$ rpki-client -vvf rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/04421FB4C2A911EBB201FE39C4F9AE02.roa File: 04421FB4C2A911EBB201FE39C4F9AE02.roa (raw, json) Hash identifier: 7mK7C2dDA9Pr5XARK5lfOZOhUbUYxwvET636T8UBOLs= Subject key identifier: 1C:48:E7:D6:D2:00:5E:27:99:5A:0F:AE:65:E1:C6:2E:6F:7B:BE:01 Certificate issuer: /CN=A91551D7/serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0 Certificate serial: 0F1A Authority key identifier: 11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/04421FB4C2A911EBB201FE39C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:43:02 +0000 ROA not before: Wed 14 Jan 2026 18:14:33 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 18106 IP address blocks: 43.230.96.0/23 maxlen: 23 43.230.96.0/24 maxlen: 24 43.230.98.0/23 maxlen: 23 103.7.68.0/22 maxlen: 22 103.7.68.0/24 maxlen: 24 103.7.69.0/24 maxlen: 24 103.7.70.0/24 maxlen: 24 103.7.71.0/24 maxlen: 24 163.47.88.0/24 maxlen: 24 163.47.89.0/24 maxlen: 24 223.27.137.0/24 maxlen: 24 223.27.138.0/24 maxlen: 24 223.27.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3866 (0xf1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91551D7, serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0 Validity Not Before: Jan 14 18:14:33 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a46c96-0e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:83:ea:57:82:a5:dc:a7:19:18:d5:68:1f:2e: 17:1d:a6:6b:1e:e3:92:9b:0e:b9:da:40:e9:75:a5: 53:32:e4:a7:3e:bb:2b:e0:1e:ed:e7:e1:83:3a:c4: b7:65:f6:99:83:cf:f0:f1:08:90:91:6f:a4:9f:f5: a9:cb:a3:73:47:e3:ae:31:f4:b9:8c:4b:2f:12:07: 6c:4c:93:9d:26:72:04:63:6d:32:64:45:04:82:73: 7a:f6:05:a4:f4:f4:45:7b:8a:b4:3b:99:0f:03:61: 60:a3:12:9a:aa:47:c1:f2:6e:a6:2b:f7:85:fc:26: 4e:fa:36:c4:82:f4:50:50:d0:44:4e:83:c7:31:01: c5:6d:64:2f:21:74:43:a4:01:05:14:2a:31:80:b0: 5a:1e:22:51:0c:6e:07:f6:df:51:59:44:62:25:05: 92:31:ca:17:00:39:88:d7:3e:49:ee:80:a6:bb:e0: c8:1f:a5:08:e2:13:d3:93:54:83:ab:47:ea:41:d1: 8f:77:52:86:f1:47:7a:ce:a4:85:9d:2e:1a:f5:c0: b8:40:f2:d9:67:32:40:82:f4:c5:92:f7:f7:51:b3: c5:bf:f5:d1:e5:d5:81:4a:88:b7:b5:3a:23:65:7b: 81:a5:27:91:89:0f:91:0a:58:ce:2e:eb:bc:cc:1d: b7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:48:E7:D6:D2:00:5E:27:99:5A:0F:AE:65:E1:C6:2E:6F:7B:BE:01 X509v3 Authority Key Identifier: keyid:11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/04421FB4C2A911EBB201FE39C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.230.96.0/22 103.7.68.0/22 163.47.88.0/23 223.27.137.0-223.27.138.255 223.27.140.0/24 Signature Algorithm: