$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/4F467C58D3AA11ED91B0C532C4F9AE02.roa File: 4F467C58D3AA11ED91B0C532C4F9AE02.roa (raw, json) Hash identifier: h5AorI3QkOoBAwObfVPrh+bfy5EutI9s6EKcaVcQGYk= Subject key identifier: AD:D5:56:4F:3D:5D:BA:2C:C0:4A:35:CF:16:5F:22:D1:29:72:49:55 Certificate issuer: /CN=A91DA389/serialNumber=48F50E16B8305AA2C756D21C8F0FD509338A5C29 Certificate serial: 0228 Authority key identifier: 48:F5:0E:16:B8:30:5A:A2:C7:56:D2:1C:8F:0F:D5:09:33:8A:5C:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/4F467C58D3AA11ED91B0C532C4F9AE02.roa Signing time: Sun 01 Mar 2026 07:29:27 +0000 ROA not before: Thu 17 Jul 2025 03:39:47 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 45352 IP address blocks: 43.228.244.0/22 maxlen: 24 103.67.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA389, serialNumber=48F50E16B8305AA2C756D21C8F0FD509338A5C29 Validity Not Before: Jul 17 03:39:47 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a3ead6-55cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7d:a9:09:6c:4c:d8:9b:cf:d6:28:b6:db:f2: 7d:06:38:88:06:4c:95:6e:e7:0c:4c:76:31:f1:86: 61:1f:f0:06:1d:c8:7d:88:45:94:6a:d2:fa:d4:e4: 8b:cd:4d:26:61:bd:2c:49:e6:f8:3e:2f:b5:1e:b9: 15:67:39:46:54:fd:85:dc:00:bf:1d:c0:c2:a6:26: 9e:26:09:ca:26:94:b4:f3:01:9b:a4:a8:0f:65:07: 0d:a5:fa:0b:e0:1c:68:d5:05:7f:18:8a:59:c1:3b: a1:4f:1e:3f:56:dd:75:1b:89:c2:3c:0e:a6:dd:14: a1:11:cd:60:fa:65:d5:64:c3:9b:13:79:e0:98:3d: 3c:3d:d1:8a:da:40:07:4e:1d:05:86:94:5c:29:13: 37:0c:db:78:c6:f3:20:2e:10:e0:32:46:96:e7:59: 51:b6:fd:e7:04:2f:b6:05:ad:56:4b:bf:76:68:5b: 57:92:b9:54:3e:90:89:23:10:08:b8:55:09:40:42: 7e:08:ea:ea:28:b4:3a:3d:8b:c1:85:49:93:9f:1a: 1e:c8:7a:5c:58:2e:12:fa:9b:c8:36:2e:99:73:78: 4f:5c:a7:46:e1:00:d2:4c:e9:e0:9b:43:1d:34:c3: 79:6b:57:a8:ca:1d:e4:7f:32:ca:90:fa:89:29:74: d1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D5:56:4F:3D:5D:BA:2C:C0:4A:35:CF:16:5F:22:D1:29:72:49:55 X509v3 Authority Key Identifier: keyid:48:F5:0E:16:B8:30:5A:A2:C7:56:D2:1C:8F:0F:D5:09:33:8A:5C:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/4F467C58D3AA11ED91B0C532C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.228.244.0/22 103.67.36.