$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/76BF01E88EF511F0BA815369C4F9AE02.roa File: 76BF01E88EF511F0BA815369C4F9AE02.roa (raw, json) Hash identifier: xx9TeHOBj2OiOI8r7wwibUAIIL4Fl8ddiQuAnrOI7w8= Subject key identifier: 69:25:18:C9:7F:12:EB:FC:8F:79:68:E8:8D:30:11:23:F1:5E:0F:42 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0D32 Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/76BF01E88EF511F0BA815369C4F9AE02.roa Signing time: Mon 02 Mar 2026 19:23:49 +0000 ROA not before: Mon 02 Mar 2026 19:23:49 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 40605 IP address blocks: 43.249.242.0/24 maxlen: 24 43.250.88.0/24 maxlen: 24 103.7.117.0/24 maxlen: 24 103.12.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 02:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3378 (0xd32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Mar 2 19:23:49 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69a5e3c5-463f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:22:07:cd:44:69:3d:b7:30:3d:7e:a2:1f:2b: 8f:b2:bc:97:33:24:47:03:0d:bb:98:58:44:93:08: 1f:14:dc:9f:69:79:6d:c9:64:7b:a1:d6:d0:26:11: 52:07:3f:a6:9b:1d:45:d8:2f:c6:90:49:00:8c:e2: 5f:c8:f3:d7:29:5a:96:f6:9c:68:d5:4d:d6:4f:8d: a8:31:29:a7:07:0f:1b:71:bf:aa:0c:4d:41:65:43: a1:6e:0c:19:7f:66:24:d6:b0:58:f2:e2:d0:3b:a3: b6:74:21:17:68:32:af:f8:ee:39:a7:fb:98:df:04: c4:23:9b:0e:5b:09:6b:1e:1a:45:bc:22:f8:95:fc: 1b:cd:26:14:1e:80:2b:3a:7a:ad:8a:26:9a:3c:28: 95:33:74:18:41:2e:5f:a2:3d:f8:e2:01:97:80:8e: 5d:60:cf:54:93:d8:73:9a:b7:a3:59:3d:07:3b:d6: 63:1e:1d:6e:d4:30:4d:6a:97:cc:41:2d:df:94:03: 53:8f:77:51:8f:4e:22:19:72:69:b3:1c:40:10:66: fc:85:44:dd:d0:4e:16:a9:d3:90:77:64:4d:cb:e5: 8a:8e:4e:09:d6:06:0e:59:a0:7b:ed:60:06:c5:7f: af:50:e3:ed:af:a7:a6:7d:cf:8c:8b:e6:67:d9:35: e6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:25:18:C9:7F:12:EB:FC:8F:79:68:E8:8D:30:11:23:F1:5E:0F:42 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/76BF01E88EF511F0BA815369C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.249.242.0/24 43.250.88.0/24 103.7.117.0/24 103.12.55.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:2e:65:b7:93:d8:56:f3:66:e0:bf:7e:65:f9:e8:84:b3:d7: 8c:f6:96:68:ae:23:6a:27:25:33:fd:2e:d6:4d:7a:01:11:96: 0d:27:3a:42:97:64:fa:3d:72:ad:e5:e2:23:28:2a:73:8b:73: 0a:51:95:e3:b0:57:3a:7b:ff:2d:65:ab:5f:57:f3:8a:91:40: d5:21:e4:55:a7:51:b5:3e:36:f6:1c:aa:58:60:f7:fd:9f:2f: 51:56:85:a1:48:27:6e:67:1c:de:99:1a:30:f4:cb:18:c1:70: 33:fc:5a:a7:76:cd:47:e2:40:8b:3c:c8:85:46:3a:0a:d3:df: 72:75:c9:66:20:ba:6d:86:03:f0:8d:b6:15:b5:c1:46:7c:6e: b4:b9:6c:53:b9:d4:50:48:d9:be:fd:53:51:36:60:58:43:d4: d1:40:7c:c5:3e:69:26:6f:58:82:e4:b7:38:dc:12:8f:d2:01: 2a:14:cd:9a:1a:f8:40:62:81:d2:e5:b2:82:2d:6b:7d:62:8e: 0a:78:87:4e:97:52:79:9d:06:54:93:21:84:f4:6f:04:09:5e: d2:d4:00:23:c4:76:a1:d1:a2:4d:ac:97:5d:99:03:cc:84:3c: b3:a3:f6:a2:5c:fb:f3:80:d2:88:b2:00:b4:b0:8b:10:70:36: c4:21:d6:e4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICDTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjYwMzAyMTkyMzQ5WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1ZTNjNS00NjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8yIHzURpPbcwPX6iHyuPsryXMyRHAw27mFhEkwgfFNyfaXltyWR7odbQJhFS Bz+mmx1F2C/GkEkAjOJfyPPXKVqW9pxo1U3WT42oMSmnBw8bcb+qDE1BZUOhbgwZ f2Yk1rBY8uLQO6O2dCEXaDKv+O45p/uY3wTEI5sOWwlrHhpFvCL4lfwbzSYUHoAr OnqtiiaaPCiVM3QYQS5foj344gGXgI5dYM9Uk9hzmrejWT0HO9ZjHh1u1DBNapfM QS3flANTj3dRj04iGXJpsxxAEGb8hUTd0E4WqdOQd2RNy+WKjk4J1gYOWaB77WAG xX+vUOPtr6emfc+Mi+Zn2TXm7QIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFGklGMl/ Euv8j3lo6I0wESPxXg9CMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvNzZCRjAxRTg4 RUY1MTFGMEJBODE1MzY5QzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAK/nyAwQAK/pYAwQAZwd1AwQAZww3MA0GCSqGSIb3DQEBCwUAA4IB AQCKLmW3k9hW82bgv35l+eiEs9eM9pZoriNqJyUz/S7WTXoBEZYNJzpCl2T6PXKt 5eIjKCpzi3MKUZXjsFc6e/8tZatfV/OKkUDVIeRVp1G1Pjb2HKpYYPf9ny9RVoWh SCduZxzemRow9MsYwXAz/Fqnds1H4kCLPMiFRjoK099ydclmILpthgPwjbYVtcFG fG60uWxTudRQSNm+/VNRNmBYQ9TRQHzFPmkmb1iC5Lc43BKP0gEqFM2aGvhAYoHS 5bKCLWt9Yo4KeIdOl1J5nQZUkyGE9G8ECV7S1AAjxHah0aJNrJddmQPMhDyzo/ai XPvzgNKIsgC0sIsQcDbEIdbk -----END CERTIFICATE-----Generated at Thu Mar 26 08:49:53 2026 by rpki-client