$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/63BFE4C0292811EEAF894530C4F9AE02.roa File: 63BFE4C0292811EEAF894530C4F9AE02.roa (raw, json) Hash identifier: sVanteUBCWSFVUaHrZ5yntV/JIzyhq/72ORLRX744ZU= Subject key identifier: 94:57:BB:3F:EA:8E:23:DA:0B:54:31:F1:12:CD:C9:DE:C5:4E:92:B5 Certificate issuer: /CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Certificate serial: 2282 Authority key identifier: 3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/63BFE4C0292811EEAF894530C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:18:59 +0000 ROA not before: Thu 02 Oct 2025 16:13:42 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 31898 IP address blocks: 43.230.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:27:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8834 (0x2282) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0EBF, serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Validity Not Before: Oct 2 16:13:42 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a48313-57d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ad:21:45:1c:de:4f:e2:c4:1a:fb:3f:34:71: 27:9c:06:87:3c:43:ce:88:00:d9:be:f7:a3:48:41: 40:3b:9f:88:4e:0b:1c:53:06:ce:11:de:30:4a:a3: c8:a3:0d:88:09:5f:6b:59:08:dd:63:07:fa:57:39: 1b:b3:ba:47:0a:bd:a0:14:3c:fa:42:71:46:2e:c9: 35:f6:7c:19:2e:3f:77:fb:76:20:cb:c9:2f:da:9d: 51:2b:e2:bc:c1:40:37:f6:36:8b:8f:6e:17:1b:fe: e3:56:56:b3:82:eb:2d:41:e8:87:52:1a:a7:39:f4: 99:0e:6b:31:8e:1d:c6:fb:d6:53:40:6b:02:e5:1a: df:2c:a7:b4:0c:66:6c:10:d5:bc:db:3f:7c:9c:5c: 7f:38:a2:0b:06:34:35:3e:95:36:6c:95:10:10:95: 24:67:7e:48:85:a5:ca:e3:66:53:aa:af:ee:e4:0d: cf:5c:ea:aa:a3:26:96:b6:92:12:90:0c:74:6a:33: f7:68:3c:68:7f:48:ea:21:17:ad:83:71:fb:49:60: 15:e0:4c:b7:97:6b:4d:34:12:95:13:ac:3f:84:1c: 81:78:0c:a6:e0:20:5c:ac:89:2d:59:9e:39:76:51: 45:16:b6:da:1b:c8:20:c6:b0:9d:54:6a:74:7f:69: da:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:57:BB:3F:EA:8E:23:DA:0B:54:31:F1:12:CD:C9:DE:C5:4E:92:B5 X509v3 Authority Key Identifier: keyid:3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/63BFE4C0292811EEAF894530C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.230.26.0/24 Signature Algorithm: sha256WithRSAEncryption 40:56:40:41:d7:89:4a:f5:0b:fd:c6:d7:fd:44:f7:dc:ed:5b: 40:22:2b:ba:fb:cc:3c:57:c2:8d:d1:6e:17:5b:d7:33:36:db: 6d:16:f0:a6:64:9d:2c:6d:d0:8d:26:a1:13:f7:0c:8e:c1:ed: a2:26:56:75:e1:fe:66:34:db:4e:e8:44:14:ec:a7:21:7c:8d: 48:08:81:d0:8d:a8:47:2d:1c:87:dc:a0:32:37:7e:f3:2d:b3: b6:84:f8:2d:1f:a9:23:66:1c:73:51:b5:3d:49:d8:c9:c7:da: 12:41:8a:23:53:e5:17:f3:89:6c:09:f5:2c:45:00:cd:6e:d8: a8:4f:b1:5c:a4:97:7b:4d:00:77:6c:a4:1e:07:12:01:97:87: 9e:6a:a4:c4:99:a6:55:d8:6b:c3:dd:2a:ed:42:52:5d:44:d1: bd:d6:72:bb:2d:4c:b8:6d:2e:8f:90:35:a8:f7:7f:b7:10:82: 56:c0:5a:be:84:40:08:f6:c4:19:8c:51:a3:6e:09:07:72:1e: 94:5f:2e:20:7c:a2:c6:95:f1:64:c9:b0:8d:4d:6f:f5:b6:61: 86:7a:1d:70:ff:98:f3:14:85:e4:11:4e:c0:f6:ef:28:94:f3: f0:7b:b3:c3:93:ad:9a:ff:f6:2f:ac:3d:ba:54:62:f5:c0:61: cf:f9:db:e1 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICIoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBFQkYxMTAvBgNVBAUTKDNBQ0NCNjk1MzlBQzlGNDI4OEJDRDBGMEE1NDI1MEQ1 OTJGNTQwRDQwHhcNMjUxMDAyMTYxMzQyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODMxMy01N2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp60hRRzeT+LEGvs/NHEnnAaHPEPOiADZvvejSEFAO5+ITgscUwbOEd4wSqPI ow2ICV9rWQjdYwf6Vzkbs7pHCr2gFDz6QnFGLsk19nwZLj93+3Ygy8kv2p1RK+K8 wUA39jaLj24XG/7jVlazgustQeiHUhqnOfSZDmsxjh3G+9ZTQGsC5RrfLKe0DGZs ENW82z98nFx/OKILBjQ1PpU2bJUQEJUkZ35IhaXK42ZTqq/u5A3PXOqqoyaWtpIS kAx0ajP3aDxof0jqIRetg3H7SWAV4Ey3l2tNNBKVE6w/hByBeAym4CBcrIktWZ45 dlFFFrbaG8ggxrCdVGp0f2naxwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJRXuz/q jiPaC1Qx8RLNyd7FTpK1MB8GA1UdIwQYMBaAFDrMtpU5rJ9CiLzQ8KVCUNWS9UDU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEVCRi81Rjg0RDdEOERC ODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24wS0l2TkR3cFVKUTFaTDFR TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09zeTJsVG1zbjBLSXZORHdwVUpRMVpMMVFOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjBFQkYvNUY4NEQ3RDhEQjgwMTFFNTlBQjdFRDFFQzRGOUFFMDIvNjNCRkU0QzAy OTI4MTFFRUFGODk0NTMwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK+YaMA0GCSqGSIb3DQEBCwUAA4IBAQBAVkBB14lK9Qv9xtf9RPfc 7VtAIiu6+8w8V8KN0W4XW9czNtttFvCmZJ0sbdCNJqET9wyOwe2iJlZ14f5mNNtO 6EQU7KchfI1ICIHQjahHLRyH3KAyN37zLbO2hPgtH6kjZhxzUbU9SdjJx9oSQYoj U+UX84lsCfUsRQDNbtioT7FcpJd7TQB3bKQeBxIBl4eeaqTEmaZV2GvD3SrtQlJd RNG91nK7LUy4bS6PkDWo93+3EIJWwFq+hEAI9sQZjFGjbgkHch6UXy4gfKLGlfFk ybCNTW/1tmGGeh1w/5jzFIXkEU7A9u8olPPwe7PDk62a//YvrD26VGL1wGHP+dvh -----END CERTIFICATE-----Generated at Mon Mar 2 10:37:12 2026 by rpki-client