$ rpki-client -vvf rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/E15CC33CD55011EFB17CB022C4F9AE02.roa File: E15CC33CD55011EFB17CB022C4F9AE02.roa (raw, json) Hash identifier: aYot4qw3P8YllWeiZniDWXUCdYeGzmeGo07W9mBLGtQ= Subject key identifier: C2:BB:FA:FE:B8:49:B6:9D:EB:59:B7:D5:50:A0:F1:43:C1:83:C2:93 Certificate issuer: /CN=A91D873B/serialNumber=03BD909A1A15A4503DFAD594C3C6DE9B94604E66 Certificate serial: 03CA Authority key identifier: 03:BD:90:9A:1A:15:A4:50:3D:FA:D5:94:C3:C6:DE:9B:94:60:4E:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/E15CC33CD55011EFB17CB022C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:25:21 +0000 ROA not before: Wed 26 Nov 2025 23:16:35 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 153494 IP address blocks: 43.249.220.0/22 maxlen: 24 103.41.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.crl rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:21:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 970 (0x3ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D873B, serialNumber=03BD909A1A15A4503DFAD594C3C6DE9B94604E66 Validity Not Before: Nov 26 23:16:35 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a44c51-c4ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:89:ab:a5:63:1d:00:f4:f7:5b:e0:41:9e:83: 30:32:64:78:7b:66:59:b2:9f:d7:fa:01:7c:35:61: a4:31:a2:6c:a9:70:42:20:b9:25:80:95:b6:09:30: 43:a5:ae:f4:27:e8:93:a9:38:e1:91:b9:11:57:be: ca:bb:a1:a2:23:d5:e9:91:84:cb:6b:98:6f:ba:af: 72:a9:08:4e:31:9b:53:4b:d4:3d:77:ec:0b:03:dc: 61:b2:32:66:36:02:be:e4:3a:79:83:16:82:29:c1: b4:2c:93:fb:43:82:04:df:34:f0:58:c2:e6:7c:fd: fb:93:e3:c1:a9:1c:f6:52:4a:a7:5b:34:8a:f7:ca: 00:2a:97:35:d8:49:bc:a1:38:56:32:4b:20:a7:fd: b3:84:2f:51:c6:34:83:4e:22:64:2f:05:fc:6c:c5: 6f:a6:c4:65:ee:53:0a:21:8a:b9:9a:54:d7:24:79: 27:a7:f3:2b:c3:07:34:36:e0:1a:fb:31:e0:25:1e: 26:6c:c6:85:40:82:b5:87:79:fa:41:a5:b3:e3:ab: 95:70:f0:ab:2a:08:eb:1c:cd:e7:2a:7d:36:c8:31: 28:4e:e8:25:56:ce:89:18:36:42:1b:21:c1:14:16: 08:f0:08:e8:b1:35:71:70:f4:a8:fb:dc:99:64:50: 28:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:BB:FA:FE:B8:49:B6:9D:EB:59:B7:D5:50:A0:F1:43:C1:83:C2:93 X509v3 Authority Key Identifier: keyid:03:BD:90:9A:1A:15:A4:50:3D:FA:D5:94:C3:C6:DE:9B:94:60:4E:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/E15CC33CD55011EFB17CB022C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.249.220.0/22 103.41.80.