$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/EF31E31847CE11EEB588375DC4F9AE02.roa File: EF31E31847CE11EEB588375DC4F9AE02.roa (raw, json) Hash identifier: CEGrzyVX/R9nXXUQAan2KcsnSM9ycrOqX5vVxIScejc= Subject key identifier: C0:7E:ED:F9:93:49:8D:59:FB:F6:D3:C7:2D:AC:18:12:49:FA:58:54 Certificate issuer: /CN=A91EA485/serialNumber=2A56ECF0F1FF39FB1515600D120A3472BE14B732 Certificate serial: 01DA Authority key identifier: 2A:56:EC:F0:F1:FF:39:FB:15:15:60:0D:12:0A:34:72:BE:14:B7:32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Klbs8PH_OfsVFWANEgo0cr4UtzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/EF31E31847CE11EEB588375DC4F9AE02.roa Signing time: Sun 01 Mar 2026 07:37:42 +0000 ROA not before: Sun 01 Jun 2025 04:01:33 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 136744 IP address blocks: 43.230.12.0/22 maxlen: 24 103.248.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.crl rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Klbs8PH_OfsVFWANEgo0cr4UtzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA485, serialNumber=2A56ECF0F1FF39FB1515600D120A3472BE14B732 Validity Not Before: Jun 1 04:01:33 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a3ecc6-2025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:07:da:fe:0c:e4:99:ff:28:83:28:5a:83:47: e6:87:38:e4:5a:08:a2:ca:b1:7d:e0:fa:af:10:32: 68:09:44:5d:dd:d2:df:e3:97:2f:a6:ff:7c:09:1d: d0:77:8c:4b:a3:2b:b2:c1:d3:9e:fc:68:32:a5:67: d1:35:55:27:cf:80:b2:7d:e4:d3:ee:59:16:cc:f8: 76:52:a2:33:14:8c:9c:81:7f:d5:df:45:d2:3e:9d: 2b:85:be:b8:a4:03:37:91:f4:ef:cd:5f:59:42:55: 89:0a:67:4f:b6:3d:d3:77:b8:35:ef:69:c5:02:e6: f9:2d:0f:5c:86:76:bb:55:96:66:4d:03:ac:96:d2: d8:ce:08:6c:e2:58:2b:86:96:75:31:7e:08:aa:41: fc:ff:3e:d2:a4:35:fe:3f:aa:12:00:2b:92:23:1f: 74:12:10:d8:a5:c2:ef:b5:14:39:0d:20:c3:31:1e: 53:65:2f:b5:44:2f:29:59:a9:1d:4a:8a:44:82:50: 39:54:68:84:de:72:86:03:1a:3b:0e:60:57:b5:51: af:73:d8:dc:fe:9d:27:a5:96:6b:ee:9f:4d:84:ca: cf:c8:d7:13:51:2a:7a:50:57:37:e5:89:60:25:cc: 55:b5:32:fe:c6:72:a2:db:af:61:5d:e8:1a:a4:e4: 68:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:7E:ED:F9:93:49:8D:59:FB:F6:D3:C7:2D:AC:18:12:49:FA:58:54 X509v3 Authority Key Identifier: keyid:2A:56:EC:F0:F1:FF:39:FB:15:15:60:0D:12:0A:34:72:BE:14:B7:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Klbs8PH_OfsVFWANEgo0cr4UtzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/EF31E31847CE11EEB588375DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.230.12.0/22 103.248.252.