$ rpki-client -vvf rpki.apnic.net/member_repository/A91E20C2/708CC3283E2711F1B9F4379FB5833773/5487474E3E2B11F1962E9E0BB7833773.roa File: 5487474E3E2B11F1962E9E0BB7833773.roa (raw, json) Hash identifier: OmLUQ43QETaka1wexlDbKxhUGMOUSSWYIcjZLWyxezg= Subject key identifier: 86:B7:10:45:66:5F:01:07:E4:3A:08:0F:57:9D:AA:B0:31:DA:D7:60 Certificate issuer: /CN=A91E20C2/serialNumber=79E7B5978118FF9C7A96529F6C5909E3DA9240C3 Certificate serial: 02 Authority key identifier: 79:E7:B5:97:81:18:FF:9C:7A:96:52:9F:6C:59:09:E3:DA:92:40:C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eee1l4EY_5x6llKfbFkJ49qSQMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E20C2/708CC3283E2711F1B9F4379FB5833773/5487474E3E2B11F1962E9E0BB7833773.roa Signing time: Wed 22 Apr 2026 09:12:05 +0000 ROA not before: Wed 22 Apr 2026 09:12:05 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 63888 IP address blocks: 43.239.84.0/22 maxlen: 22 43.239.84.0/24 maxlen: 24 43.239.85.0/24 maxlen: 24 43.239.86.0/24 maxlen: 24 43.239.87.0/24 maxlen: 24 103.236.100.0/22 maxlen: 22 103.236.100.0/24 maxlen: 24 103.236.101.0/24 maxlen: 24 103.236.102.0/24 maxlen: 24 103.236.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E20C2/708CC3283E2711F1B9F4379FB5833773/eee1l4EY_5x6llKfbFkJ49qSQMM.crl rsync://rpki.apnic.net/member_repository/A91E20C2/708CC3283E2711F1B9F4379FB5833773/eee1l4EY_5x6llKfbFkJ49qSQMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eee1l4EY_5x6llKfbFkJ49qSQMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 09:15:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E20C2, serialNumber=79E7B5978118FF9C7A96529F6C5909E3DA9240C3 Validity Not Before: Apr 22 09:12:05 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69e890e5-078b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:18:59:ae:81:5a:67:2c:f1:58:be:ad:4a:97: 38:38:98:cb:a9:d2:3d:25:a9:52:6e:ef:31:5d:a3: b9:a5:dc:a6:c9:38:27:ea:42:54:99:ea:3d:ca:92: 89:12:11:63:22:87:70:6c:6d:9b:f5:fa:a9:4c:e1: c6:44:a2:81:b0:7f:b9:3c:f0:ea:1c:6b:e5:71:a4: 55:db:e0:64:8f:ad:60:6d:6e:4e:86:5e:9d:5b:d5: 55:41:e4:ce:19:26:aa:d3:9f:b9:b0:e3:91:84:f8: 83:2a:d4:8c:d5:95:54:35:a0:31:af:c0:65:d8:db: a1:68:b4:a8:18:ab:6b:70:bb:4d:27:e8:6e:c8:74: 05:eb:e5:c3:63:3c:bb:37:4d:d9:3d:d1:e9:26:a9: 07:32:cb:b1:65:98:a9:ad:73:80:0f:2c:a7:9e:4d: 2e:1e:5c:0f:d2:37:80:e9:7a:ce:f8:db:28:16:82: bb:da:d8:2b:09:a4:7d:41:f8:a8:43:a0:08:68:db: e8:4c:37:a3:37:4e:65:2c:89:63:9e:06:08:60:f4: 1a:92:e6:16:7c:4b:e3:0a:58:86:46:01:03:62:ed: 99:7d:19:2f:78:37:1a:f9:3e:f3:da:bb:68:81:2e: 8b:d2:b6:4c:90:e8:f2:41:df:23:ec:c1:aa:73:5e: e1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B7:10:45:66:5F:01:07:E4:3A:08:0F:57:9D:AA:B0:31:DA:D7:60 X509v3 Authority Key Identifier: keyid:79:E7:B5:97:81:18:FF:9C:7A:96:52:9F:6C:59:09:E3:DA:92:40:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E20C2/708CC3283E2711F1B9F4379FB5833773/eee1l4EY_5x6llKfbFkJ49qSQMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eee1l4EY_5x6llKfbFkJ49qSQMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E20C2/708CC3283E2711F1B9F4379FB5833773/5487474E3E2B11F1962E9E0BB7833773.roa sbgp-ipAddrBlock: critical IPv4: 43.239.84.0/22 103.236.100.0/22 Signature Algorithm: sha256WithRSAEncryption 44:e6:e3:1d:40:82:54:68:b1:7d:08:ad:54:55:91:1d:f0:ba: 57:3a:1d:a4:93:c6:70:1e:45:60:95:bb:87:5d:54:b4:90:13: 9d:ac:7d:68:f9:1d:61:8f:bb:09:ca:21:2d:3f:25:26:b5:65: d4:f4:70:35:60:98:45:af:b2:82:24:26:d3:bb:44:95:57:6a: 8a:3e:ea:1d:84:80:d3:55:a8:8c:2a:b1:9f:c4:d8:24:5f:b9: f2:98:45:c8:2b:19:57:2b:0f:f6:14:e9:b4:e4:de:1f:bd:11: 91:04:88:39:a1:cb:e4:a9:0e:74:35:93:d6:a1:0f:c3:e0:70: 6f:ff:1c:b2:60:ca:12:94:45:f6:06:04:8f:da:dd:3f:ab:1b: a9:ca:57:b5:3a:94:3e:d2:01:b8:d3:c3:06:c5:6a:49:70:20: 57:05:64:3d:40:e0:54:bf:89:1a:b0:2d:3e:76:0a:f4:41:ad: 15:0f:38:f2:f5:89:fc:78:43:eb:5f:c2:5d:33:fb:55:99:86: c4:a4:d9:12:dc:3d:48:64:9c:ef:3b:f5:05:ce:80:dc:e4:f4: 90:42:e0:da:11:d5:9e:85:e1:f4:d3:55:c6:a6:13:03:ef:07: c9:3d:2b:9f:df:30:9d:6c:d8:f6:26:6c:e5:08:4b:29:f9:c9: 64:26:1a:27 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MjBDMjExMC8GA1UEBRMoNzlFN0I1OTc4MTE4RkY5QzdBOTY1MjlGNkM1OTA5RTNE QTkyNDBDMzAeFw0yNjA0MjIwOTEyMDVaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5ZTg5MGU1LTA3OGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsGFmugVpnLPFYvq1Klzg4mMup0j0lqVJu7zFdo7ml3KbJOCfqQlSZ6j3KkokS EWMih3BsbZv1+qlM4cZEooGwf7k88Ooca+VxpFXb4GSPrWBtbk6GXp1b1VVB5M4Z JqrTn7mw45GE+IMq1IzVlVQ1oDGvwGXY26FotKgYq2twu00n6G7IdAXr5cNjPLs3 Tdk90ekmqQcyy7FlmKmtc4APLKeeTS4eXA/SN4Dpes742ygWgrva2CsJpH1B+KhD oAho2+hMN6M3TmUsiWOeBghg9BqS5hZ8S+MKWIZGAQNi7Zl9GS94Nxr5PvPau2iB LovStkyQ6PJB3yPswapzXuFhAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQUhrcQRWZf AQfkOggPV52qsDHa12AwHwYDVR0jBBgwFoAUeee1l4EY/5x6llKfbFkJ49qSQMMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUyMEMyLzcwOENDMzI4M0Uy NzExRjFCOUY0Mzc5RkI1ODMzNzczL2VlZTFsNEVZXzV4NmxsS2ZiRmtKNDlxU1FN TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZWVlMWw0RVlfNXg2bGxLZmJGa0o0OXFTUU1NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjBDMi83MDhDQzMyODNFMjcxMUYxQjlGNDM3OUZCNTgzMzc3My81NDg3NDc0RTNF MkIxMUYxOTYyRTlFMEJCNzgzMzc3My5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBAIr71QDBAJn7GQwDQYJKoZIhvcNAQELBQADggEBAETm4x1AglRosX0I rVRVkR3wulc6HaSTxnAeRWCVu4ddVLSQE52sfWj5HWGPuwnKIS0/JSa1ZdT0cDVg mEWvsoIkJtO7RJVXaoo+6h2EgNNVqIwqsZ/E2CRfufKYRcgrGVcrD/YU6bTk3h+9 EZEEiDmhy+SpDnQ1k9ahD8PgcG//HLJgyhKURfYGBI/a3T+rG6nKV7U6lD7SAbjT wwbFaklwIFcFZD1A4FS/iRqwLT52CvRBrRUPOPL1ifx4Q+tfwl0z+1WZhsSk2RLc PUhknO879QXOgNzk9JBC4NoR1Z6F4fTTVcamEwPvB8k9K5/fMJ1s2PYmbOUISyn5 yWQmGic= -----END CERTIFICATE-----Generated at Wed May 13 13:02:51 2026 by rpki-client