$ rpki-client -vvf rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/801F61DCC1E111EBB27A0812C4F9AE02.roa File: 801F61DCC1E111EBB27A0812C4F9AE02.roa (raw, json) Hash identifier: FGwdEm0SPNy0TpBINVzEc/flFNni0xPCsSoqxUh+Nr0= Subject key identifier: 1C:5F:AE:41:7F:2D:A1:A3:BC:4A:95:42:06:7B:B9:85:D1:55:8D:70 Certificate issuer: /CN=A91308E4/serialNumber=C63892FDAD943F25FA396841BB773DA15F700684 Certificate serial: 0759 Authority key identifier: C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/801F61DCC1E111EBB27A0812C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:35:04 +0000 ROA not before: Wed 04 Feb 2026 21:18:50 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 21859 IP address blocks: 45.251.136.0/24 maxlen: 24 45.251.137.0/24 maxlen: 24 45.251.138.0/24 maxlen: 24 45.251.139.0/24 maxlen: 24 103.225.84.0/24 maxlen: 24 103.225.85.0/24 maxlen: 24 103.225.86.0/24 maxlen: 24 103.225.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1881 (0x759) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91308E4, serialNumber=C63892FDAD943F25FA396841BB773DA15F700684 Validity Not Before: Feb 4 21:18:50 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a46ab8-7af3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8d:c4:8d:18:e1:ea:78:56:48:34:69:47:32: d8:3d:b2:a6:da:9a:58:f7:6a:04:e1:16:1f:a1:eb: 1b:cb:fe:56:97:cb:7b:23:81:f5:8e:04:6b:67:56: 65:83:2a:38:60:69:c6:8b:6e:01:32:14:94:43:be: 77:00:45:42:a8:04:54:08:8a:be:33:01:1b:9b:61: 10:49:3e:79:6f:eb:4d:a4:a2:47:50:b5:0c:1c:0c: 69:db:78:3d:8f:8c:9c:ae:cb:7a:b8:ad:59:df:29: 7a:38:0b:8c:9b:75:d5:91:4e:92:72:fb:11:40:2f: 7a:0e:85:69:95:e7:2c:7b:c0:38:b0:bf:7f:e3:44: 0d:21:fa:8d:7d:ad:f3:1c:36:02:03:38:d9:84:fa: e7:b8:48:6b:76:a4:7b:b5:59:b6:c3:63:ea:a6:1c: 24:97:13:69:93:08:4f:84:80:52:26:fa:39:fd:23: 00:b6:24:9b:18:2f:f7:69:7d:11:f3:ec:de:7d:48: 71:f2:99:ac:f7:f3:92:65:bc:e4:dc:47:67:6d:81: 69:97:c5:08:01:21:16:71:63:41:49:9f:fc:74:1b: 03:00:21:f2:18:f5:4f:be:1e:e5:fd:47:57:45:d4: e1:48:4c:8d:04:c5:90:2c:1e:e3:56:db:52:8a:89: 97:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:5F:AE:41:7F:2D:A1:A3:BC:4A:95:42:06:7B:B9:85:D1:55:8D:70 X509v3 Authority Key Identifier: keyid:C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/801F61DCC1E111EBB27A0812C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.251.136.0/22 103.225.84.