sha256WithRSAEncryption 48:95:5b:8c:c3:d5:6a:ab:e1:01:ae:98:2a:0f:ea:3f:18:5e: d6:7d:c7:ee:6d:5e:1a:1c:e6:99:14:3d:69:c7:01:22:d7:cc: ff:90:9f:16:44:93:d9:81:0c:a4:92:18:4e:a5:6a:5f:4c:08: 91:48:a3:20:fb:d2:c4:ad:98:b6:79:83:ab:6b:d5:6e:8b:7a: 0c:86:1b:7e:dd:d9:82:81:cb:3a:e7:62:e6:7a:3c:5f:3e:b4: 13:df:fb:72:5a:cf:c1:72:53:ee:61:b8:ca:74:43:df:08:ac: cb:c6:91:cb:51:77:62:53:20:9d:0e:3a:73:44:11:88:8e:e5: d6:b0:f9:22:36:37:a9:da:f8:ab:3e:9a:c2:1f:47:a9:33:bd: 28:5c:95:c2:8e:8a:4b:8c:d5:62:46:af:dc:aa:9a:a8:a7:b3: b4:99:ee:ce:29:86:06:4b:0b:14:1e:43:29:03:49:c8:76:df: 7b:b3:83:7c:ce:2c:89:1a:47:64:45:56:49:32:a8:7e:c8:7c: 89:61:46:e6:4c:ca:d1:98:96:19:b1:f5:31:aa:7f:16:3a:df: 96:03:c6:be:f7:40:6e:26:6a:28:cf:96:d1:5b:de:b1:61:b6: f0:72:8c:ab:d3:f4:ad:d9:88:57:e6:5f:6e:31:ad:c0:82:5b: c5:37:56:ce -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICDxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUxRDcxMTAvBgNVBAUTKDExMzYxOEIwRDQxMDY4MkFDMDZBOTAxRDY1QkI5QUM5 NTVFRDg5RTAwHhcNMjYwMTE0MTgxNDMzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmM5Ni0wZTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoPqV4Kl3KcZGNVoHy4XHaZrHuOSmw652kDpdaVTMuSnPrsr4B7t5+GDOsS3 ZfaZg8/w8QiQkW+kn/Wpy6NzR+OuMfS5jEsvEgdsTJOdJnIEY20yZEUEgnN69gWk 9PRFe4q0O5kPA2FgoxKaqkfB8m6mK/eF/CZO+jbEgvRQUNBEToPHMQHFbWQvIXRD pAEFFCoxgLBaHiJRDG4H9t9RWURiJQWSMcoXADmI1z5J7oCmu+DIH6UI4hPTk1SD q0fqQdGPd1KG8Ud6zqSFnS4a9cC4QPLZZzJAgvTFkvf3UbPFv/XR5dWBSoi3tToj ZXuBpSeRiQ+RCljOLuu8zB23KQIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFBxI59bS AF4nmVoPrmXhxi5ve74BMB8GA1UdIwQYMBaAFBE2GLDUEGgqwGqQHWW7mslV7Yng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTFENy82OEYwOTI5MjlF MkYxMUU5QjJFNTI4MEFDNEY5QUUwMi9FVFlZc05RUWFDckFhcEFkWmJ1YXlWWHRp ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VUWVlzTlFRYUNyQWFwQWRaYnVheVZYdGllQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTUxRDcvNjhGMDkyOTI5RTJGMTFFOUIyRTUyODBBQzRGOUFFMDIvMDQ0MjFGQjRD MkE5MTFFQkIyMDFGRTM5QzRGOUFFMDIucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAs BAIAATAmAwQCK+ZgAwQCZwdEAwQBoy9YMAwDBADfG4kDBADfG4oDBADfG4wwDQYJ KoZIhvcNAQELBQADggEBAEiVW4zD1Wqr4QGumCoP6j8YXtZ9x+5tXhoc5pkUPWnH ASLXzP+QnxZEk9mBDKSSGE6lal9MCJFIoyD70sStmLZ5g6tr1W6LegyGG37d2YKB yzrnYuZ6PF8+tBPf+3Jaz8FyU+5huMp0Q98IrMvGkctRd2JTIJ0OOnNEEYiO5daw +SI2N6na+Ks+msIfR6kzvShclcKOikuM1WJGr9yqmqins7SZ7s4phgZLCxQeQykD Sch233uzg3zOLIkaR2RFVkkyqH7IfIlhRuZMytGYlhmx9TGqfxY635YDxr73QG4m aijPltFb3rFhtvByjKvT9K3ZiFfmX24xrcCCW8U3Vs4= -----END CERTIFICATE-----Generated at Thu Mar 26 08:53:02 2026 by rpki-client