$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/C48E03F21D1A11F1AE90847F103D8C67.roa File: C48E03F21D1A11F1AE90847F103D8C67.roa (raw, json) Hash identifier: YqhCEr3kKDJmGDX75Nq9SUE9drBA93p8LP3gb+77yio= Subject key identifier: 84:03:0F:45:C7:AA:E5:B2:14:BA:63:E0:B9:17:0F:7F:BC:47:C4:2E Certificate issuer: /CN=A91FEDE7/serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866 Certificate serial: 33 Authority key identifier: E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/C48E03F21D1A11F1AE90847F103D8C67.roa Signing time: Wed 11 Mar 2026 07:20:23 +0000 ROA not before: Wed 11 Mar 2026 07:20:23 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 13335 IP address blocks: 43.243.72.0/22 maxlen: 24 103.230.228.0/22 maxlen: 24 2405:fcc0::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEDE7, serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866 Validity Not Before: Mar 11 07:20:23 2026 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69b117b7-f197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:79:7e:6b:76:f2:4a:63:40:c3:84:51:50:41: 4e:0a:1a:d5:18:cb:1b:eb:87:96:62:89:19:31:50: d0:d2:a0:a9:12:77:71:04:39:aa:ad:26:37:c3:21: 97:c2:2e:4a:0f:da:ca:d4:72:dc:32:b1:5d:3d:02: fa:f5:ff:94:df:d7:2d:3a:17:35:fa:81:e6:f7:d6: ab:03:e4:76:6b:bb:40:f0:b3:ad:bd:52:89:30:98: 6d:22:52:58:ce:c3:5b:6f:99:a1:7f:aa:dc:0b:52: fd:87:68:30:38:66:b1:41:5e:c2:70:42:19:ab:56: 24:af:4b:06:37:d3:82:7b:57:e0:2b:3b:4f:29:f0: 0e:74:ed:c0:e9:ab:e5:ea:0a:a2:fc:9d:0e:f4:43: bb:00:55:23:50:f6:72:05:31:c2:ec:22:e1:a2:27: b3:15:f8:ab:6a:da:07:f8:92:ad:48:a9:5e:7e:c8: 73:fb:f4:04:13:ab:53:9a:37:03:86:98:e5:78:29: 8a:19:b0:d4:a8:ea:84:69:a2:6e:ee:5e:2a:9c:4c: 68:02:91:0b:a7:2e:ae:37:27:86:7f:95:00:d5:f2: c7:b2:8c:5e:db:e8:07:fb:18:84:08:27:23:73:25: e4:a3:cb:8c:f5:b8:fd:51:13:fb:83:d9:17:ae:db: b0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:03:0F:45:C7:AA:E5:B2:14:BA:63:E0:B9:17:0F:7F:BC:47:C4:2E X509v3 Authority Key Identifier: keyid:E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/C48E03F21D1A11F1AE90847F103D8C67.roa sbgp-ipAddrBlock: critical IPv4: 43.243.72.0/22 103.230.228.0/22 IPv6: 2405:fcc0::/32 Signature Algorithm: sha256WithRSAEncryption 15:c6:79:b4:15:dc:a8:fe:5b:f3:0d:7f:28:ab:a2:2c:c7:b4: 26:2c:da:e8:5b:6a:21:54:3e:6b:4c:bd:b3:13:39:cb:81:3f: