$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/732BAF02BF5D11EB8199C943C4F9AE02.roa File: 732BAF02BF5D11EB8199C943C4F9AE02.roa (raw, json) Hash identifier: FX/SXWeGmSorowMzitSzBZ8lzXgrcgho0mITKsxeeLY= Subject key identifier: BF:B7:AD:2C:0F:1D:06:4B:3D:A6:79:93:B5:50:7A:D5:C9:D5:D4:B3 Certificate issuer: /CN=A91BDDB8/serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67 Certificate serial: 125F Authority key identifier: 73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/732BAF02BF5D11EB8199C943C4F9AE02.roa Signing time: Mon 02 Mar 2026 17:20:47 +0000 ROA not before: Mon 02 Mar 2026 17:20:47 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 206264 IP address blocks: 43.243.160.0/22 maxlen: 22 43.243.160.0/24 maxlen: 24 43.243.161.0/24 maxlen: 24 43.243.162.0/24 maxlen: 24 43.243.163.0/24 maxlen: 24 103.28.88.0/24 maxlen: 24 103.28.89.0/24 maxlen: 24 103.109.100.0/22 maxlen: 22 103.109.102.0/24 maxlen: 24 183.81.168.0/23 maxlen: 24 2402:7840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4703 (0x125f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDDB8, serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67 Validity Not Before: Mar 2 17:20:47 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69a5c6ef-f9f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d5:bc:71:de:1a:06:b2:93:ad:02:80:91:38: a5:2b:42:9d:25:4c:37:c9:d9:6b:e7:fe:08:36:69: c2:b8:8c:4a:4c:ca:0c:25:cd:2f:90:6c:6d:5a:45: a2:4a:e8:87:da:d2:c5:b3:27:ce:c6:b2:7b:ce:ad: 51:ba:e7:1c:d6:71:01:dd:d3:f4:2b:c3:da:9b:cb: f9:9d:56:73:de:2b:55:9f:2c:00:29:17:4a:f4:ab: be:18:54:46:89:14:61:4c:99:28:cd:fb:5f:67:26: af:df:26:19:df:de:cb:6e:b9:2d:33:64:01:4e:49: 46:44:7a:2d:91:a2:93:eb:cc:3d:65:69:a9:7c:df: f9:af:8c:0f:de:58:3e:54:62:15:0e:2e:6b:1e:7e: bd:36:be:b9:58:31:dd:00:09:c5:17:8e:4c:7e:8d: 59:3d:38:e4:fc:d9:6f:9f:23:ab:3b:95:20:e0:72: 0d:d0:7e:0e:a0:9c:e8:42:eb:e3:b7:f7:a2:01:68: 5c:a3:bc:12:f4:98:06:cf:16:83:57:bf:9a:54:b5: 95:86:18:cd:26:4f:b5:e8:df:ef:b8:52:e8:f8:d3: e4:76:37:11:62:93:64:9c:cf:a6:da:eb:96:b1:a3: 1e:5b:ac:b5:e8:d5:e9:d9:89:fa:3f:ab:c3:50:c6: 53:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B7:AD:2C:0F:1D:06:4B:3D:A6:79:93:B5:50:7A:D5:C9:D5:D4:B3 X509v3 Authority Key Identifier: keyid:73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/732BAF02BF5D11EB8199C943C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.243.160.0/22 103.28.88.0/23 103.109.100.0/22 183.81.168.0/23 IPv6: 2402:7840::/32 Signature Algorithm: sha256WithRSAEncryption 