$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/94FE3AB6D55011EF8A1E1855C4F9AE02.roa File: 94FE3AB6D55011EF8A1E1855C4F9AE02.roa (raw, json) Hash identifier: WqjKBxQe2fFRZs4kqddr9GvMdc6frPevC+o56pVgm04= Subject key identifier: 9D:2A:B8:E0:7D:49:4D:6C:C1:B1:2D:27:41:04:26:B5:E3:11:F4:EC Certificate issuer: /CN=A91C7A69/serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Certificate serial: 03C8 Authority key identifier: CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/94FE3AB6D55011EF8A1E1855C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:25:14 +0000 ROA not before: Sat 11 Oct 2025 03:28:01 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 153494 IP address blocks: 43.249.76.0/22 maxlen: 24 103.40.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 968 (0x3c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7A69, serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Validity Not Before: Oct 11 03:28:01 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a44c4a-6f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:10:83:3c:2b:2d:c3:c9:d6:a8:c8:99:ad:7e: 1a:2a:0d:4e:05:59:27:86:1c:fd:f5:67:6f:5a:06: 67:68:e1:ef:de:2c:ab:89:79:a4:c8:d5:99:d6:6d: 7d:47:ae:b4:15:09:ba:ea:55:c6:b8:69:99:bc:07: ff:b5:05:fe:bb:51:9f:f8:da:5c:b6:58:a0:35:ae: 29:cd:d1:14:d9:06:ef:f9:42:a6:f3:f6:26:37:1f: bf:43:7b:0e:72:cd:5f:b8:fb:3c:5f:c4:2b:5b:e3: da:cd:21:3c:ef:71:42:b8:a3:5a:d1:3c:67:93:8f: 57:23:60:b2:3d:3b:99:ff:ef:e8:0a:5f:ac:eb:3a: 8f:93:b8:aa:d1:d9:ee:41:01:f0:7b:a9:03:e4:f3: ca:bd:ba:bd:7f:37:b3:06:20:3c:4c:26:0f:41:8b: 0c:aa:1c:10:f9:1b:ce:50:2a:44:65:c0:ff:8b:28: f6:b7:ae:dc:b4:33:61:d7:89:1d:21:4c:9c:01:2f: e0:c3:90:2e:3e:a6:7a:bf:7a:9b:99:fc:53:3a:30: 54:7a:16:76:77:68:7f:8e:f8:61:4d:39:cf:6d:7e: ef:03:70:2a:87:f3:e6:98:2f:f5:04:74:f7:a2:e1: ab:dd:61:ea:ba:44:83:c9:ba:a4:98:c2:29:eb:30: 02:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2A:B8:E0:7D:49:4D:6C:C1:B1:2D:27:41:04:26:B5:E3:11:F4:EC X509v3 Authority Key Identifier: keyid:CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/94FE3AB6D55011EF8A1E1855C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.249.76.0/22 103.40.152.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:5d:68:20:a6:65:fa:75:83:d1:96:52:7a:d5:17:03:67:64: b6:c9:a3:dc:ae:9b:ff:85:58:a0:0e:95:83:f1:32:93:42:30: 5b:63:e4:e3:28:e5:f3:af:d8:78:f9:d5:1b:c8:8c:51:80:c5: 86:cc:d2:23:11:2e:62:36:c9:15:9e:e2:e1:82:cf:dd:86:a7: 59:b8:f1:14:f8:31:65:6a:ec:8f:18:7b:42:d8:be:a7:31:0d: fa:b4:2c:7b:d7:12:1d:3c:c2:94:85:85:06:09:83:39:e2:c7: fd:c4:e3:74:e4:ed:8c:ae:64:9c:29:c2:f1:c9:32:6c:b2:eb: 56:4b:b3:58:b1:05:dc:96:22:82:36:3a:76:89:7e:cb:23:8d: 6d:33:cd:be:c5:2b:09:af:b9:23:bc:e3:8b:b9:40:b1:05:92: 4e:ef:69:45:a0:c4:ba:b8:bd:13:ce:02:3f:e5:fb:f3:a3:44: c0:39:fd:b3:6b:49:e1:9c:9b:d9:0a:f5:aa:ba:ff:d9:7a:bf: c0:af:76:97:67:9b:c8:41:15:09:fd:fa:6f:d5:c0:6f:03:96: db:d7:d0:cf:44:05:47:c3:7b:89:40:a0:88:51:4a:47:67:a8: b7:cf:bd:75:56:fc:14:ec:2b:27:17:95:42:a7:7d:18:8c:97: 85:fd:53:1e -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICA8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdBNjkxMTAvBgNVBAUTKENCOUQ0MUE2REE5NkY3NkE0RkYwNTg2QjVFOEE4ODlG QzAyMzU0NTcwHhcNMjUxMDExMDMyODAxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGM0YS02Zjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxCDPCstw8nWqMiZrX4aKg1OBVknhhz99WdvWgZnaOHv3iyriXmkyNWZ1m19 R660FQm66lXGuGmZvAf/tQX+u1Gf+NpctligNa4pzdEU2Qbv+UKm8/YmNx+/Q3sO cs1fuPs8X8QrW+PazSE873FCuKNa0Txnk49XI2CyPTuZ/+/oCl+s6zqPk7iq0dnu QQHwe6kD5PPKvbq9fzezBiA8TCYPQYsMqhwQ+RvOUCpEZcD/iyj2t67ctDNh14kd IUycAS/gw5AuPqZ6v3qbmfxTOjBUehZ2d2h/jvhhTTnPbX7vA3Aqh/PmmC/1BHT3 ouGr3WHqukSDybqkmMIp6zAC2wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFJ0quOB9 SU1swbEtJ0EEJrXjEfTsMB8GA1UdIwQYMBaAFMudQabalvdqT/BYa16KiJ/AI1RX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0E2OS84QUYzRDVCMkM2 MDMxMUVDOEIwRDVEM0RDNEY5QUUwMi95NTFCcHRxVzkycFA4RmhyWG9xSW44QWpW RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1MUJwdHFXOTJwUDhGaHJYb3FJbjhBalZGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzdBNjkvOEFGM0Q1QjJDNjAzMTFFQzhCMEQ1RDNEQzRGOUFFMDIvOTRGRTNBQjZE NTUwMTFFRjhBMUUxODU1QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK/lMAwQCZyiYMA0GCSqGSIb3DQEBCwUAA4IBAQCfXWggpmX6dYPR llJ61RcDZ2S2yaPcrpv/hVigDpWD8TKTQjBbY+TjKOXzr9h4+dUbyIxRgMWGzNIj ES5iNskVnuLhgs/dhqdZuPEU+DFlauyPGHtC2L6nMQ36tCx71xIdPMKUhYUGCYM5 4sf9xON05O2MrmScKcLxyTJssutWS7NYsQXcliKCNjp2iX7LI41tM82+xSsJr7kj vOOLuUCxBZJO72lFoMS6uL0TzgI/5fvzo0TAOf2za0nhnJvZCvWquv/Zer/Ar3aX Z5vIQRUJ/fpv1cBvA5bb19DPRAVHw3uJQKCIUUpHZ6i3z711VvwU7CsnF5VCp30Y jJeF/VMe -----END CERTIFICATE-----Generated at Mon Mar 2 06:17:11 2026 by rpki-client