b5:e2:dd:17:9a:47:ff:b9:cd:d4:5d:a7:3e:d8:63:fb:bf:e1: 84:e3:3f:77:e3:61:f8:09:82:99:c2:91:e6:a3:6e:48:3a:f5: ef:6f:9c:11:32:8b:14:29:ab:7e:cf:36:e9:ad:cc:a2:58:97: 34:b2:a4:09:24:5d:0f:b2:de:1a:58:27:a0:90:01:47:9f:98: a1:88:39:9f:0b:cc:f5:d5:40:15:3c:c5:8c:7e:61:e9:0c:0e: c1:b7:da:73:b4:71:89:90:e5:3d:1f:fc:dc:82:07:25:a3:b9: 3b:42:8a:33:d6:3c:58:56:bd:2a:90:32:c5:60:c8:04:c5:74: c8:47:ed:77:d0:af:27:43:36:4b:38:a0:be:6c:5c:94:ec:00: d9:7b:bf:aa:46:3d:43:83:c5:5a:89:8a:8c:49:c7:f3:24:6d: bb:cc:c7:8c:63:81:c7:1a:3f:5a:3e:38:fb:75:04:cc:f2:b7: 81:be:50:a1:55:be:b6:25:2a:19:63:0f:8d:1f:9c:3e:06:bc: ac:44:bd:63:ce:2a:d0:4b:15:f7:ce:34:e5:44:1a:27:a4:31: 76:e0:6c:70 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RURFNzExMC8GA1UEBRMoRTFDNTlGQTVBNkJDODc2RjdDRTRBNDZDQUFBRTYwNjA0 RjA1MTg2NjAeFw0yNjAzMTEwNzIwMjNaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YjExN2I3LWYxOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoeX5rdvJKY0DDhFFQQU4KGtUYyxvrh5ZiiRkxUNDSoKkSd3EEOaqtJjfDIZfC LkoP2srUctwysV09Avr1/5Tf1y06FzX6geb31qsD5HZru0Dws629UokwmG0iUljO w1tvmaF/qtwLUv2HaDA4ZrFBXsJwQhmrViSvSwY304J7V+ArO08p8A507cDpq+Xq CqL8nQ70Q7sAVSNQ9nIFMcLsIuGiJ7MV+Ktq2gf4kq1IqV5+yHP79AQTq1OaNwOG mOV4KYoZsNSo6oRpom7uXiqcTGgCkQunLq43J4Z/lQDV8seyjF7b6Af7GIQIJyNz JeSjy4z1uP1RE/uD2Reu27DhAgMBAAGjggJ1MIICcTAdBgNVHQ4EFgQUhAMPRceq 5bIUumPguRcPf7xHxC4wHwYDVR0jBBgwFoAU4cWfpaa8h2985KRsqq5gYE8FGGYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFREU3L0U3RkQzMDU4RDk5 RDExRjBCQkU3ODM5OTY2RDM2NDFELzRjV2ZwYWE4aDI5ODVLUnNxcTVnWUU4RkdH WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNGNXZnBhYThoMjk4NUtSc3FxNWdZRThGR0dZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RURFNy9FN0ZEMzA1OEQ5OUQxMUYwQkJFNzgzOTk2NkQzNjQxRC9DNDhFMDNGMjFE MUExMUYxQUU5MDg0N0YxMDNEOEM2Ny5yb2EwNAYIKwYBBQUHAQcBAf8EJTAjMBIE AgABMAwDBAIr80gDBAJn5uQwDQQCAAIwBwMFACQF/MAwDQYJKoZIhvcNAQELBQAD ggEBABXGebQV3Kj+W/MNfyiroizHtCYs2uhbaiFUPmtMvbMTOcuBP7Xi3ReaR/+5 zdRdpz7YY/u/4YTjP3fjYfgJgpnCkeajbkg69e9vnBEyixQpq37PNumtzKJYlzSy pAkkXQ+y3hpYJ6CQAUefmKGIOZ8LzPXVQBU8xYx+YekMDsG32nO0cYmQ5T0f/NyC ByWjuTtCijPWPFhWvSqQMsVgyATFdMhH7XfQrydDNks4oL5sXJTsANl7v6pGPUOD xVqJioxJx/MkbbvMx4xjgccaP1o+OPt1BMzyt4G+UKFVvrYlKhljD40fnD4GvKxE vWPOKtBLFffONOVEGiekMXbgbHA= -----END CERTIFICATE-----Generated at Thu Mar 26 04:07:30 2026 by rpki-client