$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/A43B3718ABC111E9A200115CC4F9AE02.roa File: A43B3718ABC111E9A200115CC4F9AE02.roa (raw, json) Hash identifier: Q62rjw6oDTqrEzy74XGxoWLnsJh+Ar7k9nzAT39r6Jw= Subject key identifier: F1:04:49:2C:62:00:6A:B9:AF:E9:9C:6E:8C:51:C4:C9:ED:07:E5:14 Certificate issuer: /CN=A91A0D57/serialNumber=7F2B2EB5B8F4F7956895F1312D8DCC42239C9A62 Certificate serial: 0EB6 Authority key identifier: 7F:2B:2E:B5:B8:F4:F7:95:68:95:F1:31:2D:8D:CC:42:23:9C:9A:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/A43B3718ABC111E9A200115CC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:21:14 +0000 ROA not before: Fri 18 Apr 2025 18:07:28 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59342 IP address blocks: 103.229.104.0/22 maxlen: 22 103.229.104.0/23 maxlen: 23 103.229.104.0/24 maxlen: 24 103.229.105.0/24 maxlen: 24 103.229.106.0/23 maxlen: 23 103.229.106.0/24 maxlen: 24 103.229.107.0/24 maxlen: 24 103.252.176.0/24 maxlen: 24 103.252.177.0/24 maxlen: 24 103.252.178.0/24 maxlen: 24 103.252.179.0/24 maxlen: 24 2400:bd40::/32 maxlen: 32 2400:bd40::/34 maxlen: 34 2400:bd40:4000::/34 maxlen: 34 2400:bd40:8000::/34 maxlen: 34 2400:bd40:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.crl rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 17:38:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3766 (0xeb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0D57, serialNumber=7F2B2EB5B8F4F7956895F1312D8DCC42239C9A62 Validity Not Before: Apr 18 18:07:28 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4050a-d77c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8a:99:de:3a:fe:4f:58:a1:5b:57:be:70:59: 12:a1:b8:0a:80:da:62:34:80:f3:d6:4a:f9:45:3b: e8:23:c9:9c:06:02:9d:6d:86:06:ae:b8:38:c1:bb: 0f:9a:86:33:ea:58:b3:b6:0f:74:12:43:7f:58:92: fc:28:64:79:4e:5d:c4:29:1f:03:e7:4d:cd:25:b3: da:b3:5a:df:66:12:e6:d0:47:20:30:da:c3:2d:04: 21:71:50:e2:ac:0f:2c:42:c3:67:b5:79:08:e0:a2: 5e:e3:4e:d4:a4:57:c9:0d:96:25:1c:6f:06:4c:22: 41:9c:b8:20:a1:46:7e:68:b4:14:85:fb:db:f3:b5: 50:9a:ef:57:c1:e3:f8:bd:34:08:ce:94:bf:69:bf: 16:94:cb:3d:7d:73:78:10:37:97:93:31:12:f0:09: 76:8f:b0:49:ce:49:af:f0:01:9e:a3:ee:a3:fe:9e: b6:8c:c5:9b:e6:ca:ec:92:fc:d9:6e:8e:39:65:b8: 30:f5:5b:73:44:13:8e:d2:0a:06:03:0c:bd:8f:c5: f7:11:90:17:94:4d:13:48:2c:67:88:33:23:47:db: 15:3c:69:24:18:91:f5:6e:0f:04:94:2f:4d:5a:62: ae:8f:4a:14:e4:36:39:e3:a9:5f:c8:d8:86:cd:5e: 85:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:04:49:2C:62:00:6A:B9:AF:E9:9C:6E:8C:51:C4:C9:ED:07:E5:14 X509v3 Authority Key Identifier: keyid:7F:2B:2E:B5:B8:F4:F7:95:68:95:F1:31:2D:8D:CC:42:23:9C:9A:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/A43B3718ABC111E9A200115CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.229.104.0/22 