$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/2815E7D4BF4211E9A93A3957C4F9AE02.roa File: 2815E7D4BF4211E9A93A3957C4F9AE02.roa (raw, json) Hash identifier: HzrAoaY9JYPA2q5sXzU/LWx/s6FAhl2YIVATDmW8pSM= Subject key identifier: 05:BD:35:82:DD:7B:42:A8:DB:42:AE:4B:36:1F:69:DC:15:45:0D:8E Certificate issuer: /CN=A91E2AE5/serialNumber=B43A5A60D46806A69FFEF7C676219EC4BA8BA36D Certificate serial: 2C42 Authority key identifier: B4:3A:5A:60:D4:68:06:A6:9F:FE:F7:C6:76:21:9E:C4:BA:8B:A3:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tDpaYNRoBqaf_vfGdiGexLqLo20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/2815E7D4BF4211E9A93A3957C4F9AE02.roa Signing time: Tue 28 Apr 2026 16:19:02 +0000 ROA not before: Tue 28 Apr 2026 16:19:02 +0000 ROA not after: Fri 28 Aug 2026 00:00:00 +0000 asID: 9988 IP address blocks: 43.224.40.0/22 maxlen: 24 103.25.12.0/22 maxlen: 22 203.81.64.0/19 maxlen: 19 203.81.64.0/21 maxlen: 22 203.81.72.0/21 maxlen: 22 203.81.76.0/24 maxlen: 24 203.81.80.0/21 maxlen: 22 203.81.84.0/24 maxlen: 24 203.81.85.0/24 maxlen: 24 203.81.88.0/21 maxlen: 22 203.81.92.0/24 maxlen: 24 203.81.93.0/24 maxlen: 24 203.81.95.0/24 maxlen: 24 2401:f200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.crl rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tDpaYNRoBqaf_vfGdiGexLqLo20.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 15:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11330 (0x2c42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2AE5, serialNumber=B43A5A60D46806A69FFEF7C676219EC4BA8BA36D Validity Not Before: Apr 28 16:19:02 2026 GMT Not After : Aug 28 00:00:00 2026 GMT Subject: CN=69f0ddf6-36c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:21:77:6f:64:84:2b:0a:6c:c1:9a:69:d2:70: a9:ed:6e:42:49:56:bf:84:9c:d8:4c:49:cf:da:01: 1c:f4:fb:49:27:8d:35:90:0b:10:8b:ea:b9:46:87: 0e:ac:3c:75:c5:97:3a:e9:1c:2f:31:3a:8b:77:26: 83:b1:88:5c:7f:75:11:93:be:57:3d:11:9b:7a:13: b2:47:af:ed:36:68:64:b2:c5:95:a1:6b:11:24:09: 21:8b:ed:5d:c2:46:52:99:e8:3b:b8:10:58:b4:e3: 7b:f7:82:23:f6:d6:ab:88:7c:bb:9a:52:65:ba:a0: de:a6:10:67:57:c6:6c:27:07:8a:59:2f:fa:0b:a4: 76:91:df:03:00:52:9d:3d:46:f9:df:69:7a:aa:34: 91:30:58:26:df:bd:dd:f1:2d:5b:8c:75:bb:b7:3d: 20:30:d0:d1:81:61:54:19:30:5f:42:f8:fc:70:32: a5:83:c3:5c:d7:07:ac:72:85:53:bf:f8:d3:92:96: 3c:7d:c4:78:40:ab:5a:ff:4e:47:8c:26:d9:88:30: c6:ce:0b:d4:ad:f6:40:e4:f5:53:bd:cc:a7:42:61: fa:b3:91:dd:03:aa:c6:77:17:45:60:48:b2:91:b4: 38:62:90:b0:65:3f:18:4d:ec:fc:c6:1f:7b:a1:ff: bc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:BD:35:82:DD:7B:42:A8:DB:42:AE:4B:36:1F:69:DC:15:45:0D:8E X509v3 Authority Key Identifier: