$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/DD46BB92EDAB11EDBE91BB82C4F9AE02.roa File: DD46BB92EDAB11EDBE91BB82C4F9AE02.roa (raw, json) Hash identifier: gkPTMzL29fjMeAxqDDyIKfb4bjNAUoeuE5oKyKWBCYo= Subject key identifier: 03:E6:81:F6:34:A5:A5:73:C7:6D:88:72:42:74:39:23:E9:0C:A0:62 Certificate issuer: /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08 Certificate serial: 0694 Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/DD46BB92EDAB11EDBE91BB82C4F9AE02.roa Signing time: Thu 12 Mar 2026 15:47:01 +0000 ROA not before: Thu 12 Mar 2026 15:47:01 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 11158 IP address blocks: 43.248.220.0/24 maxlen: 24 117.103.120.0/24 maxlen: 24 117.103.121.0/24 maxlen: 24 117.103.122.0/24 maxlen: 24 117.103.123.0/24 maxlen: 24 117.103.126.0/24 maxlen: 24 117.103.127.0/24 maxlen: 24 119.31.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1684 (0x694) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE146, serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08 Validity Not Before: Mar 12 15:47:01 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69b2dff5-79b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:51:94:61:36:0d:cb:c1:e1:83:64:f9:d8:1f: 20:89:05:ad:98:66:f1:91:62:9e:12:79:f9:88:5c: b7:bd:4f:f9:8a:62:81:eb:73:7a:80:68:23:aa:67: 92:0a:60:ee:ef:53:13:a0:fe:f5:4e:26:f3:db:ef: fb:2f:3c:66:31:fc:ae:d7:f3:f4:49:62:c0:dd:10: 64:e2:a8:c6:16:32:63:c5:03:7c:d9:75:5f:f8:d6: c3:e8:d3:29:11:a9:97:21:c0:f8:bf:08:e8:13:80: f7:f6:3e:17:c2:94:2c:d4:0d:42:93:97:37:df:23: 30:24:4f:59:18:29:9a:42:0e:5c:65:0d:56:65:40: d3:3b:96:15:16:e5:16:df:60:39:bb:55:80:49:cf: 24:7a:5f:e6:9f:cb:dd:bc:9e:4a:01:5d:0b:e6:f2: 21:7f:27:14:d1:56:0e:9a:d9:fa:a0:85:b8:88:a0: be:ff:06:11:82:fd:51:15:ac:f0:44:06:1f:78:45: 60:4e:14:f8:56:6b:7c:84:fd:6a:2d:68:c0:3d:75: 23:7f:07:ac:74:7a:72:cd:b4:ca:79:d9:8c:f1:70: 6b:42:5a:91:7b:15:71:83:50:61:2a:6f:cd:71:ef: b5:28:73:22:52:1c:b4:4c:49:bb:42:bd:7a:a2:c7: d5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E6:81:F6:34:A5:A5:73:C7:6D:88:72:42:74:39:23:E9:0C:A0:62 X509v3 Authority Key Identifier: keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/DD46BB92EDAB11EDBE91BB82C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.248.220.0/24 117.103.120.0/22 117.103.126.0/23 119.31.160.0/24 Signature Algorithm: sha256WithRSAEncryption 35:4b:2f:02:42:6e:25:b1:50:42:06:37:b7:ec:fe:89:d5:bb: 