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:d1:04:c3:d4:4e:eb:5f:bb:56:99:5c:b2:0c:b6:89:35:08: 82:41:e7:c9:5a:f0:b8:25:e4:2d:d0:6f:05:50:61:5a:77:c0: 30:ca:1a:32:d5:24:3f:df:c2:be:d2:c2:90:4b:c2:c0:5f:1a: d6:59:22:cb:f8:e9:70:b0:e2:78:fa:73:24:9e:0e:85:6c:b8: 7e:47:79:97:f3:78:aa:40:5d:90:29:9b:f7:bf:29:73:f6:3f: e1:d3:2a:1f:f8:43:48:1a:bf:ef:a6:f7:b1:e1:9d:0d:ea:10: dd:4d:3a:19:8a:e1:83:2f:cd:81:4d:1f:e9:0a:bd:66:90:3d: 84:db:9c:af:4f:a9:99:99:fe:bb:53:4e:a8:c2:f1:30:41:66: 67:90:dc:ec:44:34:30:1a:17:13:e3:5d:fa:2e:fe:17:db:38: 4f:ed:f5:f7:6d:38:2b:ec:d9:2d:92:15:d3:f5:f0:d0:c8:fb: b6:b7:fb:1c:8c:ea:2b:56:77:c6:aa:11:45:dc:85:59:48:8e: df:f6:09:50:c8:4d:2a:80:2a:60:e7:ee:46:ec:c3:c6:e2:81: 7b:07:f2:f3:4c:b6:52:68:ba:e7:fa:94:57:f3:64:4b:ee:4a: 1f:a0:c7:18:5d:20:82:e0:17:1f:65:1d:ee:ce:23:1a:4c:0e: 7f:08:13:f8 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE0ODUxMTAvBgNVBAUTKDJBNTZFQ0YwRjFGRjM5RkIxNTE1NjAwRDEyMEEzNDcy QkUxNEI3MzIwHhcNMjUwNjAxMDQwMTMzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZWNjNi0yMDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQfa/gzkmf8ogyhag0fmhzjkWgiiyrF94PqvEDJoCURd3dLf45cvpv98CR3Q d4xLoyuywdOe/GgypWfRNVUnz4CyfeTT7lkWzPh2UqIzFIycgX/V30XSPp0rhb64 pAM3kfTvzV9ZQlWJCmdPtj3Td7g172nFAub5LQ9chna7VZZmTQOsltLYzghs4lgr hpZ1MX4IqkH8/z7SpDX+P6oSACuSIx90EhDYpcLvtRQ5DSDDMR5TZS+1RC8pWakd SopEglA5VGiE3nKGAxo7DmBXtVGvc9jc/p0npZZr7p9NhMrPyNcTUSp6UFc35Ylg JcxVtTL+xnKi269hXegapORoywIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFMB+7fmT SY1Z+/bTxy2sGBJJ+lhUMB8GA1UdIwQYMBaAFCpW7PDx/zn7FRVgDRIKNHK+FLcy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTQ4NS82MkE5Mjg2NjQ3 Q0UxMUVFODZDMjM4NUNDNEY5QUUwMi9LbGJzOFBIX09mc1ZGV0FORWdvMGNyNFV0 ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tsYnM4UEhfT2ZzVkZXQU5FZ28wY3I0VXR6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUE0ODUvNjJBOTI4NjY0N0NFMTFFRTg2QzIzODVDQzRGOUFFMDIvRUYzMUUzMTg0 N0NFMTFFRUI1ODgzNzVEQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK+YMAwQCZ/j8MA0GCSqGSIb3DQEBCwUAA4IBAQCL0QTD1E7rX7tW mVyyDLaJNQiCQefJWvC4JeQt0G8FUGFad8Awyhoy1SQ/38K+0sKQS8LAXxrWWSLL +OlwsOJ4+nMkng6FbLh+R3mX83iqQF2QKZv3vylz9j/h0yof+ENIGr/vpvex4Z0N 6hDdTToZiuGDL82BTR/pCr1mkD2E25yvT6mZmf67U06owvEwQWZnkNzsRDQwGhcT 4136Lv4X2zhP7fX3bTgr7NktkhXT9fDQyPu2t/scjOorVnfGqhFF3IVZSI7f9glQ yE0qgCpg5+5G7MPG4oF7B/LzTLZSaLrn+pRX82RL7kofoMcYXSCC4BcfZR3uziMa TA5/CBP4 -----END CERTIFICATE-----Generated at Mon Mar 2 02:24:20 2026 by rpki-client