$ rpki-client -vvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/A12DD18E2F1C11EDA3E29B09C4F9AE02.roa File: A12DD18E2F1C11EDA3E29B09C4F9AE02.roa (raw, json) Hash identifier: TRtCWEacfScERXGsANUVPFpqIEC3+bt+vk9acDdl/Bg= Subject key identifier: 71:8E:F1:8D:94:09:7D:A1:2C:E9:8B:8D:9A:58:15:5C:9E:1B:59:8F Certificate issuer: /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Certificate serial: 093E Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/A12DD18E2F1C11EDA3E29B09C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:41:40 +0000 ROA not before: Sun 02 Nov 2025 20:39:40 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 15412 IP address blocks: 43.248.216.0/22 maxlen: 22 103.15.116.0/22 maxlen: 22 103.144.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2366 (0x93e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91652F7, serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Validity Not Before: Nov 2 20:39:40 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a45e34-5543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:42:cf:aa:41:e8:be:64:32:17:21:2b:73:4d: 11:3e:ee:31:a2:a8:07:49:c0:ed:cf:a8:77:24:d5: a7:c7:70:85:22:cc:63:7e:2e:db:10:23:da:9d:58: 27:3a:4c:7b:bd:14:a8:f8:96:2b:30:6d:1e:d1:88: 58:ff:66:6b:24:be:b1:75:ed:5c:a4:b2:c5:26:3a: 29:93:a0:74:e1:eb:0d:90:38:09:07:34:7b:1c:79: 2e:ab:2e:9f:5a:3d:4f:ed:47:04:50:27:94:e3:79: e2:3d:cd:f4:33:4c:b9:74:b1:69:c1:2a:9b:7e:05: 99:d6:da:3d:7e:f4:84:a7:db:9c:64:75:70:38:0e: 4f:1f:92:92:18:93:6e:4c:5f:4d:ec:74:84:06:d9: a6:0e:56:4b:a6:f9:9d:32:06:ff:96:09:fa:ac:b7: 4d:17:a3:cb:65:46:a6:54:4c:7a:d4:38:64:0c:6f: e8:d4:2d:74:68:2f:dd:25:bf:84:e0:73:3e:9d:cb: 11:8a:03:80:96:f6:8d:bb:b5:53:bb:79:7e:92:72: 00:5a:f3:f0:ef:de:cf:05:75:d6:60:e9:68:ec:80: 43:a5:f7:9f:09:ab:f4:2b:9e:e5:09:b2:68:96:98: 78:4b:70:0d:ec:bc:13:09:e0:df:d0:f2:c2:e5:58: ff:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:8E:F1:8D:94:09:7D:A1:2C:E9:8B:8D:9A:58:15:5C:9E:1B:59:8F X509v3 Authority Key Identifier: keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/A12DD18E2F1C11EDA3E29B09C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.248.216.0/22 103.15.116.0/22 103.144.202.0/23 Signature Algorithm: sha256WithRSAEncryption 23:72:37:a8:fb:49:be:e5:f2:04:85:70:43:c9:68:1f:58:aa: 25:ad:b8:70:9e:6f:98:de:2f:f3:16:4e:db:da:19:03:24:b8: 7f:8b:a0:77:50:f3:1b:02:c5:a0:62:a1:37:3c:d6:e4:87:05: 97:be:f9:65:18:a9:8f:ec:52:64:31:c2:79:6b:20:85:af:92: 45:69:2a:aa:d2:5f:d7:ab:68:65:ed:5b:b9:f5:03:d4:f3:4f: 09:7c:2c:e8:5c:2a:1c:83:13:e3:48:7d:42:b7:63:8d:fe:98: 43:e3:f1:89:02:40:ef:6f:9d:5c:1f:61:75:64:b7:d4:84:ec: 66:cf:cf:e4:1f:6e:6e:59:5e:c5:8a:52:7c:67:11:91:df:77: b3:3d:2a:c6:63:ca:29:d7:77:c9:47:6b:7d:3f:74:7c:fb:99: c7:9b:33:ad:57:07:76:b8:97:80:19:b3:b4:10:e2:30:75:fb: 56:90:69:75:36:6e:48:f6:e9:f9:c7:99:a3:01:da:ff:3a:27: 57:cf:7f:77:cb:42:9f:3c:e2:18:36:26:29:79:a6:74:67:5a: 8b:c9:50:ef:3b:49:23:44:f5:cd:23:bb:e6:b4:20:63:3c:6d: ec:e6:46:a4:5f:3b:7c:b3:69:9d:7d:8e:0d:0a:57:7a:9c:d1: 5d:0b:38:ea -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICCT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyRjcxMTAvBgNVBAUTKEU1MDI3NTdDNjE3QzIxRDQ3QjFCMzU1OUMwOUQ2RUE3 QzNBRkU0MDMwHhcNMjUxMTAyMjAzOTQwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWUzNC01NTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnULPqkHovmQyFyErc00RPu4xoqgHScDtz6h3JNWnx3CFIsxjfi7bECPanVgn Okx7vRSo+JYrMG0e0YhY/2ZrJL6xde1cpLLFJjopk6B04esNkDgJBzR7HHkuqy6f Wj1P7UcEUCeU43niPc30M0y5dLFpwSqbfgWZ1to9fvSEp9ucZHVwOA5PH5KSGJNu TF9N7HSEBtmmDlZLpvmdMgb/lgn6rLdNF6PLZUamVEx61DhkDG/o1C10aC/dJb+E 4HM+ncsRigOAlvaNu7VTu3l+knIAWvPw797PBXXWYOlo7IBDpfefCav0K57lCbJo lph4S3AN7LwTCeDf0PLC5Vj/zwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFHGO8Y2U CX2hLOmLjZpYFVyeG1mPMB8GA1UdIwQYMBaAFOUCdXxhfCHUexs1WcCdbqfDr+QD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTJGNy83Q0M0NUZBRUJB QUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElkUjdHelZad0oxdXA4T3Y1 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRSjFmR0Y4SWRSN0d6Vlp3SjF1cDhPdjVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjUyRjcvN0NDNDVGQUVCQUFGMTFFQUE2REQxQTNEQzRGOUFFMDIvQTEyREQxOEUy RjFDMTFFREEzRTI5QjA5QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCK/jYAwQCZw90AwQBZ5DKMA0GCSqGSIb3DQEBCwUAA4IBAQAjcjeo +0m+5fIEhXBDyWgfWKolrbhwnm+Y3i/zFk7b2hkDJLh/i6B3UPMbAsWgYqE3PNbk hwWXvvllGKmP7FJkMcJ5ayCFr5JFaSqq0l/Xq2hl7Vu59QPU808JfCzoXCocgxPj SH1Ct2ON/phD4/GJAkDvb51cH2F1ZLfUhOxmz8/kH25uWV7FilJ8ZxGR33ezPSrG Y8op13fJR2t9P3R8+5nHmzOtVwd2uJeAGbO0EOIwdftWkGl1Nm5I9un5x5mjAdr/ OidXz393y0KfPOIYNiYpeaZ0Z1qLyVDvO0kjRPXNI7vmtCBjPG3s5kakXzt8s2md fY4NCld6nNFdCzjq -----END CERTIFICATE-----Generated at Thu Mar 26 12:17:52 2026 by rpki-client