$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/D0B6868A1D1B11F1ACF733B0103D8C67.roa File: D0B6868A1D1B11F1ACF733B0103D8C67.roa (raw, json) Hash identifier: rogl+yV8mqomZi5XFY8zGIncIfCI6Ju2NLYZxXN71x0= Subject key identifier: E2:B5:78:23:22:24:AB:73:74:25:F8:5F:CC:DC:DC:18:27:81:3F:5B Certificate issuer: /CN=A91DBAA3/serialNumber=F9AE5E2A9DC80B51EAA7577278C3DE061A80AB63 Certificate serial: 36 Authority key identifier: F9:AE:5E:2A:9D:C8:0B:51:EA:A7:57:72:78:C3:DE:06:1A:80:AB:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/D0B6868A1D1B11F1ACF733B0103D8C67.roa Signing time: Wed 11 Mar 2026 07:27:53 +0000 ROA not before: Wed 11 Mar 2026 07:27:53 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152194 IP address blocks: 43.240.36.0/22 maxlen: 24 103.19.188.0/22 maxlen: 24 2400:c680::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAA3, serialNumber=F9AE5E2A9DC80B51EAA7577278C3DE061A80AB63 Validity Not Before: Mar 11 07:27:53 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69b11979-e8b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2c:96:68:02:05:aa:ba:85:b2:69:14:07:0e: 7e:79:2c:6c:0d:03:29:a5:bd:bb:5c:07:66:b7:10: 28:ad:8a:ad:1c:49:94:96:c0:76:65:10:87:45:2d: cd:74:f6:1a:a5:ac:9c:aa:c0:83:d4:3d:21:03:59: 14:b7:38:de:79:a7:17:da:ce:f4:1c:6b:ed:16:ca: 35:a2:3c:06:c4:db:52:a1:ef:95:c8:1a:77:9b:a7: 70:31:db:ee:5a:39:c0:8d:6e:56:c6:02:c5:48:e5: 12:4f:08:3a:8c:27:40:da:b9:93:18:99:14:54:a1: 93:6d:53:32:3a:27:ec:40:e6:15:b2:26:aa:41:35: 76:b8:48:64:59:01:ab:11:04:72:c1:1d:05:39:19: ae:34:68:99:12:98:64:0f:19:96:cf:68:b2:67:67: 23:fb:94:80:ce:b4:9b:fc:fe:6d:ef:c2:dc:98:12: 81:20:1f:16:f2:49:47:2c:67:e5:67:ce:b7:a6:dd: ee:0f:12:41:c2:c6:ef:54:28:c7:aa:af:e7:8a:09: 52:bd:35:ba:fe:0a:82:0a:8e:9d:81:6d:f4:7a:f8: 71:32:09:43:38:13:0b:53:d5:71:a2:39:64:94:f4: ed:9d:41:0e:9f:37:49:f4:40:ee:0e:6f:f5:5d:91: 5b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B5:78:23:22:24:AB:73:74:25:F8:5F:CC:DC:DC:18:27:81:3F:5B X509v3 Authority Key Identifier: keyid:F9:AE:5E:2A:9D:C8:0B:51:EA:A7:57:72:78:C3:DE:06:1A:80:AB:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/D0B6868A1D1B11F1ACF733B0103D8C67.roa sbgp-ipAddrBlock: critical IPv4: 43.240.36.0/22 103.19.188.0/22 IPv6: 2400:c680::/32 Signature Algorithm: sha256WithRSAEncryption 06:20:80:9f:e6:75:20:83:8d:55:c3:a8:c8:62:9e:bd:a3:f9: 