$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/CF0F37FA1D1B11F1ACF733B0103D8C67.roa File: CF0F37FA1D1B11F1ACF733B0103D8C67.roa (raw, json) Hash identifier: H5fMs/4SHZ+R2ioXCxpygGkCRluzXa/ZhyiVh3gWuO4= Subject key identifier: 3B:AC:2D:F3:60:9D:24:0C:93:14:1D:21:17:8A:71:95:20:39:27:4F Certificate issuer: /CN=A91DBAA3/serialNumber=F9AE5E2A9DC80B51EAA7577278C3DE061A80AB63 Certificate serial: 45 Authority key identifier: F9:AE:5E:2A:9D:C8:0B:51:EA:A7:57:72:78:C3:DE:06:1A:80:AB:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/CF0F37FA1D1B11F1ACF733B0103D8C67.roa Signing time: Fri 03 Apr 2026 08:43:55 +0000 ROA not before: Fri 03 Apr 2026 08:43:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 43.240.36.0/22 maxlen: 24 103.19.188.0/22 maxlen: 24 2400:c680::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 08:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAA3, serialNumber=F9AE5E2A9DC80B51EAA7577278C3DE061A80AB63 Validity Not Before: Apr 3 08:43:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69cf7dcb-3dab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:13:dc:04:be:59:d3:3e:41:e9:b1:1f:56:77: f4:90:3c:34:7f:2f:53:04:cf:6f:5c:22:26:3e:cc: a0:cc:b4:c2:89:db:0f:63:7e:b3:82:3b:6e:d5:80: 03:84:3e:78:24:51:18:2b:f6:0c:c9:e4:eb:85:75: 87:83:2d:6e:89:c6:dc:85:d4:d8:b0:13:23:d4:80: e3:1b:e4:27:2b:e0:d9:20:8f:34:7b:5c:2e:b8:eb: ef:25:29:59:51:50:2e:81:01:3f:0d:05:24:9f:57: 0d:15:d3:c5:0f:7d:aa:d2:01:20:d6:bd:e5:a7:2f: 99:c2:b4:d2:cd:2d:35:33:8d:cb:02:01:4e:47:ff: 47:e8:3b:87:fe:38:9e:89:ed:1b:af:7a:7a:70:f9: 8e:51:12:15:bc:ca:2e:99:61:e1:38:08:f4:2f:c8: 36:48:b6:c0:ec:87:cb:c3:cc:94:1a:9f:60:80:94: 7e:d0:6b:fa:fd:82:80:ad:7a:d0:a8:fe:21:dd:7b: b6:bb:c4:4b:26:81:57:51:83:ca:84:1f:a7:d0:da: 49:62:0a:6c:03:0a:ca:5e:a5:d8:ea:e4:e0:30:eb: 15:99:19:5c:a7:0d:b6:eb:0d:f5:e7:45:43:83:ee: 00:87:8e:0d:64:18:30:c9:3b:cb:b4:8a:bf:28:26: 06:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AC:2D:F3:60:9D:24:0C:93:14:1D:21:17:8A:71:95:20:39:27:4F X509v3 Authority Key Identifier: keyid:F9:AE:5E:2A:9D:C8:0B:51:EA:A7:57:72:78:C3:DE:06:1A:80:AB:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/CF0F37FA1D1B11F1ACF733B0103D8C67.roa sbgp-ipAddrBlock: critical IPv4: 43.240.36.0/22 103.19.188.0/22 IPv6: 2400:c680::/32 Signature Algorithm: sha256WithRSAEncryption 9e:01:00:31:8e:0b:b6:62:26:a9:78:26:cb:52:e5:35:68:b2: 