$ rpki-client -vvf rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/5A48B534C6C811ECA5A9AB33C4F9AE02.roa File: 5A48B534C6C811ECA5A9AB33C4F9AE02.roa (raw, json) Hash identifier: KxT8vQKIHFK7Gk3hZ5CxcVmRf+RluSRn51YSF+ICMIo= Subject key identifier: E4:83:D4:22:01:F2:F9:98:01:C9:6E:9D:F0:00:04:E3:06:3C:FD:08 Certificate issuer: /CN=A9191B71/serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9 Certificate serial: 03C7 Authority key identifier: 4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/5A48B534C6C811ECA5A9AB33C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:25:27 +0000 ROA not before: Wed 26 Nov 2025 23:16:41 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 132742 IP address blocks: 43.250.188.0/22 maxlen: 24 103.42.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.crl rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 967 (0x3c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191B71, serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9 Validity Not Before: Nov 26 23:16:41 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a44c57-8fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:87:b5:46:36:58:07:7a:8e:65:9f:38:bb:4a: ec:5a:ee:d8:99:4f:ef:f7:7a:f0:d6:69:56:75:9b: f6:02:38:9a:27:c9:2b:4d:5b:0c:33:12:6d:19:c1: be:92:02:df:4c:c8:56:bc:e1:03:0a:bf:33:59:9e: b1:5b:e8:03:07:cf:d6:d7:dc:bd:e1:21:91:15:ed: f2:7d:26:25:29:ce:71:61:bf:18:36:b8:2d:d0:1c: 39:12:14:7a:97:89:bd:38:8c:83:25:c3:20:7f:31: d5:29:74:ab:ac:94:72:35:5a:c1:a3:8d:f0:b2:4a: 06:5e:51:0b:c9:0d:1c:3f:54:de:41:3f:23:a2:bf: 11:40:b3:d8:d3:7b:fe:ee:b2:92:80:17:e1:bb:ee: 25:9e:d5:67:a1:22:29:14:ae:94:31:22:db:ed:4b: 64:9b:12:bb:25:16:f4:e7:1e:46:ba:1d:dc:7c:68: ae:44:ec:9f:c7:0e:e0:1a:74:f8:1e:f0:93:31:d9: dc:13:fa:d4:a9:a3:14:4e:ec:2f:90:46:d6:61:7b: ed:e2:de:5e:0e:cc:b3:d7:24:a2:f9:ba:35:c3:ea: b9:c6:fe:70:58:37:e1:76:b1:61:b1:6b:49:96:0c: c8:4d:a7:72:37:b4:2f:f7:3e:16:9c:1a:a5:06:91: 15:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:83:D4:22:01:F2:F9:98:01:C9:6E:9D:F0:00:04:E3:06:3C:FD:08 X509v3 Authority Key Identifier: keyid:4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/5A48B534C6C811ECA5A9AB33C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.250.188.0/22 103.42.36.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:f2:f6:7b:26:a6:12:b3:83:83:f7:b2:63:22:75:9d:c2:b0: 0d:1a:36:ef:bf:a8:33:95:32:66:73:72:b9:6b:7d:f9:0d:a9: dd:bd:e1:3c:5b:f1:b7:79:67:dd:28:11:1c:e1:93:fc:42:2f: cc:86:3e:d8:ed:cd:59:b0:5c:e2:74:31:92:a3:77:6d:77:fb: cf:42:c7:6b:c3:fc:04:e3:bf:d4:7c:db:fb:24:02:2e:f9:3d: 3b:41:3c:5b:dd:0e:d6:cf:ce:fb:c1:e5:7a:68:15:2c:73:40: 34:fb:c8:ce:6e:9c:d0:f6:a0:7d:ca:b3:99:b9:b0:ad:04:dc: db:4a:ed:32:28:f4:82:b0:a4:75:60:07:a1:fb:1a:57:de:2e: 89:57:71:46:5c:61:15:40:f1:14:56:63:bc:1c:45:53:a6:3f: 20:3b:80:77:fd:5f:a5:71:3c:dd:83:83:fb:7d:c8:eb:8a:05: 11:54:6d:5b:2e:81:ac:b0:cd:b5:16:b4:11:e3:fe:c0:4e:f1: 9e:77:cd:ee:a2:bd:3e:5c:db:98:aa:75:be:76:b6:62:0d:38: 4d:cd:9a:47:00:b2:35:62:cd:24:35:56:13:78:24:2e:55:d2: 30:89:2e:30:08:21:b7:45:96:04:ed:2b:09:7a:1b:a5:66:fd: 5b:f4:d9:1b -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICA8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFCNzExMTAvBgNVBAUTKDRCRjNFODdDQTJCOUFCNTk1OTc2MjBEMDRGQzA1NDEx OEQ3RUQzRDkwHhcNMjUxMTI2MjMxNjQxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGM1Ny04ZmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Ye1RjZYB3qOZZ84u0rsWu7YmU/v93rw1mlWdZv2AjiaJ8krTVsMMxJtGcG+ kgLfTMhWvOEDCr8zWZ6xW+gDB8/W19y94SGRFe3yfSYlKc5xYb8YNrgt0Bw5EhR6 l4m9OIyDJcMgfzHVKXSrrJRyNVrBo43wskoGXlELyQ0cP1TeQT8jor8RQLPY03v+ 7rKSgBfhu+4lntVnoSIpFK6UMSLb7UtkmxK7JRb05x5Guh3cfGiuROyfxw7gGnT4 HvCTMdncE/rUqaMUTuwvkEbWYXvt4t5eDsyz1ySi+bo1w+q5xv5wWDfhdrFhsWtJ lgzITadyN7Qv9z4WnBqlBpEVgwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFOSD1CIB 8vmYAclunfAABOMGPP0IMB8GA1UdIwQYMBaAFEvz6HyiuatZWXYg0E/AVBGNftPZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUI3MS9CODQ5QkExMkM2 MDQxMUVDQjkwNjkxNUNDNEY5QUUwMi9TX1BvZktLNXExbFpkaURRVDhCVUVZMS0w OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NfUG9mS0s1cTFsWmRpRFFUOEJVRVkxLTA5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTFCNzEvQjg0OUJBMTJDNjA0MTFFQ0I5MDY5MTVDQzRGOUFFMDIvNUE0OEI1MzRD NkM4MTFFQ0E1QTlBQjMzQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK/q8AwQCZyokMA0GCSqGSIb3DQEBCwUAA4IBAQAq8vZ7JqYSs4OD 97JjInWdwrANGjbvv6gzlTJmc3K5a335DandveE8W/G3eWfdKBEc4ZP8Qi/Mhj7Y 7c1ZsFzidDGSo3dtd/vPQsdrw/wE47/UfNv7JAIu+T07QTxb3Q7Wz877weV6aBUs c0A0+8jObpzQ9qB9yrOZubCtBNzbSu0yKPSCsKR1YAeh+xpX3i6JV3FGXGEVQPEU VmO8HEVTpj8gO4B3/V+lcTzdg4P7fcjrigURVG1bLoGssM21FrQR4/7ATvGed83u or0+XNuYqnW+drZiDThNzZpHALI1Ys0kNVYTeCQuVdIwiS4wCCG3RZYE7SsJehul Zv1b9Nkb -----END CERTIFICATE-----Generated at Mon Mar 2 10:54:33 2026 by rpki-client