$ rpki-client -vvf rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/C2F7AE40C03111EA9777314AC4F9AE02.roa File: C2F7AE40C03111EA9777314AC4F9AE02.roa (raw, json) Hash identifier: JsmcN/iHNKGrr5+UdOJwBNNsYsjaqRo1Qt07Gdc3xmM= Subject key identifier: B0:3B:3E:85:D7:11:B1:D3:B3:3D:02:BD:1D:8A:8C:E7:98:EF:4A:8C Certificate issuer: /CN=A91577DD/serialNumber=95D1BEF3900B416584164BB74631771302291688 Certificate serial: 3536 Authority key identifier: 95:D1:BE:F3:90:0B:41:65:84:16:4B:B7:46:31:77:13:02:29:16:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/C2F7AE40C03111EA9777314AC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:31:03 +0000 ROA not before: Sat 10 Jan 2026 15:10:53 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 132196 IP address blocks: 43.254.76.0/22 maxlen: 22 43.254.76.0/24 maxlen: 24 43.254.77.0/24 maxlen: 24 43.254.78.0/24 maxlen: 24 43.254.79.0/24 maxlen: 24 103.238.124.0/22 maxlen: 22 103.238.124.0/24 maxlen: 24 103.238.125.0/24 maxlen: 24 103.238.126.0/24 maxlen: 24 103.238.127.0/24 maxlen: 24 120.50.48.0/20 maxlen: 20 120.50.48.0/24 maxlen: 24 120.50.49.0/24 maxlen: 24 120.50.50.0/24 maxlen: 24 120.50.51.0/24 maxlen: 24 120.50.52.0/24 maxlen: 24 120.50.53.0/24 maxlen: 24 120.50.54.0/24 maxlen: 24 120.50.55.0/24 maxlen: 24 120.50.56.0/24 maxlen: 24 120.50.57.0/24 maxlen: 24 120.50.58.0/24 maxlen: 24 120.50.59.0/24 maxlen: 24 120.50.60.0/24 maxlen: 24 120.50.61.0/24 maxlen: 24 120.50.62.0/24 maxlen: 24 120.50.63.0/24 maxlen: 24 202.176.13.0/24 maxlen: 24 2404:99c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.crl rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13622 (0x3536) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91577DD, serialNumber=95D1BEF3900B416584164BB74631771302291688 Validity Not Before: Jan 10 15:10:53 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a44da7-f95c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:17:f0:db:0b:ca:75:29:32:1a:68:72:97:b4: 47:b5:e6:e8:40:58:64:f4:1c:4b:b9:97:5f:b0:66: 8d:31:f1:ea:5d:17:18:ce:d1:5d:fe:ff:78:73:95: ff:2d:3f:df:13:7a:8e:c4:d7:6a:9b:98:f3:0b:6f: b7:dc:9b:41:e6:c6:f8:65:7e:69:f6:e4:e9:f1:63: 81:91:53:20:96:3b:29:1b:41:6a:87:85:c8:67:df: 85:6d:78:2b:21:e8:53:87:eb:0f:10:47:66:69:20: 30:86:bc:85:c0:1d:49:d6:73:4e:b1:3b:93:46:00: 5b:af:93:30:97:52:a3:11:bb:71:48:7e:27:18:43: 0b:0f:9d:73:33:6a:ac:1b:32:6d:0d:34:41:ab:49: 17:7b:14:1a:d7:15:51:3a:47:d5:98:8e:74:5a:98: 78:ff:0c:f7:66:09:4f:25:0f:7e:3f:3f:ec:64:74: 23:9a:39:f0:f8:fe:be:02:e6:2b:dc:90:d0:99:88: 26:4e:fc:8e:b9:eb:c8:ae:18:d4:c2:66:c8:fc:2c: 27:37:97:e9:6e:1a:cf:b3:cb:00:ef:fc:e7:fd:63: 84:88:f7:d5:67:b6:ba:b4:59:78:0f:0c:cf:b2:af: 62:ed:10:86:96:00:4a:89:51:10:d6:c6:e4:f7:b6: 48:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:3B:3E:85:D7:11:B1:D3:B3:3D:02:BD:1D:8A:8C:E7:98:EF:4A:8C X509v3 Authority Key