$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/ADE3F5B635D611EB8466D634C4F9AE02.roa File: ADE3F5B635D611EB8466D634C4F9AE02.roa (raw, json) Hash identifier: SuS1yUPf+qwRjP/UZ+1uUuOJ9N61dBJV/b2hqurWcUw= Subject key identifier: 9B:76:4B:8F:41:9A:17:42:68:DF:83:33:12:63:92:9F:07:93:FE:7A Certificate issuer: /CN=A91DC8F3/serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97 Certificate serial: 07C1 Authority key identifier: F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/ADE3F5B635D611EB8466D634C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:27:47 +0000 ROA not before: Tue 30 Sep 2025 22:24:19 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 53587 IP address blocks: 43.250.184.0/22 maxlen: 22 43.250.184.0/24 maxlen: 24 43.250.185.0/24 maxlen: 24 43.250.186.0/24 maxlen: 24 43.250.187.0/24 maxlen: 24 103.240.140.0/22 maxlen: 22 103.240.140.0/23 maxlen: 23 103.240.140.0/24 maxlen: 24 103.240.141.0/24 maxlen: 24 103.240.142.0/23 maxlen: 23 103.240.142.0/24 maxlen: 24 103.240.143.0/24 maxlen: 24 2401:a080::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:08:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1985 (0x7c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC8F3, serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97 Validity Not Before: Sep 30 22:24:19 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a430c3-5435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4c:54:c4:41:f7:f4:7f:6f:16:de:94:22:ff: 9a:ae:27:88:92:b5:30:c0:3b:bd:1a:0b:f8:30:68: 33:9d:cd:9c:f2:88:67:6f:ac:b7:0d:1f:94:a0:99: 53:02:6c:64:57:e2:fa:84:f8:63:e7:0b:f8:22:2a: 9a:da:df:cb:f6:e3:c2:08:df:43:9f:8a:30:5c:41: 28:f7:a8:58:26:e9:36:b2:22:6b:9d:e0:a5:1a:6f: fc:db:de:28:84:24:f8:17:19:1f:16:c0:fa:79:b3: b2:47:95:9d:f7:65:7f:35:dc:0d:d7:c1:85:07:fc: 1e:d0:65:71:45:23:14:a5:8a:25:cd:ef:01:85:8a: bc:ea:24:77:5f:ee:d0:b3:09:a8:3d:08:1d:12:57: c9:f4:71:87:0c:f4:f0:19:68:a7:3c:f7:53:5f:5e: 29:b1:1c:95:8a:67:22:5a:a8:d6:b7:cc:7b:8e:44: 76:e1:a3:2f:a7:e8:2c:ad:bd:57:95:ac:b9:91:53: 2b:48:c2:ec:7d:70:db:3b:27:7b:0b:62:3c:f4:51: 13:92:d5:f2:a3:bf:9f:3f:31:c1:74:f1:07:b3:b6: 17:e9:ab:7a:18:aa:8f:9a:8b:52:74:e9:92:d1:05: fa:dd:18:d8:95:2d:7c:fc:c4:f0:ce:f4:63:c3:08: 30:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:76:4B:8F:41:9A:17:42:68:DF:83:33:12:63:92:9F:07:93:FE:7A X509v3 Authority Key Identifier: keyid:F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/ADE3F5B635D611EB8466D634C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.250.184.0/22 103.240.140.0/22 IPv6: 