5:51:d9:a2:26:77:8d:4f:d9:85:96:93:e5:b4:46:47: 9d:bc:c6:80:1b:a9:66:98:20:41:0b:a7:5f:c7:d5:ee:be:86: a7:f2:25:c5:36:dc:8b:08:2d:32:ec:67:2a:40:0d:7f:79:7d: 25:2a:d4:58:7b:5d:f7:49:dd:1f:3a:99:34:19:89:2b:86:5c: 56:90:77:10:59:0e:3d:3c:62:4c:a0:0c:a2:1f:ba:15:18:fd: 70:21:cc:12:4a:55:dd:ee:c4:7f:fd:c5:60:08:05:80:0c:60: 85:f7:09:4d -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NDNDMzExMC8GA1UEBRMoQkFGQTIyRkZCOEU5QjIyNTkyOTU1QzI5OUE5QjE5Q0I0 RUFDRkE2RTAeFw0yNTEyMTQxNjQ1MDRaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkM2Y3LTgyNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnPx9ZgnLUf4UD46tA0s+uVvZjSF/1rBsK8K2eweqiIAZRzPkk98q7/vOPcSV4 ESRxCmwnOY+y8M1l9EnvzNbvRpybp9FHjH1BIvRjLBYQc6Bdm1mvzhvk9meyIvWG DZMnU4Ud1Ih7166tdWQDrPYcSnOMC6cPe06OgB7gMS5AXK9I3UgyKM9Vh4cHCzlm 0Jq8UuFMbnLSoIfBllgAGzVmJk25y5N59oTry3WIfPxsK8sxi70fINsbjjOlMuw3 IbCZjDqBSl0hxJNYtJV0BmCBSNIrYELPO20Wn7FnCK1Sf6VMngf03RLgyJ5DoQXJ 1bOF9FKCNvT9UjWEomW9F2XPAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQUWzW8sMDF bGzrFHnm6gaZqcc5GogwHwYDVR0jBBgwFoAUuvoi/7jpsiWSlVwpmpsZy06s+m4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0M0MzLzc5MjhEQ0RDRDkw QjExRjBBNDc1OTFDODdDRDM2NDFEL3V2b2lfN2pwc2lXU2xWd3BtcHNaeTA2cy1t NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdXZvaV83anBzaVdTbFZ3cG1wc1p5MDZzLW00LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDNDMy83OTI4RENEQ0Q5MEIxMUYwQTQ3NTkxQzg3Q0QzNjQxRC8zRDk3MjZFNkQ5 MEMxMUYwQkY4QTc4RUY3Q0QzNjQxRC5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBAIr4nwDBAJn/mwwDQYJKoZIhvcNAQELBQADggEBAG37RBIQIo7nTYVm jsY8x4zpIqpvSmS4RM1jAk7v7mQ5fZksL242O1Q4MLjqSvanDPgREkapi6LzDv4q SxlAUmBwoyNX0NBDf0tUHdH0LU6ba66leQSFqVHb/BSFboiBJ3HUUp2+WUlaO1cv R9gl9zmA34eRYvu2BG6bmA215XY6mWclRb4IY5Qlzf9EviYUyLeu1VHZoiZ3jU/Z hZaT5bRGR528xoAbqWaYIEELp1/H1e6+hqfyJcU23IsILTLsZypADX95fSUq1Fh7 XfdJ3R86mTQZiSuGXFaQdxBZDj08YkygDKIfuhUY/XAhzBJKVd3uxH/9xWAIBYAM YIX3CU0= -----END CERTIFICATE-----Generated at Mon Mar 2 04:03:29 2026 by rpki-client