$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/1733DE66945D11F09E173B0CC4F9AE02.roa File: 1733DE66945D11F09E173B0CC4F9AE02.roa (raw, json) Hash identifier: OZkX3g/64RL/qajmb4n7ihvruSABNBQqoBzJV+o1YLY= Subject key identifier: 49:C9:C9:82:07:1C:DD:28:1E:D8:08:3D:A6:FE:58:4D:4F:F4:BE:FE Certificate issuer: /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Certificate serial: 3549 Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/1733DE66945D11F09E173B0CC4F9AE02.roa Signing time: Thu 26 Mar 2026 06:12:30 +0000 ROA not before: Thu 26 Mar 2026 06:12:30 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 17559 IP address blocks: 43.224.60.0/22 maxlen: 22 103.80.40.0/24 maxlen: 24 103.80.43.0/24 maxlen: 24 202.68.169.0/24 maxlen: 24 203.14.245.0/24 maxlen: 24 2406:7300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 05:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13641 (0x3549) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD8CB, serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Validity Not Before: Mar 26 06:12:30 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69c4ce4e-b931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:20:43:d0:e6:17:18:d0:ba:e9:ac:7a:ac:57: 4c:e3:b9:ab:c7:9a:5a:f6:5d:19:df:fa:d3:dc:9a: 3a:4b:06:f6:f1:03:67:e6:63:92:91:b3:ef:ce:aa: b9:3b:e4:56:eb:8c:0e:ec:8d:27:26:4c:12:a3:5b: ea:fc:83:0e:65:ad:98:ae:63:d9:4c:7f:15:5c:b1: 98:27:81:49:cb:9a:34:06:10:a1:a1:06:f9:89:94: aa:df:70:2f:35:ae:d5:44:6b:ae:e0:4c:24:df:b7: 39:bd:1d:a0:b1:b2:10:ae:63:51:23:da:e8:52:cb: 56:a8:ee:7a:b2:56:97:0a:b6:3d:f2:fc:9e:c9:29: 97:e5:be:e4:d0:6e:bf:41:ad:1a:7d:36:c5:f5:82: 02:ef:4e:e4:26:4d:e0:30:b8:cb:44:ff:ac:a8:35: 0c:ca:af:79:fb:f6:b7:01:f9:44:4f:95:9d:d3:a6: 0b:46:d7:ab:40:22:bf:ce:92:0f:b0:52:a9:da:cc: f7:1d:22:c3:a7:d6:c8:a9:d7:00:5f:2e:7a:ac:80: d6:3a:73:73:a1:cd:6f:5d:50:48:5b:73:81:f2:22: cb:23:23:75:17:96:33:24:b0:5a:20:35:9a:d0:a3: f9:19:ab:dd:08:db:f9:6d:36:69:49:00:ad:3e:2b: 4c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C9:C9:82:07:1C:DD:28:1E:D8:08:3D:A6:FE:58:4D:4F:F4:BE:FE X509v3 Authority Key Identifier: keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/1733DE66945D11F09E173B0CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.224.60.0/22 103.80.40.0/24 103.80.43.0/24 202.68.169.0/24 203.14.245.0/24 IPv6: 2406:7300::/32 Signature Algorithm: sha256WithRSAEncryption 55:62:cb:16:ad:76:3b:f5:6d:ec:6a:00:0c:6e:67:8b:67:75: 