$ rpki-client -vvf rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/58C5CA92AF9411EE9774D74CC4F9AE02.roa File: 58C5CA92AF9411EE9774D74CC4F9AE02.roa (raw, json) Hash identifier: aMHBQ0J7YfPV7IMIB5NQWhqNvs3O4UzTOKWMInuGuiI= Subject key identifier: 21:E0:41:D3:F6:C1:FD:E3:1C:72:7B:23:42:8C:AB:19:E0:30:C5:97 Certificate issuer: /CN=A91325FD/serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1 Certificate serial: 359A Authority key identifier: 2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/58C5CA92AF9411EE9774D74CC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:51:36 +0000 ROA not before: Wed 28 Jan 2026 15:10:03 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 19905 IP address blocks: 43.224.36.0/22 maxlen: 22 103.43.76.0/22 maxlen: 22 103.240.240.0/22 maxlen: 22 115.84.64.0/18 maxlen: 18 202.137.128.0/19 maxlen: 19 202.144.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13722 (0x359a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91325FD, serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1 Validity Not Before: Jan 28 15:10:03 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69a46088-611b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0a:40:b4:34:bc:cc:99:99:bf:13:74:17:ec: 08:8d:bc:6c:91:38:f6:7a:7e:93:31:be:1a:6b:c7: 7a:99:e7:1c:37:8a:ee:b2:c1:3b:a1:e7:12:1d:f4: a4:b2:fc:db:b0:66:86:23:c0:c8:bd:b5:91:ac:66: 05:24:fd:30:1e:3f:4b:87:12:6b:2d:d0:53:ec:7b: 9a:06:a9:a0:79:fa:8e:73:d0:5a:ab:92:8a:d2:71: bc:34:47:c6:f0:a1:a7:54:3e:a1:32:b5:f6:a9:75: 69:47:1e:51:91:9a:5a:70:28:ab:e9:45:54:78:4c: 42:56:f3:52:0f:1e:75:ee:b0:99:14:ba:6a:53:67: 96:8e:cf:cd:6a:06:80:f7:64:5b:e7:bd:57:ec:ec: bb:02:25:6c:01:9c:2d:34:46:dc:85:c8:ac:54:aa: 77:2b:f2:b2:1d:47:ce:45:26:6e:18:a0:fd:16:16: b6:2a:71:6f:b8:f9:40:e7:c3:1b:1e:aa:fd:13:a9: c1:1a:e6:5d:93:b6:bb:20:df:a2:78:82:90:c6:c3: be:d7:a2:1f:1e:34:99:c0:79:be:21:6a:60:20:3d: 66:6c:34:d6:ee:7b:f7:9a:0f:69:1f:ee:c5:e4:bb: 6c:e4:9c:1a:e1:f9:d2:1d:86:a3:e0:af:93:d0:f6: 4d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E0:41:D3:F6:C1:FD:E3:1C:72:7B:23:42:8C:AB:19:E0:30:C5:97 X509v3 Authority Key Identifier: keyid:2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/58C5CA92AF9411EE9774D74CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.224.36.0/22 103.43.76.0/22 103.240.240.0/22 115.84.64.0/18 202.137.128.0/19 202.144.184.0/21 Signature Algorithm: sha256WithRSAEncryption 41:3b:66:02:ab:c2:94:fc:02:34:76:af:b2:f1:e4:eb:a4:1b: