$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/43DCAEE0BBE811F092C97714C4F9AE02.roa File: 43DCAEE0BBE811F092C97714C4F9AE02.roa (raw, json) Hash identifier: s+8+Ay/MDWEzNmYQjEi8P9yXENJTqx4r4dR7RY92skY= Subject key identifier: 94:72:03:6B:1E:FE:88:38:F5:C0:6F:83:06:26:44:10:0B:6A:C1:59 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0D2A Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/43DCAEE0BBE811F092C97714C4F9AE02.roa Signing time: Mon 02 Mar 2026 19:23:35 +0000 ROA not before: Mon 02 Mar 2026 19:23:35 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 202736 IP address blocks: 43.231.189.0/24 maxlen: 24 43.246.129.0/24 maxlen: 24 43.251.185.0/24 maxlen: 24 45.124.61.0/24 maxlen: 24 103.7.209.0/24 maxlen: 24 103.7.210.0/24 maxlen: 24 103.26.164.0/24 maxlen: 24 103.26.165.0/24 maxlen: 24 103.244.211.0/24 maxlen: 24 160.20.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 02:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3370 (0xd2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Mar 2 19:23:35 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69a5e3b7-60ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:65:bc:46:a6:5f:ed:77:a6:fe:3d:b1:b1:fc: 39:55:3f:7a:f5:77:ab:f7:f1:24:2c:54:1c:20:93: d1:b5:df:f0:a1:f3:3c:97:f8:82:ed:77:f0:5e:21: 4b:a6:31:e1:b5:7e:c3:87:10:33:97:29:04:56:e3: e1:27:d1:42:52:4a:fe:fa:c4:b4:4d:bf:8a:26:e7: 2f:36:6e:e2:60:ae:c7:b7:08:a1:07:0f:b1:33:56: df:d5:74:9b:1d:45:6e:b6:62:93:b2:f0:3f:f5:70: c8:63:70:cf:7d:a9:84:94:ad:89:ce:33:ba:46:e0: 9c:7a:6b:79:40:0d:90:b9:71:21:25:ca:df:43:d6: 15:a8:82:47:6c:9e:62:00:cf:0c:72:fa:7e:fe:6c: 19:0f:63:68:1b:9e:b8:5e:61:22:76:64:f1:49:d8: 5c:53:0e:b9:ee:94:52:5b:26:9c:20:7d:38:4d:e8: 60:19:2e:95:1c:64:78:a4:68:2d:e5:3d:3f:17:5d: 00:de:62:3a:3f:b1:63:4e:4f:10:73:c7:1e:b6:91: 06:93:3d:96:3c:dd:c0:f7:a5:d7:03:f7:9f:58:4b: 9d:05:96:12:e5:27:9a:9b:21:95:4d:dd:9c:13:bc: d4:15:51:75:de:2a:e1:32:98:00:18:23:67:35:33: b0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:72:03:6B:1E:FE:88:38:F5:C0:6F:83:06:26:44:10:0B:6A:C1:59 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/43DCAEE0BBE811F092C97714C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.231.189.0/24 43.246.129.0/24 43.251.185.0/24 45.124.61.0/24 103.7.209.0-103.7.210.255 103.26.164.0/23 103.244.211.0/24 160.20.45.0/24 Signature Algorithm: sha256WithRSAEncryption ba:32:45:60:a3:c9:99:b7:b7:fa:fd:2b:a3:6a:1a:f3:20:a1: f7:d3:f2:ab:c1:a6:64:98:e8:72:d8:16:fc:2f:74:f3:cc:5e: 63:df:f1:7d:f1:82:a9:4e:6a:20:8b:a9:63:7b:bd:47:11:dd: 68:76:07:04:60:a2:27:40:bc:39:bc:7e:15:fc:d0:15:e5:7b: 06:ce:df:2f:fb:45:58:eb:8f:3e:62:dd:f8:3b:e4:13:33:33: e2:28:84:e9:e4:a2:dc:a3:91:3e:c7:88:b7:e6:cc:26:63:f4: ae:5a:a3:a0:a2:5f:a3:14:95:e6:00:7e:d9:c1:66:12:8e:fc: 97:26:a2:94:ba:0d:00:66:4e:58:95:ee:e4:9b:fa:bd:7a:5c: 8b:2a:f9:0b:57:8e:95:a1:d3:25:87:3e:0a:11:b9:17:bb:5f: 72:a0:24:16:a1:48:15:4d:07:9f:c5:c6:6f:35:ab:c5:6d:24: 88:c5:08:70:68:6f:c2:ff:bb:d9:65:d0:a4:89:88:2f:c6:bc: d2:58:77:ce:56:bd:0c:7d:74:ea:34:23:e3:40:1c:25:02:43: 80:89:79:bb:25:df:c8:20:15:3b:e6:76:b9:8f:bd:25:de:08: 75:17:32:4c:5c:5f:3f:8b:09:b3:ac:48:d6:12:2c:e7:45:bf: e8:1d:e8:ed -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgICDSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjYwMzAyMTkyMzM1WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1ZTNiNy02MGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnmW8RqZf7Xem/j2xsfw5VT969Xer9/EkLFQcIJPRtd/wofM8l/iC7XfwXiFL pjHhtX7DhxAzlykEVuPhJ9FCUkr++sS0Tb+KJucvNm7iYK7HtwihBw+xM1bf1XSb HUVutmKTsvA/9XDIY3DPfamElK2JzjO6RuCcemt5QA2QuXEhJcrfQ9YVqIJHbJ5i AM8Mcvp+/mwZD2NoG564XmEidmTxSdhcUw657pRSWyacIH04TehgGS6VHGR4pGgt 5T0/F10A3mI6P7FjTk8Qc8cetpEGkz2WPN3A96XXA/efWEudBZYS5SeamyGVTd2c E7zUFVF13irhMpgAGCNnNTOw/wIDAQABo4ICkjCCAo4wHQYDVR0OBBYEFJRyA2se /og49cBvgwYmRBALasFZMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvNDNEQ0FFRTBC QkU4MTFGMDkyQzk3NzE0QzRGOUFFMDIucm9hMFEGCCsGAQUFBwEHAQH/BEIwQDA+ BAIAATA4AwQAK+e9AwQAK/aBAwQAK/u5AwQALXw9MAwDBABnB9EDBABnB9IDBAFn GqQDBABn9NMDBACgFC0wDQYJKoZIhvcNAQELBQADggEBALoyRWCjyZm3t/r9K6Nq GvMgoffT8qvBpmSY6HLYFvwvdPPMXmPf8X3xgqlOaiCLqWN7vUcR3Wh2BwRgoidA vDm8fhX80BXlewbO3y/7RVjrjz5i3fg75BMzM+IohOnkotyjkT7HiLfmzCZj9K5a o6CiX6MUleYAftnBZhKO/JcmopS6DQBmTliV7uSb+r16XIsq+QtXjpWh0yWHPgoR uRe7X3KgJBahSBVNB5/Fxm81q8VtJIjFCHBob8L/u9ll0KSJiC/GvNJYd85WvQx9 dOo0I+NAHCUCQ4CJebsl38ggFTvmdrmPvSXeCHUXMkxcXz+LCbOsSNYSLOdFv+gd 6O0= -----END CERTIFICATE-----Generated at Thu Mar 26 06:14:50 2026 by rpki-client