36:3b:1d:df:bf:38:61:50:09:ff:b5:9d:54:b7:6e:ba:af:cc: be:cc:1f:e6:23:46:57:18:56:de:e0:ab:25:f8:5d:33:bc:ba: fc:88:de:f1:af:2f:4a:fd:05:77:da:fb:3b:16:50:08:26:96: 50:02:69:57:59:ef:16:e1:e6:a2:4e:36:ea:ef:b9:66:1b:ff: 05:f6:46:7b:47:08:de:78:43:42:4a:01:e7:d9:e5:da:23:2c: 2e:f4:a4:dc:30:d9:b8:75:12:b0:90:d2:6f:83:cf:56:b3:a0: 21:13:2b:76:21:00:8b:29:33:ce:fc:18:f5:f1:30:de:2a:a2: e7:48:ee:e8:07:d6:f3:ec:33:2e:f8:37:ef:b2:44:a8:79:23: e1:59:33:d4:53:4e:6a:25:4a:e4:50:5f:a2:6e:a9:6b:97:b6: 15:e9:33:d0:ef:ce:83:0f:32:05:f0:ea:48:1f:86:5f:4d:ce: dd:34:86:6b:2b:f7:aa:d8:2f:01:00:76:5a:c1:f7:4a:e8:16: 07:0b:4a:17:ec:9f:e2:60:18:d0:12:9c:12:70:63:5c:38:a2: 8b:74:82:52:4e:1f:6d:84:c2:df:34:58:f0:cb:bd:df:ba:26: 07:8c:7e:52 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgICNUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ4Q0IxMTAvBgNVBAUTKEUwMkRDNDNBRjhBREY4RDFEQjJFNzRFNEE2QzI4RUY5 NjE1NUJGMTUwHhcNMjYwMzI2MDYxMjMwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWM0Y2U0ZS1iOTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCBD0OYXGNC66ax6rFdM47mrx5pa9l0Z3/rT3Jo6Swb28QNn5mOSkbPvzqq5 O+RW64wO7I0nJkwSo1vq/IMOZa2YrmPZTH8VXLGYJ4FJy5o0BhChoQb5iZSq33Av Na7VRGuu4Ewk37c5vR2gsbIQrmNRI9roUstWqO56slaXCrY98vyeySmX5b7k0G6/ Qa0afTbF9YIC707kJk3gMLjLRP+sqDUMyq95+/a3AflET5Wd06YLRterQCK/zpIP sFKp2sz3HSLDp9bIqdcAXy56rIDWOnNzoc1vXVBIW3OB8iLLIyN1F5YzJLBaIDWa 0KP5GavdCNv5bTZpSQCtPitMnwIDAQABo4IChzCCAoMwHQYDVR0OBBYEFEnJyYIH HN0oHtgIPab+WE1P9L7+MB8GA1UdIwQYMBaAFOAtxDr4rfjR2y505KbCjvlhVb8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDhDQi8zMjhFRDE1NDFE OEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1OSGJMblRrcHNLTy1XRlZ2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDM0VPdml0LU5IYkxuVGtwc0tPLVdGVnZ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUQ4Q0IvMzI4RUQxNTQxRDhCMTFFMjkwNDlCQ0U1MDhCMDJDRDIvMTczM0RFNjY5 NDVEMTFGMDlFMTczQjBDQzRGOUFFMDIucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAk BAIAATAeAwQCK+A8AwQAZ1AoAwQAZ1ArAwQAykSpAwQAyw71MA0EAgACMAcDBQAk BnMAMA0GCSqGSIb3DQEBCwUAA4IBAQBVYssWrXY79W3sagAMbmeLZ3U2Ox3fvzhh UAn/tZ1Ut266r8y+zB/mI0ZXGFbe4Ksl+F0zvLr8iN7xry9K/QV32vs7FlAIJpZQ AmlXWe8W4eaiTjbq77lmG/8F9kZ7RwjeeENCSgHn2eXaIywu9KTcMNm4dRKwkNJv g89Ws6AhEyt2IQCLKTPO/Bj18TDeKqLnSO7oB9bz7DMu+DfvskSoeSPhWTPUU05q JUrkUF+ibqlrl7YV6TPQ786DDzIF8OpIH4ZfTc7dNIZrK/eq2C8BAHZawfdK6BYH C0oX7J/iYBjQEpwScGNcOKKLdIJSTh9thMLfNFjwy73fuiYHjH5S -----END CERTIFICATE-----Generated at Thu Mar 26 13:03:34 2026 by rpki-client