$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/09CEF4D0708411E9AC9EA90EC4F9AE02.roa File: 09CEF4D0708411E9AC9EA90EC4F9AE02.roa (raw, json) Hash identifier: hr/wquqVL5NSo19ZoDQBpFuCTGdgVWRZL+OouZ/q0dk= Subject key identifier: 6D:BE:6E:37:4D:0C:31:C2:93:76:E7:6F:08:4E:33:FF:60:C0:96:82 Certificate issuer: /CN=A91F2230/serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F Certificate serial: 0FCD Authority key identifier: 17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/09CEF4D0708411E9AC9EA90EC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:20:13 +0000 ROA not before: Fri 04 Apr 2025 17:48:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136480 IP address blocks: 43.227.12.0/22 maxlen: 22 43.227.12.0/24 maxlen: 24 43.227.13.0/24 maxlen: 24 43.227.14.0/24 maxlen: 24 43.227.15.0/24 maxlen: 24 103.89.176.0/22 maxlen: 22 103.89.176.0/24 maxlen: 24 103.89.177.0/24 maxlen: 24 103.89.178.0/24 maxlen: 24 103.89.179.0/24 maxlen: 24 2400:f1c0::/32 maxlen: 32 2400:f1c0::/48 maxlen: 48 2400:f1c0:1::/48 maxlen: 48 2400:f1c0:2::/48 maxlen: 48 2400:f1c0:3::/48 maxlen: 48 2400:f1c0:4::/48 maxlen: 48 2400:f1c0:5::/48 maxlen: 48 2400:f1c0:6::/48 maxlen: 48 2400:f1c0:7::/48 maxlen: 48 2400:f1c0:8::/48 maxlen: 48 2400:f1c0:9::/48 maxlen: 48 2400:f1c0:a::/48 maxlen: 48 2400:f1c0:b::/48 maxlen: 48 2400:f1c0:c::/48 maxlen: 48 2400:f1c0:d::/48 maxlen: 48 2400:f1c0:e::/48 maxlen: 48 2400:f1c0:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4045 (0xfcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2230, serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F Validity Not Before: Apr 4 17:48:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a404cd-9d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:68:bd:eb:7e:c4:85:f0:0f:98:7f:74:6d:1f: 26:94:ef:59:47:f8:be:7c:6c:40:43:34:00:86:bb: b7:2e:a9:a0:11:9b:e9:e5:48:86:99:b0:ed:13:49: b3:21:2c:69:a6:f1:1a:b7:e3:97:f8:e2:1d:ad:fe: 94:63:ef:b7:95:54:61:a9:dd:bb:58:09:60:e2:be: 1f:6f:7f:50:56:9b:33:01:2d:b3:a1:00:55:84:50: d2:9f:cf:54:b9:4e:aa:f4:6f:d9:17:ff:17:17:65: 87:d3:55:71:68:58:4c:42:41:66:21:31:f8:26:de: 50:a1:c4:f2:94:60:6f:78:46:4a:16:13:77:3b:b1: e5:17:4d:cb:c2:1b:09:a8:c4:19:e4:85:ae:d4:9c: a2:bf:fa:e5:6e:6e:4a:82:6f:d2:e6:5d:b9:49:8c: a7:74:5b:91:5a:19:74:a6:27:b3:d4:d8:e9:a3:b1: fe:d0:84:95:1c:aa:bd:69:90:b4:dc:ff:11:52:d6: 3f:73:bd:b4:9f:05:e1:24:1b:ae:04:22:0e:c0:a0: c6:5b:04:80:19:f2:b7:4e:ba:ff:31:5e:45:6b:73: 27:5f:b6:8a:19:88:ce:de:17:e7:24:27:0f:bb:c9: 12:a9:e5:b3:40:d4:e8:69:d8:06:ea:a6:6a:2f:21: 84:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:BE:6E:37:4D:0C:31:C2:93:76:E7:6F:08:4E:33:FF:60:C0:96:82 X509v3 Authority Key Identifier: