$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/E3903588DA3311F082FD85DA8AD3641D.roa File: E3903588DA3311F082FD85DA8AD3641D.roa (raw, json) Hash identifier: 5plKYgEgiNkKitEbeizH1JGd/iHTXwBdDhzUqpmFzSs= Subject key identifier: D5:70:51:23:00:DB:1B:D9:F1:F9:9C:F3:21:EF:4D:0B:3A:E0:69:9A Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0D19 Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/E3903588DA3311F082FD85DA8AD3641D.roa Signing time: Sun 01 Mar 2026 19:06:56 +0000 ROA not before: Tue 16 Dec 2025 04:01:24 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 142622 IP address blocks: 43.249.241.0/24 maxlen: 24 43.251.187.0/24 maxlen: 24 45.124.60.0/24 maxlen: 24 45.124.62.0/24 maxlen: 24 103.7.116.0/24 maxlen: 24 103.12.53.0/24 maxlen: 24 103.12.54.0/24 maxlen: 24 103.13.18.0/24 maxlen: 24 103.24.160.0/24 maxlen: 24 103.24.161.0/24 maxlen: 24 103.24.162.0/24 maxlen: 24 103.244.209.0/24 maxlen: 24 103.244.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3353 (0xd19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Dec 16 04:01:24 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a48e50-c8d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:cd:8e:36:e7:2b:75:e3:3e:c5:25:bd:42:a6: 87:ca:d2:8e:5d:5d:c8:91:4d:9a:c3:18:5f:78:13: f0:dd:aa:4f:2f:16:b0:bc:01:db:08:da:70:e2:05: f1:2b:82:f3:93:99:9f:78:f0:00:20:8f:73:e0:61: 98:78:4e:2b:a3:e9:ef:31:b9:08:cc:e2:6a:0c:d5: d7:57:94:37:c6:93:d8:f8:bb:8d:fb:57:41:cc:c1: 26:ef:16:95:f7:3f:f8:0f:3a:7e:cd:a0:a1:c8:3a: 37:83:3c:45:fc:fd:6a:a9:f7:70:13:a8:ad:67:cb: d9:ad:01:41:25:26:cd:cd:4b:a6:c3:22:db:ad:f4: 8f:0e:60:5a:09:4f:a8:71:cb:34:af:a2:1e:1c:f2: 92:65:bd:c4:35:8b:7c:02:20:3d:9f:01:50:80:56: 9d:b2:e4:c4:1b:de:95:e3:be:71:e1:90:77:1d:ec: ae:15:fb:7a:77:0d:69:bf:73:28:4d:80:6d:64:2d: cc:ff:3b:b5:1f:ae:ae:a9:9d:f3:e3:ef:38:63:70: fd:0c:e6:ef:28:e3:85:bb:05:a4:01:d3:c1:20:5d: 5e:89:7a:a5:01:08:c0:6a:0f:e8:06:b0:cb:87:71: f9:7f:6a:61:b7:d4:04:43:93:c0:b2:6c:3b:66:29: b6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:70:51:23:00:DB:1B:D9:F1:F9:9C:F3:21:EF:4D:0B:3A:E0:69:9A X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/E3903588DA3311F082FD85DA8AD3641D.roa sbgp-ipAddrBlock: critical IPv4: 43.249.241.0/24 43.251.187.0/24 45.124.60.0/24 45.124.62.0/24 103.7.116.0/24 103.12.53.0-103.12.54.255 103.13.18.0/24 103.24.160.0-103.24.162.255 103.244.209.0-103.244.210.255 Signature Algorithm: sha256WithRSAEncryption 66:94:2d:9b:91:b1:3a:33:6d:84:ff:d5:5a:a4:b9:59:fa:57: 92:24:39:26:4b:ab:bc:7f:6a:79:19:05:4b:7c:ef:85:cf:86: c4:1a:db:60:6a:a0:f2:88:07:87:c7:1a:e5:0f:d5:4e:08:13: 8d:3b:66:17:9e:db:bb:08:52:6e:33:b7:82:2b:2c:13:5d:10: 90:bd:55:cd:3f:fd:0d:ef:a7:8b:1a:5b:50:f0:77:a8:a2:1f: 3c:b9:3b:0b:f6:b7:af:08:ea:25:32:ea:b1:f4:3b:69:6d:1a: 34:d9:dc:09:21:95:51:10:ed:b6:19:0b:b7:53:86:fd:57:0d: 34:34:9a:c8:80:21:e0:37:c0:d7:fa:13:a9:16:88:b4:d8:a0: b0:c6:f8:16:1c:02:9f:13:74:5b:4f:75:86:d7:2a:b0:fa:69: 4d:9e:fd:d0:0d:3a:b2:9f:d1:35:b2:5a:78:ca:bc:e8:11:88: d7:35:af:6d:b9:49:40:05:df:8c:db:7d:22:ed:3d:7c:d9:04: 7b:7f:9e:c5:4c:aa:bd:90:8c:88:93:54:c8:85:54:96:f3:a2: 6b:67:98:26:7d:45:15:91:34:49:6d:ba:5d:5d:9f:70:fd:7d: 86:1f:7f:54:fb:df:04:65:69:d7:7a:46:e2:4a:2d:61:f7:39: 62:88:48:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjUxMjE2MDQwMTI0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGU1MC1jOGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi82ONucrdeM+xSW9QqaHytKOXV3IkU2awxhfeBPw3apPLxawvAHbCNpw4gXx K4Lzk5mfePAAII9z4GGYeE4ro+nvMbkIzOJqDNXXV5Q3xpPY+LuN+1dBzMEm7xaV 9z/4Dzp+zaChyDo3gzxF/P1qqfdwE6itZ8vZrQFBJSbNzUumwyLbrfSPDmBaCU+o ccs0r6IeHPKSZb3ENYt8AiA9nwFQgFadsuTEG96V475x4ZB3HeyuFft6dw1pv3Mo TYBtZC3M/zu1H66uqZ3z4+84Y3D9DObvKOOFuwWkAdPBIF1eiXqlAQjAag/oBrDL h3H5f2pht9QEQ5PAsmw7Zim25wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVwUSMA 2xvZ8fmc8yHvTQs64GmaMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvRTM5MDM1ODhE QTMzMTFGMDgyRkQ4NURBOEFEMzY0MUQucm9hMGcGCCsGAQUFBwEHAQH/BFgwVjBU BAIAATBOAwQAK/nxAwQAK/u7AwQALXw8AwQALXw+AwQAZwd0MAwDBABnDDUDBABn DDYDBABnDRIwDAMEBWcYoAMEAGcYojAMAwQAZ/TRAwQAZ/TSMA0GCSqGSIb3DQEB CwUAA4IBAQBmlC2bkbE6M22E/9VapLlZ+leSJDkmS6u8f2p5GQVLfO+Fz4bEGttg aqDyiAeHxxrlD9VOCBONO2YXntu7CFJuM7eCKywTXRCQvVXNP/0N76eLGltQ8Heo oh88uTsL9revCOolMuqx9DtpbRo02dwJIZVREO22GQu3U4b9Vw00NJrIgCHgN8DX +hOpFoi02KCwxvgWHAKfE3RbT3WG1yqw+mlNnv3QDTqyn9E1slp4yrzoEYjXNa9t uUlABd+M230i7T182QR7f57FTKq9kIyIk1TIhVSW86JrZ5gmfUUVkTRJbbpdXZ9w /X2GH39U+98EZWnXekbiSi1h9zliiEhl -----END CERTIFICATE-----Generated at Mon Mar 2 02:10:53 2026 by rpki-client