$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/678DA8FE59D211EAB77C8C13C4F9AE02.roa File: 678DA8FE59D211EAB77C8C13C4F9AE02.roa (raw, json) Hash identifier: uilr/VzadspQ9DLCCiVVicEIdw3R/zCYDu3WsWsjhCg= Subject key identifier: D7:5E:45:5F:EF:0E:25:36:91:D5:E1:DA:0B:7D:81:56:37:66:DB:A6 Certificate issuer: /CN=A91ADFD3/serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40 Certificate serial: 23C7 Authority key identifier: C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/678DA8FE59D211EAB77C8C13C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:53:51 +0000 ROA not before: Fri 30 Jan 2026 16:13:17 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 55943 IP address blocks: 43.249.176.0/22 maxlen: 23 103.4.72.0/22 maxlen: 23 113.197.68.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:45:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9159 (0x23c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADFD3, serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40 Validity Not Before: Jan 30 16:13:17 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a4610f-9277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e3:4d:81:30:f3:90:4e:26:1e:f3:23:8d:a1: 21:d5:0a:81:b3:05:2b:a0:b6:90:16:7d:d8:25:20: 73:9d:de:b6:01:5f:bc:a9:a3:6d:99:63:72:96:45: 03:f7:b5:5a:20:03:a8:2e:a1:17:df:b0:e0:1a:79: 73:0e:34:e6:5d:f3:d6:00:98:b1:1b:12:ee:8f:ed: 58:3f:fa:09:cc:81:37:cc:cc:f6:fe:f1:a3:12:72: 8f:12:ec:79:55:05:79:69:d4:d6:e5:ce:9d:04:14: 41:37:91:c5:95:6b:6d:07:7a:1f:c7:15:76:f8:8f: 59:88:f1:cd:b8:a5:90:09:d2:a3:9b:1a:a3:64:fa: 24:ba:21:59:de:f9:87:c0:1a:7d:cc:43:0f:0d:57: bd:3b:22:40:ec:ba:3c:58:50:d5:21:c6:d8:45:d1: 8b:0b:b0:2f:7d:21:3f:3f:8c:5e:5e:91:c7:8f:4e: c0:11:d6:77:97:d6:94:af:87:8b:8e:a5:02:6c:e8: 47:28:9f:be:a5:9c:96:4d:f4:33:7a:cb:3a:00:ee: 02:80:23:41:5f:4b:76:0f:e6:9e:b5:ea:1f:9e:b0: a9:2b:2b:68:6f:61:7c:64:e2:93:45:54:e5:f9:7a: 57:7f:c9:65:56:c8:04:8d:55:cf:22:f5:59:11:33: a3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:5E:45:5F:EF:0E:25:36:91:D5:E1:DA:0B:7D:81:56:37:66:DB:A6 X509v3 Authority Key Identifier: keyid:C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/678DA8FE59D211EAB77C8C13C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.249.176.0/22 103.4.72.0/22 113.197.68.0/22 Signature Algorithm: sha256WithRSAEncryption 67:4c:75:c0:62:ef:b5:2b:dd:52:4f:37:2b:8d:de:53:b7:c0: bd:07:8a:73:c1:b2:19:c8:59:98:6d:3c:ab:6d:49:7f:14:41: 7a:31:53:8c:95:74:48:58:94:6e:7d:fd:f0:42:2d:bf:f3:7d: f6:90:93:c4:dd:22:89:9e:b4:1c:ee:57:2b:0e:ed:89:f1:84: e5:1d:39:a5:aa:b1:68:dd:23:42:3a:21:b1:46:49:a8:83:97: 02:9f:15:75:e6:0e:46:8f:9c:26:eb:2b:60:e2:95:b5:9b:df: 4c:01:cf:b9:62:79:7f:f9:8a:98:88:14:1c:86:ea:cc:b7:59: 58:a8:68:1e:b7:02:5f:5d:1c:48:27:e3:a6:d7:4b:10:f3:ac: 49:86:c2:23:53:75:b9:75:cb:b0:47:30:ff:33:66:a8:9f:a5: f1:c9:01:1f:ec:3f:93:2e:cc:5d:16:09:d9:98:8b:b7:23:4e: c2:de:06:c9:26:bf:0d:d1:59:81:81:fb:6e:d8:d9:90:bf:aa: cb:bc:fb:56:a1:7a:cf:82:a2:33:e5:81:e9:37:44:c3:5e:9b: 2b:f2:f1:5a:46:aa:4c:6d:ff:91:b8:07:33:2b:df:f0:b0:20: 1f:56:e8:8f:dd:23:37:d7:cb:34:09:a5:80:5d:31:20:6f:85: 26:06:d5:29 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICI8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURGRDMxMTAvBgNVBAUTKEM2MDg5RUVCQzU1NkI3N0Y2NEU0NDI0OUE2OEI5NUQ1 QkQ5NDFFNDAwHhcNMjYwMTMwMTYxMzE3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjEwZi05Mjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl+NNgTDzkE4mHvMjjaEh1QqBswUroLaQFn3YJSBznd62AV+8qaNtmWNylkUD 97VaIAOoLqEX37DgGnlzDjTmXfPWAJixGxLuj+1YP/oJzIE3zMz2/vGjEnKPEux5 VQV5adTW5c6dBBRBN5HFlWttB3ofxxV2+I9ZiPHNuKWQCdKjmxqjZPokuiFZ3vmH wBp9zEMPDVe9OyJA7Lo8WFDVIcbYRdGLC7AvfSE/P4xeXpHHj07AEdZ3l9aUr4eL jqUCbOhHKJ++pZyWTfQzess6AO4CgCNBX0t2D+aeteofnrCpKytob2F8ZOKTRVTl +XpXf8llVsgEjVXPIvVZETOjaQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFNdeRV/v DiU2kdXh2gt9gVY3ZtumMB8GA1UdIwQYMBaAFMYInuvFVrd/ZORCSaaLldW9lB5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREZEMy8xRkQxQThCRTk0 ODYxMUU1QUUwQzhCNzJDNEY5QUUwMi94Z2llNjhWV3QzOWs1RUpKcG91VjFiMlVI a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hnaWU2OFZXdDM5azVFSkpwb3VWMWIyVUhrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QURGRDMvMUZEMUE4QkU5NDg2MTFFNUFFMEM4QjcyQzRGOUFFMDIvNjc4REE4RkU1 OUQyMTFFQUI3N0M4QzEzQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCK/mwAwQCZwRIAwQCccVEMA0GCSqGSIb3DQEBCwUAA4IBAQBnTHXA Yu+1K91STzcrjd5Tt8C9B4pzwbIZyFmYbTyrbUl/FEF6MVOMlXRIWJRuff3wQi2/ 8332kJPE3SKJnrQc7lcrDu2J8YTlHTmlqrFo3SNCOiGxRkmog5cCnxV15g5Gj5wm 6ytg4pW1m99MAc+5Ynl/+YqYiBQchurMt1lYqGgetwJfXRxIJ+Om10sQ86xJhsIj U3W5dcuwRzD/M2aon6XxyQEf7D+TLsxdFgnZmIu3I07C3gbJJr8N0VmBgftu2NmQ v6rLvPtWoXrPgqIz5YHpN0TDXpsr8vFaRqpMbf+RuAczK9/wsCAfVuiP3SM318s0 CaWAXTEgb4UmBtUp -----END CERTIFICATE-----Generated at Mon Mar 2 04:54:41 2026 by rpki-client