keyid:17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/09CEF4D0708411E9AC9EA90EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.227.12.0/22 103.89.176.0/22 IPv6: 2400:f1c0::/32 Signature Algorithm: sha256WithRSAEncryption 95:19:7f:02:52:1e:b0:2a:45:2b:93:48:73:c8:14:c7:50:4f: a3:0f:26:c9:bd:4b:9b:d9:69:6b:a0:ce:20:6e:bb:b7:9f:55: b1:c8:f2:e6:d4:55:1e:71:a6:01:2e:15:4a:87:4d:3f:69:f6: b7:80:d4:66:1e:02:5d:11:cd:85:39:8d:a1:60:4d:1c:55:f7: 57:11:fc:e6:f7:da:08:85:77:95:db:87:fa:1b:8c:99:b5:b1: a0:16:97:9c:f7:00:6e:b0:65:b4:da:65:4f:7f:54:4d:a1:26: 15:65:c6:08:ed:ea:f9:17:40:4f:8f:f9:4b:dd:74:7a:1a:6d: 35:fc:60:80:72:04:c9:25:51:a9:28:c9:d4:e1:d8:7e:6d:41: 0f:c3:53:89:ac:ba:a4:2f:e0:e8:df:91:fd:b8:31:d8:c2:a9: 42:d9:6d:0b:8e:c6:5c:ae:91:c0:17:6a:c3:9c:ee:2c:e9:e1: c6:5e:1d:ea:c4:9f:4f:58:b3:7d:18:e7:b0:c3:f4:79:42:47: b9:7d:49:38:8d:0f:a9:ef:07:9c:68:ee:52:e5:3d:2b:a7:61: 38:1f:50:d7:28:f8:1d:51:06:ff:a0:7f:cb:0c:6d:12:fd:3c: 74:7d:13:7f:d3:90:94:2f:c9:e7:7c:96:92:36:bf:f5:35:51: 77:d7:b7:92 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICD80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIyMzAxMTAvBgNVBAUTKDE3NkE0RTAzQjU0MEFGMjUxNEE4QkM3MTlDMkJBMEY5 Rjc2RkZCMkYwHhcNMjUwNDA0MTc0ODA5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDRjZC05ZDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGi9637EhfAPmH90bR8mlO9ZR/i+fGxAQzQAhru3LqmgEZvp5UiGmbDtE0mz ISxppvEat+OX+OIdrf6UY++3lVRhqd27WAlg4r4fb39QVpszAS2zoQBVhFDSn89U uU6q9G/ZF/8XF2WH01VxaFhMQkFmITH4Jt5QocTylGBveEZKFhN3O7HlF03LwhsJ qMQZ5IWu1Jyiv/rlbm5Kgm/S5l25SYyndFuRWhl0piez1Njpo7H+0ISVHKq9aZC0 3P8RUtY/c720nwXhJBuuBCIOwKDGWwSAGfK3Trr/MV5Fa3MnX7aKGYjO3hfnJCcP u8kSqeWzQNToadgG6qZqLyGETQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFG2+bjdN DDHCk3bnbwhOM/9gwJaCMB8GA1UdIwQYMBaAFBdqTgO1QK8lFKi8cZwroPn3b/sv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjIzMC9BREZBNTU0Qzcw ODIxMUU5QjdCQzM5MEFDNEY5QUUwMi9GMnBPQTdWQXJ5VVVxTHh4bkN1Zy1mZHYt eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YycE9BN1ZBcnlVVXFMeHhuQ3VnLWZkdi15OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjIyMzAvQURGQTU1NEM3MDgyMTFFOUI3QkMzOTBBQzRGOUFFMDIvMDlDRUY0RDA3 MDg0MTFFOUFDOUVBOTBFQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCK+MMAwQCZ1mwMA0EAgACMAcDBQAkAPHAMA0GCSqGSIb3DQEBCwUA A4IBAQCVGX8CUh6wKkUrk0hzyBTHUE+jDybJvUub2WlroM4gbru3n1WxyPLm1FUe caYBLhVKh00/afa3gNRmHgJdEc2FOY2hYE0cVfdXEfzm99oIhXeV24f6G4yZtbGg Fpec9wBusGW02mVPf1RNoSYVZcYI7er5F0BPj/lL3XR6Gm01/GCAcgTJJVGpKMnU 4dh+bUEPw1OJrLqkL+Do35H9uDHYwqlC2W0LjsZcrpHAF2rDnO4s6eHGXh3qxJ9P WLN9GOeww/R5Qke5fUk4jQ+p7wecaO5S5T0rp2E4H1DXKPgdUQb/oH/LDG0S/Tx0 fRN/05CUL8nnfJaSNr/1NVF317eS -----END CERTIFICATE-----Generated at Mon Mar 2 10:54:25 2026 by rpki-client