$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/C4F9C4A03CCB11F0A0971A87C4F9AE02.roa File: C4F9C4A03CCB11F0A0971A87C4F9AE02.roa (raw, json) Hash identifier: r5fbxI0WJ85khg1DClSgXh3Irn73Y6H673j1SQaIjlc= Subject key identifier: 1A:E7:F1:F0:BA:13:EA:5C:B6:5E:1A:8D:72:47:7A:3E:CD:6F:F5:4A Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Certificate serial: 280C Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/C4F9C4A03CCB11F0A0971A87C4F9AE02.roa Signing time: Mon 02 Mar 2026 04:40:38 +0000 ROA not before: Thu 29 May 2025 20:31:29 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 17970 IP address blocks: 43.255.216.0/22 maxlen: 22 61.9.32.0/19 maxlen: 22 61.9.96.0/19 maxlen: 22 61.14.192.0/21 maxlen: 24 103.239.200.0/22 maxlen: 22 202.81.168.0/21 maxlen: 22 202.81.172.0/24 maxlen: 24 202.81.173.0/24 maxlen: 24 202.81.174.0/24 maxlen: 24 202.81.175.0/24 maxlen: 24 203.76.192.0/21 maxlen: 22 203.76.195.0/24 maxlen: 24 203.76.196.0/24 maxlen: 24 219.90.80.0/20 maxlen: 20 219.90.80.0/22 maxlen: 22 219.90.84.0/22 maxlen: 22 219.90.84.0/24 maxlen: 24 219.90.86.0/24 maxlen: 24 219.90.87.0/24 maxlen: 24 219.90.88.0/22 maxlen: 22 219.90.90.0/24 maxlen: 24 219.90.91.0/24 maxlen: 24 219.90.92.0/22 maxlen: 22 219.90.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 15:40:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10252 (0x280c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Validity Not Before: May 29 20:31:29 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a514c6-12d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:97:53:e3:9e:91:8f:89:0c:6b:86:ce:3a:f1: 76:ac:c9:91:eb:32:1f:be:2f:d6:f6:f4:b0:62:d3: 49:e8:c1:df:92:42:f5:80:fb:92:1d:dd:4f:f5:b1: eb:ef:df:94:35:fc:c0:43:f0:c0:15:b7:2d:6b:1a: 6c:19:50:2b:32:b9:7f:9a:af:01:22:dd:ca:b8:23: 51:ef:80:5b:cb:c6:af:cb:33:94:4d:e4:89:b9:6b: 66:9e:fa:b8:55:84:b2:62:a3:0c:23:08:97:fa:75: a4:f1:31:8b:3c:92:2d:49:a1:0f:d4:2c:d7:f3:10: e4:a0:e2:d0:4b:fb:53:8d:cb:d1:43:c9:f8:44:9f: 4f:ec:45:90:c0:5a:3a:91:df:ee:06:39:c7:9b:3e: 47:f6:e9:cf:9e:ae:ec:4a:19:84:e5:15:13:0d:4d: d3:9f:4d:15:9f:a5:db:8a:5c:1b:b8:16:e8:18:2e: c3:cb:50:15:13:b0:30:fd:da:b7:df:ff:78:98:2d: 07:1a:56:7a:e1:fe:99:b5:e6:a6:34:49:a9:38:c0: 46:a5:1c:88:e4:c2:22:b5:3b:bf:39:bf:87:76:a5: 26:1f:6c:38:44:fc:0e:73:5e:d6:da:70:eb:d4:c5: 7d:5d:4c:0b:3a:80:7f:49:58:9f:68:41:c3:36:c3: d3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E7:F1:F0:BA:13:EA:5C:B6:5E:1A:8D:72:47:7A:3E:CD:6F:F5:4A X509v3 Authority Key Identifier: keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/C4F9C4A03CCB11F0A0971A87C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.255.216.0/22 61.9.32.0/19 