2401:a080::/32 Signature Algorithm: sha256WithRSAEncryption da:ad:6b:e0:f2:d4:0d:6e:53:bc:f4:d7:50:17:d4:60:b2:5c: 50:6a:bd:1c:56:b3:74:37:22:4b:2e:bf:68:1d:af:5f:45:04: 32:5f:4b:47:00:5c:5a:ef:1b:32:21:10:80:9c:8f:e3:e8:d1: b6:ba:b7:d2:e9:3d:17:df:58:2b:d4:12:87:bc:c3:38:bf:b8: eb:82:72:5a:06:2d:81:2c:89:a7:3d:0f:7b:71:8e:b2:b9:5f: 91:ea:d0:2d:80:ea:05:c7:7e:6a:dc:f5:a5:8f:9c:0c:1d:b6: df:67:4f:4c:bc:84:32:31:13:91:0e:36:d4:ab:36:1d:22:48: 4e:39:5f:94:db:59:53:08:2a:b4:d8:7e:7f:5f:38:87:31:82: 54:ff:20:36:de:2a:84:a9:b3:37:8d:22:6b:8f:4e:83:99:b8: 3d:a2:37:4f:77:6f:6f:a5:54:c0:f9:65:f7:59:9d:1a:2c:06: b1:d1:b2:2d:fc:1a:4d:b6:2c:e7:ec:af:c0:87:e2:6e:9c:09: 46:3d:d1:a8:b8:a9:df:b8:5f:1e:da:9f:06:2b:77:99:d8:7c: 61:ff:e7:7e:f9:ca:f4:18:22:28:f6:46:a9:bf:b3:ee:aa:99: 11:c1:b7:c7:dd:c8:67:b6:b0:ba:d6:59:20:11:c1:04:91:c5: 0c:ae:35:de -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICB8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4RjMxMTAvBgNVBAUTKEYxNTlBQzA0QjVCODkzNzkwNUU2OUQxQkYyNUY0RDUz QjM1NDVDOTcwHhcNMjUwOTMwMjIyNDE5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzBjMy01NDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0xUxEH39H9vFt6UIv+arieIkrUwwDu9Ggv4MGgznc2c8ohnb6y3DR+UoJlT AmxkV+L6hPhj5wv4Iiqa2t/L9uPCCN9Dn4owXEEo96hYJuk2siJrneClGm/8294o hCT4FxkfFsD6ebOyR5Wd92V/NdwN18GFB/we0GVxRSMUpYolze8BhYq86iR3X+7Q swmoPQgdElfJ9HGHDPTwGWinPPdTX14psRyVimciWqjWt8x7jkR24aMvp+gsrb1X lay5kVMrSMLsfXDbOyd7C2I89FETktXyo7+fPzHBdPEHs7YX6at6GKqPmotSdOmS 0QX63RjYlS18/MTwzvRjwwgw5wIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFJt2S49B mhdCaN+DMxJjkp8Hk/56MB8GA1UdIwQYMBaAFPFZrAS1uJN5BeadG/JfTVOzVFyX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzhGMy9FOUQzMEM4MDM1 RDQxMUVCQkUyNzdGMzNDNEY5QUUwMi84Vm1zQkxXNGsza0Y1cDBiOGw5TlU3TlVY SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhWbXNCTFc0azNrRjVwMGI4bDlOVTdOVVhKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REM4RjMvRTlEMzBDODAzNUQ0MTFFQkJFMjc3RjMzQzRGOUFFMDIvQURFM0Y1QjYz NUQ2MTFFQjg0NjZENjM0QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCK/q4AwQCZ/CMMA0EAgACMAcDBQAkAaCAMA0GCSqGSIb3DQEBCwUA A4IBAQDarWvg8tQNblO89NdQF9RgslxQar0cVrN0NyJLLr9oHa9fRQQyX0tHAFxa 7xsyIRCAnI/j6NG2urfS6T0X31gr1BKHvMM4v7jrgnJaBi2BLImnPQ97cY6yuV+R 6tAtgOoFx35q3PWlj5wMHbbfZ09MvIQyMRORDjbUqzYdIkhOOV+U21lTCCq02H5/ XziHMYJU/yA23iqEqbM3jSJrj06Dmbg9ojdPd29vpVTA+WX3WZ0aLAax0bIt/BpN tizn7K/Ah+JunAlGPdGouKnfuF8e2p8GK3eZ2Hxh/+d++cr0GCIo9kapv7PuqpkR wbfH3chntrC61lkgEcEEkcUMrjXe -----END CERTIFICATE-----Generated at Thu Mar 26 12:51:56 2026 by rpki-client