$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/1C628A90671411EEA0040661C4F9AE02.roa File: 1C628A90671411EEA0040661C4F9AE02.roa (raw, json) Hash identifier: M0M27e7jpHMqjXXvltEuadHWRQl0UpCUB3Q3dSoBa+I= Subject key identifier: 87:4B:36:F4:2E:F9:6F:1E:03:F1:25:DC:4A:18:53:43:31:07:58:C8 Certificate issuer: /CN=A91FDD4D/serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60 Certificate serial: 225D Authority key identifier: 72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/1C628A90671411EEA0040661C4F9AE02.roa Signing time: Wed 04 Mar 2026 16:19:44 +0000 ROA not before: Wed 04 Mar 2026 16:19:44 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 58511 IP address blocks: 43.225.32.0/22 maxlen: 22 103.29.174.0/23 maxlen: 23 103.29.174.0/24 maxlen: 24 103.227.66.0/24 maxlen: 24 103.247.0.0/22 maxlen: 24 163.47.48.0/22 maxlen: 24 2001:df0:27a::/48 maxlen: 48 2400:5240::/32 maxlen: 32 2400:8280::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8797 (0x225d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD4D, serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60 Validity Not Before: Mar 4 16:19:44 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a85ba0-8071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d8:f1:c7:e5:f7:db:80:89:34:2e:0c:c4:70: 99:40:a3:4f:17:f5:ab:f0:c0:9a:25:f0:8d:75:63: 02:18:c8:c8:93:59:20:3e:02:99:37:4a:b6:74:24: ab:ea:5d:78:e6:90:8c:0a:a2:83:39:47:45:1c:67: 47:f7:d8:7a:0a:39:a7:34:a6:53:64:96:b0:6e:31: f5:f0:a9:df:c6:9f:4e:fd:64:e1:e9:57:6d:9d:a3: 3e:09:be:d7:57:cc:c0:e4:2e:05:ec:03:79:5a:00: 6f:a0:22:a5:46:23:7a:67:68:36:ee:6e:51:87:40: 1c:7a:c6:fd:68:56:a9:1d:58:a3:81:5e:1f:c7:1e: c3:9e:8a:e5:1d:dd:ba:b7:1e:9e:dc:10:45:4d:c9: 30:64:6b:96:f1:93:00:e8:57:8f:cb:b5:04:cc:e3: 9d:de:ac:e6:12:35:82:01:a8:af:bb:6b:26:46:83: eb:c4:71:5f:21:4d:59:8f:53:49:9a:32:0d:b9:53: d4:26:d1:36:19:12:d7:30:1f:8e:cd:bb:ba:ec:6e: 5c:2b:c0:4a:10:c2:4f:65:a4:72:16:0a:1e:b5:f9: 73:a0:2e:8b:f9:d9:7d:79:f5:bb:a2:30:2f:3c:44: 37:58:5d:d8:69:01:3a:c3:96:a2:bf:dd:38:08:d7: 23:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4B:36:F4:2E:F9:6F:1E:03:F1:25:DC:4A:18:53:43:31:07:58:C8 X509v3 Authority Key Identifier: keyid:72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/1C628A90671411EEA0040661C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.225.32.0/22 103.29.174.0/23 103.227.66.0/24 103.247.0.0/22 163.47.48.0/22 IPv6: 2001:df0:27a::/48 2400:5240::/32 2400:8280::/32 Signature Algorithm: sha256WithRSAEncryption 