57:57:14:64:4d:8a:4f:9e:cd:d5:f9:aa:43:de:13:ce:d7:24: 1a:68:f7:8b:b4:a6:eb:20:d9:c2:fd:3d:2f:e5:92:9a:51:12: 34:25:7c:0e:59:96:a7:ac:74:b4:7b:e1:c7:e4:d2:bf:10:fc: fd:65:33:89:b9:d1:43:f9:d8:5e:8d:fc:5b:a3:05:54:60:e0: 71:9f:87:f6:01:1e:a8:3a:52:12:01:d8:83:11:e9:8d:c7:cb: 3d:9f:34:42:ba:36:26:a8:cf:3f:10:37:9e:53:c6:04:68:65: 82:bc:06:b1:d6:fb:f7:3a:da:e6:68:81:ca:a5:41:fe:a6:16: 58:89:26:0f:c2:c9:c7:e5:bd:5c:63:88:54:cd:ea:80:8b:8b: 5b:9b:df:47:cc:dc:6b:be:13:06:bc:40:e1:c9:fb:20:ac:e3: e4:ec:cd:5b:20:7e:6b:a5:c7:98:0e:6f:ff:5c:01:c7:e3:0c: 1a:cd:4b:df:d8:64:e6:2d:2f:9f:5a:c9:a1:fd:c4:7e:e1:c9: fe:64:f1:37:20:37:67:dd:9d:68:c1:ab:03:c3:85:cb:a1:37: 82:77:af:c4:5b:60:4f:57:cb:97:6d:98:16:73:68:53:cb:98: 75:14:a8:f5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICBpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUxNDYxMTAvBgNVBAUTKDQzRUEzQTJEQzA4QzVFMUYyQ0Q2ODQxMTY0NEEwNUMw NzZFODhDMDgwHhcNMjYwMzEyMTU0NzAxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWIyZGZmNS03OWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5FGUYTYNy8Hhg2T52B8giQWtmGbxkWKeEnn5iFy3vU/5imKB63N6gGgjqmeS CmDu71MToP71Tibz2+/7LzxmMfyu1/P0SWLA3RBk4qjGFjJjxQN82XVf+NbD6NMp EamXIcD4vwjoE4D39j4XwpQs1A1Ck5c33yMwJE9ZGCmaQg5cZQ1WZUDTO5YVFuUW 32A5u1WASc8kel/mn8vdvJ5KAV0L5vIhfycU0VYOmtn6oIW4iKC+/wYRgv1RFazw RAYfeEVgThT4Vmt8hP1qLWjAPXUjfwesdHpyzbTKedmM8XBrQlqRexVxg1BhKm/N ce+1KHMiUhy0TEm7Qr16osfVbwIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFAPmgfY0 paVzx22IckJ0OSPpDKBiMB8GA1UdIwQYMBaAFEPqOi3AjF4fLNaEEWRKBcB26IwI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTE0Ni9FNDFBQjQyQUJE MzExMUVCQkZDM0Y5MjFDNEY5QUUwMi9RLW82TGNDTVhoOHMxb1FSWkVvRndIYm9q QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtbzZMY0NNWGg4czFvUVJaRW9Gd0hib2pBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkUxNDYvRTQxQUI0MkFCRDMxMTFFQkJGQzNGOTIxQzRGOUFFMDIvREQ0NkJCOTJF REFCMTFFREJFOTFCQjgyQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAK/jcAwQCdWd4AwQBdWd+AwQAdx+gMA0GCSqGSIb3DQEBCwUAA4IB AQA1Sy8CQm4lsVBCBje37P6J1btXVxRkTYpPns3V+apD3hPO1yQaaPeLtKbrINnC /T0v5ZKaURI0JXwOWZanrHS0e+HH5NK/EPz9ZTOJudFD+dhejfxbowVUYOBxn4f2 AR6oOlISAdiDEemNx8s9nzRCujYmqM8/EDeeU8YEaGWCvAax1vv3OtrmaIHKpUH+ phZYiSYPwsnH5b1cY4hUzeqAi4tbm99HzNxrvhMGvEDhyfsgrOPk7M1bIH5rpceY Dm//XAHH4wwazUvf2GTmLS+fWsmh/cR+4cn+ZPE3IDdn3Z1owasDw4XLoTeCd6/E W2BPV8uXbZgWc2hTy5h1FKj1 -----END CERTIFICATE-----Generated at Thu Mar 26 17:02:51 2026 by rpki-client