$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/703918CC69EA11EE83318C50C4F9AE02.roa File: 703918CC69EA11EE83318C50C4F9AE02.roa (raw, json) Hash identifier: rFeU6+VRmAkqArzk8m/u7RZ8+bahOhmzZ3Bcpw03nLw= Subject key identifier: 0D:60:7A:80:B2:D8:F3:3F:F9:63:77:89:F9:1D:CE:1F:B5:30:8E:A1 Certificate issuer: /CN=A91BA9CE/serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72 Certificate serial: 0D1C Authority key identifier: E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/703918CC69EA11EE83318C50C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:01:52 +0000 ROA not before: Wed 04 Jun 2025 18:41:53 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 138598 IP address blocks: 43.239.101.0/24 maxlen: 24 2406:f900:a::/48 maxlen: 48 2406:f900:b::/48 maxlen: 48 2406:f900:c::/48 maxlen: 48 2406:f900:d::/48 maxlen: 48 2406:f900:e::/48 maxlen: 48 2406:f900:f::/48 maxlen: 48 2406:f900:10::/48 maxlen: 48 2406:f900:11::/48 maxlen: 48 2406:f900:12::/48 maxlen: 48 2406:f900:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.crl rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:24:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3356 (0xd1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA9CE, serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72 Validity Not Before: Jun 4 18:41:53 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a47100-f2f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b0:e8:16:3b:fb:4f:f6:ea:c6:ce:5c:96:79: 3b:83:c5:4c:15:03:29:1b:af:08:26:da:70:38:d6: b9:c6:d9:9a:17:d1:67:02:90:27:f6:16:d4:35:66: 11:38:44:c3:98:b2:fa:1d:a6:54:d4:5c:e4:2d:65: 8c:f0:c2:50:fa:6c:fe:bd:62:e4:27:80:f2:b4:d0: 66:86:b6:bd:20:a8:2d:9b:b7:a1:b4:8b:69:a9:c0: 5e:3f:b2:c0:cc:94:ff:36:f0:f2:11:ac:f1:58:9f: bd:f2:16:ef:23:c0:0f:d2:b9:aa:f1:86:db:f6:04: e3:96:a9:f3:9f:a6:5f:a6:5f:ca:24:38:6f:03:47: d8:64:26:73:3d:68:e1:1b:45:ab:39:d4:d3:34:f6: ca:ad:25:a9:c4:c6:30:5d:35:f3:4e:f8:1a:0f:17: c4:62:b3:b7:0f:9d:c3:f8:f2:8e:bb:5e:ca:fb:2c: d2:23:22:fd:09:ca:c9:b3:89:4a:0c:45:d0:05:c2: ac:f0:69:ec:bd:00:37:5e:99:a2:bd:fc:96:18:d5: a7:b1:20:bb:2f:7d:7f:ea:a2:12:94:5d:29:73:4c: c3:f6:85:af:ae:65:60:ed:61:6e:54:13:ca:52:0e: eb:cd:9d:0e:90:d3:02:e7:b6:3e:bf:04:ed:f7:74: b9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:60:7A:80:B2:D8:F3:3F:F9:63:77:89:F9:1D:CE:1F:B5:30:8E:A1 X509v3 Authority Key Identifier: keyid:E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/703918CC69EA11EE83318C50C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.239.101.0/24 IPv6: 