keyid:B4:3A:5A:60:D4:68:06:A6:9F:FE:F7:C6:76:21:9E:C4:BA:8B:A3:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tDpaYNRoBqaf_vfGdiGexLqLo20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/2815E7D4BF4211E9A93A3957C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.224.40.0/22 103.25.12.0/22 203.81.64.0/19 IPv6: 2401:f200::/32 Signature Algorithm: sha256WithRSAEncryption 2c:0f:15:43:57:16:65:b7:c8:ab:ae:27:c1:13:2f:b6:3a:8a: 20:ac:cf:13:a7:a1:e4:c8:5b:a9:9c:30:76:01:be:a6:27:d4: 7c:fc:8d:d1:d5:2d:09:80:21:61:c9:2d:01:bc:71:d2:bc:42: 64:b1:f3:56:93:50:3b:9d:c3:58:b1:dc:ba:d8:38:84:90:b0: 1d:24:a8:33:de:78:dc:d8:69:59:e8:fc:91:70:b8:48:d7:7d: 1a:0f:c8:73:f7:d4:f8:41:6d:2e:53:9a:06:d2:72:9c:a8:1f: c5:07:85:93:03:28:91:c3:9c:52:cb:da:6d:b4:36:d3:18:b8: 40:19:0f:c8:85:bc:2e:b8:2e:b2:f8:4b:e4:69:29:7d:14:b7: aa:26:4f:83:e2:50:b6:80:d5:e8:3e:1f:91:b2:66:1d:3a:c5: 99:aa:76:c2:22:3e:b7:bc:4e:21:9f:d2:9d:27:c7:7c:5a:6e: 58:86:99:1e:4a:06:b7:fc:e6:c5:4c:ef:fc:d0:2e:79:ca:75: dc:82:f6:4d:bc:12:23:1f:6e:0e:c8:66:37:85:85:50:43:ad: 77:63:12:30:fc:33:ec:44:1a:dd:28:9a:7c:0d:ac:29:a2:0c: 4d:99:dd:85:da:b3:48:e3:12:84:f0:59:c2:cb:bb:c9:26:42: e6:f4:7d:48 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICLEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBRTUxMTAvBgNVBAUTKEI0M0E1QTYwRDQ2ODA2QTY5RkZFRjdDNjc2MjE5RUM0 QkE4QkEzNkQwHhcNMjYwNDI4MTYxOTAyWhcNMjYwODI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWYwZGRmNi0zNmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkiF3b2SEKwpswZpp0nCp7W5CSVa/hJzYTEnP2gEc9PtJJ401kAsQi+q5RocO rDx1xZc66RwvMTqLdyaDsYhcf3URk75XPRGbehOyR6/tNmhkssWVoWsRJAkhi+1d wkZSmeg7uBBYtON794Ij9tariHy7mlJluqDephBnV8ZsJweKWS/6C6R2kd8DAFKd PUb532l6qjSRMFgm373d8S1bjHW7tz0gMNDRgWFUGTBfQvj8cDKlg8Nc1wescoVT v/jTkpY8fcR4QKta/05HjCbZiDDGzgvUrfZA5PVTvcynQmH6s5HdA6rGdxdFYEiy kbQ4YpCwZT8YTez8xh97of+8mQIDAQABo4ICezCCAncwHQYDVR0OBBYEFAW9NYLd e0Ko20KuSzYfadwVRQ2OMB8GA1UdIwQYMBaAFLQ6WmDUaAamn/73xnYhnsS6i6Nt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkFFNS84RDNFNTRFQUVE NTkxMUUzQjA5MDExOTI1OTExRUEzMi90RHBhWU5Sb0JxYWZfdmZHZGlHZXhMcUxv MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3REcGFZTlJvQnFhZl92ZkdkaUdleExxTG8yMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTJBRTUvOEQzRTU0RUFFRDU5MTFFM0IwOTAxMTkyNTkxMUVBMzIvMjgxNUU3RDRC RjQyMTFFOUE5M0EzOTU3QzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCK+AoAwQCZxkMAwQFy1FAMA0EAgACMAcDBQAkAfIAMA0GCSqGSIb3 DQEBCwUAA4IBAQAsDxVDVxZlt8irrifBEy+2OoogrM8Tp6HkyFupnDB2Ab6mJ9R8 /I3R1S0JgCFhyS0BvHHSvEJksfNWk1A7ncNYsdy62DiEkLAdJKgz3njc2GlZ6PyR cLhI130aD8hz99T4QW0uU5oG0nKcqB/FB4WTAyiRw5xSy9pttDbTGLhAGQ/Ihbwu uC6y+EvkaSl9FLeqJk+D4lC2gNXoPh+RsmYdOsWZqnbCIj63vE4hn9KdJ8d8Wm5Y hpkeSga3/ObFTO/80C55ynXcgvZNvBIjH24OyGY3hYVQQ613YxIw/DPsRBrdKJp8 DawpogxNmd2F2rNI4xKE8FnCy7vJJkLm9H1I -----END CERTIFICATE-----Generated at Wed May 13 15:49:36 2026 by rpki-client