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:f0:41:e1:9b:a5:9b:22:c4:e0:0e:ce:f4:a1:7c:f3:a6:ac: 65:c6:b7:ea:39:71:67:c9:76:00:6c:b5:92:0e:43:d9:c6:da: 71:3b:a1:bf:7f:6a:b7:02:d9:45:5e:12:f0:6e:4d:8c:11:87: 81:38:4a:bc:3a:8f:cf:38:4e:1c:7a:9e:97:4a:88:cc:40:97: 31:65:3b:a3:68:fc:1f:2d:08:83:b4:5f:6a:65:a2:20:94:16: 6f:c4:59:4f:c6:65:83:d3:41:e1:fe:dd:cc:98:86:ae:90:43: 03:17:fb:8e:c5:82:0c:2c:c4:3e:df:4d:74:3c:39:e6:d8:20: 78:ea:0c:45:77:08:53:3e:03:51:1e:e4:e9:2f:56:ba:5b:38: c8:83:f3:a9:a6:c0:1f:a7:f2:c7:02:4c:d7:2f:d4:ca:3b:76: c4:93:1f:1f:dc:32:44:21:96:a2:19:da:49:c1:b0:40:86:8f: f1:86:c8:a6:e0:7c:21:5e:b1:b8:ae:91:64:82:af:7e:a4:4c: cc:3b:6b:f5:dd:ad:a0:24:29:a0:42:b9:fe:4f:f4:43:db:ac: ac:69:4b:0a:1b:71:1f:c9:2c:46:dd:b5:b7:5b:b0:09:a7:2d: 8c:61:5c:e9:11:aa:65:ef:aa:01:e1:18:b4:4d:91:ab:93:49: 68:ea:07:82 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICB1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4RTQxMTAvBgNVBAUTKEM2Mzg5MkZEQUQ5NDNGMjVGQTM5Njg0MUJCNzczREEx NUY3MDA2ODQwHhcNMjYwMjA0MjExODUwWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmFiOC03YWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo43EjRjh6nhWSDRpRzLYPbKm2ppY92oE4RYfoesby/5Wl8t7I4H1jgRrZ1Zl gyo4YGnGi24BMhSUQ753AEVCqARUCIq+MwEbm2EQST55b+tNpKJHULUMHAxp23g9 j4ycrst6uK1Z3yl6OAuMm3XVkU6ScvsRQC96DoVplecse8A4sL9/40QNIfqNfa3z HDYCAzjZhPrnuEhrdqR7tVm2w2PqphwklxNpkwhPhIBSJvo5/SMAtiSbGC/3aX0R 8+zefUhx8pms9/OSZbzk3EdnbYFpl8UIASEWcWNBSZ/8dBsDACHyGPVPvh7l/UdX RdThSEyNBMWQLB7jVttSiomXbQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFBxfrkF/ LaGjvEqVQgZ7uYXRVY1wMB8GA1UdIwQYMBaAFMY4kv2tlD8l+jloQbt3PaFfcAaE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhFNC8xMzBBMUNCMDY1 MDUxMUVCOTA4OUYxODBDNEY5QUUwMi94amlTX2EyVVB5WDZPV2hCdTNjOW9WOXdC b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqaVNfYTJVUHlYNk9XaEJ1M2M5b1Y5d0JvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzA4RTQvMTMwQTFDQjA2NTA1MTFFQjkwODlGMTgwQzRGOUFFMDIvODAxRjYxREND MUUxMTFFQkIyN0EwODEyQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCLfuIAwQCZ+FUMA0GCSqGSIb3DQEBCwUAA4IBAQCe8EHhm6WbIsTg Ds70oXzzpqxlxrfqOXFnyXYAbLWSDkPZxtpxO6G/f2q3AtlFXhLwbk2MEYeBOEq8 Oo/POE4cep6XSojMQJcxZTujaPwfLQiDtF9qZaIglBZvxFlPxmWD00Hh/t3MmIau kEMDF/uOxYIMLMQ+3010PDnm2CB46gxFdwhTPgNRHuTpL1a6WzjIg/OppsAfp/LH AkzXL9TKO3bEkx8f3DJEIZaiGdpJwbBAho/xhsim4HwhXrG4rpFkgq9+pEzMO2v1 3a2gJCmgQrn+T/RD26ysaUsKG3EfySxG3bW3W7AJpy2MYVzpEapl76oB4Ri0TZGr k0lo6geC -----END CERTIFICATE-----Generated at Mon Mar 2 14:28:52 2026 by rpki-client