Identifier: keyid:95:D1:BE:F3:90:0B:41:65:84:16:4B:B7:46:31:77:13:02:29:16:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/C2F7AE40C03111EA9777314AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.254.76.0/22 103.238.124.0/22 120.50.48.0/20 202.176.13.0/24 IPv6: 2404:99c0::/32 Signature Algorithm: sha256WithRSAEncryption dc:7c:d2:d6:37:44:a1:5d:d4:96:2c:68:82:33:2c:27:57:92: ef:24:56:84:68:42:31:ab:58:a2:fe:ab:72:7b:91:3d:48:4d: 20:61:38:4b:0b:93:e2:1f:b9:72:90:b6:cd:18:92:f3:e0:a0: b1:bd:13:52:8c:90:45:80:1b:67:a5:40:ab:7a:24:8e:04:fb: 70:67:b6:16:14:86:63:09:ef:c5:6d:f6:9d:1b:8f:c8:b5:72: f4:b9:f0:23:62:18:0d:72:a0:f5:8b:b9:f1:67:fe:11:7b:7e: f1:63:36:de:bf:3b:a5:f5:b6:a8:f5:66:e2:ed:51:16:c5:21: 19:9e:35:d1:fd:f9:d8:29:3a:2a:58:cf:f6:5c:61:2f:09:29: 10:c8:24:07:53:21:ac:f3:b1:60:53:53:74:a6:9c:f6:16:79: 7a:d1:1a:3c:6c:9d:41:46:de:c8:82:01:c1:8d:0c:e0:dc:41: b9:9f:19:05:e3:83:23:d3:d1:f2:e0:1b:3f:f8:81:95:d8:fb: 8e:29:d2:ae:f1:1c:c3:22:8a:e2:9a:5c:a2:ef:7e:80:cd:42: 07:80:a7:24:96:df:d2:64:9e:f1:f3:ac:7b:9d:27:55:b0:ed: bd:c5:7d:3b:7a:2f:e0:e2:dc:25:23:c5:ab:2e:a5:9e:44:2f: 14:99:1f:0a -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICNTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc3REQxMTAvBgNVBAUTKDk1RDFCRUYzOTAwQjQxNjU4NDE2NEJCNzQ2MzE3NzEz MDIyOTE2ODgwHhcNMjYwMTEwMTUxMDUzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGRhNy1mOTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoRfw2wvKdSkyGmhyl7RHteboQFhk9BxLuZdfsGaNMfHqXRcYztFd/v94c5X/ LT/fE3qOxNdqm5jzC2+33JtB5sb4ZX5p9uTp8WOBkVMgljspG0Fqh4XIZ9+FbXgr IehTh+sPEEdmaSAwhryFwB1J1nNOsTuTRgBbr5Mwl1KjEbtxSH4nGEMLD51zM2qs GzJtDTRBq0kXexQa1xVROkfVmI50Wph4/wz3ZglPJQ9+Pz/sZHQjmjnw+P6+AuYr 3JDQmYgmTvyOuevIrhjUwmbI/CwnN5fpbhrPs8sA7/zn/WOEiPfVZ7a6tFl4DwzP sq9i7RCGlgBKiVEQ1sbk97ZIOQIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFLA7PoXX EbHTsz0CvR2KjOeY70qMMB8GA1UdIwQYMBaAFJXRvvOQC0FlhBZLt0YxdxMCKRaI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzdERC9EMUM1QjAyQTFE OTYxMUUyQTFDQUI0N0YwOEIwMkNEMi9sZEctODVBTFFXV0VGa3UzUmpGM0V3SXBG b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkRy04NUFMUVdXRUZrdTNSakYzRXdJcEZvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTc3REQvRDFDNUIwMkExRDk2MTFFMkExQ0FCNDdGMDhCMDJDRDIvQzJGN0FFNDBD MDMxMTFFQTk3NzczMTRBQzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQCK/5MAwQCZ+58AwQEeDIwAwQAyrANMA0EAgACMAcDBQAkBJnAMA0G CSqGSIb3DQEBCwUAA4IBAQDcfNLWN0ShXdSWLGiCMywnV5LvJFaEaEIxq1ii/qty e5E9SE0gYThLC5PiH7lykLbNGJLz4KCxvRNSjJBFgBtnpUCreiSOBPtwZ7YWFIZj Ce/FbfadG4/ItXL0ufAjYhgNcqD1i7nxZ/4Re37xYzbevzul9bao9Wbi7VEWxSEZ njXR/fnYKToqWM/2XGEvCSkQyCQHUyGs87FgU1N0ppz2Fnl60Ro8bJ1BRt7IggHB jQzg3EG5nxkF44Mj09Hy4Bs/+IGV2PuOKdKu8RzDIorimlyi736AzUIHgKcklt/S ZJ7x86x7nSdVsO29xX07ei/g4twlI8WrLqWeRC8UmR8K -----END CERTIFICATE-----Generated at Sat Mar 28 13:22:48 2026 by rpki-client