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:7a:f7:3a:d2:9b:69:e0:cb:c5:1b:bc:a2:14:de:81:91:38: ce:78:4d:34:22:61:12:6e:fe:34:84:80:9d:75:e4:be:e0:4a: 3a:85:41:0d:db:d4:15:31:aa:5a:0e:66:c9:f8:23:f3:2a:0a: b5:a9:e1:7c:9b:8d:a9:10:2b:5f:d7:64:0a:1e:40:77:6b:d8: dc:cf:18:c7:7e:36:a7:f5:ea:89:37:85:e4:3e:f7:8e:f8:10: af:d6:ff:9d:ed:00:9c:9b:68:8d:98:6e:c3:14:f6:89:ad:64: 87:67:74:af:4e:27:2c:21:a0:1d:a3:da:07:44:b1:92:96:18: 5b:72:31:b6:d2:b5:67:0b:ac:14:1f:e2:47:c2:ba:cd:19:80: 39:ca:65:43:24:45:61:d5:4b:0b:b8:7b:d8:a8:f8:b7:3d:2a: f8:e0:4b:80:68:0d:e8:d5:aa:a7:c7:f3:11:74:84:51:33:29: ff:bb:2c:c3:24:55:f9:0d:6b:20:88:e9:5b:79:32:46:f7:3c: 36:ef:c4:63:b3:59:1b:fe:d5:c8:ee:d8:55:12:c5:58:fc:a0: ca:bb:30:1f:0e:29:45:4b:b9:57:dd:05:39:fd:06:f4:e7:4c: b2:77:84:a0:61:af:ce:68:e9:ed:07:26:83:bc:bf:84:3b:51: da:06:af:80 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICA8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg3M0IxMTAvBgNVBAUTKDAzQkQ5MDlBMUExNUE0NTAzREZBRDU5NEMzQzZERTlC OTQ2MDRFNjYwHhcNMjUxMTI2MjMxNjM1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGM1MS1jNGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnYmrpWMdAPT3W+BBnoMwMmR4e2ZZsp/X+gF8NWGkMaJsqXBCILklgJW2CTBD pa70J+iTqTjhkbkRV77Ku6GiI9XpkYTLa5hvuq9yqQhOMZtTS9Q9d+wLA9xhsjJm NgK+5Dp5gxaCKcG0LJP7Q4IE3zTwWMLmfP37k+PBqRz2UkqnWzSK98oAKpc12Em8 oThWMksgp/2zhC9RxjSDTiJkLwX8bMVvpsRl7lMKIYq5mlTXJHknp/Mrwwc0NuAa +zHgJR4mbMaFQIK1h3n6QaWz46uVcPCrKgjrHM3nKn02yDEoTuglVs6JGDZCGyHB FBYI8AjosTVxcPSo+9yZZFAolwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFMK7+v64 Sbad61m31VCg8UPBg8KTMB8GA1UdIwQYMBaAFAO9kJoaFaRQPfrVlMPG3puUYE5m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODczQi80QTE2QkJEQUM2 MDQxMUVDQUE5NDU5NEJDNEY5QUUwMi9BNzJRbWhvVnBGQTktdFdVdzhiZW01UmdU bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E3MlFtaG9WcEZBOS10V1V3OGJlbTVSZ1RtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDg3M0IvNEExNkJCREFDNjA0MTFFQ0FBOTQ1OTRCQzRGOUFFMDIvRTE1Q0MzM0NE NTUwMTFFRkIxN0NCMDIyQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK/ncAwQCZylQMA0GCSqGSIb3DQEBCwUAA4IBAQBdevc60ptp4MvF G7yiFN6BkTjOeE00ImESbv40hICddeS+4Eo6hUEN29QVMapaDmbJ+CPzKgq1qeF8 m42pECtf12QKHkB3a9jczxjHfjan9eqJN4XkPveO+BCv1v+d7QCcm2iNmG7DFPaJ rWSHZ3SvTicsIaAdo9oHRLGSlhhbcjG20rVnC6wUH+JHwrrNGYA5ymVDJEVh1UsL uHvYqPi3PSr44EuAaA3o1aqnx/MRdIRRMyn/uyzDJFX5DWsgiOlbeTJG9zw278Rj s1kb/tXI7thVEsVY/KDKuzAfDilFS7lX3QU5/Qb050yyd4SgYa/OaOntByaDvL+E O1HaBq+A -----END CERTIFICATE-----Generated at Mon Mar 2 06:19:39 2026 by rpki-client