$ rpki-client -vvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/1F5EE982235011F1ABBAE38DAE833773.roa File: 1F5EE982235011F1ABBAE38DAE833773.roa (raw, json) Hash identifier: 4vii0PEyxfAMDDStR+CEGDgcVMprRDhlhb9Z9n20u5A= Subject key identifier: 46:50:61:A6:83:EF:18:E4:24:06:9E:9D:B9:26:8A:28:64:02:5D:48 Certificate issuer: /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC Certificate serial: 0876 Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/1F5EE982235011F1ABBAE38DAE833773.roa Signing time: Thu 19 Mar 2026 04:57:26 +0000 ROA not before: Thu 19 Mar 2026 04:57:26 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 2519 IP address blocks: 43.231.220.0/22 maxlen: 22 103.3.28.0/22 maxlen: 22 103.8.240.0/22 maxlen: 22 103.20.156.0/22 maxlen: 22 103.37.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:39:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2166 (0x876) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91941E9, serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC Validity Not Before: Mar 19 04:57:26 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69bb8235-4b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5b:5d:e0:9a:15:51:ca:df:23:04:50:c1:88: 76:59:ee:ce:70:a6:4b:28:86:f5:81:d5:13:a0:97: ed:43:33:ad:a8:25:e9:87:67:ce:7f:ed:f3:41:a1: 65:c0:06:f4:30:44:4e:57:ab:14:31:fa:c7:63:dd: c6:d7:41:9a:9a:c8:b5:2f:8e:42:7f:76:a9:f8:59: 57:c2:9d:9d:14:ad:01:2d:2e:5a:ee:25:be:0a:48: 1f:89:76:ed:2c:16:66:e5:c6:c1:4f:e7:35:c6:f5: 27:e7:c1:e5:64:7c:b2:61:93:93:63:40:ec:b7:3c: ab:f5:6a:a1:5c:48:4d:74:fa:0b:ba:20:6e:cc:f7: 12:42:01:5e:d7:02:78:fc:82:07:da:38:52:e1:af: 1f:49:45:83:83:ef:8b:b1:8b:9c:5c:9d:71:93:64: 25:2b:e9:13:0d:76:1a:a9:c6:2e:b0:45:71:29:bf: fe:8d:53:21:24:5a:78:82:2e:ac:84:b9:74:20:7a: 0b:a7:81:6b:db:2d:90:79:52:5f:be:ca:29:e3:44: 48:a3:cc:d6:a7:02:1b:ce:fc:da:02:30:36:97:be: 79:98:00:cd:94:bd:2f:77:b2:7d:b5:b2:8e:d2:c9: b1:75:52:e5:16:df:fc:e8:e8:4a:fb:09:a7:88:98: 08:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:50:61:A6:83:EF:18:E4:24:06:9E:9D:B9:26:8A:28:64:02:5D:48 X509v3 Authority Key Identifier: keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/1F5EE982235011F1ABBAE38DAE833773.roa sbgp-ipAddrBlock: critical IPv4: 43.231.220.0/22 103.3.28.0/22 103.8.240.0/22 103.20.156.0/22 103.37.236.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:59:3f:3d:de:bd:aa:45:3d:d2:95:b7:c7:b6:28:b5:bf:cf: 04:68:29:88:63:02:de:7e:20:b0:c1:73:a2:44:c9:f2:71:ad: 11:b9:a5:8b:e6:cc:0d:a4:45:73:6a:1d:5d:83:96:c7:43:37: 4d:da:f7:34:8e:2c:cf:0f:2f:04:12:ba:c1:dc:78:bb:a1:cb: 29:66:8d:33:43:65:c4:b8:6e:f7:54:c9:85:61:78:a4:11:d4: 79:66:07:3b:ff:22:2d:42:d2:10:aa:21:8d:62:01:56:09:d2: e1:04:e3:2d:2a:63:25:52:7c:39:65:2d:cf:dc:ab:ba:19:45: 91:30:0e:c3:dc:63:47:e0:72:f3:1b:bd:14:e6:31:31:9e:72: d4:50:4e:2b:81:d2:07:82:ae:33:4e:5b:72:06:bd:74:48:fc: 2e:36:3a:0f:b6:a1:c2:44:dc:df:1b:02:70:89:d4:3c:e2:f4: c6:36:79:7a:13:eb:cc:b7:be:e8:56:0f:f5:fa:19:7a:45:30: 11:ba:78:38:ee:6c:de:e0:dd:7d:82:1e:45:c9:16:a3:a0:db: a3:c0:15:ef:e4:fd:87:d4:01:1f:30:2b:11:b1:80:00:b2:e9: 59:af:89:ab:ca:55:be:3b:59:f1:d1:37:f8:01:3b:1b:c0:93: db:4b:1b:07 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICCHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQxRTkxMTAvBgNVBAUTKDA1QUQzRTRBQTE5NjFCQTdFQ0JFMDI5MzU3MjVDMjVD RDI2QkQ2QkMwHhcNMjYwMzE5MDQ1NzI2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWJiODIzNS00YjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1td4JoVUcrfIwRQwYh2We7OcKZLKIb1gdUToJftQzOtqCXph2fOf+3zQaFl wAb0MEROV6sUMfrHY93G10Gamsi1L45Cf3ap+FlXwp2dFK0BLS5a7iW+CkgfiXbt LBZm5cbBT+c1xvUn58HlZHyyYZOTY0Dstzyr9WqhXEhNdPoLuiBuzPcSQgFe1wJ4 /IIH2jhS4a8fSUWDg++LsYucXJ1xk2QlK+kTDXYaqcYusEVxKb/+jVMhJFp4gi6s hLl0IHoLp4Fr2y2QeVJfvsop40RIo8zWpwIbzvzaAjA2l755mADNlL0vd7J9tbKO 0smxdVLlFt/86OhK+wmniJgImwIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFEZQYaaD 7xjkJAaenbkmiihkAl1IMB8GA1UdIwQYMBaAFAWtPkqhlhun7L4Ck1clwlzSa9a8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDFFOS9EQUQ4RkI4MDA3 OTAxMUVCQkI5OEMwNzZDNEY5QUUwMi9CYTAtU3FHV0c2ZnN2Z0tUVnlYQ1hOSnIx cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JhMC1TcUdXRzZmc3ZnS1RWeVhDWE5KcjFydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTQxRTkvREFEOEZCODAwNzkwMTFFQkJCOThDMDc2QzRGOUFFMDIvMUY1RUU5ODIy MzUwMTFGMUFCQkFFMzhEQUU4MzM3NzMucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQCK+fcAwQCZwMcAwQCZwjwAwQCZxScAwQCZyXsMA0GCSqGSIb3DQEB CwUAA4IBAQAKWT893r2qRT3SlbfHtii1v88EaCmIYwLefiCwwXOiRMnyca0RuaWL 5swNpEVzah1dg5bHQzdN2vc0jizPDy8EErrB3Hi7ocspZo0zQ2XEuG73VMmFYXik EdR5Zgc7/yItQtIQqiGNYgFWCdLhBOMtKmMlUnw5ZS3P3Ku6GUWRMA7D3GNH4HLz G70U5jExnnLUUE4rgdIHgq4zTltyBr10SPwuNjoPtqHCRNzfGwJwidQ84vTGNnl6 E+vMt77oVg/1+hl6RTARung47mze4N19gh5FyRajoNujwBXv5P2H1AEfMCsRsYAA sulZr4mrylW+O1nx0Tf4ATsbwJPbSxsH -----END CERTIFICATE-----Generated at Thu Mar 26 11:06:48 2026 by rpki-client