79:7e:0c:91:e1:da:cd:d4:4c:e5:e4:fe:7d:c5:71:03:af:b5: c0:cd:30:49:b3:64:10:01:05:ac:79:84:b2:7a:50:c1:c3:c0: fe:da:89:09:86:9b:d4:91:2b:e2:0c:ad:92:94:24:81:7c:66: f5:2f:3b:8d:45:4d:88:4e:66:4d:9d:15:2e:b9:56:68:cd:e3: f1:3b:02:bc:0e:0c:f4:e3:6e:21:e5:d8:5b:e5:34:99:dd:b1: e5:5a:bc:3a:20:aa:5f:2b:be:16:b7:55:47:84:35:a0:73:85: 5f:b5:f0:0d:08:17:ca:2d:95:de:db:1f:27:50:68:9f:62:f5: ac:2f:5c:11:ae:04:5e:8e:a7:d6:5d:46:db:b0:d3:b5:1d:e5: 9c:0d:12:69:15:75:e9:51:56:b9:ed:42:d0:dd:98:9f:a6:80: 43:be:75:59:9d:95:e8:46:4c:a3:5f:ff:85:30:2c:61:30:38: 20:f3:c5:cc:5f:5e:4f:08:23:c0:5e:12:24:1b:48:a8:b1:6b: ac:34:2e:87:10:8f:d2:1d:a9:d2:a0:71:6a:b5:83:a2:5a:d6: 6e:2a:b3:bd:94:ce:f2:aa:e3:32:08:f1:6f:71:12:00:97:02: f2:07:d3:c9 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QkFBMzExMC8GA1UEBRMoRjlBRTVFMkE5REM4MEI1MUVBQTc1NzcyNzhDM0RFMDYx QTgwQUI2MzAeFw0yNjAzMTEwNzI3NTNaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YjExOTc5LWU4YjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDILJZoAgWquoWyaRQHDn55LGwNAymlvbtcB2a3ECitiq0cSZSWwHZlEIdFLc10 9hqlrJyqwIPUPSEDWRS3ON55pxfazvQca+0WyjWiPAbE21Kh75XIGnebp3Ax2+5a OcCNblbGAsVI5RJPCDqMJ0DauZMYmRRUoZNtUzI6J+xA5hWyJqpBNXa4SGRZAasR BHLBHQU5Ga40aJkSmGQPGZbPaLJnZyP7lIDOtJv8/m3vwtyYEoEgHxbySUcsZ+Vn zrem3e4PEkHCxu9UKMeqr+eKCVK9Nbr+CoIKjp2BbfR6+HEyCUM4EwtT1XGiOWSU 9O2dQQ6fN0n0QO4Ob/VdkVtzAgMBAAGjggJ1MIICcTAdBgNVHQ4EFgQU4rV4IyIk q3N0JfhfzNzcGCeBP1swHwYDVR0jBBgwFoAU+a5eKp3IC1Hqp1dyeMPeBhqAq2Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCQUEzLzFDMTc5MTNBRDkw RDExRjA4NjgwRDVGMTdDRDM2NDFELy1hNWVLcDNJQzFIcXAxZHllTVBlQmhxQXEy TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLWE1ZUtwM0lDMUhxcDFkeWVNUGVCaHFBcTJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFBMy8xQzE3OTEzQUQ5MEQxMUYwODY4MEQ1RjE3Q0QzNjQxRC9EMEI2ODY4QTFE MUIxMUYxQUNGNzMzQjAxMDNEOEM2Ny5yb2EwNAYIKwYBBQUHAQcBAf8EJTAjMBIE AgABMAwDBAIr8CQDBAJnE7wwDQQCAAIwBwMFACQAxoAwDQYJKoZIhvcNAQELBQAD ggEBAAYggJ/mdSCDjVXDqMhinr2j+Xl+DJHh2s3UTOXk/n3FcQOvtcDNMEmzZBAB Bax5hLJ6UMHDwP7aiQmGm9SRK+IMrZKUJIF8ZvUvO41FTYhOZk2dFS65VmjN4/E7 ArwODPTjbiHl2FvlNJndseVavDogql8rvha3VUeENaBzhV+18A0IF8otld7bHydQ aJ9i9awvXBGuBF6Op9ZdRtuw07Ud5ZwNEmkVdelRVrntQtDdmJ+mgEO+dVmdlehG TKNf/4UwLGEwOCDzxcxfXk8II8BeEiQbSKixa6w0LocQj9IdqdKgcWq1g6Ja1m4q s72UzvKq4zII8W9xEgCXAvIH08k= -----END CERTIFICATE-----Generated at Thu Mar 26 08:37:10 2026 by rpki-client