$ rpki-client -vvf rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/F0BA037C1D1A11F1B3DF5E87103D8C67.roa File: F0BA037C1D1A11F1B3DF5E87103D8C67.roa (raw, json) Hash identifier: 9RLAoZXHDep7ikUMuUeuOPjnOmGwHrIkt6BqprZz7KA= Subject key identifier: 48:F8:50:01:97:E9:6A:8B:43:E9:1C:4D:30:41:0B:DF:1B:12:21:DD Certificate issuer: /CN=A91958FF/serialNumber=F24F1471723A64E4D570DBB0D44C824305426266 Certificate serial: 39 Authority key identifier: F2:4F:14:71:72:3A:64:E4:D5:70:DB:B0:D4:4C:82:43:05:42:62:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/F0BA037C1D1A11F1B3DF5E87103D8C67.roa Signing time: Wed 11 Mar 2026 07:21:37 +0000 ROA not before: Wed 11 Mar 2026 07:21:37 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 13335 IP address blocks: 43.243.68.0/22 maxlen: 24 103.12.148.0/22 maxlen: 24 2400:1c80::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91958FF, serialNumber=F24F1471723A64E4D570DBB0D44C824305426266 Validity Not Before: Mar 11 07:21:37 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69b11801-c342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a9:34:a4:c1:14:7b:a6:1b:56:52:1f:73:11: 16:90:8b:fb:1f:a3:4e:6e:dc:c6:9a:20:38:64:dc: 90:8a:ff:a8:bf:de:45:0e:5f:1a:b0:04:5a:1a:4a: 52:73:2b:12:d8:6a:3b:27:fc:d8:28:d1:50:fa:34: 16:41:f9:0a:81:be:42:16:80:8c:ac:fd:06:48:3b: 7e:b2:21:cc:9b:25:ce:a3:63:ff:02:3d:bf:21:77: 05:cc:97:08:8f:f7:c1:3c:7a:70:71:a2:f3:95:0c: 62:e0:bd:b5:90:fa:63:63:69:64:fc:05:ca:6f:b9: 6f:3f:92:08:78:e4:25:c0:3f:d3:e9:65:cd:b1:5b: 6f:84:99:9c:ab:7b:d0:78:71:fc:af:53:1c:f4:b7: d1:46:67:49:91:7e:11:b1:3e:48:5b:94:d6:58:7e: 56:b8:c5:e0:3b:48:cd:63:48:8e:72:e7:fa:b7:a7: ac:08:0e:9f:f1:db:4e:1b:ac:d1:15:f7:b5:ec:68: ca:e1:92:16:f9:17:51:07:d2:16:4c:0a:92:c8:ac: d2:8c:15:6d:37:a2:92:fe:01:9e:b7:38:69:4b:1d: 9e:e8:f1:dd:a8:13:c5:37:07:df:6f:32:f0:03:b9: d8:c7:90:ef:92:06:1a:b5:9b:72:17:e4:6f:c7:c7: 2b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F8:50:01:97:E9:6A:8B:43:E9:1C:4D:30:41:0B:DF:1B:12:21:DD X509v3 Authority Key Identifier: keyid:F2:4F:14:71:72:3A:64:E4:D5:70:DB:B0:D4:4C:82:43:05:42:62:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/F0BA037C1D1A11F1B3DF5E87103D8C67.roa sbgp-ipAddrBlock: critical IPv4: 43.243.68.0/22 103.12.148.0/22 IPv6: 2400:1c80::/32 Signature Algorithm: sha256WithRSAEncryption 95:c5:81:93:61:c6:d0:39:e5:28:9b:7f:91:3f:93:17:44:76: d9:59:41:63:8a:8e:47:61:06:32:1c:c7:18:67:a6:e4:73:69: 57:ca:11:7c:46:66:a6:0c:67:4a:b4:98:e1:34:d1:fa:29:d6: d2:3e:7b:d2:78:1c:fd:6e:9a:d0:f2:a5:60:cd:a8:2f:f8:1e: a7:c7:c5:e5:e0:b8:10:bf:b5:c3:e9:08:45:0e:36:6e:29:b0: e2:b9:ef:a0:76:8d:d6:52:72:10:a7:cd:81:01:ec:83:3d:de: 47:19:20:8a:e9:b6:cf:9f:5e:d9:5b:22:61:95:00:7d:dc:4b: 2e:e7:4a:b6:e5:16:bc:f6:d5:e1:75:2e:b3:80:53:b9:78:ee: 61:9f:b1:73:d1:0b:a7:d2:a5:d3:b1:1f:fe:47:77:fd:ed:9f: 2d:24:85:0f:58:4b:05:f6:90:9b:82:44:04:ab:fa:c7:44:f0: ef:37:9d:bb:72:55:71:57:6b:88:d9:3b:b5:5a:41:9e:78:4d: 48:76:8a:70:1c:fd:5f:b7:95:87:33:e8:9b:c0:71:7f:82:ae: 3c:46:23:c5:cd:45:28:0b:9a:1a:ea:c0:5a:9b:1e:e5:85:31: 8d:40:bc:25:0a:4f:22:28:2a:72:a0:50:5b:24:ca:03:e2:65: ae:cd:4d:32 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NThGRjExMC8GA1UEBRMoRjI0RjE0NzE3MjNBNjRFNEQ1NzBEQkIwRDQ0QzgyNDMw NTQyNjI2NjAeFw0yNjAzMTEwNzIxMzdaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YjExODAxLWMzNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBqTSkwRR7phtWUh9zERaQi/sfo05u3MaaIDhk3JCK/6i/3kUOXxqwBFoaSlJz KxLYajsn/Ngo0VD6NBZB+QqBvkIWgIys/QZIO36yIcybJc6jY/8CPb8hdwXMlwiP 98E8enBxovOVDGLgvbWQ+mNjaWT8BcpvuW8/kgh45CXAP9PpZc2xW2+EmZyre9B4 cfyvUxz0t9FGZ0mRfhGxPkhblNZYfla4xeA7SM1jSI5y5/q3p6wIDp/x204brNEV 97XsaMrhkhb5F1EH0hZMCpLIrNKMFW03opL+AZ63OGlLHZ7o8d2oE8U3B99vMvAD udjHkO+SBhq1m3IX5G/HxysFAgMBAAGjggJ1MIICcTAdBgNVHQ4EFgQUSPhQAZfp aotD6RxNMEEL3xsSId0wHwYDVR0jBBgwFoAU8k8UcXI6ZOTVcNuw1EyCQwVCYmYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1OEZGLzRFM0NCNkMwRDcx QjExRjA5QTE0OEQyNTlBRDM2NDFELzhrOFVjWEk2Wk9UVmNOdXcxRXlDUXdWQ1lt WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOGs4VWNYSTZaT1RWY051dzFFeUNRd1ZDWW1ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NThGRi80RTNDQjZDMEQ3MUIxMUYwOUExNDhEMjU5QUQzNjQxRC9GMEJBMDM3QzFE MUExMUYxQjNERjVFODcxMDNEOEM2Ny5yb2EwNAYIKwYBBQUHAQcBAf8EJTAjMBIE AgABMAwDBAIr80QDBAJnDJQwDQQCAAIwBwMFACQAHIAwDQYJKoZIhvcNAQELBQAD ggEBAJXFgZNhxtA55Sibf5E/kxdEdtlZQWOKjkdhBjIcxxhnpuRzaVfKEXxGZqYM Z0q0mOE00fop1tI+e9J4HP1umtDypWDNqC/4HqfHxeXguBC/tcPpCEUONm4psOK5 76B2jdZSchCnzYEB7IM93kcZIIrpts+fXtlbImGVAH3cSy7nSrblFrz21eF1LrOA U7l47mGfsXPRC6fSpdOxH/5Hd/3tny0khQ9YSwX2kJuCRASr+sdE8O83nbtyVXFX a4jZO7VaQZ54TUh2inAc/V+3lYcz6JvAcX+CrjxGI8XNRSgLmhrqwFqbHuWFMY1A vCUKTyIoKnKgUFskygPiZa7NTTI= -----END CERTIFICATE-----Generated at Thu Mar 26 11:20:31 2026 by rpki-client