13:e8:ae:fb:51:44:05:97:a5:7b:c1:99:ff:0f:ce:27:7d:b1: f6:e2:21:40:75:0e:96:4f:4e:09:29:94:fd:81:85:03:96:e2: 6c:a9:52:e3:3d:88:3b:73:13:d6:94:65:ed:c5:ce:1a:d1:bd: c8:7d:fa:d8:43:a2:6e:3b:6c:f0:50:85:2a:16:e5:03:5c:14: 8d:5a:e5:45:1b:7a:76:d9:27:00:5d:19:71:47:72:5c:ea:df: 5e:4d:3f:a6:95:fd:44:b9:ee:65:be:99:9a:65:6d:e5:91:b2: a7:4e:f0:f7:31:6b:78:b5:e9:cd:52:ee:c9:31:c0:88:4a:ed: f5:ab:92:f2:d3:2f:f6:13:19:77:cf:4c:ee:7c:12:7e:ae:af: ee:cf:38:99:cc:42:20:a3:5c:af:5b:44:e1:22:60:6b:02:0a: e2:36:53:d9:78:c5:19:e0:7b:9f:ae:93:96:ba:63:62:38:65: ce:78:f2:67:65:49:03:3f:67:02:52:c8:ac:8d:ff:1e:e7:28: 84:a3:b9:04:b7:5a:2a:19:93:30:e6:b3:a0:a2:54:31:7e:34: 55:29:d7:9d:94:85:24:69:64:de:68:e9:91:e9:c3:29:22:13: 86:0c:cf:bc:58:70:d1:3a:18:ee:80:78:1c:a8:31:2d:a6:ff: 7e:34:4d:66 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICEl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkREQjgxMTAvBgNVBAUTKDczRjRCQkRCRDdBMjFENkU3QjlFNEJGNUIwQzgxNzIy Q0NDMjFENjcwHhcNMjYwMzAyMTcyMDQ3WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YzZlZi1mOWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyNW8cd4aBrKTrQKAkTilK0KdJUw3ydlr5/4INmnCuIxKTMoMJc0vkGxtWkWi SuiH2tLFsyfOxrJ7zq1Ruucc1nEB3dP0K8Pam8v5nVZz3itVnywAKRdK9Ku+GFRG iRRhTJkozftfZyav3yYZ397LbrktM2QBTklGRHotkaKT68w9ZWmpfN/5r4wP3lg+ VGIVDi5rHn69Nr65WDHdAAnFF45Mfo1ZPTjk/NlvnyOrO5Ug4HIN0H4OoJzoQuvj t/eiAWhco7wS9JgGzxaDV7+aVLWVhhjNJk+16N/vuFLo+NPkdjcRYpNknM+m2uuW saMeW6y16NXp2Yn6P6vDUMZT1wIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFL+3rSwP HQZLPaZ5k7VQetXJ1dSzMB8GA1UdIwQYMBaAFHP0u9vXoh1ue55L9bDIFyLMwh1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRERCOC9EM0REMzdGOEYz QjMxMUU4ODhEMzcyMjhDNEY5QUUwMi9jX1M3MjllaUhXNTdua3Yxc01nWElzekNI V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NfUzcyOWVpSFc1N25rdjFzTWdYSXN6Q0hXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkREQjgvRDNERDM3RjhGM0IzMTFFODg4RDM3MjI4QzRGOUFFMDIvNzMyQkFGMDJC RjVEMTFFQjgxOTlDOTQzQzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQCK/OgAwQBZxxYAwQCZ21kAwQBt1GoMA0EAgACMAcDBQAkAnhAMA0G CSqGSIb3DQEBCwUAA4IBAQAT6K77UUQFl6V7wZn/D84nfbH24iFAdQ6WT04JKZT9 gYUDluJsqVLjPYg7cxPWlGXtxc4a0b3IffrYQ6JuO2zwUIUqFuUDXBSNWuVFG3p2 2ScAXRlxR3Jc6t9eTT+mlf1Eue5lvpmaZW3lkbKnTvD3MWt4tenNUu7JMcCISu31 q5Ly0y/2Exl3z0zufBJ+rq/uzziZzEIgo1yvW0ThImBrAgriNlPZeMUZ4HufrpOW umNiOGXOePJnZUkDP2cCUsisjf8e5yiEo7kEt1oqGZMw5rOgolQxfjRVKdedlIUk aWTeaOmR6cMpIhOGDM+8WHDROhjugHgcqDEtpv9+NE1m -----END CERTIFICATE-----Generated at Thu Mar 26 02:25:49 2026 by rpki-client