24:01:37:b0:ff:f8:87:fd:0d:46:e0:a9:9c:72:c1:5b:80:50: 9d:4c:17:4f:4e:5d:01:5f:e1:6a:34:bf:b4:81:82:e5:7a:32: 9a:59:1c:89:47:4d:a3:d6:7c:07:7a:d7:cf:6d:d3:6d:61:49: c2:2c:63:ac:92:71:0c:1e:cd:48:5e:b4:be:1c:e4:c0:25:45: b3:78:0f:0c:34:11:cf:e8:f7:60:0e:d6:b0:37:4f:b6:19:02: 7c:dd:49:f2:46:5f:ff:ae:b3:d8:ff:fd:6c:7b:b5:c0:c9:8c: 36:90:56:3e:bf:f0:3f:73:3f:3f:d0:2c:3a:da:71:ca:ea:0d: d8:bc:46:6f:73:7e:d5:fc:01:dd:a7:05:df:49:3e:1e:5c:46: a7:c0:69:93:85:2d:78:6d:d3:72:48:a9:9e:f5:ce:ba:e7:22: c3:df:89:48:ce:cc:44:36:f2:60:4a:bd:78:dc:00:41:77:c7: e5:e8:ad:ef:1c:60:14:d5:cf:e1:d2:b3:a7:b7:a6:00:09:b2: e6:ec:89:8b:a8:0c:8d:23:02:a0:75:6c:b5:62:7c:76:a0:cd: 59:93:df:c7:e0:e5:43:f0:33:f0:fb:08:e6:1b:51:46:f0:cb: 1e:d7:0d:ce -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QkFBMzExMC8GA1UEBRMoRjlBRTVFMkE5REM4MEI1MUVBQTc1NzcyNzhDM0RFMDYx QTgwQUI2MzAeFw0yNjA0MDMwODQzNTVaFw0yNzA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5Y2Y3ZGNiLTNkYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAE9wEvlnTPkHpsR9Wd/SQPDR/L1MEz29cIiY+zKDMtMKJ2w9jfrOCO27VgAOE PngkURgr9gzJ5OuFdYeDLW6JxtyF1NiwEyPUgOMb5Ccr4NkgjzR7XC646+8lKVlR UC6BAT8NBSSfVw0V08UPfarSASDWveWnL5nCtNLNLTUzjcsCAU5H/0foO4f+OJ6J 7Ruvenpw+Y5REhW8yi6ZYeE4CPQvyDZItsDsh8vDzJQan2CAlH7Qa/r9goCtetCo /iHde7a7xEsmgVdRg8qEH6fQ2kliCmwDCspepdjq5OAw6xWZGVynDbbrDfXnRUOD 7gCHjg1kGDDJO8u0ir8oJgb1AgMBAAGjggJ1MIICcTAdBgNVHQ4EFgQUO6wt82Cd JAyTFB0hF4pxlSA5J08wHwYDVR0jBBgwFoAU+a5eKp3IC1Hqp1dyeMPeBhqAq2Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCQUEzLzFDMTc5MTNBRDkw RDExRjA4NjgwRDVGMTdDRDM2NDFELy1hNWVLcDNJQzFIcXAxZHllTVBlQmhxQXEy TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLWE1ZUtwM0lDMUhxcDFkeWVNUGVCaHFBcTJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFBMy8xQzE3OTEzQUQ5MEQxMUYwODY4MEQ1RjE3Q0QzNjQxRC9DRjBGMzdGQTFE MUIxMUYxQUNGNzMzQjAxMDNEOEM2Ny5yb2EwNAYIKwYBBQUHAQcBAf8EJTAjMBIE AgABMAwDBAIr8CQDBAJnE7wwDQQCAAIwBwMFACQAxoAwDQYJKoZIhvcNAQELBQAD ggEBAJ4BADGOC7ZiJql4JstS5TVosiQBN7D/+If9DUbgqZxywVuAUJ1MF09OXQFf 4Wo0v7SBguV6MppZHIlHTaPWfAd6189t021hScIsY6yScQwezUhetL4c5MAlRbN4 Dww0Ec/o92AO1rA3T7YZAnzdSfJGX/+us9j//Wx7tcDJjDaQVj6/8D9zPz/QLDra ccrqDdi8Rm9zftX8Ad2nBd9JPh5cRqfAaZOFLXht03JIqZ71zrrnIsPfiUjOzEQ2 8mBKvXjcAEF3x+Xore8cYBTVz+HSs6e3pgAJsubsiYuoDI0jAqB1bLVifHagzVmT 38fg5UPwM/D7COYbUUbwyx7XDc4= -----END CERTIFICATE-----Generated at Fri Apr 17 06:51:36 2026 by rpki-client