$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/94B101721B8B11EEACEA736AC4F9AE02.roa File: 94B101721B8B11EEACEA736AC4F9AE02.roa (raw, json) Hash identifier: qKTt9ATlz/vyXKRzdg+bUvwyPMjVccPyHDh5rJ6vtFA= Subject key identifier: 23:68:E1:10:E4:E7:31:83:4C:C0:49:34:59:67:BE:3E:23:10:E3:83 Certificate issuer: /CN=A91D76E5/serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886 Certificate serial: 08EE Authority key identifier: 74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/94B101721B8B11EEACEA736AC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:05:02 +0000 ROA not before: Sun 02 Nov 2025 20:40:15 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 134555 IP address blocks: 43.247.80.0/22 maxlen: 24 103.23.174.0/24 maxlen: 24 103.87.38.0/23 maxlen: 24 103.235.188.0/22 maxlen: 24 103.236.203.0/24 maxlen: 24 202.52.54.0/23 maxlen: 24 203.25.32.0/22 maxlen: 24 2402:d840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2286 (0x8ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D76E5, serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886 Validity Not Before: Nov 2 20:40:15 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a4478d-6e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a3:38:54:a5:cf:5a:ff:29:fc:8a:cc:8f:53: a6:9e:95:7a:aa:15:e9:d9:54:8d:27:75:ac:66:ec: 74:dc:0c:4f:b9:d1:65:4b:a7:74:8a:1f:c8:f5:db: 19:ee:c7:53:69:3a:e3:99:4f:c8:39:72:4a:54:bc: 80:38:ad:3c:6b:d8:cd:30:be:73:df:a5:79:d5:45: 5e:0b:d4:6e:14:cb:94:ea:82:b3:c8:57:12:ce:f0: b0:4f:42:d9:5a:52:6d:40:b2:95:fc:d9:52:17:94: 98:0a:26:db:91:9b:84:e6:f5:03:3f:e8:11:88:03: 8b:a3:75:58:f8:28:30:e7:df:11:ae:64:b5:e0:45: ee:8b:eb:6a:85:8a:04:e2:b5:5f:57:b4:c0:3a:10: 82:e9:66:ac:15:3b:7a:fc:57:19:cb:18:51:5b:cb: 84:78:b9:75:a8:9c:d9:cd:73:27:44:ac:23:b8:4c: 9c:f0:be:74:6d:f3:60:10:bc:27:bf:db:93:0b:10: 6a:55:70:7d:d8:fc:2c:20:55:09:da:ff:aa:cc:03: 56:ba:36:3c:3d:91:24:01:17:c7:c7:b8:e0:47:36: e5:38:02:ca:8a:fe:69:45:73:f9:bd:92:40:c2:e0: aa:d6:39:fd:8a:e9:3d:73:ce:ee:9f:23:bf:c7:ed: 71:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:68:E1:10:E4:E7:31:83:4C:C0:49:34:59:67:BE:3E:23:10:E3:83 X509v3 Authority Key Identifier: keyid:74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/94B101721B8B11EEACEA736AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.247.80.0/22 103.23.174.0/24 103.87.38.0/23 103.235.188.0/22 103.236.203.0/24 202.52.54.0/23 203.25.32.0/22 IPv6: 2402:d840::/32 Signature Algorithm: sha256WithRSAEncryption 