$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/0E1EAB66961011ECA540626AC4F9AE02.roa File: 0E1EAB66961011ECA540626AC4F9AE02.roa (raw, json) Hash identifier: Hk1kLc16bFyVSqCk3vaZyzmEpQAFNe8SSUO2IPtxM1U= Subject key identifier: AB:E5:0A:7A:87:E7:A3:9A:E6:D7:C8:46:A7:34:23:E6:51:C3:47:D3 Certificate issuer: /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB Certificate serial: 044C Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/0E1EAB66961011ECA540626AC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:09:56 +0000 ROA not before: Wed 15 Oct 2025 02:56:12 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 133199 IP address blocks: 43.255.28.0/24 maxlen: 24 43.255.29.0/24 maxlen: 24 43.255.30.0/24 maxlen: 24 43.255.31.0/24 maxlen: 24 103.74.192.0/24 maxlen: 24 103.74.193.0/24 maxlen: 24 103.74.194.0/24 maxlen: 24 103.74.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:44:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1100 (0x44c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2A61, serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB Validity Not Before: Oct 15 02:56:12 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a464d4-4fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:61:e7:b7:3a:c8:bb:9a:3e:27:7f:15:d2:6d: bb:2c:19:fe:a9:48:a0:e5:11:fd:9f:27:c7:e7:5b: 0a:a4:b5:94:12:7a:e2:d9:d9:2b:59:b4:44:ce:d8: 96:10:8d:d2:b1:ef:7e:91:21:a3:12:ca:fb:6d:67: 4b:72:95:be:b8:89:ee:0a:1b:4c:36:07:b6:d2:1d: 4b:f7:6c:05:c6:a7:45:52:a0:fb:87:05:3a:b1:67: 2c:75:04:a3:9d:c3:51:98:e0:2a:32:bc:82:60:af: 15:4e:a5:ec:db:4b:63:3b:b9:ed:53:40:bd:59:8c: 46:e3:f4:19:13:82:d9:63:27:89:a4:bd:c1:f4:8f: 0e:5c:ab:5c:72:75:5b:e6:5c:6e:dc:b8:01:9d:9a: 02:31:6c:24:e1:fa:16:f8:78:87:65:b1:9a:1c:e1: 3e:d8:3f:45:e3:90:7b:a4:92:78:1b:1c:cd:67:b6: 7d:c2:09:54:03:16:61:84:cb:01:22:84:a5:85:c4: 7e:fd:65:db:97:98:36:94:13:ed:b8:f4:8f:fb:65: 5a:82:62:64:ce:fd:f5:d6:cc:20:98:a5:f4:25:93: 13:00:b2:48:c6:eb:22:b6:41:b4:e3:9b:4d:a7:de: 18:8f:6d:68:a3:a2:b4:6d:9b:66:ea:43:0c:ce:5f: e7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E5:0A:7A:87:E7:A3:9A:E6:D7:C8:46:A7:34:23:E6:51:C3:47:D3 X509v3 Authority Key Identifier: keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/0E1EAB66961011ECA540626AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.255.28.0/22 103.74.192.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:da:96:63:54:3c:60:47:2b:77:ec:b4:d9:07:b7:2e:ca:68: 2a:d3:b1:04:9f:c9:ac:3b:55:de:51:6e:59:f4:fa:29:6c:b7: dc:6c:ca:38:fc:94:11:39:24:07:da:76:30:a2:99:44:c8:de: 4f:f2:0b:d8:23:2e:df:03:03:00:97:ae:94:03:ea:98:19:4f: 95:06:53:68:89:c5:d1:49:3d:07:14:58:4d:d2:f1:e9:5b:b8: 52:01:50:8e:fa:63:5b:99:c2:e0:18:15:ee:e7:f8:da:13:cd: 8c:28:48:c5:a2:c2:17:0f:35:d9:98:b3:4a:84:c0:c3:2d:03: c2:be:0c:1b:11:20:e9:ea:eb:cc:02:89:95:b8:4a:01:db:57: 0a:a0:99:e4:f3:29:ae:f3:44:49:f9:ce:6e:4a:7d:4f:f8:96: be:4e:9c:bc:5f:85:11:ef:56:98:b1:4f:09:38:66:a2:68:37: e8:db:5a:46:cd:9e:61:41:e5:49:05:b2:c5:0c:38:44:26:ea: c8:cb:c2:be:e3:00:bc:54:ef:53:82:cd:6f:76:19:cf:d0:e1: d1:5d:82:dd:50:6e:36:70:51:f9:4a:3a:ad:69:6a:25:df:0e: be:a7:e9:a5:99:fa:62:ca:e3:34:13:8d:1a:39:d4:8f:c1:c6: 00:f5:0b:14 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBNjExMTAvBgNVBAUTKDJCNTE3QzZCNzlFM0NFQjAzODlENDFBQkM1RUNFMjEw N0ZFQzUzRkIwHhcNMjUxMDE1MDI1NjEyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjRkNC00ZmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GHntzrIu5o+J38V0m27LBn+qUig5RH9nyfH51sKpLWUEnri2dkrWbREztiW EI3Sse9+kSGjEsr7bWdLcpW+uInuChtMNge20h1L92wFxqdFUqD7hwU6sWcsdQSj ncNRmOAqMryCYK8VTqXs20tjO7ntU0C9WYxG4/QZE4LZYyeJpL3B9I8OXKtccnVb 5lxu3LgBnZoCMWwk4foW+HiHZbGaHOE+2D9F45B7pJJ4GxzNZ7Z9wglUAxZhhMsB IoSlhcR+/WXbl5g2lBPtuPSP+2VagmJkzv311swgmKX0JZMTALJIxusitkG045tN p94Yj21oo6K0bZtm6kMMzl/ngwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFKvlCnqH 56Oa5tfIRqc0I+ZRw0fTMB8GA1UdIwQYMBaAFCtRfGt5486wOJ1Bq8Xs4hB/7FP7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkE2MS9FREMwOEZFNjk2 MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpyQTRuVUdyeGV6aUVIX3NV X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxRjhhM25qenJBNG5VR3J4ZXppRUhfc1Vfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTJBNjEvRURDMDhGRTY5NjBCMTFFQ0JCRTRCRTY0QzRGOUFFMDIvMEUxRUFCNjY5 NjEwMTFFQ0E1NDA2MjZBQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK/8cAwQCZ0rAMA0GCSqGSIb3DQEBCwUAA4IBAQB92pZjVDxgRyt3 7LTZB7cuymgq07EEn8msO1XeUW5Z9PopbLfcbMo4/JQROSQH2nYwoplEyN5P8gvY Iy7fAwMAl66UA+qYGU+VBlNoicXRST0HFFhN0vHpW7hSAVCO+mNbmcLgGBXu5/ja E82MKEjFosIXDzXZmLNKhMDDLQPCvgwbESDp6uvMAomVuEoB21cKoJnk8ymu80RJ +c5uSn1P+Ja+Tpy8X4UR71aYsU8JOGaiaDfo21pGzZ5hQeVJBbLFDDhEJurIy8K+ 4wC8VO9Tgs1vdhnP0OHRXYLdUG42cFH5SjqtaWol3w6+p+mlmfpiyuM0E40aOdSP wcYA9QsU -----END CERTIFICATE-----Generated at Mon Mar 2 09:06:11 2026 by rpki-client