$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/43487B18BF1811E9A2C00E63C4F9AE02.roa File: 43487B18BF1811E9A2C00E63C4F9AE02.roa (raw, json) Hash identifier: 9yPl2RyPXoic4hgvWw1sNI2e0xi/PvyG32cZkvJi8ws= Subject key identifier: CD:31:CB:84:BB:83:5B:B6:FD:1C:DE:09:7C:FC:BB:13:EA:6F:69:B2 Certificate issuer: /CN=A91E2AE5/serialNumber=B43A5A60D46806A69FFEF7C676219EC4BA8BA36D Certificate serial: 2C1E Authority key identifier: B4:3A:5A:60:D4:68:06:A6:9F:FE:F7:C6:76:21:9E:C4:BA:8B:A3:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tDpaYNRoBqaf_vfGdiGexLqLo20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/43487B18BF1811E9A2C00E63C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:26:09 +0000 ROA not before: Fri 28 Feb 2025 15:52:34 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 45558 IP address blocks: 43.224.43.0/24 maxlen: 24 203.215.60.0/22 maxlen: 22 203.215.60.0/24 maxlen: 24 203.215.61.0/24 maxlen: 24 203.215.62.0/24 maxlen: 24 203.215.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.crl rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tDpaYNRoBqaf_vfGdiGexLqLo20.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:37:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11294 (0x2c1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2AE5, serialNumber=B43A5A60D46806A69FFEF7C676219EC4BA8BA36D Validity Not Before: Feb 28 15:52:34 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a42251-8c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0b:5f:37:07:be:00:b1:d3:a5:ae:f8:83:99: f3:e5:3d:9f:7e:37:a1:8f:5a:ab:c9:ef:16:54:ec: 44:c3:12:64:e3:0b:7f:26:42:8c:4d:92:c4:2c:76: 62:e3:fa:11:7d:12:4d:ba:52:34:db:5c:1c:db:69: b3:fb:0d:09:73:be:ac:d9:6b:2f:81:79:29:c8:b7: ce:3d:b6:1d:07:9b:e7:52:c3:05:68:8e:2c:b9:f9: 55:92:f7:63:f0:e0:3e:30:db:12:46:eb:7c:db:28: 93:39:89:37:f4:29:45:53:6e:e0:62:6a:52:4b:5b: af:09:3a:06:a3:d3:1e:6f:cb:4f:f1:ae:f0:39:5d: e8:0f:4e:e2:b1:a2:58:47:57:ae:7a:eb:dd:13:ae: f1:04:78:8c:e5:7e:d1:3a:78:49:a7:7c:5a:a1:dd: 2c:af:53:0c:e1:4f:1f:1c:97:1d:f1:29:b9:4e:92: 22:47:d4:9a:9c:c1:75:be:49:72:9b:80:82:6d:a2: dd:cb:53:b6:9d:31:2a:34:55:81:f8:ed:77:fa:a5: a8:c4:76:5a:17:d0:bf:50:bf:44:0b:0d:8b:4c:45: 53:7a:a8:ab:6d:94:91:48:86:9d:ed:77:d8:30:34: d8:bb:8a:6a:d1:5e:b0:df:77:6e:81:65:51:44:e5: 89:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:31:CB:84:BB:83:5B:B6:FD:1C:DE:09:7C:FC:BB:13:EA:6F:69:B2 X509v3 Authority Key Identifier: keyid:B4:3A:5A:60:D4:68:06:A6:9F:FE:F7:C6:76:21:9E:C4:BA:8B:A3:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tDpaYNRoBqaf_vfGdiGexLqLo20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/43487B18BF1811E9A2C00E63C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.224.43.0/24 203.215.60.