$ rpki-client -vvf rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/72B84162E2A411E9A300492AC4F9AE02.roa File: 72B84162E2A411E9A300492AC4F9AE02.roa (raw, json) Hash identifier: pbKdsMeBsvOeSomjFM8j6Bm6hC7ndk/6YYGFv0c3ANY= Subject key identifier: ED:80:5E:0C:40:1C:97:CA:CB:10:B8:91:08:31:0F:36:92:E5:E6:C2 Certificate issuer: /CN=A91281E0/serialNumber=8DE1D0B56130980B83900FB78FADA670DE2E0A65 Certificate serial: 0D95 Authority key identifier: 8D:E1:D0:B5:61:30:98:0B:83:90:0F:B7:8F:AD:A6:70:DE:2E:0A:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/72B84162E2A411E9A300492AC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:38:27 +0000 ROA not before: Tue 12 Aug 2025 18:28:38 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 38200 IP address blocks: 45.64.164.0/24 maxlen: 24 45.64.165.0/24 maxlen: 24 45.64.166.0/24 maxlen: 24 45.64.167.0/24 maxlen: 24 103.234.24.0/24 maxlen: 24 103.234.25.0/24 maxlen: 24 103.234.26.0/24 maxlen: 24 103.234.27.0/24 maxlen: 24 103.234.164.0/22 maxlen: 22 103.234.164.0/24 maxlen: 24 103.234.165.0/24 maxlen: 24 103.234.166.0/24 maxlen: 24 103.234.167.0/24 maxlen: 24 220.247.160.0/24 maxlen: 24 220.247.161.0/24 maxlen: 24 220.247.162.0/24 maxlen: 24 220.247.163.0/24 maxlen: 24 220.247.164.0/24 maxlen: 24 220.247.165.0/24 maxlen: 24 220.247.166.0/24 maxlen: 24 220.247.167.0/24 maxlen: 24 2401:580::/32 maxlen: 32 2401:580:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.crl rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3477 (0xd95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91281E0, serialNumber=8DE1D0B56130980B83900FB78FADA670DE2E0A65 Validity Not Before: Aug 12 18:28:38 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a42533-cc2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d1:da:dc:03:c7:00:6f:ac:c5:49:c2:1d:91: 75:1a:be:3d:33:a4:30:ac:7a:a5:43:21:5f:7e:7c: 37:20:82:5d:ab:ac:0d:8f:6a:eb:1a:a7:5e:61:c4: 14:ac:0b:3f:1e:25:de:2a:c0:92:99:98:d0:08:ec: 93:24:69:5b:f6:4b:6b:fd:41:fb:0f:a1:f8:60:ae: 04:41:7f:37:12:ca:c4:07:9e:a0:38:0e:ee:62:7b: 86:7c:c6:c7:09:bf:5e:34:34:a1:f1:a5:0a:08:04: 3e:82:3a:67:5b:d3:1f:a2:d2:ff:e8:a1:ce:0b:9a: 64:96:28:93:c2:72:d9:fd:c5:28:fa:35:2f:16:3a: b2:af:b1:36:ee:75:c6:f3:18:e4:e3:32:fe:f5:b7: f8:26:fd:48:c1:e9:4c:03:22:58:43:df:f8:c4:d7: 49:4b:94:66:5d:0e:1a:de:ed:0d:35:03:b1:e8:1f: a9:d9:49:c6:56:f8:8f:37:8c:3b:6f:76:cc:cf:4f: e9:39:9b:45:65:aa:1b:38:bd:4b:fd:df:2d:1a:cf: 37:9f:76:df:80:0a:0d:6d:e9:45:47:1b:31:4b:b9: ea:76:06:63:81:33:77:33:b6:c6:d6:0e:6d:c5:e7: b4:ec:a8:23:31:a8:25:c7:03:cb:80:05:9f:e9:ce: c9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:80:5E:0C:40:1C:97:CA:CB:10:B8:91:08:31:0F:36:92:E5:E6:C2 X509v3 Authority Key Identifier: keyid:8D:E1:D0:B5:61:30:98:0B:83:90:0F:B7:8F:AD:A6:70:DE:2E:0A:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/72B84162E2A411E9A300492AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.64.164.0/22 103.234.24.0/22 103.234.164.0/22 220.247.160.0/21 IPv6: 2401:580::/32 Signature Algorithm: sha256WithRSAEncryption b8:0f:ef:85:83:0e:30:6f:75:ac:5f:21:94:25:39:c5:9f:71: 99:85:26:37:f1:2b:e3:c1:08:b0:54:2a:93:45:b7:a4:b4:a4: d8:76:48:ca:41:38:7d:23:5e:b8:2c:1b:56:a3:d5:4a:d6:63: 4a:52:f4:24:9e:7a:36:68:26:a5:4f:60:b8:6d:e7:d0:65:e1: 8a:70:0c:12:59:0e:a8:c3:27:2a:99:38:d7:44:b2:5c:99:d3: 84:1b:93:df:87:ab:a9:67:6b:a7:55:17:fb:ff:16:5a:58:e4: ed:e0:a3:17:f7:1b:31:0d:6f:52:4d:b3:90:2b:c2:3e:49:ed: 35:79:e0:6e:02:73:76:85:c0:0c:7b:d3:73:65:25:40:7f:8f: 2e:da:78:40:96:60:2b:d5:17:f1:57:7a:9e:4e:6d:de:23:2f: 8f:0b:6d:29:c5:76:49:73:f2:e5:9d:69:3c:ab:f6:f2:bd:83: a9:42:c4:a1:60:ad:7b:d4:3d:7b:0c:4c:6c:56:ad:cc:37:25: ef:76:12:e8:52:a2:93:10:97:61:e2:7b:a1:d9:d3:2a:87:e6: 0c:32:35:9a:76:e0:01:07:4c:65:6b:80:f0:8e:7d:0d:a8:7e: da:28:9c:1f:96:3f:ee:75:f1:81:6a:48:63:60:b4:1b:11:25: 2d:d4:ec:99 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICDZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgxRTAxMTAvBgNVBAUTKDhERTFEMEI1NjEzMDk4MEI4MzkwMEZCNzhGQURBNjcw REUyRTBBNjUwHhcNMjUwODEyMTgyODM4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjUzMy1jYzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1tHa3APHAG+sxUnCHZF1Gr49M6QwrHqlQyFffnw3IIJdq6wNj2rrGqdeYcQU rAs/HiXeKsCSmZjQCOyTJGlb9ktr/UH7D6H4YK4EQX83EsrEB56gOA7uYnuGfMbH Cb9eNDSh8aUKCAQ+gjpnW9MfotL/6KHOC5pkliiTwnLZ/cUo+jUvFjqyr7E27nXG 8xjk4zL+9bf4Jv1IwelMAyJYQ9/4xNdJS5RmXQ4a3u0NNQOx6B+p2UnGVviPN4w7 b3bMz0/pOZtFZaobOL1L/d8tGs83n3bfgAoNbelFRxsxS7nqdgZjgTN3M7bG1g5t xee07KgjMaglxwPLgAWf6c7JEQIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFO2AXgxA HJfKyxC4kQgxDzaS5ebCMB8GA1UdIwQYMBaAFI3h0LVhMJgLg5APt4+tpnDeLgpl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODFFMC83NjFBN0VBQ0Uy QTMxMUU5QUU4QkI1MjhDNEY5QUUwMi9qZUhRdFdFd21BdURrQS0zajYybWNONHVD bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2plSFF0V0V3bUF1RGtBLTNqNjJtY040dUNtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjgxRTAvNzYxQTdFQUNFMkEzMTFFOUFFOEJCNTI4QzRGOUFFMDIvNzJCODQxNjJF MkE0MTFFOUEzMDA0OTJBQzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQCLUCkAwQCZ+oYAwQCZ+qkAwQD3PegMA0EAgACMAcDBQAkAQWAMA0G CSqGSIb3DQEBCwUAA4IBAQC4D++Fgw4wb3WsXyGUJTnFn3GZhSY38SvjwQiwVCqT RbektKTYdkjKQTh9I164LBtWo9VK1mNKUvQknno2aCalT2C4befQZeGKcAwSWQ6o wycqmTjXRLJcmdOEG5Pfh6upZ2unVRf7/xZaWOTt4KMX9xsxDW9STbOQK8I+Se01 eeBuAnN2hcAMe9NzZSVAf48u2nhAlmAr1RfxV3qeTm3eIy+PC20pxXZJc/LlnWk8 q/byvYOpQsShYK171D17DExsVq3MNyXvdhLoUqKTEJdh4nuh2dMqh+YMMjWaduAB B0xla4Dwjn0NqH7aKJwflj/udfGBakhjYLQbESUt1OyZ -----END CERTIFICATE-----Generated at Mon Mar 2 11:44:28 2026 by rpki-client