$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/1BE0AAE6AE9A11F0B8FE6621C4F9AE02.roa File: 1BE0AAE6AE9A11F0B8FE6621C4F9AE02.roa (raw, json) Hash identifier: qtDGFMhOJ0VDlUc12bIr/PPNosh512QuOLF2MOl6QGc= Subject key identifier: C3:FF:D7:97:04:14:99:B4:35:A0:43:7B:12:35:06:2A:5C:96:F4:42 Certificate issuer: /CN=A91BF27F/serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F Certificate serial: 2202 Authority key identifier: 59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/1BE0AAE6AE9A11F0B8FE6621C4F9AE02.roa Signing time: Sat 28 Mar 2026 16:23:07 +0000 ROA not before: Sat 28 Mar 2026 16:23:07 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 31898 IP address blocks: 43.243.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8706 (0x2202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF27F, serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F Validity Not Before: Mar 28 16:23:07 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69c8006b-fd91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:43:86:67:45:5c:80:73:d5:65:e5:52:e4:c8: ba:87:14:a9:f8:ab:6d:86:6f:12:e8:57:70:c8:e0: ab:53:9e:81:8a:90:a2:cc:82:b4:e1:05:0b:f6:fe: ca:f1:54:5f:a8:4e:c2:db:67:85:d2:56:34:23:37: 2c:a5:d8:4c:ad:2e:9b:26:28:9c:fe:4b:ae:2a:5b: da:42:13:01:a6:33:57:fb:8f:f2:40:f4:12:0c:70: c5:ac:d5:be:0d:35:85:fb:12:c6:ae:b1:e5:7c:fe: 3c:94:2b:c9:c7:a0:10:a9:f1:47:1c:b9:56:b9:a7: 69:bd:76:d0:28:2b:45:f2:b9:c0:05:99:8e:9d:43: 0a:61:9f:14:59:c1:e2:45:61:44:7e:01:86:a9:02: 24:b5:a8:45:2a:7c:2f:25:a9:00:63:cf:d1:04:ed: 68:50:4f:d6:d9:bc:67:31:58:a5:c0:ce:6a:3c:7d: 86:c1:ad:0c:3f:7b:b5:1f:e2:45:e1:16:69:74:e4: b6:92:52:5b:87:0e:5f:45:ed:38:65:84:fb:76:4a: db:75:5a:ae:aa:00:7e:63:e8:8a:25:ce:ec:75:00: 05:76:08:66:ed:15:68:77:89:11:f1:c8:b7:19:62: ca:4b:1f:f1:51:c6:43:22:51:ab:39:99:c2:f2:63: bd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FF:D7:97:04:14:99:B4:35:A0:43:7B:12:35:06:2A:5C:96:F4:42 X509v3 Authority Key Identifier: keyid:59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/1BE0AAE6AE9A11F0B8FE6621C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.243.116.0/22 Signature Algorithm: sha256WithRSAEncryption 61:94:25:03:18:42:34:1b:3e:db:1e:70:93:bc:a4:88:f7:05: 75:f7:24:c0:fc:10:5f:aa:09:83:cc:c6:a3:73:7a:3d:b7:54: 49:87:23:de:e4:7d:77:fa:cf:b7:b4:3e:ef:87:cc:b7:4c:d3: 45:df:05:ba:b5:49:db:4d:84:7d:0e:24:eb:d8:8b:9a:2f:08: 21:fd:aa:af:65:9e:0e:8a:32:a7:e4:27:38:c9:00:21:f3:77: 94:30:65:1f:0a:35:99:64:da:d5:e9:22:d5:0b:01:18:bf:e7: 50:83:b5:a7:77:10:33:06:a2:10:0e:cf:41:ff:f9:39:ea:7c: 5a:2c:fc:27:65:d2:c7:cd:03:97:dd:24:d0:fb:c3:6c:57:5c: df:a5:ec:fa:8b:bf:97:b5:68:6e:13:2c:7d:a1:6f:d9:35:e4: 80:f3:de:31:35:59:41:6a:72:37:fc:12:8c:ad:10:a4:93:3c: d3:fd:28:5d:83:0a:3b:a0:5a:f5:39:e2:c9:1e:48:12:7f:94: 28:92:2d:ab:66:2e:73:a1:c8:9e:2d:c9:c1:ba:96:7e:65:11: 43:05:d4:37:83:e8:3e:39:79:46:26:21:7f:ed:c6:e0:02:90: 95:07:7b:b7:70:76:d3:45:a0:4a:50:e7:41:45:b1:26:ae:97: 3e:c6:ff:5e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICIgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyN0YxMTAvBgNVBAUTKDU5QTY0NzI4RUUwMUQ2QUUzNEZFNzdCMDFFODg1OUM4 MjA5N0U1N0YwHhcNMjYwMzI4MTYyMzA3WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWM4MDA2Yi1mZDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA20OGZ0VcgHPVZeVS5Mi6hxSp+Ktthm8S6FdwyOCrU56BipCizIK04QUL9v7K 8VRfqE7C22eF0lY0IzcspdhMrS6bJiic/kuuKlvaQhMBpjNX+4/yQPQSDHDFrNW+ DTWF+xLGrrHlfP48lCvJx6AQqfFHHLlWuadpvXbQKCtF8rnABZmOnUMKYZ8UWcHi RWFEfgGGqQIktahFKnwvJakAY8/RBO1oUE/W2bxnMVilwM5qPH2Gwa0MP3u1H+JF 4RZpdOS2klJbhw5fRe04ZYT7dkrbdVquqgB+Y+iKJc7sdQAFdghm7RVod4kR8ci3 GWLKSx/xUcZDIlGrOZnC8mO9vQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMP/15cE FJm0NaBDexI1BipclvRCMB8GA1UdIwQYMBaAFFmmRyjuAdauNP53sB6IWcggl+V/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI3Ri85QzMyNTZBMkU5 OEYxMUU1QjJBREM1NjdDNEY5QUUwMi9XYVpIS080QjFxNDBfbmV3SG9oWnlDQ1g1 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dhWkhLTzRCMXE0MF9uZXdIb2haeUNDWDVYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkYyN0YvOUMzMjU2QTJFOThGMTFFNUIyQURDNTY3QzRGOUFFMDIvMUJFMEFBRTZB RTlBMTFGMEI4RkU2NjIxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCK/N0MA0GCSqGSIb3DQEBCwUAA4IBAQBhlCUDGEI0Gz7bHnCTvKSI 9wV19yTA/BBfqgmDzMajc3o9t1RJhyPe5H13+s+3tD7vh8y3TNNF3wW6tUnbTYR9 DiTr2IuaLwgh/aqvZZ4OijKn5Cc4yQAh83eUMGUfCjWZZNrV6SLVCwEYv+dQg7Wn dxAzBqIQDs9B//k56nxaLPwnZdLHzQOX3STQ+8NsV1zfpez6i7+XtWhuEyx9oW/Z NeSA894xNVlBanI3/BKMrRCkkzzT/Shdgwo7oFr1OeLJHkgSf5Qoki2rZi5zocie LcnBupZ+ZRFDBdQ3g+g+OXlGJiF/7cbgApCVB3u3cHbTRaBKUOdBRbEmrpc+xv9e -----END CERTIFICATE-----Generated at Fri Apr 17 18:56:38 2026 by rpki-client