$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/1E8ADFD0C1F211EBA984726AC4F9AE02.roa File: 1E8ADFD0C1F211EBA984726AC4F9AE02.roa (raw, json) Hash identifier: cN1hwE7Kn24tcOs69ZtX9qTJpNy1aheRedD7/deVNQU= Subject key identifier: FC:4B:31:C8:FF:A9:F8:4D:43:EA:5E:BD:1E:D8:D2:18:84:A8:14:80 Certificate issuer: /CN=A91D51C1/serialNumber=97BB54B3D23C37C3DD3E0169CA974D27DBA9F050 Certificate serial: 065D Authority key identifier: 97:BB:54:B3:D2:3C:37:C3:DD:3E:01:69:CA:97:4D:27:DB:A9:F0:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7tUs9I8N8PdPgFpypdNJ9up8FA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/1E8ADFD0C1F211EBA984726AC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:50:29 +0000 ROA not before: Tue 01 Jul 2025 00:02:31 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 0 IP address blocks: 43.243.22.0/23 maxlen: 23 103.26.68.0/23 maxlen: 23 103.26.70.0/24 maxlen: 24 103.26.71.0/24 maxlen: 24 202.12.243.0/24 maxlen: 24 2001:dea:0:10::/64 maxlen: 64 2001:dea:0:20::/64 maxlen: 64 2001:dea:0:30::/64 maxlen: 64 2001:dea:0:40::/64 maxlen: 64 2001:dea:0:50::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.crl rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7tUs9I8N8PdPgFpypdNJ9up8FA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:20:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1629 (0x65d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D51C1, serialNumber=97BB54B3D23C37C3DD3E0169CA974D27DBA9F050 Validity Not Before: Jul 1 00:02:31 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a40be4-9053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0f:43:f5:b5:29:c7:99:9d:a7:82:19:cc:39: ef:40:75:97:43:25:4a:8d:af:8a:03:43:5a:27:d1: 43:e6:00:24:e6:a5:21:8d:ee:b5:7c:d0:8e:98:e2: e4:90:68:5e:40:9e:e3:6d:91:7b:97:63:d9:2b:42: 10:0c:bd:4d:78:2b:01:bd:98:c3:34:ee:e1:e3:57: 9d:38:5e:f9:75:a0:49:9a:b9:34:96:4c:bd:e1:a6: 7a:cf:21:47:07:2e:3b:65:69:a7:21:2e:2e:18:4e: 3c:6e:e4:64:44:a4:2f:cc:96:76:c3:a0:65:8a:5c: 8b:aa:83:0b:34:50:d2:86:0e:a0:fe:93:82:d8:15: c1:14:06:f1:16:8e:ee:d9:f2:09:da:cf:af:5c:50: ac:86:7f:fb:59:76:2d:d6:31:ca:1f:b3:c2:45:2f: 65:66:bc:d5:83:3e:71:10:49:3c:19:49:01:9d:52: 15:7d:8d:5e:76:4e:a1:5e:d0:d5:b0:de:08:03:51: b9:6b:01:e1:94:92:93:87:54:76:48:fa:20:bb:3a: 73:02:86:4a:5b:18:7f:45:08:da:e7:75:d6:be:0a: b2:68:1d:34:79:2a:97:90:df:81:7d:e0:be:ed:d9: 50:66:45:20:c3:a0:ce:e0:42:3f:5d:e3:92:64:be: f7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:4B:31:C8:FF:A9:F8:4D:43:EA:5E:BD:1E:D8:D2:18:84:A8:14:80 X509v3 Authority Key Identifier: keyid:97:BB:54:B3:D2:3C:37:C3:DD:3E:01:69:CA:97:4D:27:DB:A9:F0:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7tUs9I8N8PdPgFpypdNJ9up8FA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/1E8ADFD0C1F211EBA984726AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.243.22.0/23 