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:26:83:5d:39:a5:90:2e:bb:0c:e5:a5:1e:22:fa:89:ed:ef: 1d:35:ce:a1:ac:19:7e:e7:e9:16:04:c2:15:70:c8:fe:07:c0: a0:c4:8c:50:af:6d:3b:a3:65:5b:2f:31:9d:e9:56:ab:ae:8c: 46:30:25:8a:40:65:50:c2:5f:9b:f4:13:ed:29:37:23:de:40: ad:86:b2:da:71:ab:7f:46:7d:42:5b:ae:7e:49:61:c0:f7:dc: 39:6a:77:40:cb:01:24:54:cf:ac:ed:a6:93:5a:59:28:8d:e0: 97:38:ad:e1:f4:44:1c:c5:b2:a8:53:f6:a1:d8:4b:67:4a:a8: f0:d0:83:ab:8f:44:57:2f:52:0c:22:34:82:6f:5d:e5:e3:46: 05:ec:d1:10:4c:06:30:6c:be:cb:99:a1:3d:40:14:97:04:a2: e2:52:90:c3:73:30:00:ea:a8:ce:14:e4:a1:17:69:5c:31:70: 58:39:2d:5b:ec:7d:59:75:d5:4c:af:47:01:95:df:59:50:4f: a9:26:e2:8c:83:bd:ec:68:d7:5b:fb:6d:0f:9f:ad:24:2f:c2: 3b:28:ac:b2:6a:48:59:33:f9:1e:61:56:ac:af:c1:48:50:0b: 64:ee:c6:94:ce:00:5f:d6:76:f8:c1:ea:42:03:a7:c5:f6:76: 25:a6:ff:20 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEzODkxMTAvBgNVBAUTKDQ4RjUwRTE2QjgzMDVBQTJDNzU2RDIxQzhGMEZENTA5 MzM4QTVDMjkwHhcNMjUwNzE3MDMzOTQ3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZWFkNi01NWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAln2pCWxM2JvP1ii22/J9BjiIBkyVbucMTHYx8YZhH/AGHch9iEWUatL61OSL zU0mYb0sSeb4Pi+1HrkVZzlGVP2F3AC/HcDCpiaeJgnKJpS08wGbpKgPZQcNpfoL 4Bxo1QV/GIpZwTuhTx4/Vt11G4nCPA6m3RShEc1g+mXVZMObE3ngmD08PdGK2kAH Th0FhpRcKRM3DNt4xvMgLhDgMkaW51lRtv3nBC+2Ba1WS792aFtXkrlUPpCJIxAI uFUJQEJ+COrqKLQ6PYvBhUmTnxoeyHpcWC4S+pvINi6Zc3hPXKdG4QDSTOngm0Md NMN5a1eoyh3kfzLKkPqJKXTRzwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFK3VVk89 XboswEo1zxZfItEpcklVMB8GA1UdIwQYMBaAFEj1Dha4MFqix1bSHI8P1Qkzilwp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTM4OS9CMjE3MEI3NEQz QTMxMUVEODgwNkFDMTFDNEY5QUUwMi9TUFVPRnJnd1dxTEhWdEljandfVkNUT0tY Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQVU9Gcmd3V3FMSFZ0SWNqd19WQ1RPS1hDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REEzODkvQjIxNzBCNzREM0EzMTFFRDg4MDZBQzExQzRGOUFFMDIvNEY0NjdDNThE M0FBMTFFRDkxQjBDNTMyQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK+T0AwQCZ0MkMA0GCSqGSIb3DQEBCwUAA4IBAQAqJoNdOaWQLrsM 5aUeIvqJ7e8dNc6hrBl+5+kWBMIVcMj+B8CgxIxQr207o2VbLzGd6VarroxGMCWK QGVQwl+b9BPtKTcj3kCthrLacat/Rn1CW65+SWHA99w5andAywEkVM+s7aaTWlko jeCXOK3h9EQcxbKoU/ah2EtnSqjw0IOrj0RXL1IMIjSCb13l40YF7NEQTAYwbL7L maE9QBSXBKLiUpDDczAA6qjOFOShF2lcMXBYOS1b7H1ZddVMr0cBld9ZUE+pJuKM g73saNdb+20Pn60kL8I7KKyyakhZM/keYVasr8FIUAtk7saUzgBf1nb4wepCA6fF 9nYlpv8g -----END CERTIFICATE-----Generated at Mon Mar 2 05:43:52 2026 by rpki-client