$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/7CEC1452E17E11ECAB421316C4F9AE02.roa File: 7CEC1452E17E11ECAB421316C4F9AE02.roa (raw, json) Hash identifier: FehOg1jQMA1kFJnWyr7fIuCvYAwffMy7bJWnLWfMfbA= Subject key identifier: C8:A6:64:C8:31:F0:AB:03:0F:2E:3C:AC:14:64:7B:F9:7E:91:D8:C9 Certificate issuer: /CN=A91B2D29/serialNumber=B8E96C6A0D9548A2A040CBE7199745BA7DB1ED28 Certificate serial: 0A48 Authority key identifier: B8:E9:6C:6A:0D:95:48:A2:A0:40:CB:E7:19:97:45:BA:7D:B1:ED:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/7CEC1452E17E11ECAB421316C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:24:35 +0000 ROA not before: Sun 16 Nov 2025 15:33:06 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 58895 IP address blocks: 43.246.220.0/22 maxlen: 24 103.35.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.crl rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:43:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2632 (0xa48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D29, serialNumber=B8E96C6A0D9548A2A040CBE7199745BA7DB1ED28 Validity Not Before: Nov 16 15:33:06 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a49273-4245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:08:f5:07:84:80:a4:18:61:b8:ea:5c:41:c7: d7:9c:e3:78:05:cc:b9:4b:41:4a:d2:be:d7:14:00: f2:be:32:a3:1e:7d:56:38:a5:54:1f:02:dd:7b:45: f4:5b:f6:3c:ce:32:d7:66:6d:44:6d:65:f1:6c:73: 68:14:82:b1:5d:35:b3:16:85:61:88:2c:c8:80:c3: e4:cc:ee:cb:5f:92:06:78:65:a4:37:fc:f6:23:2a: e0:06:b5:57:53:11:e9:ce:4d:5b:58:50:38:13:98: e1:af:f5:cd:4a:76:0e:dc:e3:9b:77:1e:4f:67:4d: 73:81:b9:f5:76:c6:1a:d6:ca:fb:a0:68:97:f4:d4: fa:d5:d2:6d:b1:98:e0:e9:6a:66:d5:ac:ac:b0:23: a2:b7:2c:75:20:76:6b:d3:bd:e9:d3:33:94:74:77: c7:e1:fe:bb:38:d6:28:e6:1a:6e:b9:a0:1b:6d:5b: 9c:f9:74:1b:19:17:60:dd:4f:72:cd:4a:e9:f2:9b: a3:28:89:3e:07:dd:b8:55:e5:9c:d2:d8:c6:d6:32: c7:05:ec:18:b8:1d:b6:47:3c:2f:21:81:9f:91:39: ff:a4:94:8b:24:2e:8d:03:41:f6:76:4c:2d:af:1c: cc:bd:75:e8:80:7d:72:d8:50:57:b9:85:0e:72:eb: 31:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A6:64:C8:31:F0:AB:03:0F:2E:3C:AC:14:64:7B:F9:7E:91:D8:C9 X509v3 Authority Key Identifier: keyid:B8:E9:6C:6A:0D:95:48:A2:A0:40:CB:E7:19:97:45:BA:7D:B1:ED:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/7CEC1452E17E11ECAB421316C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.246.220.0/22 103.35.208.0/22 Signature Algorithm: sha256WithRSAEncryption ba:f8:2c:fb:08:4a:46:87:65:73:42:70:e7:ef:9d:99:22:f3: 41:fd:96:cf:20:e9:ab:79:db:c0:dc:1c:20:da:b0:2a:45:bd: 84:3b:f5:b1:f5:54:3c:fe:ab:fe:61:89:3a:62:ff:71:71:b3: 47:35:10:ea:43:8e:e6:cb:81:5a:67:f8:6c:d6:c1:ae:e2:76: c9:9b:d2:7d:0b:dd:a3:26:72:32:38:4b:26:ca:6f:e5:0f:88: 1a:ef:aa:96:a6:c6:12:d7:ca:be:ed:06:dd:71:8e:0d:c4:8b: 6e:92:c1:ac:4a:1f:76:41:c1:7b:69:21:76:56:28:b9:4c:f9: 36:fa:c6:73:c2:9a:f4:4e:9e:39:05:b1:82:44:f2:4a:53:9d: bb:78:c5:72:76:20:e6:16:c1:a7:f5:b2:2f:c3:ac:17:5f:1e: 48:17:4a:dc:e8:24:48:c1:60:84:83:81:98:35:d8:d4:d2:d7: 72:de:df:84:84:01:69:84:ae:ac:21:a9:b7:ef:a1:f4:eb:cb: 87:c0:26:89:93:86:d6:a6:ff:59:66:6a:c1:c5:61:76:f6:dd: f4:51:e9:c1:bc:72:d9:6e:2e:16:53:72:2e:0f:c0:a2:a1:14: a9:a6:54:48:26:84:dc:ca:45:ed:ad:b2:9b:9b:84:4f:e3:13: 82:28:64:60 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJEMjkxMTAvBgNVBAUTKEI4RTk2QzZBMEQ5NTQ4QTJBMDQwQ0JFNzE5OTc0NUJB N0RCMUVEMjgwHhcNMjUxMTE2MTUzMzA2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTI3My00MjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQj1B4SApBhhuOpcQcfXnON4Bcy5S0FK0r7XFADyvjKjHn1WOKVUHwLde0X0 W/Y8zjLXZm1EbWXxbHNoFIKxXTWzFoVhiCzIgMPkzO7LX5IGeGWkN/z2IyrgBrVX UxHpzk1bWFA4E5jhr/XNSnYO3OObdx5PZ01zgbn1dsYa1sr7oGiX9NT61dJtsZjg 6Wpm1ayssCOityx1IHZr073p0zOUdHfH4f67ONYo5hpuuaAbbVuc+XQbGRdg3U9y zUrp8pujKIk+B924VeWc0tjG1jLHBewYuB22RzwvIYGfkTn/pJSLJC6NA0H2dkwt rxzMvXXogH1y2FBXuYUOcusx6QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFMimZMgx 8KsDDy48rBRke/l+kdjJMB8GA1UdIwQYMBaAFLjpbGoNlUiioEDL5xmXRbp9se0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQyOS9GNzFFNzE2NjU1 MjExMUU1QURCMjA5MkFDNEY5QUUwMi91T2xzYWcyVlNLS2dRTXZuR1pkRnVuMng3 U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPbHNhZzJWU0tLZ1FNdm5HWmRGdW4yeDdTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjJEMjkvRjcxRTcxNjY1NTIxMTFFNUFEQjIwOTJBQzRGOUFFMDIvN0NFQzE0NTJF MTdFMTFFQ0FCNDIxMzE2QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK/bcAwQCZyPQMA0GCSqGSIb3DQEBCwUAA4IBAQC6+Cz7CEpGh2Vz QnDn752ZIvNB/ZbPIOmredvA3Bwg2rAqRb2EO/Wx9VQ8/qv+YYk6Yv9xcbNHNRDq Q47my4FaZ/hs1sGu4nbJm9J9C92jJnIyOEsmym/lD4ga76qWpsYS18q+7QbdcY4N xItuksGsSh92QcF7aSF2Vii5TPk2+sZzwpr0Tp45BbGCRPJKU527eMVydiDmFsGn 9bIvw6wXXx5IF0rc6CRIwWCEg4GYNdjU0tdy3t+EhAFphK6sIam376H068uHwCaJ k4bWpv9ZZmrBxWF29t30UenBvHLZbi4WU3IuD8CioRSpplRIJoTcykXtrbKbm4RP 4xOCKGRg -----END CERTIFICATE-----Generated at Thu Mar 26 12:38:30 2026 by rpki-client