$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/222F2952038511EFAF036327C4F9AE02.roa File: 222F2952038511EFAF036327C4F9AE02.roa (raw, json) Hash identifier: HZRnbyUwQnET2jpBCqochXqkW7Om1vxMBHDxZVfLQkE= Subject key identifier: 99:28:FF:5A:A4:E0:5D:74:C8:6C:AE:0D:8A:77:51:ED:C0:EC:5C:D9 Certificate issuer: /CN=A91AC532/serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F Certificate serial: 019E Authority key identifier: BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/222F2952038511EFAF036327C4F9AE02.roa Signing time: Tue 31 Mar 2026 04:38:19 +0000 ROA not before: Tue 31 Mar 2026 04:38:19 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 4213 IP address blocks: 43.252.120.0/22 maxlen: 22 43.252.120.0/24 maxlen: 24 103.233.80.0/23 maxlen: 23 103.233.82.0/24 maxlen: 24 103.233.83.0/24 maxlen: 24 110.34.151.0/24 maxlen: 24 110.34.166.0/24 maxlen: 24 110.34.186.0/23 maxlen: 23 110.34.188.0/23 maxlen: 23 110.34.191.0/24 maxlen: 24 110.34.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:25:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC532, serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F Validity Not Before: Mar 31 04:38:19 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69cb4fbb-c7a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:bc:2d:c6:e4:3b:97:7c:97:84:f5:dc:94:3e: d2:2a:1c:87:75:5a:c4:52:59:1a:d4:b8:c7:fa:52: 99:d3:ed:6d:03:45:86:97:b5:a2:49:af:13:8c:b9: f3:e3:19:fe:29:f3:a8:a3:8d:9b:03:78:e7:b6:b6: a5:d1:3f:5a:56:77:52:76:89:33:f5:8a:8a:eb:42: 8c:d2:af:ad:26:c1:21:da:a9:c8:d9:35:ed:58:a2: 5e:59:68:a5:8a:98:7b:db:49:5b:43:e4:37:92:78: e5:fd:bc:c5:e2:08:a6:d4:05:be:70:3c:d7:cc:f2: e7:6c:8c:37:5a:89:52:9e:04:3a:78:eb:ef:03:5c: e9:58:0d:a8:d4:a7:8c:fc:24:c3:a0:45:fd:c5:2c: 2b:91:48:54:2c:26:62:ff:42:44:6a:94:f4:63:4e: 5d:90:cc:cc:66:21:fd:11:0c:23:b1:16:23:9e:7f: 66:67:64:1e:5a:ea:ae:cf:91:88:ac:cd:07:04:c3: 68:0c:6d:5d:7b:90:96:0e:ec:c9:0e:0c:72:aa:1a: b6:20:52:75:2d:87:e5:e9:1d:78:ff:d6:e6:91:2e: 1d:f6:06:e2:48:bf:92:5f:7c:85:27:d3:d1:a9:28: 5d:89:10:4e:41:9e:a2:89:2f:1e:2b:74:fa:a2:99: 8e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:28:FF:5A:A4:E0:5D:74:C8:6C:AE:0D:8A:77:51:ED:C0:EC:5C:D9 X509v3 Authority Key Identifier: keyid:BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/222F2952038511EFAF036327C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.252.120.0/22 103.233.80.0/22 110.34.151.0/24 110.34.166.0/24 110.34.186.0-110.34.189.255 110.34.191.0/24 110.34.217.0/24 