103.252.176.0/22 IPv6: 2400:bd40::/32 Signature Algorithm: sha256WithRSAEncryption 48:7f:86:c9:0c:fe:9e:66:68:f9:1f:86:c0:7a:90:4f:f7:39: e9:3b:fd:90:15:00:70:31:3a:c0:d5:1c:b1:bc:c7:0e:2e:be: 36:20:19:56:a8:ce:1a:78:cf:92:5a:87:f8:7c:a2:7c:81:ba: f6:c9:45:83:d2:d1:ff:36:5e:dd:1b:16:7d:a7:3c:fa:27:80: 96:8a:12:ef:e9:83:b6:af:be:dc:0d:f6:53:0d:21:31:e0:4a: 3d:b4:9a:d9:66:85:4e:69:6a:49:9d:a7:44:fa:42:dc:96:1a: 54:63:04:91:48:94:83:6c:f1:c9:20:de:ef:92:d4:03:63:07: 18:e1:e3:77:7c:05:a1:a8:43:d0:48:31:a6:e2:36:81:5e:91: 3a:7a:98:9f:e5:13:d4:46:47:4a:94:22:bc:a0:d7:06:e2:66: 44:05:5b:c4:ea:61:9f:e6:62:a3:66:fb:fe:0e:dd:ed:24:3b: 32:e9:37:b0:37:bf:90:b1:bb:0d:42:1c:ff:9d:32:93:20:97: 36:ae:c3:9c:5c:79:25:bb:f4:92:3c:98:85:b9:55:82:16:4e: c2:4e:8a:77:eb:8f:8d:af:8b:82:56:3b:22:88:c3:9e:4b:03: b5:05:24:d1:17:19:8e:2b:ff:ea:ae:60:7e:ce:f2:40:ac:fc: 5a:c6:ac:a6 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICDrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBENTcxMTAvBgNVBAUTKDdGMkIyRUI1QjhGNEY3OTU2ODk1RjEzMTJEOERDQzQy MjM5QzlBNjIwHhcNMjUwNDE4MTgwNzI4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDUwYS1kNzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvoqZ3jr+T1ihW1e+cFkSobgKgNpiNIDz1kr5RTvoI8mcBgKdbYYGrrg4wbsP moYz6liztg90EkN/WJL8KGR5Tl3EKR8D503NJbPas1rfZhLm0EcgMNrDLQQhcVDi rA8sQsNntXkI4KJe407UpFfJDZYlHG8GTCJBnLggoUZ+aLQUhfvb87VQmu9XweP4 vTQIzpS/ab8WlMs9fXN4EDeXkzES8Al2j7BJzkmv8AGeo+6j/p62jMWb5srskvzZ bo45Zbgw9VtzRBOO0goGAwy9j8X3EZAXlE0TSCxniDMjR9sVPGkkGJH1bg8ElC9N WmKuj0oU5DY546lfyNiGzV6FKQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFPEESSxi AGq5r+mcboxRxMntB+UUMB8GA1UdIwQYMBaAFH8rLrW49PeVaJXxMS2NzEIjnJpi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEQ1Ny85RkQyQzlEMEE5 MTgxMUU5OEMzRUMyNEZDNEY5QUUwMi9meXN1dGJqMDk1Vm9sZkV4TFkzTVFpT2Nt bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z5c3V0YmowOTVWb2xmRXhMWTNNUWlPY21tSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTBENTcvOUZEMkM5RDBBOTE4MTFFOThDM0VDMjRGQzRGOUFFMDIvQTQzQjM3MThB QkMxMTFFOUEyMDAxMTVDQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ+VoAwQCZ/ywMA0EAgACMAcDBQAkAL1AMA0GCSqGSIb3DQEBCwUA A4IBAQBIf4bJDP6eZmj5H4bAepBP9znpO/2QFQBwMTrA1RyxvMcOLr42IBlWqM4a eM+SWof4fKJ8gbr2yUWD0tH/Nl7dGxZ9pzz6J4CWihLv6YO2r77cDfZTDSEx4Eo9 tJrZZoVOaWpJnadE+kLclhpUYwSRSJSDbPHJIN7vktQDYwcY4eN3fAWhqEPQSDGm 4jaBXpE6epif5RPURkdKlCK8oNcG4mZEBVvE6mGf5mKjZvv+Dt3tJDsy6TewN7+Q sbsNQhz/nTKTIJc2rsOcXHklu/SSPJiFuVWCFk7CTop364+Nr4uCVjsiiMOeSwO1 BSTRFxmOK//qrmB+zvJArPxaxqym -----END CERTIFICATE-----Generated at Sat Mar 28 13:24:57 2026 by rpki-client