$ rpki-client -vvf rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/E4FA38362D2311F1A198B1F8B7833773.roa File: E4FA38362D2311F1A198B1F8B7833773.roa (raw, json) Hash identifier: AxJKOqSnxksdZpHOPb0q92RjtR735qgr4EIIyE6SdIo= Subject key identifier: 4A:78:0A:94:6B:A9:29:BA:7B:9D:B5:0B:C5:12:62:8F:02:00:1E:92 Certificate issuer: /CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Certificate serial: 08CB Authority key identifier: D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/E4FA38362D2311F1A198B1F8B7833773.roa Signing time: Tue 12 May 2026 06:12:19 +0000 ROA not before: Tue 12 May 2026 06:12:19 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 133731 IP address blocks: 43.240.12.0/22 maxlen: 24 103.39.108.0/22 maxlen: 24 103.51.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:46:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2251 (0x8cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91397C2, serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Validity Not Before: May 12 06:12:19 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6a02c4c3-e1a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ce:ba:61:ee:a7:af:42:86:6f:fa:37:8e:14: 91:9c:9e:64:96:de:43:90:a3:f8:ee:78:3b:bb:61: e8:c5:31:54:ce:cc:a9:52:4f:5e:ca:ad:5c:f3:45: e8:74:61:53:13:9e:ee:91:f6:7a:ea:05:cd:83:90: 2a:05:69:50:c6:9b:df:41:35:27:fc:9c:39:07:0f: 34:03:4c:b3:7b:30:87:7b:01:c5:8a:a6:e0:d3:a2: 6a:6f:a5:61:04:c6:0f:be:42:73:bc:19:b6:7f:60: ed:f9:dd:06:b0:0c:e4:2e:e9:2f:c8:44:95:aa:c3: 24:d9:61:4e:16:8b:92:6f:d8:cd:6d:57:21:d3:1d: b4:43:c8:b4:a6:63:b5:06:c8:2e:bf:11:07:00:8f: 67:cc:1e:40:26:62:db:6b:6b:1a:e3:44:23:c7:81: 69:84:83:22:4e:d6:3c:50:87:7e:00:be:c7:f2:68: f7:85:4c:20:b4:2e:10:b5:2d:96:23:53:df:7f:06: 22:72:3f:45:b9:c6:67:dd:57:5a:ec:79:61:9b:5d: 2b:7b:4b:12:33:2e:c4:50:80:6a:a3:76:5a:7d:e8: 95:69:4d:d7:8b:5c:c3:4b:5d:f9:70:bc:38:b4:e6: b6:ec:c9:f5:5c:ef:69:01:fa:b4:32:3e:5b:09:5b: f4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:78:0A:94:6B:A9:29:BA:7B:9D:B5:0B:C5:12:62:8F:02:00:1E:92 X509v3 Authority Key Identifier: keyid:D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/E4FA38362D2311F1A198B1F8B7833773.roa sbgp-ipAddrBlock: critical IPv4: 43.240.12.0/22 103.39.108.0/22 103.51.144.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:ce:6d:26:e8:9f:c7:e1:8f:e2:f3:91:7e:66:ec:3f:a4:a0: a4:dd:90:61:99:2b:cb:ff:62:b8:7a:01:54:65:c7:f5:93:34: 50:6a:2d:b0:67:56:2e:28:00:d3:de:ba:b0:b1:96:16:12:5e: 86:32:2c:c9:1e:3f:db:87:b8:83:78:94:32:4d:ab:14:84:75: df:8e:9d:03:f5:c6:be:1d:8a:24:07:ac:a3:d9:ef:4c:d7:67: d2:08:2a:9e:78:61:ce:1b:12:79:39:dd:b0:0d:15:75:8e:3c: 3e:ae:58:86:b4:60:c4:6e:c6:b2:6e:d6:f9:40:49:24:4a:35: f1:b0:c1:3b:10:07:62:29:6a:f6:19:79:35:d0:c3:68:79:54: d2:51:42:09:06:09:4a:b8:b8:d0:ad:9a:e8:0b:c1:6c:60:5d: 53:74:ce:db:a8:c8:e2:8c:32:62:e4:6f:7f:ef:96:67:85:9e: b5:05:e7:9e:ec:f3:77:d7:bb:6c:13:d2:56:f5:dc:38:6e:79: 94:1f:5c:5b:23:67:42:51:fe:05:3d:0d:49:7c:a6:8a:96:a4: ee:51:07:f0:59:78:80:ce:81:98:62:de:2a:0b:a6:8d:e3:3f: 26:38:fe:f7:aa:21:4a:00:79:23:d8:75:88:15:e4:de:7c:41: 12:08:4c:d1 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICCMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk3QzIxMTAvBgNVBAUTKEQzRDE1QUVFOUE0RjhBRTVDMjgxMTA4QTdEMkQzQUQ4 MUQ0RTc5Q0QwHhcNMjYwNTEyMDYxMjE5WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTAyYzRjMy1lMWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2M66Ye6nr0KGb/o3jhSRnJ5klt5DkKP47ng7u2HoxTFUzsypUk9eyq1c80Xo dGFTE57ukfZ66gXNg5AqBWlQxpvfQTUn/Jw5Bw80A0yzezCHewHFiqbg06Jqb6Vh BMYPvkJzvBm2f2Dt+d0GsAzkLukvyESVqsMk2WFOFouSb9jNbVch0x20Q8i0pmO1 BsguvxEHAI9nzB5AJmLba2sa40Qjx4FphIMiTtY8UId+AL7H8mj3hUwgtC4QtS2W I1PffwYicj9FucZn3Vda7Hlhm10re0sSMy7EUIBqo3ZafeiVaU3Xi1zDS135cLw4 tOa27Mn1XO9pAfq0Mj5bCVv0nwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFEp4CpRr qSm6e521C8USYo8CAB6SMB8GA1UdIwQYMBaAFNPRWu6aT4rlwoEQin0tOtgdTnnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTdDMi80RTQyNkRFOEZC RUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1WENnUkNLZlMwNjJCMU9l YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5RmE3cHBQaXVYQ2dSQ0tmUzA2MkIxT2VjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mzk3QzIvNEU0MjZERThGQkVBMTFFQTk0MEExRDE5QzRGOUFFMDIvRTRGQTM4MzYy RDIzMTFGMUExOThCMUY4Qjc4MzM3NzMucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCK/AMAwQCZydsAwQCZzOQMA0GCSqGSIb3DQEBCwUAA4IBAQBazm0m 6J/H4Y/i85F+Zuw/pKCk3ZBhmSvL/2K4egFUZcf1kzRQai2wZ1YuKADT3rqwsZYW El6GMizJHj/bh7iDeJQyTasUhHXfjp0D9ca+HYokB6yj2e9M12fSCCqeeGHOGxJ5 Od2wDRV1jjw+rliGtGDEbsaybtb5QEkkSjXxsME7EAdiKWr2GXk10MNoeVTSUUIJ BglKuLjQrZroC8FsYF1TdM7bqMjijDJi5G9/75ZnhZ61Beee7PN317tsE9JW9dw4 bnmUH1xbI2dCUf4FPQ1JfKaKlqTuUQfwWXiAzoGYYt4qC6aN4z8mOP73qiFKAHkj 2HWIFeTefEESCEzR -----END CERTIFICATE-----Generated at Wed May 13 13:27:04 2026 by rpki-client