$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/A59E2538BA0211F0892F7E0BC4F9AE02.roa File: A59E2538BA0211F0892F7E0BC4F9AE02.roa (raw, json) Hash identifier: U+jikQia2TmNT/0k3vINGgOcX5h8/2pprjsbUiUPbYk= Subject key identifier: B2:AB:95:92:99:38:C8:CC:80:DD:38:26:78:C0:76:4C:57:4E:10:FC Certificate issuer: /CN=A91B2A6F/serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1 Certificate serial: 0ACA Authority key identifier: 8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/A59E2538BA0211F0892F7E0BC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:00:30 +0000 ROA not before: Wed 05 Nov 2025 04:48:18 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 4764 IP address blocks: 43.247.64.0/22 maxlen: 22 103.26.172.0/22 maxlen: 22 2401:f80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:47:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2762 (0xaca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2A6F, serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1 Validity Not Before: Nov 5 04:48:18 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a4467e-d55e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:81:f0:ad:c1:ad:8e:9c:1a:ac:00:de:a9:df: 58:2d:c7:b3:68:f7:70:9d:d4:58:b7:cb:81:f6:b5: a4:be:8e:8c:d3:7b:6a:52:74:eb:8d:50:0d:8a:47: 0b:3b:0f:b1:2f:aa:7d:30:ff:66:20:22:52:4f:92: a3:c4:22:91:67:df:66:cc:dc:2b:b9:d5:c7:58:a9: cf:d3:1d:53:38:a7:a7:14:c6:64:9e:6a:d9:14:f9: d0:8e:37:bd:db:92:73:47:b4:2e:37:8f:9f:ef:b8: d3:7e:61:af:c4:f1:78:16:3e:82:9d:25:91:09:b8: 02:1e:57:99:31:db:08:75:5e:70:f9:72:1a:5a:0b: dd:91:2f:e6:62:05:14:0b:c1:32:30:31:e7:5e:c5: 96:93:ec:d0:a8:c9:f7:20:ce:89:67:58:00:d2:ef: c1:74:00:dd:18:99:c3:c6:a3:59:36:cd:89:36:ea: ce:85:1f:50:88:75:ad:1b:d7:af:68:38:bf:ec:5d: 87:39:1b:37:00:dd:13:d6:a6:b3:f1:77:91:ef:7e: d1:40:c0:37:65:5f:36:9a:48:c0:8f:5a:49:d0:5a: 5b:a4:af:c0:60:37:34:0f:da:75:bc:9b:f4:4f:d8: 50:ae:b8:32:46:0a:b4:c2:7f:c9:70:b2:e7:bc:e8: 09:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:AB:95:92:99:38:C8:CC:80:DD:38:26:78:C0:76:4C:57:4E:10:FC X509v3 Authority Key Identifier: keyid:8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/A59E2538BA0211F0892F7E0BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.247.64.0/22 103.26.172.0/22 IPv6: 2401:f80::/32 Signature Algorithm: sha256WithRSAEncryption 60:da:af:08:d5:5b:0b:b8:c0:37:d3:28:13:0b:41:6c:e1:db: ca:3b:52:f0:d4:fd:8a:35:95:e2:25:63:07:e9:eb:21:af:b1: b1:5d:00:d1:29:c2:95:e3:70:d4:ba:d6:bc:13:82:92:e6:3c: 72:57:47:60:a1:de:20:de:29:8d:a2:5b:ef:fa:c6:57:7f:60: 86:c0:d2:35:09:59:be:37:0c:73:65:a5:ff:9d:1e:2f:d7:ca: 15:6a:28:46:1e:ea:3b:43:91:c2:6c:57:bf:36:ae:cd:ad:ed: 06:33:be:29:85:84:d6:33:f7:45:91:93:39:d5:17:0f:13:da: 04:44:6e:38:30:36:8b:85:27:e8:13:79:5f:01:f8:f1:9e:c4: 6d:db:66:a0:75:3f:b1:ef:78:cd:42:fc:a8:ca:ad:b3:82:56: be:47:23:86:50:51:61:0c:ab:73:42:76:fd:36:b9:31:db:a4: ea:65:af:c7:11:9a:06:94:b1:28:c6:8d:29:73:b4:80:02:64: f7:8f:6e:0b:74:37:fb:71:5b:38:43:bb:63:86:5d:61:88:53: 20:d9:68:ff:2c:4a:b1:cd:dc:3b:7b:5c:54:11:8a:56:a7:e5: 88:42:02:a8:f3:1a:b2:99:f0:d1:cb:37:49:36:ce:dc:10:6d: 4d:97:be:ee -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJBNkYxMTAvBgNVBAUTKDhDNUE4OTk3RkNBNUJGMDI3MEVBRjg2RUU4QzBDQjY1 NTFBQjk3RDEwHhcNMjUxMTA1MDQ0ODE4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDY3ZS1kNTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0IHwrcGtjpwarADeqd9YLcezaPdwndRYt8uB9rWkvo6M03tqUnTrjVANikcL Ow+xL6p9MP9mICJST5KjxCKRZ99mzNwrudXHWKnP0x1TOKenFMZknmrZFPnQjje9 25JzR7QuN4+f77jTfmGvxPF4Fj6CnSWRCbgCHleZMdsIdV5w+XIaWgvdkS/mYgUU C8EyMDHnXsWWk+zQqMn3IM6JZ1gA0u/BdADdGJnDxqNZNs2JNurOhR9QiHWtG9ev aDi/7F2HORs3AN0T1qaz8XeR737RQMA3ZV82mkjAj1pJ0FpbpK/AYDc0D9p1vJv0 T9hQrrgyRgq0wn/JcLLnvOgJ8wIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFLKrlZKZ OMjMgN04JnjAdkxXThD8MB8GA1UdIwQYMBaAFIxaiZf8pb8CcOr4bujAy2VRq5fR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkE2Ri9DQURGRjJGRTZF MzYxMUVBQTEwRUZGNzZDNEY5QUUwMi9qRnFKbF95bHZ3Snc2dmh1Nk1ETFpWR3Js OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pGcUpsX3lsdndKdzZ2aHU2TURMWlZHcmw5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjJBNkYvQ0FERkYyRkU2RTM2MTFFQUExMEVGRjc2QzRGOUFFMDIvQTU5RTI1MzhC QTAyMTFGMDg5MkY3RTBCQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCK/dAAwQCZxqsMA0EAgACMAcDBQAkAQ+AMA0GCSqGSIb3DQEBCwUA A4IBAQBg2q8I1VsLuMA30ygTC0Fs4dvKO1Lw1P2KNZXiJWMH6eshr7GxXQDRKcKV 43DUuta8E4KS5jxyV0dgod4g3imNolvv+sZXf2CGwNI1CVm+NwxzZaX/nR4v18oV aihGHuo7Q5HCbFe/Nq7Nre0GM74phYTWM/dFkZM51RcPE9oERG44MDaLhSfoE3lf AfjxnsRt22agdT+x73jNQvyoyq2zgla+RyOGUFFhDKtzQnb9Nrkx26TqZa/HEZoG lLEoxo0pc7SAAmT3j24LdDf7cVs4Q7tjhl1hiFMg2Wj/LEqxzdw7e1xUEYpWp+WI QgKo8xqymfDRyzdJNs7cEG1Nl77u -----END CERTIFICATE-----Generated at Mon Mar 2 03:59:03 2026 by rpki-client