61.9.96.0/19 61.14.192.0/21 103.239.200.0/22 202.81.168.0/21 203.76.192.0/21 219.90.80.0/20 Signature Algorithm: sha256WithRSAEncryption 6d:8e:45:c3:d0:93:2e:fe:c3:c2:d9:bd:5b:7c:40:a9:c9:58: 16:33:23:3d:3c:bf:c9:57:dc:e2:ae:6c:95:8a:0c:aa:d7:40: 8c:c6:04:47:a6:41:b9:65:bf:22:7e:cd:ef:61:5b:3f:3c:ed: 66:b8:74:e5:81:c9:92:39:01:9d:a2:d0:d9:08:e7:1a:5d:01: 93:4a:d5:9f:19:e0:a1:db:68:f7:a0:7c:6a:15:54:f7:4e:ec: b7:dc:5b:7d:e2:e3:9c:c6:0f:a6:f8:7e:47:e9:26:2a:f1:a8: 16:76:44:29:f9:60:f1:88:52:59:a2:6b:5b:6d:0a:b0:1a:3b: 12:54:ef:a6:2d:fe:77:38:54:7c:a0:6a:89:e7:59:09:04:90: 24:62:8c:e8:93:19:96:19:ff:ec:3c:a3:89:c5:66:ff:d1:56: f9:62:ad:2f:8f:60:f2:da:77:9e:15:06:d3:af:d4:fa:3a:15: 3a:d7:a5:0b:db:42:02:e6:10:94:ec:f6:a8:7a:ab:9c:5c:e1: f8:58:5b:48:19:ef:5b:f8:60:ee:f1:ac:12:47:18:37:51:29: 9f:9e:32:a9:24:12:70:29:3b:0d:23:d8:87:68:9b:4a:08:db: 08:ca:82:26:5e:e4:60:f8:d4:cc:3e:a7:6e:f0:16:e1:fb:b1: a6:2f:99:65 -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgICKAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkQxMTAvBgNVBAUTKDRFMTBGMTNGMjk1RkJGMkIzNTlDODREREQxNjUxQkM4 NTFBQThBRjUwHhcNMjUwNTI5MjAzMTI5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1MTRjNi0xMmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJdT456Rj4kMa4bOOvF2rMmR6zIfvi/W9vSwYtNJ6MHfkkL1gPuSHd1P9bHr 79+UNfzAQ/DAFbctaxpsGVArMrl/mq8BIt3KuCNR74Bby8avyzOUTeSJuWtmnvq4 VYSyYqMMIwiX+nWk8TGLPJItSaEP1CzX8xDkoOLQS/tTjcvRQ8n4RJ9P7EWQwFo6 kd/uBjnHmz5H9unPnq7sShmE5RUTDU3Tn00Vn6XbilwbuBboGC7Dy1AVE7Aw/dq3 3/94mC0HGlZ64f6ZteamNEmpOMBGpRyI5MIitTu/Ob+HdqUmH2w4RPwOc17W2nDr 1MV9XUwLOoB/SVifaEHDNsPTCwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFBrn8fC6 E+pctl4ajXJHej7Nb/VKMB8GA1UdIwQYMBaAFE4Q8T8pX78rNZyE3dFlG8hRqor1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9FMUVGRDlCNkRF Q0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5czFuSVRkMFdVYnlGR3Fp dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRHhQeWxmdnlzMW5JVGQwV1VieUZHcWl2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjc1RkQvRTFFRkQ5QjZERUNFMTFFNEExNEYwMDY4QzRGOUFFMDIvQzRGOUM0QTAz Q0NCMTFGMEEwOTcxQTg3QzRGOUFFMDIucm9hMEkGCCsGAQUFBwEHAQH/BDowODA2 BAIAATAwAwQCK//YAwQFPQkgAwQFPQlgAwQDPQ7AAwQCZ+/IAwQDylGoAwQDy0zA AwQE21pQMA0GCSqGSIb3DQEBCwUAA4IBAQBtjkXD0JMu/sPC2b1bfECpyVgWMyM9 PL/JV9zirmyVigyq10CMxgRHpkG5Zb8ifs3vYVs/PO1muHTlgcmSOQGdotDZCOca XQGTStWfGeCh22j3oHxqFVT3Tuy33Ft94uOcxg+m+H5H6SYq8agWdkQp+WDxiFJZ omtbbQqwGjsSVO+mLf53OFR8oGqJ51kJBJAkYozokxmWGf/sPKOJxWb/0Vb5Yq0v j2Dy2neeFQbTr9T6OhU616UL20IC5hCU7PaoequcXOH4WFtIGe9b+GDu8awSRxg3 USmfnjKpJBJwKTsNI9iHaJtKCNsIyoImXuRg+NTMPqdu8Bbh+7GmL5ll -----END CERTIFICATE-----Generated at Sat Mar 28 12:00:02 2026 by rpki-client