$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/3CE623883D6F11F196AFC17AB1833773.roa File: 3CE623883D6F11F196AFC17AB1833773.roa (raw, json) Hash identifier: 853MPgQce1N2I8/sXQh38JI3bCF99jZP68VnNHN1eAA= Subject key identifier: 2B:DB:F4:11:39:CD:D1:1A:72:2F:F4:49:EE:74:34:74:AE:CE:65:D1 Certificate issuer: /CN=A91E5770/serialNumber=BD43603F4CA68391A73D667DF6650E52369B7854 Certificate serial: 50 Authority key identifier: BD:43:60:3F:4C:A6:83:91:A7:3D:66:7D:F6:65:0E:52:36:9B:78:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUNgP0ymg5GnPWZ99mUOUjabeFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/3CE623883D6F11F196AFC17AB1833773.roa Signing time: Fri 28 Aug 2026 05:19:06 +0000 ROA not before: Fri 28 Aug 2026 05:19:06 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 13335 IP address blocks: 43.230.144.0/24 maxlen: 24 103.41.185.0/24 maxlen: 24 103.49.212.0/24 maxlen: 24 103.51.12.0/24 maxlen: 24 103.51.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/vUNgP0ymg5GnPWZ99mUOUjabeFQ.crl rsync://rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/vUNgP0ymg5GnPWZ99mUOUjabeFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUNgP0ymg5GnPWZ99mUOUjabeFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5770, serialNumber=BD43603F4CA68391A73D667DF6650E52369B7854 Validity Not Before: Aug 28 05:19:06 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6a911a4a-9089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8a:15:ee:d0:cf:6e:41:d3:84:8f:6f:77:c8: d2:9f:14:dd:d1:e6:24:45:ae:57:96:f3:be:09:ce: d4:02:34:c2:35:74:8d:a8:0a:14:31:b3:1b:89:67: a7:5b:13:0f:94:f6:d1:10:31:c0:4a:9b:21:28:d0: c3:69:fe:72:dd:da:1f:ab:36:60:1b:af:ee:ed:d1: c7:db:7b:cc:a8:93:07:ea:03:ce:0a:a0:c4:9f:ce: ac:e0:be:05:14:20:f9:a3:4b:1a:af:63:03:5a:b1: fe:f1:6b:8d:9f:eb:1f:72:30:90:5e:72:94:25:9f: 7f:be:65:dc:ba:c5:03:9f:ed:10:aa:bf:91:40:df: ad:dd:2b:62:22:89:7e:c8:c2:22:63:d2:ff:1c:a1: ed:22:67:8b:ae:1a:78:e3:69:d1:6f:7a:3a:99:3b: 14:7a:ba:52:6b:a3:3e:6b:32:d9:27:cd:60:2b:78: 4e:98:ce:47:90:bc:97:c9:09:6d:ba:68:80:8f:a7: 6a:10:aa:52:a0:62:8e:48:cd:57:41:2f:66:48:54: e6:9e:07:e7:0b:20:3e:e7:c7:52:3c:3d:9f:fa:4b: 28:eb:0f:dc:f7:9a:41:62:9d:00:5e:f4:69:5c:3f: 52:a7:f3:75:45:17:cc:13:0b:7f:eb:59:5c:db:16: 31:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DB:F4:11:39:CD:D1:1A:72:2F:F4:49:EE:74:34:74:AE:CE:65:D1 X509v3 Authority Key Identifier: keyid:BD:43:60:3F:4C:A6:83:91:A7:3D:66:7D:F6:65:0E:52:36:9B:78:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/vUNgP0ymg5GnPWZ99mUOUjabeFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUNgP0ymg5GnPWZ99mUOUjabeFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/3CE623883D6F11F196AFC17AB1833773.roa