67:58:a2:09:45:11:f0:89:84:21:7e:10:50:29:ec:99:9e:73: 8f:e6:b3:a5:4c:a9:54:39:81:e7:05:95:4f:bc:34:1e:bf:a7: 2c:65:e8:b7:0a:22:3f:72:86:f2:18:02:a7:ee:41:31:9c:42: df:0d:c2:28:d5:46:89:fb:45:52:a9:66:05:5d:d8:88:8d:f6: 41:18:c9:f4:8b:b8:eb:c9:a8:b5:15:54:b7:13:df:65:42:0d: c7:27:05:31:12:ac:f3:72:74:55:9a:9d:01:62:2d:17:ac:8e: ae:64:67:61:6c:e6:ab:ec:85:7e:f0:de:c1:8a:f1:04:e4:e1: 57:bf:d1:0a:9c:40:ed:98:c5:e7:9d:c8:08:6a:07:f8:3e:31: dd:11:2f:31:e4:f7:58:63:05:11:8e:93:d5:b2:db:ff:8c:00: 88:03:b9:7f:bc:e2:f0:cf:3d:ad:83:13:64:83:cb:1a:f7:21: af:92:2a:50:34:d9:cf:ee:f7:f5:25:32:a3:47:e6:c1:ff:06: 46:32:2a:48:21:61:69:c3:07:70:2c:00:fd:75:f9:6a:66:53: 60:99:a3:d7:85:b5:76:69:98:a8:bd:8f:ee:51:5f:86:4b:3a: f2:a6:ea:8b:01:de:de:57:b2:87:56:2c:60:5c:9b:90:31:5f: 1a:2c:df:30 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICIl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRENEQxMTAvBgNVBAUTKDcyQUZCQUVCQzlFQ0REQTJFRUQyRDQ5QjEzRTYwNDhF QTNFNDFFNjAwHhcNMjYwMzA0MTYxOTQ0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE4NWJhMC04MDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdjxx+X324CJNC4MxHCZQKNPF/Wr8MCaJfCNdWMCGMjIk1kgPgKZN0q2dCSr 6l145pCMCqKDOUdFHGdH99h6CjmnNKZTZJawbjH18Knfxp9O/WTh6VdtnaM+Cb7X V8zA5C4F7AN5WgBvoCKlRiN6Z2g27m5Rh0Acesb9aFapHVijgV4fxx7DnorlHd26 tx6e3BBFTckwZGuW8ZMA6FePy7UEzOOd3qzmEjWCAaivu2smRoPrxHFfIU1Zj1NJ mjINuVPUJtE2GRLXMB+Ozbu67G5cK8BKEMJPZaRyFgoetflzoC6L+dl9efW7ojAv PEQ3WF3YaQE6w5aiv904CNcjkwIDAQABo4IClzCCApMwHQYDVR0OBBYEFIdLNvQu +W8eA/El3EoYU0MxB1jIMB8GA1UdIwQYMBaAFHKvuuvJ7N2i7tLUmxPmBI6j5B5g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC9CQUUxMDhDNEVB NjAxMUU1ODgxNTc3MENDNEY5QUUwMi9jcS02NjhuczNhTHUwdFNiRS1ZRWpxUGtI bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NxLTY2OG5zM2FMdTB0U2JFLVlFanFQa0htQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkRENEQvQkFFMTA4QzRFQTYwMTFFNTg4MTU3NzBDQzRGOUFFMDIvMUM2MjhBOTA2 NzE0MTFFRUEwMDQwNjYxQzRGOUFFMDIucm9hMFYGCCsGAQUFBwEHAQH/BEcwRTAk BAIAATAeAwQCK+EgAwQBZx2uAwQAZ+NCAwQCZ/cAAwQCoy8wMB0EAgACMBcDBwAg AQ3wAnoDBQAkAFJAAwUAJACCgDANBgkqhkiG9w0BAQsFAAOCAQEAZ1iiCUUR8ImE IX4QUCnsmZ5zj+azpUypVDmB5wWVT7w0Hr+nLGXotwoiP3KG8hgCp+5BMZxC3w3C KNVGiftFUqlmBV3YiI32QRjJ9Iu468motRVUtxPfZUINxycFMRKs83J0VZqdAWIt F6yOrmRnYWzmq+yFfvDewYrxBOThV7/RCpxA7ZjF553ICGoH+D4x3REvMeT3WGMF EY6T1bLb/4wAiAO5f7zi8M89rYMTZIPLGvchr5IqUDTZz+739SUyo0fmwf8GRjIq SCFhacMHcCwA/XX5amZTYJmj14W1dmmYqL2P7lFfhks68qbqiwHe3leyh1YsYFyb kDFfGizfMA== -----END CERTIFICATE-----Generated at Thu Mar 26 12:05:30 2026 by rpki-client