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:34:20:59:9b:c5:f2:b7:ae:6f:50:57:eb:d6:3c:ac:01:a2: 8c:8c:8a:50:b6:7b:1f:16:d3:d3:44:f2:01:3c:15:b2:63:c5: 10:df:fb:16:55:f8:3c:b1:1a:5b:8c:67:a9:03:a3:6a:ac:42: c2:2d:46:20:05:d8:22:9e:82:b3:91:68:31:d5:cf:d6:9d:34: 3c:0a:5d:2f:65:31:9b:dd:a1:5c:21:9a:19:7f:60:7a:fe:96: bc:aa:28:d1:76:55:d8:52:be:2a:b9:28:62:9b:cd:c9:aa:72: 14:51:d3:db:fc:22:3d:7e:35:3b:63:5e:2c:29:f2:fc:99:d8: 0f:c7:6e:78:9d:27:c0:bc:b7:a3:9a:37:7e:f0:f5:fe:68:71: 76:c3:c9:39:67:3e:24:b7:d7:c6:01:0b:aa:38:6a:42:56:cf: 87:12:97:01:ab:03:06:9d:ae:14:fc:fe:92:04:30:2b:5a:ea: 72:7b:71:2a:ad:93:b6:13:a9:46:e4:22:0d:26:05:70:a1:e1: 17:f6:ee:f3:3e:cf:13:c5:d2:e2:d1:47:ec:9b:53:fc:57:e4: 9b:dc:ce:b1:ce:3e:48:c7:73:96:34:5f:c1:0e:01:d6:0b:9d: cf:98:49:c5:c9:34:43:49:b5:f1:49:25:91:92:1e:bb:ee:b2: 64:7a:e1:8e -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICLB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBRTUxMTAvBgNVBAUTKEI0M0E1QTYwRDQ2ODA2QTY5RkZFRjdDNjc2MjE5RUM0 QkE4QkEzNkQwHhcNMjUwMjI4MTU1MjM0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjI1MS04YzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgtfNwe+ALHTpa74g5nz5T2ffjehj1qrye8WVOxEwxJk4wt/JkKMTZLELHZi 4/oRfRJNulI021wc22mz+w0Jc76s2WsvgXkpyLfOPbYdB5vnUsMFaI4suflVkvdj 8OA+MNsSRut82yiTOYk39ClFU27gYmpSS1uvCToGo9Meb8tP8a7wOV3oD07isaJY R1eueuvdE67xBHiM5X7ROnhJp3xaod0sr1MM4U8fHJcd8Sm5TpIiR9SanMF1vkly m4CCbaLdy1O2nTEqNFWB+O13+qWoxHZaF9C/UL9ECw2LTEVTeqirbZSRSIad7XfY MDTYu4pq0V6w33dugWVRROWJ1QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFM0xy4S7 g1u2/RzeCXz8uxPqb2myMB8GA1UdIwQYMBaAFLQ6WmDUaAamn/73xnYhnsS6i6Nt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkFFNS84RDNFNTRFQUVE NTkxMUUzQjA5MDExOTI1OTExRUEzMi90RHBhWU5Sb0JxYWZfdmZHZGlHZXhMcUxv MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3REcGFZTlJvQnFhZl92ZkdkaUdleExxTG8yMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTJBRTUvOEQzRTU0RUFFRDU5MTFFM0IwOTAxMTkyNTkxMUVBMzIvNDM0ODdCMThC RjE4MTFFOUEyQzAwRTYzQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAK+ArAwQCy9c8MA0GCSqGSIb3DQEBCwUAA4IBAQAaNCBZm8Xyt65v UFfr1jysAaKMjIpQtnsfFtPTRPIBPBWyY8UQ3/sWVfg8sRpbjGepA6NqrELCLUYg BdginoKzkWgx1c/WnTQ8Cl0vZTGb3aFcIZoZf2B6/pa8qijRdlXYUr4quShim83J qnIUUdPb/CI9fjU7Y14sKfL8mdgPx254nSfAvLejmjd+8PX+aHF2w8k5Zz4kt9fG AQuqOGpCVs+HEpcBqwMGna4U/P6SBDArWupye3EqrZO2E6lG5CINJgVwoeEX9u7z Ps8TxdLi0Ufsm1P8V+Sb3M6xzj5Ix3OWNF/BDgHWC53PmEnFyTRDSbXxSSWRkh67 7rJkeuGO -----END CERTIFICATE-----Generated at Mon Mar 2 22:35:05 2026 by rpki-client