$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/9E924168765811EB9E261F25C4F9AE02.roa File: 9E924168765811EB9E261F25C4F9AE02.roa (raw, json) Hash identifier: Ck2Qok/2TKHWJ1WhyS73ofFb+puPh3hrhRRG4T4K9QU= Subject key identifier: 81:08:59:91:93:A0:A1:F7:C7:4D:EB:FF:48:03:C6:45:90:1B:8E:F1 Certificate issuer: /CN=A91DBE37/serialNumber=EFD70769F7E855D257A24D6A1D4903950AB369D3 Certificate serial: 0718 Authority key identifier: EF:D7:07:69:F7:E8:55:D2:57:A2:4D:6A:1D:49:03:95:0A:B3:69:D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/9E924168765811EB9E261F25C4F9AE02.roa Signing time: Wed 04 Mar 2026 21:29:37 +0000 ROA not before: Wed 04 Mar 2026 21:29:37 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 45780 IP address blocks: 43.251.152.0/23 maxlen: 23 43.251.155.0/24 maxlen: 24 103.226.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.crl rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1816 (0x718) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBE37, serialNumber=EFD70769F7E855D257A24D6A1D4903950AB369D3 Validity Not Before: Mar 4 21:29:37 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a8a441-f1c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f0:17:24:06:81:fb:08:a3:ca:d3:a4:6b:15: 96:c4:3a:9d:27:e2:8f:c3:c3:b1:7f:1e:a4:2b:aa: 09:1b:d3:82:bd:b6:b3:5a:e1:63:40:1c:b6:f6:d7: 6d:c4:c2:2c:25:59:fc:6d:67:4d:65:cf:db:49:e5: b4:e9:b5:0f:8d:43:38:d6:01:93:56:48:c2:86:10: 9b:64:36:f3:0d:cc:38:8a:c6:35:0a:7b:1a:48:ec: 2f:a6:85:79:da:c9:61:f0:71:65:9a:a7:66:bc:3c: e4:31:b0:cc:20:99:3b:0c:50:50:b3:f5:56:ad:c8: 41:2a:0c:bb:06:9c:1e:b2:85:5c:8a:cf:67:3e:1e: b3:e2:00:d2:a2:e3:fc:f7:89:db:19:ff:96:f9:cf: 22:1b:ee:40:a1:c9:ad:e9:68:31:1c:ab:dc:93:8d: 07:5b:2c:9c:99:82:62:bf:e5:41:ff:da:70:f7:2e: 5e:90:d0:62:87:ea:41:03:8c:53:91:4c:29:13:b5: 21:72:b1:72:13:60:00:34:5a:ef:12:66:d7:9a:16: 43:bc:98:b6:28:e8:83:fd:c9:ac:ef:ce:8e:d1:40: c1:f2:3b:30:86:44:96:25:94:71:4f:ed:17:a2:5f: 71:d7:6d:a6:3e:4c:1e:74:fd:63:a0:9f:ca:31:ca: be:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:08:59:91:93:A0:A1:F7:C7:4D:EB:FF:48:03:C6:45:90:1B:8E:F1 X509v3 Authority Key Identifier: keyid:EF:D7:07:69:F7:E8:55:D2:57:A2:4D:6A:1D:49:03:95:0A:B3:69:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/9E924168765811EB9E261F25C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.251.152.0/23 43.251.155.0/24 103.226.160.