$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/1DB49770BDD511F0BF83ED5AC4F9AE02.roa File: 1DB49770BDD511F0BF83ED5AC4F9AE02.roa (raw, json) Hash identifier: PzosthH04YM90FjfjFqBt8AtMFKjHV4WS0Al9YYIqiQ= Subject key identifier: FC:8E:F6:54:C7:63:B7:4C:9E:0E:33:A6:37:BB:BF:34:C4:60:7E:91 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0D17 Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/1DB49770BDD511F0BF83ED5AC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:06:54 +0000 ROA not before: Wed 26 Nov 2025 10:53:12 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 400342 IP address blocks: 43.246.129.0/24 maxlen: 24 103.244.211.0/24 maxlen: 24 160.20.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3351 (0xd17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Nov 26 10:53:12 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a48e4e-e031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a4:2e:c1:98:6b:27:43:99:ac:91:e4:08:2e: 9e:7d:48:f5:5e:83:43:42:89:a2:f8:c8:2d:dc:78: 18:ee:ed:de:5c:8a:59:14:2d:ce:c6:14:97:f0:9a: 14:48:d1:f2:4a:80:68:59:f9:07:a4:2d:ab:fc:f4: 10:b7:c1:e6:c5:b9:8d:01:ba:a0:60:df:df:70:9d: d3:5e:85:2e:cb:f2:d5:63:f2:73:34:36:9b:7f:ec: 43:8c:38:28:cb:69:9b:83:5b:10:36:40:2a:a6:57: 99:99:fa:5a:cd:ca:10:32:c5:a3:0b:a7:e0:c1:f9: 43:c1:b4:f8:53:27:eb:5e:a6:3d:cc:61:30:02:41: ff:75:eb:06:d0:18:82:b5:6e:c5:44:97:c6:7e:c6: b6:2c:44:6a:56:28:ba:eb:3e:8f:51:0c:89:6e:1a: a9:38:33:e5:e0:c8:95:5e:9e:11:98:4d:a1:1f:b8: 16:f0:89:80:9e:4f:50:7b:ea:17:3b:80:e1:07:82: 88:b8:d8:aa:50:1e:14:a3:78:08:af:b9:aa:df:dc: 1c:36:cd:40:65:b2:85:e6:aa:74:c7:72:5e:58:1d: ca:7d:dd:25:0e:7e:b4:5b:e9:fd:ce:a2:2b:5c:3a: 43:0c:3c:b0:35:95:66:d5:75:82:34:a2:40:34:b1: 3d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:8E:F6:54:C7:63:B7:4C:9E:0E:33:A6:37:BB:BF:34:C4:60:7E:91 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/1DB49770BDD511F0BF83ED5AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.246.129.0/24 103.244.211.0/24 160.20.45.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:5c:ec:16:0a:08:1d:5b:be:a0:42:de:bb:2e:e1:3d:35:9f: 30:c8:e1:74:e1:91:ea:1f:c1:23:0f:93:68:43:ac:56:7f:67: 44:02:90:61:ac:22:2f:2f:e2:56:af:9d:06:16:6c:c8:e4:c3: 18:3b:2a:20:fb:95:62:1d:4e:86:ec:78:44:e7:5a:75:86:12: c2:d4:23:f1:85:65:e5:c8:72:2a:e9:d3:7b:e5:40:9f:f6:5d: 6a:b0:b1:ea:45:a4:e8:8e:43:81:e8:ff:a8:36:3d:42:45:32: a8:11:74:9a:9a:2f:2c:59:4a:a6:ab:9c:8f:cb:b5:56:62:92: c7:e7:f6:3b:d9:f7:56:9f:77:e9:af:b0:7f:f6:f9:56:6d:ff: b4:76:57:8b:ad:25:43:13:06:fb:f5:b8:50:80:83:3a:e2:6f: c6:38:f8:ab:a8:98:03:05:10:2d:01:2e:77:c8:8d:af:61:5f: 43:e3:50:0f:1f:df:53:e4:83:e7:b5:c7:71:ad:89:6d:4a:fe: d3:ef:08:c5:e8:9d:30:27:31:ab:df:d9:c6:78:02:78:b8:37: b2:f0:1e:25:6a:1b:e0:8b:aa:87:13:b6:82:68:34:34:7f:bb: e2:8a:e3:19:f7:fb:fd:bd:ac:f7:84:71:54:00:57:85:a9:42: 11:c8:26:1c -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICDRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjUxMTI2MTA1MzEyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGU0ZS1lMDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KQuwZhrJ0OZrJHkCC6efUj1XoNDQomi+Mgt3HgY7u3eXIpZFC3OxhSX8JoU SNHySoBoWfkHpC2r/PQQt8HmxbmNAbqgYN/fcJ3TXoUuy/LVY/JzNDabf+xDjDgo y2mbg1sQNkAqpleZmfpazcoQMsWjC6fgwflDwbT4UyfrXqY9zGEwAkH/desG0BiC tW7FRJfGfsa2LERqVii66z6PUQyJbhqpODPl4MiVXp4RmE2hH7gW8ImAnk9Qe+oX O4DhB4KIuNiqUB4Uo3gIr7mq39wcNs1AZbKF5qp0x3JeWB3Kfd0lDn60W+n9zqIr XDpDDDywNZVm1XWCNKJANLE9IQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFPyO9lTH Y7dMng4zpje7vzTEYH6RMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvMURCNDk3NzBC REQ1MTFGMEJGODNFRDVBQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAK/aBAwQAZ/TTAwQAoBQtMA0GCSqGSIb3DQEBCwUAA4IBAQCeXOwW CggdW76gQt67LuE9NZ8wyOF04ZHqH8EjD5NoQ6xWf2dEApBhrCIvL+JWr50GFmzI 5MMYOyog+5ViHU6G7HhE51p1hhLC1CPxhWXlyHIq6dN75UCf9l1qsLHqRaTojkOB 6P+oNj1CRTKoEXSami8sWUqmq5yPy7VWYpLH5/Y72fdWn3fpr7B/9vlWbf+0dleL rSVDEwb79bhQgIM64m/GOPirqJgDBRAtAS53yI2vYV9D41APH99T5IPntcdxrYlt Sv7T7wjF6J0wJzGr39nGeAJ4uDey8B4lahvgi6qHE7aCaDQ0f7viiuMZ9/v9vaz3 hHFUAFeFqUIRyCYc -----END CERTIFICATE-----Generated at Mon Mar 2 02:50:18 2026 by rpki-client