2406:f900:a::-2406:f900:13:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 44:80:f2:48:30:f8:37:77:51:8d:14:55:45:2b:3e:ac:db:0a: 24:5d:25:d1:f5:ea:f2:b3:cb:e9:e7:6b:bf:ba:3a:af:a2:74: d0:75:ce:45:85:dc:99:b4:38:88:61:16:7a:fd:9b:62:35:ac: 18:47:03:f2:9c:51:e2:73:72:dd:27:89:2d:cb:79:ea:ae:bc: fa:d4:0c:2b:93:15:64:67:69:c4:c5:84:07:cd:f6:8b:a5:cb: b9:c7:ed:74:1d:a5:f1:0a:b3:81:dc:9e:6c:f2:a2:42:8a:0b: dd:9a:72:c5:bb:90:68:d5:70:0f:64:90:84:e6:af:ff:98:e6: 9a:c7:db:57:55:13:44:4d:69:9c:eb:a2:d3:96:c9:16:d9:29: f1:ae:7e:3c:7c:71:ee:3a:48:12:34:0c:f5:f2:d4:d3:b6:9d: c8:76:a1:48:6a:22:36:05:b7:36:e3:13:9d:55:ed:b3:ab:35: 5a:08:38:a4:fe:28:5b:13:cd:47:03:32:9e:ef:25:28:33:6d: 00:c4:75:51:83:55:8c:d6:81:a2:cc:59:25:cc:8a:e9:21:0f: 4d:d7:bc:e3:46:78:1f:c5:d0:dc:d6:44:bf:c7:a6:82:2c:37: 30:3c:4f:a2:64:68:e6:59:71:4a:a8:b1:02:34:a3:9b:b0:73: 6f:68:5a:c5 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgICDRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE5Q0UxMTAvBgNVBAUTKEU5NjkwQkJCOUYzNkMwOUQ0QzJFRDRGNjZDRjU1REMz NTI3NUZCNzIwHhcNMjUwNjA0MTg0MTUzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzEwMC1mMmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0rDoFjv7T/bqxs5clnk7g8VMFQMpG68IJtpwONa5xtmaF9FnApAn9hbUNWYR OETDmLL6HaZU1FzkLWWM8MJQ+mz+vWLkJ4DytNBmhra9IKgtm7ehtItpqcBeP7LA zJT/NvDyEazxWJ+98hbvI8AP0rmq8Ybb9gTjlqnzn6Zfpl/KJDhvA0fYZCZzPWjh G0WrOdTTNPbKrSWpxMYwXTXzTvgaDxfEYrO3D53D+PKOu17K+yzSIyL9CcrJs4lK DEXQBcKs8GnsvQA3XpmivfyWGNWnsSC7L31/6qISlF0pc0zD9oWvrmVg7WFuVBPK Ug7rzZ0OkNMC57Y+vwTt93S5nQIDAQABo4ICfDCCAngwHQYDVR0OBBYEFA1geoCy 2PM/+WN3ifkdzh+1MI6hMB8GA1UdIwQYMBaAFOlpC7ufNsCdTC7U9mz1XcNSdfty MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTlDRS81NEYxNURBNDAx MTExMUVBQkQ0RjBBNDlDNEY5QUUwMi82V2tMdTU4MndKMU1MdFQyYlBWZHcxSjEt M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZXa0x1NTgyd0oxTUx0VDJiUFZkdzFKMS0zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkE5Q0UvNTRGMTVEQTQwMTExMTFFQUJENEYwQTQ5QzRGOUFFMDIvNzAzOTE4Q0M2 OUVBMTFFRTgzMzE4QzUwQzRGOUFFMDIucm9hMDsGCCsGAQUFBwEHAQH/BCwwKjAM BAIAATAGAwQAK+9lMBoEAgACMBQwEgMHASQG+QAACgMHAiQG+QAAEDANBgkqhkiG 9w0BAQsFAAOCAQEARIDySDD4N3dRjRRVRSs+rNsKJF0l0fXq8rPL6edrv7o6r6J0 0HXORYXcmbQ4iGEWev2bYjWsGEcD8pxR4nNy3SeJLct56q68+tQMK5MVZGdpxMWE B832i6XLucftdB2l8QqzgdyebPKiQooL3ZpyxbuQaNVwD2SQhOav/5jmmsfbV1UT RE1pnOui05bJFtkp8a5+PHxx7jpIEjQM9fLU07adyHahSGoiNgW3NuMTnVXts6s1 Wgg4pP4oWxPNRwMynu8lKDNtAMR1UYNVjNaBosxZJcyK6SEPTde840Z4H8XQ3NZE v8emgiw3MDxPomRo5llxSqixAjSjm7Bzb2haxQ== -----END CERTIFICATE-----Generated at Mon Mar 2 04:04:08 2026 by rpki-client