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:8e:e7:cb:7e:c5:c6:4d:b4:70:38:ae:b6:bf:fa:94:1b:1b: 96:4f:16:a6:d0:21:7a:a5:1e:d7:2d:26:ff:cf:0e:2a:e5:95: 1f:71:83:30:a2:da:2b:50:71:1a:57:2e:40:a9:e6:6f:28:24: fe:9b:e5:d7:c8:0d:23:52:aa:2b:05:42:2d:d2:93:67:bf:3f: 08:08:b7:0b:69:5c:5c:34:fa:52:a7:03:6d:fe:4e:18:87:47: 00:83:2d:f3:bc:75:4b:a9:39:fa:de:b0:43:f2:9d:59:e7:9a: 11:4b:de:72:a4:54:17:95:cd:ee:8f:6f:3d:e7:29:98:d4:d6: d7:cc:df:7b:d5:9d:bb:02:fa:65:14:03:4d:6f:c5:71:ed:ae: d3:53:d9:31:73:1e:79:27:05:0c:02:8a:79:d4:6a:09:fb:20: 3c:ee:1d:c2:83:08:c8:4c:0f:f6:f2:54:1a:61:79:98:2f:9f: 5b:ac:0d:89:62:2d:73:6e:b6:b6:b1:e9:9c:01:84:36:a3:43: 28:33:4f:8d:ef:7a:14:a6:37:dd:0e:7d:29:ad:7a:31:ef:50: ee:31:47:bf:8c:09:02:2c:7c:4f:d8:22:22:96:e1:1a:26:63: 86:e8:79:5b:07:25:e0:62:c0:af:7d:0e:f4:96:8a:ae:2a:3c: 62:6b:0a:dd -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICBxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJFMzcxMTAvBgNVBAUTKEVGRDcwNzY5RjdFODU1RDI1N0EyNEQ2QTFENDkwMzk1 MEFCMzY5RDMwHhcNMjYwMzA0MjEyOTM3WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE4YTQ0MS1mMWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfAXJAaB+wijytOkaxWWxDqdJ+KPw8Oxfx6kK6oJG9OCvbazWuFjQBy29tdt xMIsJVn8bWdNZc/bSeW06bUPjUM41gGTVkjChhCbZDbzDcw4isY1CnsaSOwvpoV5 2slh8HFlmqdmvDzkMbDMIJk7DFBQs/VWrchBKgy7BpwesoVcis9nPh6z4gDSouP8 94nbGf+W+c8iG+5Aocmt6WgxHKvck40HWyycmYJiv+VB/9pw9y5ekNBih+pBA4xT kUwpE7UhcrFyE2AANFrvEmbXmhZDvJi2KOiD/cms786O0UDB8jswhkSWJZRxT+0X ol9x122mPkwedP1joJ/KMcq+SQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFIEIWZGT oKH3x03r/0gDxkWQG47xMB8GA1UdIwQYMBaAFO/XB2n36FXSV6JNah1JA5UKs2nT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkUzNy82QTM1RTNEMDc2 NTcxMUVCOTk3REI0MjRDNEY5QUUwMi83OWNIYWZmb1ZkSlhvazFxSFVrRGxRcXph ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc5Y0hhZmZvVmRKWG9rMXFIVWtEbFFxemFkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REJFMzcvNkEzNUUzRDA3NjU3MTFFQjk5N0RCNDI0QzRGOUFFMDIvOUU5MjQxNjg3 NjU4MTFFQjlFMjYxRjI1QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQBK/uYAwQAK/ubAwQCZ+KgMA0GCSqGSIb3DQEBCwUAA4IBAQAajufL fsXGTbRwOK62v/qUGxuWTxam0CF6pR7XLSb/zw4q5ZUfcYMwotorUHEaVy5AqeZv KCT+m+XXyA0jUqorBUIt0pNnvz8ICLcLaVxcNPpSpwNt/k4Yh0cAgy3zvHVLqTn6 3rBD8p1Z55oRS95ypFQXlc3uj2895ymY1NbXzN971Z27AvplFANNb8Vx7a7TU9kx cx55JwUMAop51GoJ+yA87h3CgwjITA/28lQaYXmYL59brA2JYi1zbra2semcAYQ2 o0MoM0+N73oUpjfdDn0prXox71DuMUe/jAkCLHxP2CIiluEaJmOG6HlbByXgYsCv fQ70loquKjxiawrd -----END CERTIFICATE-----Generated at Thu Mar 26 16:03:35 2026 by rpki-client