$ rpki-client -vvf rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/4C8BB01CF0A511F0AE903042706F56BC.roa File: 4C8BB01CF0A511F0AE903042706F56BC.roa (raw, json) Hash identifier: O4BcOq2hKD3I3RD3vTsJAeBqf6AIzX76ZzjjaHK+ElU= Subject key identifier: F2:A6:32:3A:0C:FF:6C:51:64:32:1E:A6:AC:8B:F8:DC:4B:D5:01:55 Certificate issuer: /CN=A91B25F2/serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Certificate serial: 0D33 Authority key identifier: B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/4C8BB01CF0A511F0AE903042706F56BC.roa Signing time: Sun 01 Mar 2026 18:26:10 +0000 ROA not before: Tue 13 Jan 2026 17:28:39 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 154377 IP address blocks: 43.230.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:57:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3379 (0xd33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B25F2, serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Validity Not Before: Jan 13 17:28:39 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a484c2-c6d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:46:1b:0c:b2:a5:dd:44:97:76:c3:39:9c:39: 50:34:b8:8b:9c:a9:f4:f1:24:4f:43:05:88:19:a6: 68:e3:b6:49:93:7d:e8:b2:46:82:f3:37:62:99:e5: 6a:72:8c:a9:ba:c7:11:0d:e2:2a:9f:b4:53:d0:4f: 0b:c1:de:83:d4:b2:e3:fa:c8:60:74:66:e2:ad:73: 95:86:92:ea:9e:f9:9d:99:41:68:8c:02:28:d4:79: 71:f5:e2:12:5c:f0:4d:b3:9c:a3:82:fa:84:20:a7: 4a:e6:50:e6:b3:27:77:a1:80:d6:43:2d:e1:1d:1a: 46:4e:de:7e:23:df:e0:82:aa:6f:28:b3:be:05:b2: 44:b6:a0:f1:7e:5f:eb:8a:e1:62:2d:d4:75:f7:fc: f0:8a:5c:9b:b0:8c:2c:c2:43:5e:d5:0d:84:f8:1c: fd:0e:96:74:95:c4:ca:f8:12:2e:53:34:f3:a2:8d: de:2d:89:b2:a9:71:73:90:f7:1e:11:cf:a8:49:a8: 29:9d:a0:8f:98:af:6e:ad:12:39:85:23:63:1a:9c: 5c:44:0a:be:04:9f:98:de:5e:81:0c:26:bd:f7:76: c6:80:22:05:74:0a:35:e3:47:53:09:c5:ad:a7:f4: a8:52:02:70:ba:12:73:26:ed:66:d4:bc:f3:65:22: f2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A6:32:3A:0C:FF:6C:51:64:32:1E:A6:AC:8B:F8:DC:4B:D5:01:55 X509v3 Authority Key Identifier: keyid:B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/4C8BB01CF0A511F0AE903042706F56BC.roa sbgp-ipAddrBlock: critical IPv4: 43.230.211.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:d2:6b:44:dc:ca:5e:47:e4:59:26:d9:88:bd:76:f0:ac:0e: 41:2e:e2:5f:3c:93:51:c3:50:23:f3:05:e5:ec:fc:28:89:85: 47:48:3f:10:88:00:c7:8a:22:4a:13:20:17:cb:8e:69:9d:1d: 21:23:38:10:d3:67:e0:34:23:64:9a:c5:f8:db:b0:5e:59:8f: 08:aa:18:3e:99:f3:4b:70:60:0d:29:3d:d1:af:28:be:b4:2f: 89:df:61:ab:f6:0a:af:9d:39:c7:77:a7:03:a0:37:8e:9f:cc: b5:4c:80:78:a8:c2:fc:83:5d:de:17:f4:50:40:cf:f0:40:49: 17:81:c3:18:04:b6:61:b9:eb:78:84:28:73:36:8b:ec:1b:5e: 4d:8d:e7:99:ea:7f:2c:0d:74:15:30:06:4f:a1:35:6a:af:25: 9c:7b:a3:22:64:6d:62:a1:97:65:f6:b7:c6:ad:cb:7b:90:00: 32:ed:35:26:7f:ca:3c:6d:f7:9e:2b:f5:82:21:14:ec:97:98: 2b:3e:80:87:54:17:44:e4:47:d0:77:80:be:77:4f:34:03:cb: 21:e5:81:8a:4b:e9:89:23:51:3f:60:08:71:a4:f9:56:4b:56: 36:6a:12:45:3f:9e:8c:7a:f2:c1:18:79:ca:12:6a:15:4c:d3: c2:51:d8:33 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI1RjIxMTAvBgNVBAUTKEI2Qzg3QkI1ODcyOEY3NkY2RjkwQTA5REZENkJBQTFB RDRFNzNCQ0EwHhcNMjYwMTEzMTcyODM5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODRjMi1jNmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEYbDLKl3USXdsM5nDlQNLiLnKn08SRPQwWIGaZo47ZJk33oskaC8zdimeVq coypuscRDeIqn7RT0E8Lwd6D1LLj+shgdGbirXOVhpLqnvmdmUFojAIo1Hlx9eIS XPBNs5yjgvqEIKdK5lDmsyd3oYDWQy3hHRpGTt5+I9/ggqpvKLO+BbJEtqDxfl/r iuFiLdR19/zwilybsIwswkNe1Q2E+Bz9DpZ0lcTK+BIuUzTzoo3eLYmyqXFzkPce Ec+oSagpnaCPmK9urRI5hSNjGpxcRAq+BJ+Y3l6BDCa993bGgCIFdAo140dTCcWt p/SoUgJwuhJzJu1m1LzzZSLyVwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPKmMjoM /2xRZDIepqyL+NxL1QFVMB8GA1UdIwQYMBaAFLbIe7WHKPdvb5Cgnf1rqhrU5zvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjVGMi9FRjkwQ0Q0RTAz QjAxMUVBODVGMDI5MzRDNEY5QUUwMi90c2g3dFljbzkyOXZrS0NkX1d1cUd0VG5P OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RzaDd0WWNvOTI5dmtLQ2RfV3VxR3RUbk84by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjI1RjIvRUY5MENENEUwM0IwMTFFQTg1RjAyOTM0QzRGOUFFMDIvNEM4QkIwMUNG MEE1MTFGMEFFOTAzMDQyNzA2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK+bTMA0GCSqGSIb3DQEBCwUAA4IBAQCM0mtE3MpeR+RZJtmIvXbw rA5BLuJfPJNRw1Aj8wXl7PwoiYVHSD8QiADHiiJKEyAXy45pnR0hIzgQ02fgNCNk msX427BeWY8Iqhg+mfNLcGANKT3Rryi+tC+J32Gr9gqvnTnHd6cDoDeOn8y1TIB4 qML8g13eF/RQQM/wQEkXgcMYBLZhuet4hChzNovsG15NjeeZ6n8sDXQVMAZPoTVq ryWce6MiZG1ioZdl9rfGrct7kAAy7TUmf8o8bfeeK/WCIRTsl5grPoCHVBdE5EfQ d4C+d080A8sh5YGKS+mJI1E/YAhxpPlWS1Y2ahJFP56MevLBGHnKEmoVTNPCUdgz -----END CERTIFICATE-----Generated at Mon Mar 2 12:04:48 2026 by rpki-client