34:f9:06:49:38:89:b0:79:d8:e7:64:1b:29:7a:d7:4b:13:f1: d0:ed:33:a6:8b:04:6d:ef:db:67:a6:b6:d7:45:75:d2:0e:ca: 55:5e:00:1d:db:fa:42:7f:41:48:68:d5:e0:1f:ec:87:82:da: 1d:9b:cf:c9:27:c0:78:52:b7:99:03:e2:a2:aa:11:03:af:8a: 3c:65:61:7f:ea:af:a9:0b:e9:5b:02:43:fb:37:03:78:0e:f0: e2:7a:79:f7:65:69:b1:74:1a:d4:6c:75:f6:86:fe:36:4c:65: ec:ed:00:bd:c4:07:8f:a8:89:2f:4a:b6:56:2a:51:8f:72:2d: 9f:36:ab:a6:de:be:f7:e5:31:67:0a:a0:57:c1:f9:c1:ad:b7: b4:cc:95:e1:5a:93:25:7d:b1:53:7d:06:35:75:59:a2:ef:c7: 4e:50:65:af:d0:2c:d0:eb:c4:98:18:90:45:92:b5:d2:3b:da: 88:64:45:51:f6:9b:bb:04:af:e7:c0:90:8f:26:57:44:cc:37: 28:cb:ff:65:67:29:c9:a9:06:7d:48:c9:ff:0f:14:3e:2e:ca: 7b:ab:4e:41:cf:76:88:b7:79:76:50:86:f6:77:aa:2e:1f:45: 3d:42:62:11:49:73:c8:54:c1:f9:50:dc:80:3f:ef:57:dd:b3: 85:71:db:70 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgICCO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc2RTUxMTAvBgNVBAUTKDc0OEJDNzlBRkE5QjdGRjc1QjEzMDBBRDI5NDBFN0ZD QzE0MkY4ODYwHhcNMjUxMTAyMjA0MDE1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDc4ZC02ZTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA16M4VKXPWv8p/IrMj1OmnpV6qhXp2VSNJ3WsZux03AxPudFlS6d0ih/I9dsZ 7sdTaTrjmU/IOXJKVLyAOK08a9jNML5z36V51UVeC9RuFMuU6oKzyFcSzvCwT0LZ WlJtQLKV/NlSF5SYCibbkZuE5vUDP+gRiAOLo3VY+Cgw598RrmS14EXui+tqhYoE 4rVfV7TAOhCC6WasFTt6/FcZyxhRW8uEeLl1qJzZzXMnRKwjuEyc8L50bfNgELwn v9uTCxBqVXB92PwsIFUJ2v+qzANWujY8PZEkARfHx7jgRzblOALKiv5pRXP5vZJA wuCq1jn9iuk9c87unyO/x+1xdwIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFCNo4RDk 5zGDTMBJNFlnvj4jEOODMB8GA1UdIwQYMBaAFHSLx5r6m3/3WxMArSlA5/zBQviG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzZFNS9FMDgzQTBFQUNC MTIxMUVBOTI1MDdBMkJDNEY5QUUwMi9kSXZIbXZxYmZfZGJFd0N0S1VEbl9NRkMt SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RJdkhtdnFiZl9kYkV3Q3RLVURuX01GQy1JWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDc2RTUvRTA4M0EwRUFDQjEyMTFFQTkyNTA3QTJCQzRGOUFFMDIvOTRCMTAxNzIx QjhCMTFFRUFDRUE3MzZBQzRGOUFFMDIucm9hMFIGCCsGAQUFBwEHAQH/BEMwQTAw BAIAATAqAwQCK/dQAwQAZxeuAwQBZ1cmAwQCZ+u8AwQAZ+zLAwQByjQ2AwQCyxkg MA0EAgACMAcDBQAkAthAMA0GCSqGSIb3DQEBCwUAA4IBAQA0+QZJOImwedjnZBsp etdLE/HQ7TOmiwRt79tnprbXRXXSDspVXgAd2/pCf0FIaNXgH+yHgtodm8/JJ8B4 UreZA+KiqhEDr4o8ZWF/6q+pC+lbAkP7NwN4DvDienn3ZWmxdBrUbHX2hv42TGXs 7QC9xAePqIkvSrZWKlGPci2fNqum3r735TFnCqBXwfnBrbe0zJXhWpMlfbFTfQY1 dVmi78dOUGWv0CzQ68SYGJBFkrXSO9qIZEVR9pu7BK/nwJCPJldEzDcoy/9lZynJ qQZ9SMn/DxQ+Lsp7q05Bz3aIt3l2UIb2d6ouH0U9QmIRSXPIVMH5UNyAP+9X3bOF cdtw -----END CERTIFICATE-----Generated at Mon Mar 2 04:06:48 2026 by rpki-client