103.26.68.0/22 202.12.243.0/24 IPv6: 2001:dea:0:10::/64 2001:dea:0:20::/64 2001:dea:0:30::/64 2001:dea:0:40::/64 2001:dea:0:50::/64 Signature Algorithm: sha256WithRSAEncryption 9b:a6:1c:86:27:bc:7b:9e:9a:75:dc:13:4d:dd:a2:b3:20:cc: 77:c9:3d:d0:34:d2:d2:65:ad:d7:46:e1:c3:52:d8:c7:27:2d: fe:3e:09:1d:73:5a:ee:54:3e:b7:78:6c:81:f9:97:b8:96:e6: 70:63:98:92:7b:e1:0f:8c:46:a9:43:66:3f:a0:e8:f8:55:08: 0d:3f:9a:7e:53:06:38:c6:7f:ec:a2:0a:55:e0:5e:6c:ed:26: c7:93:8f:9b:26:57:d0:21:22:74:38:fb:d4:ca:4e:a9:c1:c7: 30:70:9b:99:33:f4:8c:20:a4:83:bc:92:aa:a5:d6:6b:8f:65: ec:8f:45:2e:98:c7:fe:93:cf:ae:8c:98:41:12:b1:3c:a1:f7: c6:bd:ab:ab:a8:f4:28:61:88:ae:43:3e:6d:7f:57:12:ce:dd: 80:85:da:f9:db:b4:0b:83:c7:63:bb:a8:d6:1f:93:b9:35:43: af:3b:01:57:59:64:07:a1:98:f8:5c:f9:3d:fe:5a:85:2d:75: 52:2f:1f:63:85:c6:53:53:10:69:f4:42:37:14:18:7f:b0:2b: f9:43:e8:30:be:96:3e:7d:36:52:ca:ba:de:ef:6d:e1:40:b2: 77:e7:05:f1:0b:8f:bf:f7:66:23:bb:a8:34:2b:cd:b9:2f:ae: 5a:7b:17:96 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICBl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUxQzExMTAvBgNVBAUTKDk3QkI1NEIzRDIzQzM3QzNERDNFMDE2OUNBOTc0RDI3 REJBOUYwNTAwHhcNMjUwNzAxMDAwMjMxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGJlNC05MDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Q9D9bUpx5mdp4IZzDnvQHWXQyVKja+KA0NaJ9FD5gAk5qUhje61fNCOmOLk kGheQJ7jbZF7l2PZK0IQDL1NeCsBvZjDNO7h41edOF75daBJmrk0lky94aZ6zyFH By47ZWmnIS4uGE48buRkRKQvzJZ2w6BlilyLqoMLNFDShg6g/pOC2BXBFAbxFo7u 2fIJ2s+vXFCshn/7WXYt1jHKH7PCRS9lZrzVgz5xEEk8GUkBnVIVfY1edk6hXtDV sN4IA1G5awHhlJKTh1R2SPoguzpzAoZKWxh/RQja53XWvgqyaB00eSqXkN+BfeC+ 7dlQZkUgw6DO4EI/XeOSZL731QIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFPxLMcj/ qfhNQ+pevR7Y0hiEqBSAMB8GA1UdIwQYMBaAFJe7VLPSPDfD3T4BacqXTSfbqfBQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTFDMS9EOTJFNjlBQUMx RUUxMUVCQkZENTdFMkFDNEY5QUUwMi9sN3RVczlJOE44UGRQZ0ZweXBkTko5dXA4 RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w3dFVzOUk4TjhQZFBnRnB5cGROSjl1cDhGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDUxQzEvRDkyRTY5QUFDMUVFMTFFQkJGRDU3RTJBQzRGOUFFMDIvMUU4QURGRDBD MUYyMTFFQkE5ODQ3MjZBQzRGOUFFMDIucm9hMGoGCCsGAQUFBwEHAQH/BFswWTAY BAIAATASAwQBK/MWAwQCZxpEAwQAygzzMD0EAgACMDcDCQAgAQ3qAAAAEAMJACAB DeoAAAAgAwkAIAEN6gAAADADCQAgAQ3qAAAAQAMJACABDeoAAABQMA0GCSqGSIb3 DQEBCwUAA4IBAQCbphyGJ7x7npp13BNN3aKzIMx3yT3QNNLSZa3XRuHDUtjHJy3+ Pgkdc1ruVD63eGyB+Ze4luZwY5iSe+EPjEapQ2Y/oOj4VQgNP5p+UwY4xn/sogpV 4F5s7SbHk4+bJlfQISJ0OPvUyk6pwccwcJuZM/SMIKSDvJKqpdZrj2Xsj0UumMf+ k8+ujJhBErE8offGvaurqPQoYYiuQz5tf1cSzt2Ahdr527QLg8dju6jWH5O5NUOv OwFXWWQHoZj4XPk9/lqFLXVSLx9jhcZTUxBp9EI3FBh/sCv5Q+gwvpY+fTZSyrre 723hQLJ35wXxC4+/92Yju6g0K825L65aexeW -----END CERTIFICATE-----Generated at Thu Mar 26 01:51:18 2026 by rpki-client