$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E26173CE050611EAA0470B49C4F9AE02.roa File: E26173CE050611EAA0470B49C4F9AE02.roa (raw, json) Hash identifier: T7ng/FvE1eGQwu1xpjITgzXCh8uTK8CfKE7hPSXoFdk= Subject key identifier: 0A:D5:6F:A5:E5:09:7C:0C:80:F4:BB:1E:C0:E1:95:FD:28:18:89:FB Certificate issuer: /CN=A91B3CB5/serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3 Certificate serial: 0D17 Authority key identifier: 13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E26173CE050611EAA0470B49C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:47:53 +0000 ROA not before: Wed 22 Oct 2025 19:07:19 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 56132 IP address blocks: 43.246.232.0/22 maxlen: 22 49.127.0.0/16 maxlen: 16 59.191.208.0/20 maxlen: 20 59.191.220.0/22 maxlen: 22 103.35.228.0/22 maxlen: 22 118.138.0.0/16 maxlen: 16 118.138.232.0/21 maxlen: 21 118.138.240.0/20 maxlen: 20 118.138.240.0/21 maxlen: 21 118.139.0.0/17 maxlen: 17 203.6.141.0/24 maxlen: 24 2404:2400::/32 maxlen: 32 2404:2400::/40 maxlen: 40 2404:2400::/44 maxlen: 44 2404:2400::/48 maxlen: 48 2404:2400:100::/40 maxlen: 40 2404:2400:100::/44 maxlen: 44 2404:2400:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3351 (0xd17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3CB5, serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3 Validity Not Before: Oct 22 19:07:19 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a59509-1576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a9:0c:fa:9a:fd:1a:1f:be:07:7b:fa:4f:7f: 5a:3e:d7:e1:27:00:a8:d5:2d:ce:d8:9a:be:22:12: fe:41:f3:e6:94:51:0e:44:3c:d0:ba:ef:10:50:77: 8b:0c:26:53:ea:a4:81:18:9e:c8:b5:34:8c:dd:fe: 45:5c:f8:28:da:79:13:7a:8c:54:22:ee:1f:c9:73: e7:1d:04:0a:b0:d6:81:99:2c:0b:72:50:89:df:bb: 27:8c:64:52:56:6c:a1:b6:2e:09:73:02:c7:e8:5f: 68:ab:9f:28:f3:ac:41:94:4f:6f:9e:8c:dd:f7:44: fb:b2:89:52:b3:c9:01:a2:2b:87:ab:66:79:48:7a: 6a:b8:e7:5e:cd:cf:61:9a:a9:23:83:1c:1a:09:99: 3a:b8:a1:82:db:48:32:98:c2:3e:cf:f7:17:19:e8: 40:ab:9d:1f:9f:d4:4d:30:a3:38:57:cf:fc:1b:07: 93:4d:33:bf:54:85:dd:10:eb:42:55:5c:af:9f:48: f2:be:0f:18:b9:9f:b4:59:e5:13:10:28:10:bf:ba: cc:65:b9:ec:92:fb:9b:88:83:1c:b5:b1:d0:11:36: 8b:b5:c4:1d:34:63:6c:41:a7:7d:7e:44:36:75:38: 83:e5:42:88:ff:1d:d8:c4:68:8e:65:08:9a:1d:7b: 63:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D5:6F:A5:E5:09:7C:0C:80:F4:BB:1E:C0:E1:95:FD:28:18:89:FB X509v3 Authority Key Identifier: keyid:13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E26173CE050611EAA0470B49C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.246.232.0/22 49.127.0.0/16 59.191.208.0/20 103.35.228.0/22 