Signature Algorithm: sha256WithRSAEncryption 83:69:30:30:59:8c:2c:6c:2e:c5:f6:52:e2:d4:94:82:fe:a5: 81:f9:75:bd:5b:f0:af:02:94:02:66:74:dc:9f:3f:52:86:9f: 58:6a:c0:65:81:d8:3c:09:3c:d0:56:73:f4:53:7d:79:28:19: d8:6e:a9:a1:c8:9f:c7:9d:e3:b4:31:b9:ec:c3:96:ba:cb:88: 4f:2a:c4:e5:b4:7b:b1:ff:e2:39:d1:ea:fe:6a:c6:b9:0f:60: 60:12:87:4f:99:f5:03:46:f9:4a:15:dd:bb:a7:58:c7:d2:a4: a1:91:8f:42:c8:a0:38:47:d5:82:8f:9e:da:7c:db:70:d6:99: 0d:d3:f7:6f:84:88:69:7b:38:bb:e6:be:d6:99:b0:d3:a5:7a: 2b:e6:c7:8c:39:ae:69:16:e7:23:e7:51:9b:46:a6:16:27:5a: ef:a1:6a:2d:6c:05:f5:dd:b3:12:25:8e:fd:20:16:f0:2d:c1: ce:ae:07:06:9c:a0:2c:ef:0b:e2:52:6d:fc:ec:43:8a:1f:f0: 8f:81:9e:4a:f0:1c:de:98:08:3a:81:35:d1:60:69:91:9a:26: 5e:f0:3d:96:98:33:7d:b0:a4:70:cb:1d:43:71:75:6c:c3:ff: a9:2d:1f:89:3e:46:c4:bf:83:de:3c:34:b8:18:1d:e0:08:0c: e7:7e:f5:2f -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM1MzIxMTAvBgNVBAUTKEJDQUIzRTc2Rjg0RUQ0Mzc0MkYyQTA4MTI0MjcwOEU3 OTlDRTFCNUYwHhcNMjYwMzMxMDQzODE5WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWNiNGZiYi1jN2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAg7wtxuQ7l3yXhPXclD7SKhyHdVrEUlka1LjH+lKZ0+1tA0WGl7WiSa8TjLnz 4xn+KfOoo42bA3jntral0T9aVndSdokz9YqK60KM0q+tJsEh2qnI2TXtWKJeWWil iph720lbQ+Q3knjl/bzF4gim1AW+cDzXzPLnbIw3WolSngQ6eOvvA1zpWA2o1KeM /CTDoEX9xSwrkUhULCZi/0JEapT0Y05dkMzMZiH9EQwjsRYjnn9mZ2QeWuquz5GI rM0HBMNoDG1de5CWDuzJDgxyqhq2IFJ1LYfl6R14/9bmkS4d9gbiSL+SX3yFJ9PR qShdiRBOQZ6iiS8eK3T6opmO3wIDAQABo4ICjDCCAogwHQYDVR0OBBYEFJko/1qk 4F10yGyuDYp3Ue3A7FzZMB8GA1UdIwQYMBaAFLyrPnb4TtQ3QvKggSQnCOeZzhtf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzUzMi9EQUEwRDBCNDAz N0UxMUVGODUyMEU3NThDNEY5QUUwMi92S3MtZHZoTzFEZEM4cUNCSkNjSTU1bk9H MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZLcy1kdmhPMURkQzhxQ0JKQ2NJNTVuT0cxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUM1MzIvREFBMEQwQjQwMzdFMTFFRjg1MjBFNzU4QzRGOUFFMDIvMjIyRjI5NTIw Mzg1MTFFRkFGMDM2MzI3QzRGOUFFMDIucm9hMEsGCCsGAQUFBwEHAQH/BDwwOjA4 BAIAATAyAwQCK/x4AwQCZ+lQAwQAbiKXAwQAbiKmMAwDBAFuIroDBAFuIrwDBABu Ir8DBABuItkwDQYJKoZIhvcNAQELBQADggEBAINpMDBZjCxsLsX2UuLUlIL+pYH5 db1b8K8ClAJmdNyfP1KGn1hqwGWB2DwJPNBWc/RTfXkoGdhuqaHIn8ed47QxuezD lrrLiE8qxOW0e7H/4jnR6v5qxrkPYGASh0+Z9QNG+UoV3bunWMfSpKGRj0LIoDhH 1YKPntp823DWmQ3T92+EiGl7OLvmvtaZsNOleivmx4w5rmkW5yPnUZtGphYnWu+h ai1sBfXdsxIljv0gFvAtwc6uBwacoCzvC+JSbfzsQ4of8I+BnkrwHN6YCDqBNdFg aZGaJl7wPZaYM32wpHDLHUNxdWzD/6ktH4k+RsS/g948NLgYHeAIDOd+9S8= -----END CERTIFICATE-----Generated at Fri Apr 17 07:35:02 2026 by rpki-client