$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/A2B684F8BA0911F0B073056FC4F9AE02.roa File: A2B684F8BA0911F0B073056FC4F9AE02.roa (raw, json) Hash identifier: 0TW+LKf6HItUY0RBUFa1bKJ9hWirj8Ywx0+XRjYgTu4= Subject key identifier: 14:4C:08:7B:A5:50:93:27:DE:2E:87:BF:A8:64:0B:02:C3:4C:35:E9 Certificate issuer: /CN=A91B6814/serialNumber=F63C46422912B45A9186E445C5A9DEA7BBA3428B Certificate serial: 67 Authority key identifier: F6:3C:46:42:29:12:B4:5A:91:86:E4:45:C5:A9:DE:A7:BB:A3:42:8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jxGQikStFqRhuRFxanep7ujQos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/A2B684F8BA0911F0B073056FC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:16:33 +0000 ROA not before: Fri 19 Dec 2025 11:10:38 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 136160 IP address blocks: 43.251.100.0/22 maxlen: 22 43.251.100.0/23 maxlen: 23 43.251.100.0/24 maxlen: 24 43.251.101.0/24 maxlen: 24 43.251.102.0/23 maxlen: 23 43.251.102.0/24 maxlen: 24 43.251.103.0/24 maxlen: 24 103.82.52.0/22 maxlen: 22 103.82.52.0/23 maxlen: 23 103.82.52.0/24 maxlen: 24 103.82.53.0/24 maxlen: 24 103.82.54.0/23 maxlen: 23 103.82.54.0/24 maxlen: 24 103.82.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/9jxGQikStFqRhuRFxanep7ujQos.crl rsync://rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/9jxGQikStFqRhuRFxanep7ujQos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jxGQikStFqRhuRFxanep7ujQos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6814, serialNumber=F63C46422912B45A9186E445C5A9DEA7BBA3428B Validity Not Before: Dec 19 11:10:38 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a47471-13b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9b:9e:40:80:dd:d2:e8:ce:12:5b:22:34:38: b6:b9:65:f5:fc:41:27:f3:32:78:e9:1f:59:07:e9: b4:f0:cc:6d:f5:78:a1:e5:bd:09:11:37:bd:5d:9b: ea:61:ca:ac:1c:aa:52:73:2c:25:1f:64:33:e4:2b: d8:55:8e:b6:85:04:78:3f:e7:de:c3:e7:88:2d:b8: 48:fb:19:ec:3f:32:fb:42:6d:77:d0:70:6a:c1:4b: 59:69:8b:8e:8e:e2:27:7f:ce:3c:47:1c:f1:ee:41: 60:1c:e6:d0:0b:22:72:1a:16:c6:21:6c:8a:b5:0d: a7:3f:7e:a5:de:00:21:b0:2d:9c:c6:74:8b:75:c6: 8c:2d:bb:ad:b6:1f:ad:3f:a9:91:84:a8:10:46:90: ca:7a:2b:d1:8c:3b:60:3a:cb:de:23:2c:28:6b:c8: 6b:7a:15:82:49:1c:4d:51:bb:09:2b:b9:84:4b:31: f3:2a:e5:59:ed:6a:de:1a:af:f0:47:84:95:97:e2: d2:fc:d9:2d:98:eb:e6:fd:f7:f8:67:fb:cb:17:b7: a3:39:c7:af:31:40:f9:31:0e:cd:6d:9e:50:b4:77: f5:ae:b9:51:4c:45:91:e1:a0:84:19:67:86:0a:9e: ee:af:30:87:50:43:0c:5e:89:21:0d:d0:60:28:de: a2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:4C:08:7B:A5:50:93:27:DE:2E:87:BF:A8:64:0B:02:C3:4C:35:E9 X509v3 Authority Key Identifier: keyid:F6:3C:46:42:29:12:B4:5A:91:86:E4:45:C5:A9:DE:A7:BB:A3:42:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/9jxGQikStFqRhuRFxanep7ujQos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jxGQikStFqRhuRFxanep7ujQos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/A2B684F8BA0911F0B073056FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.251.100.0/22 103.82.52.0/22 Signature Algorithm: sha256WithRSAEncryption 95:74:ee:16:45:9b:06:8b:50:b2:bd:1a:22:93:ca:32:bc:a7: 4a:42:92:3b:e5:83:67:9f:20:ea:16:28:47:87:59:28:05:5c: 92:45:61:2e:d5:f1:96:a3:0b:54:9c:91:3c:59:dc:55:3d:84: 11:07:6c:7f:dd:f8:87:82:35:65:a3:95:5a:0b:5b:a2:63:d5: e5:2e:29:e1:18:4c:b5:e6:c8:a6:73:21:21:a1:42:a4:ab:b4: 74:be:30:fb:e1:62:ec:46:04:5b:9b:02:6c:cc:48:67:de:ac: 88:ae:1f:d1:6b:81:8f:95:7e:1f:59:47:ae:f8:ec:17:03:83: 6d:22:ee:0d:ee:f7:02:f9:b0:1a:45:ee:90:90:b5:22:9f:62: a7:e5:ab:55:db:2a:54:f9:a6:1e:c6:ea:77:06:b4:10:39:07: af:f7:7a:90:63:21:6b:b1:d2:3c:43:f2:b0:a7:55:5a:8d:40: ec:70:43:7e:40:9d:90:da:72:45:c3:75:7d:a1:f7:f3:97:30: fb:a4:c6:23:08:78:b1:15:37:a4:ad:54:d9:50:a7:24:7c:02: 5b:ec:dd:fe:a2:db:b3:99:62:5c:b6:c1:02:ac:4e:d8:46:a3: 09:32:76:4c:75:ef:0e:94:9c:fc:f9:8f:e9:d0:a7:2d:12:94: 2f:48:01:60 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjgxNDExMC8GA1UEBRMoRjYzQzQ2NDIyOTEyQjQ1QTkxODZFNDQ1QzVBOURFQTdC QkEzNDI4QjAeFw0yNTEyMTkxMTEwMzhaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTQ3NDcxLTEzYjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDam55AgN3S6M4SWyI0OLa5ZfX8QSfzMnjpH1kH6bTwzG31eKHlvQkRN71dm+ph yqwcqlJzLCUfZDPkK9hVjraFBHg/597D54gtuEj7Gew/MvtCbXfQcGrBS1lpi46O 4id/zjxHHPHuQWAc5tALInIaFsYhbIq1Dac/fqXeACGwLZzGdIt1xowtu622H60/ qZGEqBBGkMp6K9GMO2A6y94jLChryGt6FYJJHE1RuwkruYRLMfMq5Vntat4ar/BH hJWX4tL82S2Y6+b99/hn+8sXt6M5x68xQPkxDs1tnlC0d/WuuVFMRZHhoIQZZ4YK nu6vMIdQQwxeiSEN0GAo3qIrAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQUFEwIe6VQ kyfeLoe/qGQLAsNMNekwHwYDVR0jBBgwFoAU9jxGQikStFqRhuRFxanep7ujQosw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2ODE0LzA5NjdDNzk4Qjky NDExRjBCRkQ1QTU2RUM0RjlBRTAyLzlqeEdRaWtTdEZxUmh1UkZ4YW5lcDd1alFv cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOWp4R1Fpa1N0RnFSaHVSRnhhbmVwN3VqUW9zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjgxNC8wOTY3Qzc5OEI5MjQxMUYwQkZENUE1NkVDNEY5QUUwMi9BMkI2ODRGOEJB MDkxMUYwQjA3MzA1NkZDNEY5QUUwMi5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBAIr+2QDBAJnUjQwDQYJKoZIhvcNAQELBQADggEBAJV07hZFmwaLULK9 GiKTyjK8p0pCkjvlg2efIOoWKEeHWSgFXJJFYS7V8ZajC1SckTxZ3FU9hBEHbH/d +IeCNWWjlVoLW6Jj1eUuKeEYTLXmyKZzISGhQqSrtHS+MPvhYuxGBFubAmzMSGfe rIiuH9FrgY+Vfh9ZR6747BcDg20i7g3u9wL5sBpF7pCQtSKfYqflq1XbKlT5ph7G 6ncGtBA5B6/3epBjIWux0jxD8rCnVVqNQOxwQ35AnZDackXDdX2h9/OXMPukxiMI eLEVN6StVNlQpyR8Alvs3f6i27OZYly2wQKsTthGowkydkx17w6UnPz5j+nQpy0S lC9IAWA= -----END CERTIFICATE-----Generated at Mon Mar 2 06:16:31 2026 by rpki-client