sbgp-ipAddrBlock: critical IPv4: 43.230.144.0/24 103.41.185.0/24 103.49.212.0/24 103.51.12.0/23 Signature Algorithm: sha256WithRSAEncryption 44:87:a6:d1:0b:1c:2c:8a:df:57:a2:1d:af:df:c5:65:0c:0c: 61:b7:43:0b:bb:8d:6a:d5:f1:6a:f0:8b:8f:79:59:02:c2:af: 8a:e8:a7:bf:9d:10:e5:ec:89:90:2b:73:56:e2:75:d3:72:35: 46:8c:b8:71:24:86:f2:99:1a:d9:39:e2:30:f3:5b:5e:dd:02: 60:52:45:93:97:2e:3b:f4:46:6b:fd:e9:85:6a:92:6f:75:81: c0:26:ad:12:91:8f:d0:de:ce:d1:e1:ed:2e:89:25:fa:3d:e9: be:86:5c:82:30:dd:42:aa:3c:e8:d9:00:2f:42:4e:c8:87:b8: ae:0a:88:4d:ae:3a:48:0f:0c:d6:27:a8:d0:08:d7:6e:2b:96: 30:75:93:cf:d3:2f:d3:87:47:f2:2d:66:54:0f:0d:d1:d3:fa: d0:36:d4:5a:d8:38:93:f7:ce:06:f5:27:5b:c8:56:d8:03:96: 0a:c1:c1:e8:46:4b:4d:ca:8a:59:48:af:5b:f9:25:4d:1b:17: 20:2f:5f:c9:5d:aa:5e:d8:d7:b1:09:65:60:30:47:fb:3c:ba: ad:c3:21:ea:3d:8a:f2:8a:30:40:29:47:4b:1f:0f:ee:77:6c: 05:e7:cf:c8:d9:63:f7:6b:ca:63:3d:93:34:84:02:92:8b:2b: 4c:80:2e:de -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTc3MDExMC8GA1UEBRMoQkQ0MzYwM0Y0Q0E2ODM5MUE3M0Q2NjdERjY2NTBFNTIz NjlCNzg1NDAeFw0yNjA4MjgwNTE5MDZaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhOTExYTRhLTkwODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaihXu0M9uQdOEj293yNKfFN3R5iRFrleW874JztQCNMI1dI2oChQxsxuJZ6db Ew+U9tEQMcBKmyEo0MNp/nLd2h+rNmAbr+7t0cfbe8yokwfqA84KoMSfzqzgvgUU IPmjSxqvYwNasf7xa42f6x9yMJBecpQln3++Zdy6xQOf7RCqv5FA363dK2IiiX7I wiJj0v8coe0iZ4uuGnjjadFvejqZOxR6ulJroz5rMtknzWAreE6YzkeQvJfJCW26 aICPp2oQqlKgYo5IzVdBL2ZIVOaeB+cLID7nx1I8PZ/6SyjrD9z3mkFinQBe9Glc P1Kn83VFF8wTC3/rWVzbFjF/AgMBAAGjggJyMIICbjAdBgNVHQ4EFgQUK9v0ETnN 0RpyL/RJ7nQ0dK7OZdEwHwYDVR0jBBgwFoAUvUNgP0ymg5GnPWZ99mUOUjabeFQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1NzcwLzkyRDU4REY4M0Q2 MzExRjE4MTRDQUEzOEFEODMzNzczL3ZVTmdQMHltZzVHblBXWjk5bVVPVWphYmVG US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdlVOZ1AweW1nNUduUFdaOTltVU9VamFiZUZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTc3MC85MkQ1OERGODNENjMxMUYxODE0Q0FBMzhBRDgzMzc3My8zQ0U2MjM4ODNE NkYxMUYxOTZBRkMxN0FCMTgzMzc3My5yb2EwMQYIKwYBBQUHAQcBAf8EIjAgMB4E AgABMBgDBAAr5pADBABnKbkDBABnMdQDBAFnMwwwDQYJKoZIhvcNAQELBQADggEB AESHptELHCyK31eiHa/fxWUMDGG3Qwu7jWrV8Wrwi495WQLCr4rop7+dEOXsiZAr c1biddNyNUaMuHEkhvKZGtk54jDzW17dAmBSRZOXLjv0Rmv96YVqkm91gcAmrRKR j9DeztHh7S6JJfo96b6GXIIw3UKqPOjZAC9CTsiHuK4KiE2uOkgPDNYnqNAI124r ljB1k8/TL9OHR/ItZlQPDdHT+tA21FrYOJP3zgb1J1vIVtgDlgrBwehGS03KillI r1v5JU0bFyAvX8ldql7Y17EJZWAwR/s8uq3DIeo9ivKKMEApR0sfD+53bAXnz8jZ Y/drymM9kzSEApKLK0yALt4= -----END CERTIFICATE-----Generated at Sun Sep 20 21:36:14 2026 by rpki-client