$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/430E4E387CC311F0A55B2081C4F9AE02.roa File: 430E4E387CC311F0A55B2081C4F9AE02.roa (raw, json) Hash identifier: b357DS6un3095ihmJG/1qzltik8hgTz2G2EsqlSGWDw= Subject key identifier: E5:70:65:C3:3E:71:66:0F:95:CD:6B:A3:A8:85:E3:0D:EA:47:19:92 Certificate issuer: /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638 Certificate serial: 03D2 Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/430E4E387CC311F0A55B2081C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:13:37 +0000 ROA not before: Wed 03 Sep 2025 03:20:09 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 136557 IP address blocks: 45.252.189.0/24 maxlen: 24 103.214.20.0/24 maxlen: 24 103.252.109.0/24 maxlen: 24 202.37.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 978 (0x3d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6587, serialNumber=2D634077CC847B59D4048D43E04B3309698FE638 Validity Not Before: Sep 3 03:20:09 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a481d1-5aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:65:65:ef:d4:14:d3:6c:79:3e:ee:08:ef:da: 68:21:e3:30:cb:a5:84:8d:9a:b0:8a:ce:87:b3:1c: fb:ae:b6:20:77:52:04:32:ca:e7:5f:f8:af:42:94: 7c:39:55:64:41:2b:ed:0f:2c:07:a5:29:c5:d9:0e: 64:69:40:40:83:5a:64:3f:04:de:7c:b2:40:0d:41: 17:51:a8:7c:52:eb:8e:87:ba:c7:01:ec:b7:ad:56: 0e:fc:83:6d:f4:06:0e:b9:5b:74:30:57:79:f7:75: 0d:b2:6e:05:7c:cf:39:ef:33:19:df:33:da:e4:6a: f0:ef:07:39:72:b9:7d:48:47:a3:0e:20:39:1f:01: 8c:e5:34:5f:e4:b3:b9:be:66:64:f8:1f:ca:83:e0: 79:96:3a:5c:42:c5:07:cd:1e:fe:a1:be:77:b3:b5: ed:67:7d:9a:b6:d7:43:18:8f:62:28:2a:ae:74:5e: 92:e3:ef:d1:b8:49:be:30:ed:d2:88:98:14:c0:df: 08:2e:4f:43:60:91:40:b8:ce:e5:bd:69:2b:2a:69: 70:6a:df:62:e8:18:f6:25:0d:75:0a:f3:88:e7:f2: 06:c3:0c:69:cb:f8:85:3d:1f:84:86:40:f0:75:67: 1f:d0:e7:ef:13:d9:61:cf:dd:39:1c:82:65:31:2f: 9b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:70:65:C3:3E:71:66:0F:95:CD:6B:A3:A8:85:E3:0D:EA:47:19:92 X509v3 Authority Key Identifier: keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/430E4E387CC311F0A55B2081C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.252.189.0/24 103.214.20.0/24 103.252.109.0/24 202.37.74.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:4d:26:ce:78:38:a1:b4:65:99:a7:0a:e8:f1:e9:56:35:e4: 43:db:5c:a3:69:dd:00:17:37:c9:70:51:25:1e:09:56:8a:6a: 68:9e:12:7a:4a:c7:67:97:a5:4c:e6:90:4c:1e:f5:b2:10:17: 8b:13:32:93:d5:48:17:09:42:8b:fc:08:2b:54:45:08:0d:7b: 3b:88:99:15:63:c5:cb:04:1c:af:f3:f6:8c:4c:c3:1b:67:3d: 58:4f:ce:89:83:f0:72:31:e9:ff:68:da:a5:4d:1a:8f:5e:7b: 2a:57:c3:88:f5:80:73:a1:d6:37:b3:17:e7:90:af:07:9d:98: ae:01:8f:be:24:18:0d:55:e2:d6:a4:c5:35:d8:c0:55:eb:1b: de:e1:37:d2:82:6e:18:93:7a:75:90:33:1b:0b:5c:8d:9c:46: c5:4f:3c:1f:42:23:02:29:81:58:76:26:19:60:f9:7e:a6:4c: 7d:af:e1:ea:3c:ff:d0:c3:a8:ed:5a:39:89:65:4d:92:27:9d: 51:b8:67:bd:78:18:66:66:63:33:ca:6f:f0:a7:d1:a2:c0:03: 70:6c:73:56:90:b7:93:0d:c1:7c:bd:11:1e:3e:08:61:10:28: 8c:50:ca:14:6f:f5:14:9f:a5:d5:9a:12:cb:1b:6d:92:c4:0b: eb:3d:9c:65 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICA9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1ODcxMTAvBgNVBAUTKDJENjM0MDc3Q0M4NDdCNTlENDA0OEQ0M0UwNEIzMzA5 Njk4RkU2MzgwHhcNMjUwOTAzMDMyMDA5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODFkMS01YWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2Vl79QU02x5Pu4I79poIeMwy6WEjZqwis6Hsxz7rrYgd1IEMsrnX/ivQpR8 OVVkQSvtDywHpSnF2Q5kaUBAg1pkPwTefLJADUEXUah8UuuOh7rHAey3rVYO/INt 9AYOuVt0MFd593UNsm4FfM857zMZ3zPa5Grw7wc5crl9SEejDiA5HwGM5TRf5LO5 vmZk+B/Kg+B5ljpcQsUHzR7+ob53s7XtZ32attdDGI9iKCqudF6S4+/RuEm+MO3S iJgUwN8ILk9DYJFAuM7lvWkrKmlwat9i6Bj2JQ11CvOI5/IGwwxpy/iFPR+EhkDw dWcf0OfvE9lhz905HIJlMS+bpwIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFOVwZcM+ cWYPlc1ro6iF4w3qRxmSMB8GA1UdIwQYMBaAFC1jQHfMhHtZ1ASNQ+BLMwlpj+Y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjU4Ny80MTdENzFCNDkx ODYxMUVEQTg0QTEyNERDNEY5QUUwMi9MV05BZDh5RWUxblVCSTFENEVzekNXbVA1 amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xXTkFkOHlFZTFuVUJJMUQ0RXN6Q1dtUDVqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjY1ODcvNDE3RDcxQjQ5MTg2MTFFREE4NEExMjREQzRGOUFFMDIvNDMwRTRFMzg3 Q0MzMTFGMEE1NUIyMDgxQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQALfy9AwQAZ9YUAwQAZ/xtAwQAyiVKMA0GCSqGSIb3DQEBCwUAA4IB AQA8TSbOeDihtGWZpwro8elWNeRD21yjad0AFzfJcFElHglWimponhJ6Ssdnl6VM 5pBMHvWyEBeLEzKT1UgXCUKL/AgrVEUIDXs7iJkVY8XLBByv8/aMTMMbZz1YT86J g/ByMen/aNqlTRqPXnsqV8OI9YBzodY3sxfnkK8HnZiuAY++JBgNVeLWpMU12MBV 6xve4TfSgm4Yk3p1kDMbC1yNnEbFTzwfQiMCKYFYdiYZYPl+pkx9r+HqPP/Qw6jt WjmJZU2SJ51RuGe9eBhmZmMzym/wp9GiwANwbHNWkLeTDcF8vREePghhECiMUMoU b/UUn6XVmhLLG22SxAvrPZxl -----END CERTIFICATE-----Generated at Mon Mar 2 12:17:51 2026 by rpki-client