$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/42CC52ECC68111EFAE49FF5FC4F9AE02.roa File: 42CC52ECC68111EFAE49FF5FC4F9AE02.roa (raw, json) Hash identifier: 2qHKJj29Stc4i29leTShILZcyf4Ep+Zzk1ZPI4rXDjo= Subject key identifier: 1E:2C:5E:E5:2E:20:94:D4:0E:33:37:A1:F1:62:CC:45:82:1D:3D:58 Certificate issuer: /CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Certificate serial: 08AF Authority key identifier: 49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/42CC52ECC68111EFAE49FF5FC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:34:10 +0000 ROA not before: Mon 26 May 2025 21:19:17 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 55933 IP address blocks: 103.213.244.0/22 maxlen: 24 144.48.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:16:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2223 (0x8af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA10A, serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Validity Not Before: May 26 21:19:17 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a46a82-2ad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f6:3b:f1:57:6c:98:42:5e:61:8c:3c:5c:98: cc:59:50:75:ea:1b:42:8d:4c:7e:63:bd:01:17:80: c4:5c:e5:e4:23:74:b8:37:4f:e3:8b:d1:aa:f7:0a: df:e8:ac:f1:de:a5:eb:18:20:a3:74:db:f0:b6:05: 3a:57:6b:93:b6:85:b2:b6:08:ec:3e:f1:75:16:27: de:15:30:d8:a0:2a:d0:71:2b:a1:18:e3:d5:90:59: 58:a3:e8:65:1f:75:e8:00:07:aa:ab:ef:f1:8b:da: b1:e9:3e:45:f1:a4:40:22:8a:ae:27:f6:40:a6:d7: ee:21:6f:3d:4d:a6:bd:5f:4c:2d:64:69:a9:9e:8e: 7e:1e:af:3b:cd:b7:49:21:94:1c:f3:c6:88:62:0e: 45:ef:20:cf:10:c3:da:ef:21:4e:1b:31:5f:ef:79: b4:77:61:91:1e:ba:e4:06:b9:75:7d:7d:6b:3f:33: 0f:9e:31:b9:04:43:5e:8c:1f:b3:65:29:ed:9c:f1: 3c:24:da:4e:ac:89:77:e6:24:d9:53:c9:50:92:67: 09:dd:71:df:a5:6f:9a:00:b3:2f:fd:40:49:f6:3c: 39:5f:21:f9:f6:b3:be:fd:e2:6c:af:72:49:91:71: 27:73:3c:2e:4f:4c:a6:1a:6a:e5:08:ae:0c:74:78: 5f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2C:5E:E5:2E:20:94:D4:0E:33:37:A1:F1:62:CC:45:82:1D:3D:58 X509v3 Authority Key Identifier: keyid:49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/42CC52ECC68111EFAE49FF5FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.213.244.0/22 144.48.4.0/22 Signature Algorithm: sha256WithRSAEncryption 80:58:d0:f7:2e:aa:c3:de:25:05:91:5d:53:20:e5:29:6a:cb: 62:db:83:6b:1b:c3:2d:52:4a:1a:c2:40:c6:74:80:0c:27:22: 1e:f9:2a:72:1d:fa:b6:2b:5b:38:91:8b:3c:2f:c2:ce:9e:e8: 7c:6d:98:1d:1e:92:f2:03:de:0a:9c:c9:d8:a6:b9:31:04:33: 2d:fd:17:81:b4:ba:3c:ad:83:ca:be:a7:c5:70:a3:2a:5a:7e: f5:01:82:ee:3b:40:0b:8e:56:e4:15:39:22:93:d9:a6:5f:df: fc:85:70:69:47:ed:61:4a:25:8b:57:23:cf:8f:75:72:7a:e8: 79:4f:a7:fd:98:2a:83:a7:47:ae:2b:54:fb:e9:e1:fc:91:87: 2b:6d:9b:38:40:30:39:1d:1b:69:09:d4:a1:ec:4f:5c:5b:3d: 4e:f2:c1:93:52:b5:35:49:f1:42:61:67:43:4d:30:ab:8d:3e: b8:57:75:1b:2d:6c:7e:47:8c:85:92:75:ce:6a:d8:90:7f:15: 19:90:d2:92:8e:0a:ff:4c:f3:63:8a:46:39:88:0b:29:34:32: 9a:80:d6:bc:da:92:ee:be:b7:cb:74:c2:ba:2f:44:8e:15:32: 01:29:08:77:43:c2:44:78:5a:26:89:17:02:80:01:ee:70:1b: a8:52:2f:1e -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExMEExMTAvBgNVBAUTKDQ5QjVBNDY0NjNFM0EyQjcwQTMzNDQ2MDE0RUJGNDBF NUM5RUZFNzQwHhcNMjUwNTI2MjExOTE3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmE4Mi0yYWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvY78VdsmEJeYYw8XJjMWVB16htCjUx+Y70BF4DEXOXkI3S4N0/ji9Gq9wrf 6Kzx3qXrGCCjdNvwtgU6V2uTtoWytgjsPvF1FifeFTDYoCrQcSuhGOPVkFlYo+hl H3XoAAeqq+/xi9qx6T5F8aRAIoquJ/ZAptfuIW89Taa9X0wtZGmpno5+Hq87zbdJ IZQc88aIYg5F7yDPEMPa7yFOGzFf73m0d2GRHrrkBrl1fX1rPzMPnjG5BENejB+z ZSntnPE8JNpOrIl35iTZU8lQkmcJ3XHfpW+aALMv/UBJ9jw5XyH59rO+/eJsr3JJ kXEnczwuT0ymGmrlCK4MdHhf5QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFB4sXuUu IJTUDjM3ofFizEWCHT1YMB8GA1UdIwQYMBaAFEm1pGRj46K3CjNEYBTr9A5cnv50 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEwQS9FMzQwMjA0Q0Yx ODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9yY0tNMFJnRk92MERseWVf blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NiV2taR1Bqb3JjS00wUmdGT3YwRGx5ZV9uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REExMEEvRTM0MDIwNENGMTg3MTFFQUI5NzM0QjFDQzRGOUFFMDIvNDJDQzUyRUND NjgxMTFFRkFFNDlGRjVGQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZ9X0AwQCkDAEMA0GCSqGSIb3DQEBCwUAA4IBAQCAWND3LqrD3iUF kV1TIOUpasti24NrG8MtUkoawkDGdIAMJyIe+SpyHfq2K1s4kYs8L8LOnuh8bZgd HpLyA94KnMnYprkxBDMt/ReBtLo8rYPKvqfFcKMqWn71AYLuO0ALjlbkFTkik9mm X9/8hXBpR+1hSiWLVyPPj3Vyeuh5T6f9mCqDp0euK1T76eH8kYcrbZs4QDA5HRtp CdSh7E9cWz1O8sGTUrU1SfFCYWdDTTCrjT64V3UbLWx+R4yFknXOatiQfxUZkNKS jgr/TPNjikY5iAspNDKagNa82pLuvrfLdMK6L0SOFTIBKQh3Q8JEeFomiRcCgAHu cBuoUi8e -----END CERTIFICATE-----Generated at Mon Mar 2 11:54:48 2026 by rpki-client