$ rpki-client -vvf rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/22A3D2E4E5D311EFB5545A4EC4F9AE02.roa File: 22A3D2E4E5D311EFB5545A4EC4F9AE02.roa (raw, json) Hash identifier: 7YGEH26/VxaZx42ktq8JCfF1YkYo6OxRUmmxiiA6G3g= Subject key identifier: 9E:51:7E:18:D5:F0:67:C9:A1:1F:CE:8F:18:AF:C5:35:6A:AD:FF:6D Certificate issuer: /CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Certificate serial: 0632 Authority key identifier: F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/22A3D2E4E5D311EFB5545A4EC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:36:24 +0000 ROA not before: Thu 23 Oct 2025 00:13:57 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 932 IP address blocks: 43.248.8.0/22 maxlen: 24 103.39.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:59:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1586 (0x632) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E094D, serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Validity Not Before: Oct 23 00:13:57 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a46b08-a09f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ab:8d:12:95:e2:15:f2:a4:3b:59:cb:d1:8e: 96:67:36:19:00:03:12:0e:98:b9:7f:2e:a9:36:6d: e1:e6:07:de:91:0c:75:07:51:60:33:fe:aa:11:66: 9e:d0:58:08:5c:8f:24:e6:26:f2:d5:84:66:c9:5c: 75:8c:97:ac:17:cc:a6:d3:e7:87:33:a2:a9:91:a8: d2:91:7a:9c:87:8a:72:d2:ac:99:d5:99:92:85:e9: 7c:70:43:2c:dc:3c:e2:43:4f:17:e3:40:9e:a7:2d: fe:96:de:9c:08:1f:72:26:85:ef:c3:25:e4:b6:75: 9f:ad:f2:72:17:6e:90:3c:66:d3:6d:f5:26:d8:93: 3c:7f:23:b9:57:62:28:7f:ff:36:c4:ef:4e:b8:b4: a4:4b:7e:b1:e6:27:b5:cb:41:f5:60:05:a1:60:09: b4:7b:fa:42:f3:6b:9b:81:89:5e:d8:7b:95:5f:e2: 68:b9:5d:93:18:b5:15:4d:7a:af:a8:73:a3:72:e7: 0c:d1:20:f4:40:32:b5:b0:69:26:0a:33:91:63:1e: 72:3f:4f:8a:99:61:e1:d9:66:66:b1:01:bd:1e:6f: 9e:83:b8:a5:e7:7d:ee:42:c0:08:30:24:74:21:e0: 2d:0c:ca:5c:d4:70:60:16:02:28:c0:74:58:f0:29: 9e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:51:7E:18:D5:F0:67:C9:A1:1F:CE:8F:18:AF:C5:35:6A:AD:FF:6D X509v3 Authority Key Identifier: keyid:F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/22A3D2E4E5D311EFB5545A4EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.248.8.0/22 103.39.76.0/22 Signature Algorithm: sha256WithRSAEncryption 88:e6:e0:b3:15:14:c9:86:ff:b7:67:b4:11:81:0c:4c:bd:ad: 79:17:5a:07:35:c1:da:e4:ae:e2:e7:43:55:64:06:3c:63:46: cc:70:fe:9c:e5:62:18:f6:9c:74:3d:e1:93:58:70:b2:92:7f: 10:8c:15:da:41:e6:19:d3:a6:bc:85:65:88:ef:a9:c5:6f:f4: 4d:92:76:6c:1b:88:86:52:63:fb:06:1c:1e:3a:bf:32:4f:fc: bf:f8:9e:8d:46:d4:f8:24:cb:94:60:f2:d0:69:63:f4:8a:93: 30:3d:d0:1a:4e:bd:31:c3:ed:49:1b:3f:5b:9e:b6:68:be:9b: 96:91:c7:b9:88:ec:47:e3:1d:cb:83:aa:b5:f2:c1:81:ee:31: 58:68:0b:14:ac:c3:d7:a6:55:cd:30:50:cd:cf:52:88:e8:80: e6:16:39:a0:a9:35:a0:09:13:1d:c4:fe:1d:1d:a8:4e:66:17: b6:68:7c:df:ac:1d:53:cf:1d:fe:32:58:48:3f:bc:0e:7e:50: 4f:16:60:df:99:7b:47:85:b4:07:e0:09:44:2f:e2:b7:9b:5c: 7d:d1:85:aa:dd:45:a8:83:5b:38:74:8d:73:98:1c:c3:4f:a3: d0:af:0a:de:2b:dc:0d:23:53:c8:89:bf:9b:7e:ec:b6:df:71: 42:7c:50:29 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA5NEQxMTAvBgNVBAUTKEYzMTcwNUU4MThFQTQ4MDNCMDkzNDE5M0Y2MUZDNkUz MzcxNzcyRUQwHhcNMjUxMDIzMDAxMzU3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmIwOC1hMDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsauNEpXiFfKkO1nL0Y6WZzYZAAMSDpi5fy6pNm3h5gfekQx1B1FgM/6qEWae 0FgIXI8k5iby1YRmyVx1jJesF8ym0+eHM6KpkajSkXqch4py0qyZ1ZmShel8cEMs 3DziQ08X40Cepy3+lt6cCB9yJoXvwyXktnWfrfJyF26QPGbTbfUm2JM8fyO5V2Io f/82xO9OuLSkS36x5ie1y0H1YAWhYAm0e/pC82ubgYle2HuVX+JouV2TGLUVTXqv qHOjcucM0SD0QDK1sGkmCjORYx5yP0+KmWHh2WZmsQG9Hm+eg7il533uQsAIMCR0 IeAtDMpc1HBgFgIowHRY8CmeRwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFJ5RfhjV 8GfJoR/OjxivxTVqrf9tMB8GA1UdIwQYMBaAFPMXBegY6kgDsJNBk/YfxuM3F3Lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDk0RC80MEI3Mzg2RURF ODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNBT3drMEdUOWhfRzR6Y1hj dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh4Y0Y2QmpxU0FPd2swR1Q5aF9HNHpjWGN1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTA5NEQvNDBCNzM4NkVERTgxMTFFQkE5RkM3RDcyQzRGOUFFMDIvMjJBM0QyRTRF NUQzMTFFRkI1NTQ1QTRFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK/gIAwQCZydMMA0GCSqGSIb3DQEBCwUAA4IBAQCI5uCzFRTJhv+3 Z7QRgQxMva15F1oHNcHa5K7i50NVZAY8Y0bMcP6c5WIY9px0PeGTWHCykn8QjBXa QeYZ06a8hWWI76nFb/RNknZsG4iGUmP7BhweOr8yT/y/+J6NRtT4JMuUYPLQaWP0 ipMwPdAaTr0xw+1JGz9bnrZovpuWkce5iOxH4x3Lg6q18sGB7jFYaAsUrMPXplXN MFDNz1KI6IDmFjmgqTWgCRMdxP4dHahOZhe2aHzfrB1Tzx3+MlhIP7wOflBPFmDf mXtHhbQH4AlEL+K3m1x90YWq3UWog1s4dI1zmBzDT6PQrwreK9wNI1PIib+bfuy2 33FCfFAp -----END CERTIFICATE-----Generated at Mon Mar 2 07:10:49 2026 by rpki-client