$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/A0AD48EA083011EF82AFFD44C4F9AE02.roa File: A0AD48EA083011EF82AFFD44C4F9AE02.roa (raw, json) Hash identifier: 2HF8hzKomEoBRaeHEpMuKIt1BoUXvbnhjONs7ASQa/o= Subject key identifier: D4:07:8A:D2:5C:B7:BD:E8:89:75:E9:AB:2F:16:98:A5:02:E8:F9:0E Certificate issuer: /CN=A91AC532/serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F Certificate serial: 019D Authority key identifier: BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/A0AD48EA083011EF82AFFD44C4F9AE02.roa Signing time: Tue 31 Mar 2026 04:38:17 +0000 ROA not before: Tue 31 Mar 2026 04:38:17 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 35908 IP address blocks: 43.252.120.0/22 maxlen: 24 103.233.80.0/22 maxlen: 24 110.34.128.0/17 maxlen: 24 2401:4a40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:25:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC532, serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F Validity Not Before: Mar 31 04:38:17 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69cb4fb9-6b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f3:22:9e:08:2c:23:28:04:24:95:db:e8:f1: 8c:00:4b:e2:e1:b7:0f:03:03:d3:cf:6b:0b:97:25: 2e:3d:5e:3c:f4:15:83:b9:0b:cb:b3:12:b1:ab:18: 52:d3:fa:80:80:bb:8f:0b:0f:69:a2:a4:20:95:ee: 83:3a:27:b4:8c:e6:d5:0b:37:4d:c5:0c:a2:a0:48: e7:7e:ac:2b:70:84:ac:be:59:03:90:d8:71:38:30: ee:7b:69:ee:20:eb:78:08:36:d7:1f:c5:b8:51:42: b9:af:3d:48:56:c0:64:11:5c:b8:39:9d:3d:a8:e5: 57:1a:10:56:f5:51:be:41:97:ad:b7:05:d4:5b:7a: f8:68:77:7f:ad:19:41:c8:93:0a:6b:f9:d5:1e:e4: d8:19:b3:02:cc:f3:7e:1c:a7:9f:d4:98:de:66:32: 9f:1a:59:f6:36:3e:70:da:20:e7:b2:09:4b:36:4c: 62:39:86:d9:90:3c:ee:44:fc:03:06:0f:03:7b:ca: 13:76:fc:98:68:05:15:e9:7f:86:9c:79:32:73:15: ab:3b:df:05:bf:f0:5f:01:0e:e0:e5:23:c0:a6:e1: 12:68:a7:ff:0a:c9:ed:3b:82:98:43:1b:ee:f5:1e: 63:32:f3:a6:67:d7:e3:69:60:12:c4:f5:34:45:9c: f3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:07:8A:D2:5C:B7:BD:E8:89:75:E9:AB:2F:16:98:A5:02:E8:F9:0E X509v3 Authority Key Identifier: keyid:BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/A0AD48EA083011EF82AFFD44C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.252.120.0/22 103.233.80.0/22 110.34.128.0/17 IPv6: 2401:4a40::/32 Signature Algorithm: sha256WithRSAEncryption 3d:11:60:1d:ad:90:cd:de:86:90:73:86:35:05:b3:74:f0:ab: e2:01:23:e9:03:0c:59:eb:0c:a1:60:33:58:7c:fe:05:f7:5e: 61:72:f8:7d:a4:c4:cd:be:4e:5b:fc:44:2c:77:c5:c5:be:3d: 7b:29:9e:c6:20:4c:86:2f:25:39:3e:2a:6a:b4:34:7d:f4:ac: 7b:42:8a:70:68:2b:0f:20:a5:1c:45:f5:12:a8:19:b5:b1:8a: 2c:db:bd:47:31:b5:ec:9f:1b:f9:df:87:62:e3:9d:6a:c5:39: f9:e1:bd:27:46:c7:c8:20:be:94:19:42:2e:24:9e:a1:ba:88: a8:3f:6e:7c:84:86:7e:0f:2b:d2:2f:97:e0:be:47:ef:00:6f: 6f:86:b7:ba:ae:80:ae:95:76:55:ff:39:ba:12:fb:56:5a:7c: 07:8d:fa:97:d6:5c:5d:08:a6:77:03:f0:25:f3:41:82:df:ba: f4:ff:c9:75:bb:6e:76:00:cb:62:ae:34:6b:f4:28:6f:05:9d: b2:5e:a7:a9:dc:eb:6a:24:35:13:62:08:d9:9e:6e:c5:ec:fd: 80:f1:9a:d6:e3:e5:68:c8:e0:49:ee:5e:9e:b0:a6:2f:3f:bd: 32:20:7c:f5:d3:2f:8d:c8:80:7c:7b:f1:88:5d:9c:7c:39:b0: c6:b4:3c:ec -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM1MzIxMTAvBgNVBAUTKEJDQUIzRTc2Rjg0RUQ0Mzc0MkYyQTA4MTI0MjcwOEU3 OTlDRTFCNUYwHhcNMjYwMzMxMDQzODE3WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWNiNGZiOS02YjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vMinggsIygEJJXb6PGMAEvi4bcPAwPTz2sLlyUuPV489BWDuQvLsxKxqxhS 0/qAgLuPCw9poqQgle6DOie0jObVCzdNxQyioEjnfqwrcISsvlkDkNhxODDue2nu IOt4CDbXH8W4UUK5rz1IVsBkEVy4OZ09qOVXGhBW9VG+QZettwXUW3r4aHd/rRlB yJMKa/nVHuTYGbMCzPN+HKef1JjeZjKfGln2Nj5w2iDnsglLNkxiOYbZkDzuRPwD Bg8De8oTdvyYaAUV6X+GnHkycxWrO98Fv/BfAQ7g5SPApuESaKf/CsntO4KYQxvu 9R5jMvOmZ9fjaWASxPU0RZzzTQIDAQABo4ICezCCAncwHQYDVR0OBBYEFNQHitJc t73oiXXpqy8WmKUC6PkOMB8GA1UdIwQYMBaAFLyrPnb4TtQ3QvKggSQnCOeZzhtf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzUzMi9EQUEwRDBCNDAz N0UxMUVGODUyMEU3NThDNEY5QUUwMi92S3MtZHZoTzFEZEM4cUNCSkNjSTU1bk9H MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZLcy1kdmhPMURkQzhxQ0JKQ2NJNTVuT0cxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUM1MzIvREFBMEQwQjQwMzdFMTFFRjg1MjBFNzU4QzRGOUFFMDIvQTBBRDQ4RUEw ODMwMTFFRjgyQUZGRDQ0QzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCK/x4AwQCZ+lQAwQHbiKAMA0EAgACMAcDBQAkAUpAMA0GCSqGSIb3 DQEBCwUAA4IBAQA9EWAdrZDN3oaQc4Y1BbN08KviASPpAwxZ6wyhYDNYfP4F915h cvh9pMTNvk5b/EQsd8XFvj17KZ7GIEyGLyU5PipqtDR99Kx7QopwaCsPIKUcRfUS qBm1sYos271HMbXsnxv534di451qxTn54b0nRsfIIL6UGUIuJJ6huoioP258hIZ+ DyvSL5fgvkfvAG9vhre6roCulXZV/zm6EvtWWnwHjfqX1lxdCKZ3A/Al80GC37r0 /8l1u252AMtirjRr9ChvBZ2yXqep3OtqJDUTYgjZnm7F7P2A8ZrW4+VoyOBJ7l6e sKYvP70yIHz10y+NyIB8e/GIXZx8ObDGtDzs -----END CERTIFICATE-----Generated at Fri Apr 17 15:53:14 2026 by rpki-client