$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/98DB93A4301011EEA92BE919C4F9AE02.roa File: 98DB93A4301011EEA92BE919C4F9AE02.roa (raw, json) Hash identifier: HBUiYv+DorpnGYRjgJCfBY6fPztxGiSfiO9QyaR1zz4= Subject key identifier: B1:4E:4C:C7:A9:78:68:AE:E6:E4:D8:EA:68:C3:64:F4:54:D9:F3:57 Certificate issuer: /CN=A91D5BDA/serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5 Certificate serial: 01E9 Authority key identifier: D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/98DB93A4301011EEA92BE919C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:37:59 +0000 ROA not before: Tue 01 Apr 2025 04:30:08 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 58907 IP address blocks: 43.230.108.0/22 maxlen: 22 43.230.108.0/24 maxlen: 24 43.230.109.0/24 maxlen: 24 43.230.110.0/24 maxlen: 24 43.230.111.0/24 maxlen: 24 103.249.140.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5BDA, serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5 Validity Not Before: Apr 1 04:30:08 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a3dec6-bcfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:27:7f:bf:f8:21:03:3e:a6:21:b6:d1:5e:47: cd:84:8b:c3:65:4b:e7:5a:90:a1:2a:0b:6a:6a:90: 5c:27:d6:e7:e3:8e:ea:2a:ea:20:8d:c4:cb:33:70: 33:d5:1f:6e:6a:3c:6b:f1:9e:21:ba:c9:58:a0:93: 4d:22:3f:68:cf:a8:aa:36:5b:1f:da:90:c7:e7:aa: c1:73:9b:10:0a:a0:19:db:65:48:f4:b2:a9:dc:36: 58:55:97:f4:e1:5b:6c:58:18:ec:b1:d5:47:d9:c3: 49:f9:cb:cc:d5:1d:d2:fc:ce:01:56:47:58:90:a5: 22:2f:4c:ab:cb:09:25:ca:b1:aa:3d:0d:b5:f1:9d: b7:0a:02:b4:45:3e:87:99:7b:48:a0:91:a1:d6:4a: e8:e0:17:98:e9:ef:b9:5b:c9:41:87:e4:27:76:ac: 66:c9:7b:c9:cb:f9:63:fd:e2:17:1f:9c:2d:af:1a: a1:01:cd:6d:84:0b:86:95:51:5f:46:95:4a:eb:d1: 16:b5:28:aa:c8:fd:23:c9:c2:4b:84:04:5e:76:50: 14:c8:73:b9:1a:b6:1c:5b:33:2b:e9:52:65:7e:af: 45:a0:c9:fc:31:2c:d2:aa:6d:e5:92:86:6e:97:17: af:d7:c3:88:03:2b:5a:ca:82:16:4d:05:02:fc:61: be:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4E:4C:C7:A9:78:68:AE:E6:E4:D8:EA:68:C3:64:F4:54:D9:F3:57 X509v3 Authority Key Identifier: keyid:D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/98DB93A4301011EEA92BE919C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.230.108.0/22 103.249.140.0/22 Signature Algorithm: sha256WithRSAEncryption 40:81:26:67:56:0e:33:f1:6a:7e:9a:ee:24:b0:ea:86:dc:2e: 3e:e4:67:62:32:4c:21:1a:e3:88:bc:43:0d:9f:9f:56:f4:42: 2e:f6:81:f6:e3:91:67:22:73:df:1b:c2:37:16:7b:28:04:30: fb:38:bb:5f:ec:ed:4e:4b:d7:a3:0b:eb:76:01:14:67:d0:f7: 8d:1a:dd:3b:26:50:38:e4:41:93:5d:ed:94:3b:93:c0:76:d0: 42:c1:45:94:98:0b:fd:4a:bf:97:f9:18:1a:44:ea:5b:16:8e: 44:bb:2f:a1:c3:a8:30:50:77:02:a8:89:a3:f2:9c:6d:ff:2e: 7d:f8:0d:92:59:49:aa:57:cc:d3:85:51:af:04:6d:1c:36:b7: 45:e1:56:10:5b:82:a6:8e:ba:db:e5:0c:94:64:9a:7a:cf:ba: 30:a8:f2:cc:be:13:ab:58:2a:a3:ad:30:27:30:58:b7:4f:10: bf:5d:8b:65:a5:14:cf:f9:71:27:1d:f6:c4:de:b8:68:2d:01: 35:32:02:c3:ba:b1:cb:a3:a9:18:ec:92:16:f3:9e:7f:eb:cc: 10:9e:e0:66:76:ad:17:60:de:dc:5b:33:66:70:32:6c:c1:b4: 59:2f:d3:f1:2f:e5:70:48:2b:0e:aa:9b:f0:41:27:30:0d:c2: e4:90:9d:28 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVCREExMTAvBgNVBAUTKEQ4QUYwN0Q0M0E5QjhCQkI4MUQ2MEU0QzE3N0VBODE4 RUM4QjczRTUwHhcNMjUwNDAxMDQzMDA4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZGVjNi1iY2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7id/v/ghAz6mIbbRXkfNhIvDZUvnWpChKgtqapBcJ9bn447qKuogjcTLM3Az 1R9uajxr8Z4huslYoJNNIj9oz6iqNlsf2pDH56rBc5sQCqAZ22VI9LKp3DZYVZf0 4VtsWBjssdVH2cNJ+cvM1R3S/M4BVkdYkKUiL0yrywklyrGqPQ218Z23CgK0RT6H mXtIoJGh1kro4BeY6e+5W8lBh+QndqxmyXvJy/lj/eIXH5wtrxqhAc1thAuGlVFf RpVK69EWtSiqyP0jycJLhARedlAUyHO5GrYcWzMr6VJlfq9FoMn8MSzSqm3lkoZu lxev18OIAytayoIWTQUC/GG+DwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFLFOTMep eGiu5uTY6mjDZPRU2fNXMB8GA1UdIwQYMBaAFNivB9Q6m4u7gdYOTBd+qBjsi3Pl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUJEQS9GNzNGMjBBNjMw MEYxMUVFODVFQTA0MTVDNEY5QUUwMi8ySzhIMURxYmk3dUIxZzVNRjM2b0dPeUxj LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJLOEgxRHFiaTd1QjFnNU1GMzZvR095TGMtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDVCREEvRjczRjIwQTYzMDBGMTFFRTg1RUEwNDE1QzRGOUFFMDIvOThEQjkzQTQz MDEwMTFFRUE5MkJFOTE5QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK+ZsAwQCZ/mMMA0GCSqGSIb3DQEBCwUAA4IBAQBAgSZnVg4z8Wp+ mu4ksOqG3C4+5GdiMkwhGuOIvEMNn59W9EIu9oH245FnInPfG8I3FnsoBDD7OLtf 7O1OS9ejC+t2ARRn0PeNGt07JlA45EGTXe2UO5PAdtBCwUWUmAv9Sr+X+RgaROpb Fo5Euy+hw6gwUHcCqImj8pxt/y59+A2SWUmqV8zThVGvBG0cNrdF4VYQW4Kmjrrb 5QyUZJp6z7owqPLMvhOrWCqjrTAnMFi3TxC/XYtlpRTP+XEnHfbE3rhoLQE1MgLD urHLo6kY7JIW855/68wQnuBmdq0XYN7cWzNmcDJswbRZL9PxL+VwSCsOqpvwQScw DcLkkJ0o -----END CERTIFICATE-----Generated at Mon Mar 2 06:16:28 2026 by rpki-client