dc:2e:e2:1b:2d:93:a6:40:c5:3f:5b:b9:64:7c:aa:ee:8f:f3: 21:20:f6:e3:80:e0:3b:53:1a:d0:a6:53:ed:f1:37:48:5a:d2: a4:ba:8f:c4:c2:0c:48:42:7d:33:23:d3:0c:59:15:e6:dc:b6: df:89:9b:b5:98:2e:c1:fb:e9:0a:db:92:0b:4a:2e:99:10:7c: 27:29:a2:7a:e5:41:a9:ae:73:c4:f6:53:0d:18:0c:a5:ed:a0: 30:a6:42:71:0d:fb:74:ec:c8:2d:dc:6e:68:0a:2e:36:c3:0f: ba:f4:b7:97:35:b1:c1:2e:90:ae:37:c2:e8:c8:17:b1:64:23: 20:6c:22:4a:9d:09:2d:5c:21:31:45:ba:93:1c:49:bc:30:bd: e3:14:d0:c0:50:84:c0:d4:9e:66:bd:be:68:d0:b9:8d:2a:f0: 86:95:25:40:10:eb:61:45:62:84:25:97:15:43:23:6a:f7:76: 9c:04:50:48:9e:d0:f6:e5:f4:77:7d:c4:ae:79:b8:d8:8f:bc: f2:27:f2:84:66:e3:f1:9c:5b:85:c1:2e:e9:bc:45:53:66:fc: 62:74:7d:00:3b:ed:1a:10:cb:86:63:8d:a8:24:51:b3:63:3d: d4:fc:73:cc -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICNZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1RkQxMTAvBgNVBAUTKDJFOERBRjQ5RTI3RTRGQzEyQkUwNUVGN0RGMUE4MkJC Mjg3MTI2QTEwHhcNMjYwMTI4MTUxMDAzWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjA4OC02MTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtApAtDS8zJmZvxN0F+wIjbxskTj2en6TMb4aa8d6meccN4russE7oecSHfSk svzbsGaGI8DIvbWRrGYFJP0wHj9LhxJrLdBT7HuaBqmgefqOc9Baq5KK0nG8NEfG 8KGnVD6hMrX2qXVpRx5RkZpacCir6UVUeExCVvNSDx517rCZFLpqU2eWjs/NagaA 92Rb571X7Oy7AiVsAZwtNEbchcisVKp3K/KyHUfORSZuGKD9Fha2KnFvuPlA58Mb Hqr9E6nBGuZdk7a7IN+ieIKQxsO+16IfHjSZwHm+IWpgID1mbDTW7nv3mg9pH+7F 5Lts5Jwa4fnSHYaj4K+T0PZNPwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFCHgQdP2 wf3jHHJ7I0KMqxngMMWXMB8GA1UdIwQYMBaAFC6Nr0nifk/BK+Be998agrsocSah MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVGRC9CQ0U0RDEwQTFE NjgxMUUyQUQ2NDk0QTUwOEIwMkNEMi9MbzJ2U2VKLVQ4RXI0RjczM3hxQ3V5aHhK cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xvMnZTZUotVDhFcjRGNzMzeHFDdXloeEpxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzI1RkQvQkNFNEQxMEExRDY4MTFFMkFENjQ5NEE1MDhCMDJDRDIvNThDNUNBOTJB Rjk0MTFFRTk3NzRENzRDQzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAq BAIAATAkAwQCK+AkAwQCZytMAwQCZ/DwAwQGc1RAAwQFyomAAwQDypC4MA0GCSqG SIb3DQEBCwUAA4IBAQBBO2YCq8KU/AI0dq+y8eTrpBvcLuIbLZOmQMU/W7lkfKru j/MhIPbjgOA7UxrQplPt8TdIWtKkuo/EwgxIQn0zI9MMWRXm3LbfiZu1mC7B++kK 25ILSi6ZEHwnKaJ65UGprnPE9lMNGAyl7aAwpkJxDft07Mgt3G5oCi42ww+69LeX NbHBLpCuN8LoyBexZCMgbCJKnQktXCExRbqTHEm8ML3jFNDAUITA1J5mvb5o0LmN KvCGlSVAEOthRWKEJZcVQyNq93acBFBIntD25fR3fcSuebjYj7zyJ/KEZuPxnFuF wS7pvEVTZvxidH0AO+0aEMuGY42oJFGzYz3U/HPM -----END CERTIFICATE-----Generated at Mon Mar 2 13:02:19 2026 by rpki-client