118.138.0.0-118.139.127.255 203.6.141.0/24 IPv6: 2404:2400::/32 Signature Algorithm: sha256WithRSAEncryption 15:dc:a3:da:88:17:e0:74:b7:dc:99:90:fc:44:dc:2d:40:b7: 8e:34:6f:a5:01:0f:eb:36:97:87:3d:7f:34:1d:52:24:a3:76: a6:79:7d:cb:25:db:e9:bb:bb:75:de:7b:8f:2b:11:22:44:fe: 78:fd:6e:1a:1b:de:be:0d:e0:00:41:ab:62:c8:2d:86:aa:81: f8:e1:aa:e7:0b:40:4e:ae:4e:49:18:d5:6b:1a:24:85:16:98: ad:d8:10:aa:56:4d:41:2d:bf:4a:bb:b1:7f:b2:a0:b0:f3:19: c6:8f:3e:b2:50:7d:4d:b0:d4:8d:7b:94:b8:f0:e2:09:48:b6: 8f:d7:e9:1a:8f:c1:c6:78:d8:dd:51:6f:ae:3a:a1:fe:8e:61: e5:d5:12:6e:d6:0b:be:26:3c:2f:ce:65:9f:5b:46:59:7b:20: ad:bd:3d:30:c6:1f:1e:60:cb:3b:e6:d8:de:2c:6d:fd:17:6e: 06:fb:32:77:2a:66:36:75:63:01:2f:17:58:19:bc:b7:c9:89: e5:dc:5f:de:50:ba:86:90:86:24:c7:30:5b:e9:73:7a:13:94: 75:23:89:25:32:92:2b:8e:f5:a6:eb:63:5d:3b:99:62:c6:dd: 80:85:8e:be:0b:4d:64:e5:29:bb:42:95:2f:7d:38:5c:cb:64: 48:4e:d0:ed -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgICDRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNDQjUxMTAvBgNVBAUTKDEzNTVENTE4N0QyRTYzRDdFNkQ0OTA3OEQ4RTcxRkEw NTFDNDU2RTMwHhcNMjUxMDIyMTkwNzE5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTUwOS0xNTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6kM+pr9Gh++B3v6T39aPtfhJwCo1S3O2Jq+IhL+QfPmlFEORDzQuu8QUHeL DCZT6qSBGJ7ItTSM3f5FXPgo2nkTeoxUIu4fyXPnHQQKsNaBmSwLclCJ37snjGRS Vmyhti4JcwLH6F9oq58o86xBlE9vnozd90T7solSs8kBoiuHq2Z5SHpquOdezc9h mqkjgxwaCZk6uKGC20gymMI+z/cXGehAq50fn9RNMKM4V8/8GweTTTO/VIXdEOtC VVyvn0jyvg8YuZ+0WeUTECgQv7rMZbnskvubiIMctbHQETaLtcQdNGNsQad9fkQ2 dTiD5UKI/x3YxGiOZQiaHXtjzwIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFArVb6Xl CXwMgPS7HsDhlf0oGIn7MB8GA1UdIwQYMBaAFBNV1Rh9LmPX5tSQeNjnH6BRxFbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0NCNS82MzI2NTBGODA1 MDUxMUVBQUE5MzRDNDNDNEY5QUUwMi9FMVhWR0gwdVk5Zm0xSkI0Mk9jZm9GSEVW dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UxWFZHSDB1WTlmbTFKQjQyT2Nmb0ZIRVZ1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjNDQjUvNjMyNjUwRjgwNTA1MTFFQUFBOTM0QzQzQzRGOUFFMDIvRTI2MTczQ0Uw NTA2MTFFQUEwNDcwQjQ5QzRGOUFFMDIucm9hMFIGCCsGAQUFBwEHAQH/BEMwQTAw BAIAATAqAwQCK/boAwMAMX8DBAQ7v9ADBAJnI+QwCwMDAXaKAwQHdosAAwQAywaN MA0EAgACMAcDBQAkBCQAMA0GCSqGSIb3DQEBCwUAA4IBAQAV3KPaiBfgdLfcmZD8 RNwtQLeONG+lAQ/rNpeHPX80HVIko3ameX3LJdvpu7t13nuPKxEiRP54/W4aG96+ DeAAQatiyC2GqoH44arnC0BOrk5JGNVrGiSFFpit2BCqVk1BLb9Ku7F/sqCw8xnG jz6yUH1NsNSNe5S48OIJSLaP1+kaj8HGeNjdUW+uOqH+jmHl1RJu1gu+JjwvzmWf W0ZZeyCtvT0wxh8eYMs75tjeLG39F24G+zJ3KmY2dWMBLxdYGby3yYnl3F/eULqG kIYkxzBb6XN6E5R1I4klMpIrjvWm62NdO5lixt2AhY6+C01k5Sm7QpUvfThcy2RI TtDt -----END CERTIFICATE-----Generated at Thu Mar 26 07:54:39 2026 by rpki-client