$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/F8D520505D0E11EA89C55D65C4F9AE02.roa File: F8D520505D0E11EA89C55D65C4F9AE02.roa (raw, json) Hash identifier: Fe2jtCiFFPEU4Eih7VWkH9T2KOD4JxYUQyg14It7yuc= Subject key identifier: BE:11:B4:EB:98:77:76:5B:D4:49:81:93:69:4A:BA:F6:81:64:D3:F6 Certificate issuer: /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Certificate serial: 1239 Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/F8D520505D0E11EA89C55D65C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:34:09 +0000 ROA not before: Wed 14 Jan 2026 22:15:41 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 13444 IP address blocks: 45.119.6.0/24 maxlen: 24 45.119.7.0/24 maxlen: 24 103.49.92.0/22 maxlen: 24 103.59.48.0/24 maxlen: 24 103.59.49.0/24 maxlen: 24 103.59.50.0/24 maxlen: 24 103.84.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4665 (0x1239) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Validity Not Before: Jan 14 22:15:41 2026 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a47890-1372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7b:19:90:9d:b8:d0:da:52:6c:68:13:7d:16: f2:75:4b:6e:52:20:c7:7c:ed:13:0e:5b:f4:8e:f2: 68:fb:ad:47:04:62:66:69:6a:49:e3:c7:c1:cc:57: 24:e1:de:c7:e6:67:4c:e2:10:38:2b:6e:09:70:a5: b2:a5:68:8e:29:ce:88:2d:2a:fc:8c:f6:7d:e2:e6: 7d:37:66:30:e8:f1:8e:02:72:49:22:dd:36:1a:e9: 31:d2:a9:26:76:75:e5:55:a2:03:2b:8f:be:41:19: f4:64:45:6f:5b:54:1a:9b:e2:04:d8:79:ec:b4:20: 98:dc:e6:db:b6:9e:43:2b:4b:36:6e:a0:d5:e3:4e: ed:42:22:76:e5:fb:b0:10:ae:71:46:b9:6f:c1:33: 7f:23:40:1d:70:cf:9e:15:25:23:45:90:ef:d7:8a: 0e:8e:09:84:a8:66:ac:74:b0:25:d9:1e:f5:7e:da: aa:c8:e3:91:4d:aa:88:ab:b7:82:c4:b2:1e:11:48: 84:09:00:f8:52:0c:57:07:b8:07:da:98:77:3a:04: 46:f2:50:1e:8e:54:da:39:20:f8:98:4b:75:d4:90: 60:7a:7f:c1:95:29:9a:31:53:07:ba:cb:6c:d0:1f: d2:e1:82:a9:74:26:eb:fa:20:6a:ab:d1:52:fa:42: 83:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:11:B4:EB:98:77:76:5B:D4:49:81:93:69:4A:BA:F6:81:64:D3:F6 X509v3 Authority Key Identifier: keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/F8D520505D0E11EA89C55D65C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.119.6.0/23 103.49.92.0/22 103.59.48.0-103.59.50.255 103.84.92.0/22 Signature Algorithm: sha256WithRSAEncryption 68:34:0f:05:6c:11:07:f6:a7:b3:a4:56:11:3b:0f:96:15:78: 2d:33:d1:c4:90:57:1f:fc:60:f9:82:43:5a:af:ee:4e:94:73: ab:04:37:85:88:fc:11:c4:89:fd:2f:b4:05:19:b2:f3:5f:2b: 7b:1b:f5:86:2a:81:8a:55:a9:c0:fd:b2:11:44:79:8e:51:59: 1b:83:04:f6:5a:d1:78:88:db:68:c8:9e:d2:fd:0e:a6:2e:74: 28:27:47:1d:75:f3:8c:b7:86:96:d0:37:97:84:10:b1:b1:40: d4:54:f8:98:bc:a6:cb:c5:eb:33:40:67:f1:34:95:d9:5a:62: 48:d4:9d:69:89:1f:e7:6f:05:1b:4a:a0:a4:6b:f7:5e:90:ed: 8b:93:45:5d:c8:fe:41:de:34:13:a0:b9:3c:c4:3b:0b:cf:dc: 43:c0:16:95:66:d3:37:f8:8e:16:3a:79:28:67:3a:80:72:46: 1a:3a:1a:20:31:06:fd:b6:35:cb:a3:3d:91:7e:2f:ae:68:85: e8:0d:d8:23:30:7c:d0:bd:a3:43:a9:15:32:a3:d6:7a:16:56: 9a:3c:f5:eb:b9:87:5f:3b:25:34:16:63:5e:36:9e:ca:be:d2: e0:99:4b:e0:27:23:18:b9:54:dc:c4:3a:0f:3b:ce:44:6d:3a: 20:75:6c:32 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICEjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQkMxMTAvBgNVBAUTKDZGRjMxQjA2NTlBNkFFMTZDN0EwQTRFRTBFRTZBMjI5 MTBFQzJFMDAwHhcNMjYwMTE0MjIxNTQxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Nzg5MC0xMzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3sZkJ240NpSbGgTfRbydUtuUiDHfO0TDlv0jvJo+61HBGJmaWpJ48fBzFck 4d7H5mdM4hA4K24JcKWypWiOKc6ILSr8jPZ94uZ9N2Yw6PGOAnJJIt02Gukx0qkm dnXlVaIDK4++QRn0ZEVvW1Qam+IE2HnstCCY3Obbtp5DK0s2bqDV407tQiJ25fuw EK5xRrlvwTN/I0AdcM+eFSUjRZDv14oOjgmEqGasdLAl2R71ftqqyOORTaqIq7eC xLIeEUiECQD4UgxXB7gH2ph3OgRG8lAejlTaOSD4mEt11JBgen/BlSmaMVMHusts 0B/S4YKpdCbr+iBqq9FS+kKDrQIDAQABo4ICejCCAnYwHQYDVR0OBBYEFL4RtOuY d3Zb1EmBk2lKuvaBZNP2MB8GA1UdIwQYMBaAFG/zGwZZpq4Wx6Ck7g7moikQ7C4A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJCQy9FQkNGMTY4MjA0 RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJoYkhvS1R1RHVhaUtSRHNM Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfTWJCbG1tcmhiSG9LVHVEdWFpS1JEc0xnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTEyQkMvRUJDRjE2ODIwNEY4MTFFOUJBNTAyNDMxQzRGOUFFMDIvRjhENTIwNTA1 RDBFMTFFQTg5QzU1RDY1QzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm BAIAATAgAwQBLXcGAwQCZzFcMAwDBARnOzADBABnOzIDBAJnVFwwDQYJKoZIhvcN AQELBQADggEBAGg0DwVsEQf2p7OkVhE7D5YVeC0z0cSQVx/8YPmCQ1qv7k6Uc6sE N4WI/BHEif0vtAUZsvNfK3sb9YYqgYpVqcD9shFEeY5RWRuDBPZa0XiI22jIntL9 DqYudCgnRx1184y3hpbQN5eEELGxQNRU+Ji8psvF6zNAZ/E0ldlaYkjUnWmJH+dv BRtKoKRr916Q7YuTRV3I/kHeNBOguTzEOwvP3EPAFpVm0zf4jhY6eShnOoByRho6 GiAxBv22NcujPZF+L65ohegN2CMwfNC9o0OpFTKj1noWVpo89eu5h187JTQWY142 nsq+0uCZS+AnIxi5VNzEOg87zkRtOiB1bDI= -----END CERTIFICATE-----Generated at Mon Mar 2 15:27:48 2026 by rpki-client