$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/C29855340DC711EFA3C7527AC4F9AE02.roa File: C29855340DC711EFA3C7527AC4F9AE02.roa (raw, json) Hash identifier: DSgja3fpHXBsFiMbCbZVufrEv+b68fhoAmeX4OBVhcA= Subject key identifier: 79:81:30:8B:F4:C2:BD:3C:AD:66:76:EF:14:11:0A:88:B7:2E:21:C5 Certificate issuer: /CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Certificate serial: 0A35 Authority key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/C29855340DC711EFA3C7527AC4F9AE02.roa Signing time: Wed 25 Feb 2026 10:36:20 +0000 ROA not before: Wed 25 Feb 2026 10:36:20 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 198247 IP address blocks: 43.225.96.0/24 maxlen: 24 103.244.134.0/24 maxlen: 24 103.244.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 20:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2613 (0xa35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A14, serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Validity Not Before: Feb 25 10:36:20 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=699ed0a4-b14c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:92:1e:de:91:b6:59:f0:8e:51:ef:cd:29:43: de:aa:f4:bf:4f:5b:23:5d:91:b1:7a:4c:26:37:12: 9b:9a:3c:ce:8c:5d:0a:6b:55:30:25:dd:66:74:23: 4c:38:d8:fb:c3:6a:5d:02:4e:42:63:1f:92:d6:2c: 43:7c:d7:74:72:92:2a:67:39:02:17:71:db:3e:fa: bd:09:06:4d:e6:a1:62:f5:f6:ef:cd:cb:33:c3:fb: 77:34:bc:90:6c:47:2f:5c:fb:2f:47:44:28:75:30: 2a:08:49:b7:b7:31:9a:37:1c:84:0d:53:bb:88:62: 1a:f6:c5:6c:9e:f5:56:0d:4f:6e:5e:91:70:39:8c: cb:da:5a:bb:6a:f0:78:c0:33:f3:0a:56:f2:65:7f: 4c:a8:9b:89:d1:51:f5:01:05:8a:50:ce:5e:f1:f0: 9b:db:43:0a:4d:f0:55:9c:41:34:4e:3d:32:18:c0: e0:e2:de:78:0c:fe:40:a7:23:70:a1:38:1d:c6:35: c0:66:7d:13:da:a3:df:41:7d:6c:a3:61:ad:47:97: c8:4a:aa:e4:2d:5d:b5:03:d5:9c:b0:66:d5:3c:be: f8:8d:c1:ed:0f:b2:eb:36:f8:77:aa:da:ed:88:d7: 47:63:b0:50:c4:c6:20:74:35:0c:9a:00:ee:26:21: e5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:81:30:8B:F4:C2:BD:3C:AD:66:76:EF:14:11:0A:88:B7:2E:21:C5 X509v3 Authority Key Identifier: keyid:59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/C29855340DC711EFA3C7527AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.225.96.0/24 103.244.134.0/23 Signature Algorithm: sha256WithRSAEncryption a3:0c:d8:da:e3:3e:f7:e1:af:fa:28:e5:50:1e:02:1c:f6:00: ee:a7:8d:bb:9a:27:b7:d5:45:99:92:08:4f:8b:53:df:a0:34: cb:a3:b7:27:a1:8b:ba:40:1f:0b:43:cf:9c:31:86:f0:cd:17: 00:76:5b:70:4a:bd:24:57:19:ce:44:a1:c9:23:93:bc:63:cf: 64:43:9a:79:fc:e4:06:42:e0:d5:da:7a:cc:ec:f3:18:96:c9: d8:3e:89:cf:f6:9b:96:14:8a:8c:4c:91:1f:e7:92:0e:f5:85: e3:c2:11:d6:50:6c:00:0b:7d:ad:14:ab:15:7c:c9:60:c4:d3: 9d:64:83:70:35:9a:9d:d1:30:2d:47:de:b0:5e:58:65:81:ea: ae:ec:26:53:cf:07:f7:24:5a:2a:b0:cc:21:28:dc:37:64:61: e1:a1:2e:c4:47:9d:7a:59:1c:f2:65:9b:f0:b3:34:03:01:60: 58:87:4e:b9:f5:34:cc:87:9e:23:11:99:86:d2:1d:a2:51:37: 64:5b:19:5c:12:49:30:f6:58:10:d4:ec:e7:f4:5d:21:2f:f9: 54:c0:46:a3:1c:45:9a:0e:ea:5d:ef:c1:39:cd:37:a7:36:5a: bb:95:94:c9:f5:14:61:7c:0a:e1:4f:d0:81:59:9e:42:f2:c5: b4:11:1f:f9 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QzFBMTQxMTAvBgNVBAUTKDU5OERENUEzOUFFNDc3NjU4QUQ1QkNCRkUzNjI2NEEx QTYxRDY3MDgwHhcNMjYwMjI1MTAzNjIwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTllZDBhNC1iMTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3JIe3pG2WfCOUe/NKUPeqvS/T1sjXZGxekwmNxKbmjzOjF0Ka1UwJd1mdCNM ONj7w2pdAk5CYx+S1ixDfNd0cpIqZzkCF3HbPvq9CQZN5qFi9fbvzcszw/t3NLyQ bEcvXPsvR0QodTAqCEm3tzGaNxyEDVO7iGIa9sVsnvVWDU9uXpFwOYzL2lq7avB4 wDPzClbyZX9MqJuJ0VH1AQWKUM5e8fCb20MKTfBVnEE0Tj0yGMDg4t54DP5ApyNw oTgdxjXAZn0T2qPfQX1so2GtR5fISqrkLV21A9WcsGbVPL74jcHtD7LrNvh3qtrt iNdHY7BQxMYgdDUMmgDuJiHlxwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHmBMIv0 wr08rWZ27xQRCoi3LiHFMB8GA1UdIwQYMBaAFFmN1aOa5HdlitW8v+NiZKGmHWcI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUExNC9GN0U4NjQ0NjhG QkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2QyV0sxYnlfNDJKa29hWWRa d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZM1ZvNXJrZDJXSzFieV80Mkprb2FZZFp3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzFBMTQvRjdFODY0NDY4RkJDMTFFQUE4QzMxMjdCQzRGOUFFMDIvQzI5ODU1MzQw REM3MTFFRkEzQzc1MjdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAAr4WADBAFn9IYwDQYJKoZIhvcNAQELBQADggEBAKMM2Nrj Pvfhr/oo5VAeAhz2AO6njbuaJ7fVRZmSCE+LU9+gNMujtyehi7pAHwtDz5wxhvDN FwB2W3BKvSRXGc5Eockjk7xjz2RDmnn85AZC4NXaeszs8xiWydg+ic/2m5YUioxM kR/nkg71hePCEdZQbAALfa0UqxV8yWDE051kg3A1mp3RMC1H3rBeWGWB6q7sJlPP B/ckWiqwzCEo3DdkYeGhLsRHnXpZHPJlm/CzNAMBYFiHTrn1NMyHniMRmYbSHaJR N2RbGVwSSTD2WBDU7Of0XSEv+VTARqMcRZoO6l3vwTnNN6c2WruVlMn1FGF8CuFP 0IFZnkLyxbQRH/k= -----END CERTIFICATE-----Generated at Mon Mar 2 00:45:32 2026 by rpki-client