$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/65877060BF3C11EAAF328582C4F9AE02.roa File: 65877060BF3C11EAAF328582C4F9AE02.roa (raw, json) Hash identifier: S1YQDpfRZfYWxWzS0yYZYUtJLVH3RsmKcbHcWJLLIjw= Subject key identifier: 32:FC:A4:F3:42:40:4D:95:4C:E5:D9:DF:5A:A2:05:6A:1F:8D:7B:70 Certificate issuer: /CN=A91DEA56/serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E Certificate serial: 0933 Authority key identifier: BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/65877060BF3C11EAAF328582C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:45:49 +0000 ROA not before: Fri 02 Jan 2026 20:17:20 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 132827 IP address blocks: 43.248.40.0/22 maxlen: 22 103.16.36.0/22 maxlen: 22 103.23.220.0/24 maxlen: 24 103.23.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:47:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2355 (0x933) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEA56, serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E Validity Not Before: Jan 2 20:17:20 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a46d3d-210d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1e:5b:96:f1:2b:45:99:93:fc:f6:06:ac:4b: c6:d5:59:d4:35:da:02:f2:24:a0:32:98:57:a7:c3: a7:66:39:c6:a1:b7:4c:c3:5f:7d:fe:2c:d1:f0:e3: 62:a3:0a:36:41:44:4c:4c:c6:10:22:2f:9a:81:67: ab:48:e9:70:aa:7c:ef:55:33:e2:4e:35:bc:3d:bc: 3e:e5:0b:61:1d:c7:c9:e0:a8:f5:ea:ac:12:d1:4d: 4a:73:63:74:f8:5e:1c:1f:36:ba:6b:99:be:4b:11: 1e:95:cd:93:f7:db:e2:1b:c6:0e:12:7b:71:d3:d2: 34:d4:5a:f3:03:d1:f6:c5:ba:ec:75:3c:f3:f5:b1: df:61:2f:e8:f7:99:21:28:a1:bf:54:6c:9a:26:b3: ac:03:ce:0a:29:68:92:5a:22:28:8c:cb:74:81:24: 24:06:06:2a:9e:7b:16:a0:3b:dc:88:c4:60:65:b9: d5:aa:2c:b3:b6:ba:66:b0:b8:f4:ef:8e:34:d8:86: 2b:a0:07:4e:31:64:8b:03:47:2d:89:8b:85:96:80: 0f:31:fb:7d:89:56:e9:4d:38:07:01:69:de:6c:0e: be:d0:32:c3:49:1b:5f:98:55:11:3f:73:3f:5c:f7: ad:2d:19:60:56:ac:d0:e3:de:8c:e5:6f:74:72:d6: 39:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FC:A4:F3:42:40:4D:95:4C:E5:D9:DF:5A:A2:05:6A:1F:8D:7B:70 X509v3 Authority Key Identifier: keyid:BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/65877060BF3C11EAAF328582C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.248.40.0/22 103.16.36.0/22 103.23.220.0/24 103.23.223.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:1e:07:ad:bb:87:8d:8c:45:37:38:5b:60:9f:21:d8:db:7c: 35:c2:55:68:b6:9d:9d:57:3d:0a:7e:88:f5:73:df:c1:5b:fa: 86:cd:71:ae:56:0f:88:cc:aa:2f:1a:07:fd:29:19:df:d1:f6: 5c:b0:98:d9:60:9a:3e:a4:5b:55:1b:0f:d1:30:7f:0f:84:59: a3:26:e6:a4:77:64:73:f5:48:c3:e9:83:f7:4a:33:38:91:51: a3:21:93:a9:43:68:24:8a:11:58:0b:b7:c4:80:d0:b9:20:89: f5:96:01:1f:dd:ac:e4:2d:6b:0f:49:f7:62:9c:20:46:e8:56: 75:14:e2:ed:49:79:8c:56:23:27:d3:b4:5c:5c:4a:ef:f3:a0: c6:a7:5c:30:55:9b:f2:c7:c2:34:75:79:89:a0:a6:13:bc:71: 49:35:4e:a8:0f:81:f9:cd:e2:a2:fb:e9:44:44:72:b7:37:46: 76:8a:33:b9:ec:68:4a:e6:ea:19:ec:b4:11:91:55:8b:f9:a6: 1d:92:ee:5c:a3:8d:e2:06:df:9b:a6:58:4f:02:f1:08:2e:46: c2:2f:b4:cc:64:70:f3:84:1a:dd:51:c7:5d:0d:9a:66:9d:9e: 8f:a3:51:fe:31:12:85:87:29:42:74:89:77:4c:51:b8:80:18: a9:eb:0d:32 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICCTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVBNTYxMTAvBgNVBAUTKEJCRTQ5RkNCNDFGNTAyNkEzNUJGNkM5M0I5MUZERkYz Qzg4QzczNkUwHhcNMjYwMTAyMjAxNzIwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmQzZC0yMTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuB5blvErRZmT/PYGrEvG1VnUNdoC8iSgMphXp8OnZjnGobdMw199/izR8ONi owo2QURMTMYQIi+agWerSOlwqnzvVTPiTjW8Pbw+5QthHcfJ4Kj16qwS0U1Kc2N0 +F4cHza6a5m+SxEelc2T99viG8YOEntx09I01FrzA9H2xbrsdTzz9bHfYS/o95kh KKG/VGyaJrOsA84KKWiSWiIojMt0gSQkBgYqnnsWoDvciMRgZbnVqiyztrpmsLj0 74402IYroAdOMWSLA0ctiYuFloAPMft9iVbpTTgHAWnebA6+0DLDSRtfmFURP3M/ XPetLRlgVqzQ496M5W90ctY5ewIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFDL8pPNC QE2VTOXZ31qiBWofjXtwMB8GA1UdIwQYMBaAFLvkn8tB9QJqNb9sk7kf3/PIjHNu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUE1Ni82ODQ2NjdGNEJG M0ExMUVBOTRBRTRFN0NDNEY5QUUwMi91LVNmeTBIMUFtbzF2MnlUdVJfZjg4aU1j MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtU2Z5MEgxQW1vMXYyeVR1Ul9mODhpTWMyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REVBNTYvNjg0NjY3RjRCRjNBMTFFQTk0QUU0RTdDQzRGOUFFMDIvNjU4NzcwNjBC RjNDMTFFQUFGMzI4NTgyQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQCK/goAwQCZxAkAwQAZxfcAwQAZxffMA0GCSqGSIb3DQEBCwUAA4IB AQAeHgetu4eNjEU3OFtgnyHY23w1wlVotp2dVz0Kfoj1c9/BW/qGzXGuVg+IzKov Ggf9KRnf0fZcsJjZYJo+pFtVGw/RMH8PhFmjJuakd2Rz9UjD6YP3SjM4kVGjIZOp Q2gkihFYC7fEgNC5IIn1lgEf3azkLWsPSfdinCBG6FZ1FOLtSXmMViMn07RcXErv 86DGp1wwVZvyx8I0dXmJoKYTvHFJNU6oD4H5zeKi++lERHK3N0Z2ijO57GhK5uoZ 7LQRkVWL+aYdku5co43iBt+bplhPAvEILkbCL7TMZHDzhBrdUcddDZpmnZ6Po1H+ MRKFhylCdIl3TFG4gBip6w0y -----END CERTIFICATE-----Generated at Mon Mar 2 15:34:07 2026 by rpki-client