$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/51273D9A08EE11E99E30172AC4F9AE02.roa File: 51273D9A08EE11E99E30172AC4F9AE02.roa (raw, json) Hash identifier: mlIgB88PCS5Mz8+wugRjkrAqhDyAGod+aFCp2Xz2bCI= Subject key identifier: 51:45:6E:E5:9F:62:79:6C:54:57:31:83:41:6A:3E:AE:08:04:06:42 Certificate issuer: /CN=A91D7454/serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Certificate serial: 11E3 Authority key identifier: 33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/51273D9A08EE11E99E30172AC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:34:22 +0000 ROA not before: Wed 30 Apr 2025 17:26:15 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 132615 IP address blocks: 43.250.224.0/22 maxlen: 22 103.17.20.0/22 maxlen: 22 103.17.20.0/24 maxlen: 24 103.17.21.0/24 maxlen: 24 103.17.22.0/24 maxlen: 24 103.17.23.0/24 maxlen: 24 2001:df0:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:08:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4579 (0x11e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7454, serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Validity Not Before: Apr 30 17:26:15 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a4243e-5892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:91:6e:b9:16:58:50:53:a3:31:4c:4a:48:f3: 04:56:08:75:ed:78:7a:94:29:e2:4f:8e:5c:0f:3e: 05:92:c2:a2:9c:33:5f:04:50:1f:c1:b2:02:79:3c: c3:f5:16:ea:0a:90:53:a1:f6:b4:ea:93:23:48:3f: 2f:96:66:f8:80:49:d4:82:50:cd:9e:98:71:73:4e: 04:70:de:77:4c:24:c4:d6:ca:80:99:ef:04:f2:09: ab:12:6b:8f:38:c7:71:a4:a1:9b:32:af:e8:c3:aa: 98:44:70:02:c9:0f:68:9e:73:2c:a7:46:78:2d:b0: 97:5d:e4:17:bd:b7:e3:51:49:07:ce:f3:ef:e9:bd: d4:39:a0:e9:ae:c4:3c:3d:0d:b1:6c:50:ae:b1:bc: 1e:1a:c2:8d:74:d6:ff:43:61:02:c1:07:eb:27:4e: 7f:68:78:f3:b1:dd:01:ec:87:47:4e:62:81:2a:13: f2:9c:05:56:46:05:d4:eb:da:78:1a:95:63:34:db: e3:8d:c9:30:49:b8:38:67:9a:88:02:40:b3:2b:47: e3:a3:3e:d4:54:a6:21:41:cc:24:ae:05:c0:8d:88: 81:e7:0f:0e:03:83:43:44:bf:90:1c:2a:37:a5:1d: 5f:26:16:5b:91:44:3d:4f:17:c3:8e:af:c7:db:a5: 79:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:45:6E:E5:9F:62:79:6C:54:57:31:83:41:6A:3E:AE:08:04:06:42 X509v3 Authority Key Identifier: keyid:33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/51273D9A08EE11E99E30172AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.250.224.0/22 103.17.20.0/22 IPv6: 2001:df0:3000::/48 Signature Algorithm: sha256WithRSAEncryption 58:2d:98:f7:a7:dc:ab:0e:d2:58:d7:97:47:e0:1c:87:06:17: 65:ae:51:cc:44:e2:cd:b9:7d:b4:44:3c:0d:37:85:69:0b:6a: f9:83:1b:4c:d3:72:2a:45:e0:54:30:90:d1:c2:b2:0a:36:1c: b9:99:b7:f1:68:b0:f1:0c:2a:5f:1e:23:aa:0e:38:46:66:a7: 38:15:9f:9e:d9:fb:73:ac:ad:cd:c5:37:52:ef:40:ed:2f:c0: f0:27:b8:0e:33:5b:63:ff:2a:3f:34:60:81:62:8c:ff:aa:03: 2f:70:13:e5:c5:68:99:2c:3b:f1:c4:19:bb:8f:e8:7a:4a:9c: d8:63:d2:42:67:f2:44:2f:98:29:34:50:0e:17:ee:4d:d1:2a: 42:64:7a:a3:ff:98:f8:fc:97:5e:70:5d:75:25:a8:76:ee:0c: 21:cf:be:e6:20:c1:f4:5a:41:e7:1f:2c:ee:e9:77:57:4f:f6: 51:01:9a:7e:17:b1:c0:cc:e2:df:bc:8d:57:3c:34:f5:3b:b6: 47:e3:c4:f0:bd:01:4d:7c:70:be:a8:67:89:76:83:53:6a:72: f7:fb:54:fb:69:57:ed:5f:e7:69:a8:66:71:c4:31:71:25:c2: b2:90:7e:12:9b:c1:d0:2b:b3:f7:0d:ac:93:72:ad:cd:5e:c2: ad:75:09:33 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICEeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc0NTQxMTAvBgNVBAUTKDMzMTFCRjk3RTIxQjcyNkE5QzAwNTZCQkU0QTg1QjFG N0YyOTVGMzUwHhcNMjUwNDMwMTcyNjE1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjQzZS01ODkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZFuuRZYUFOjMUxKSPMEVgh17Xh6lCniT45cDz4FksKinDNfBFAfwbICeTzD 9RbqCpBTofa06pMjSD8vlmb4gEnUglDNnphxc04EcN53TCTE1sqAme8E8gmrEmuP OMdxpKGbMq/ow6qYRHACyQ9onnMsp0Z4LbCXXeQXvbfjUUkHzvPv6b3UOaDprsQ8 PQ2xbFCusbweGsKNdNb/Q2ECwQfrJ05/aHjzsd0B7IdHTmKBKhPynAVWRgXU69p4 GpVjNNvjjckwSbg4Z5qIAkCzK0fjoz7UVKYhQcwkrgXAjYiB5w8OA4NDRL+QHCo3 pR1fJhZbkUQ9TxfDjq/H26V5YwIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFFFFbuWf YnlsVFcxg0FqPq4IBAZCMB8GA1UdIwQYMBaAFDMRv5fiG3JqnABWu+SoWx9/KV81 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzQ1NC83OUM2MUU3QzA4 RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNtcWNBRmE3NUtoYkgzOHBY elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL014R19sLUliY21xY0FGYTc1S2hiSDM4cFh6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDc0NTQvNzlDNjFFN0MwOEVCMTFFOUFGOEJDRDIzQzRGOUFFMDIvNTEyNzNEOUEw OEVFMTFFOTlFMzAxNzJBQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQCK/rgAwQCZxEUMA8EAgACMAkDBwAgAQ3wMAAwDQYJKoZIhvcNAQEL BQADggEBAFgtmPen3KsO0ljXl0fgHIcGF2WuUcxE4s25fbREPA03hWkLavmDG0zT cipF4FQwkNHCsgo2HLmZt/FosPEMKl8eI6oOOEZmpzgVn57Z+3Osrc3FN1LvQO0v wPAnuA4zW2P/Kj80YIFijP+qAy9wE+XFaJksO/HEGbuP6HpKnNhj0kJn8kQvmCk0 UA4X7k3RKkJkeqP/mPj8l15wXXUlqHbuDCHPvuYgwfRaQecfLO7pd1dP9lEBmn4X scDM4t+8jVc8NPU7tkfjxPC9AU18cL6oZ4l2g1Nqcvf7VPtpV+1f52moZnHEMXEl wrKQfhKbwdArs/cNrJNyrc1ewq11CTM= -----END CERTIFICATE-----Generated at Mon Mar 2 09:14:54 2026 by rpki-client