$ rpki-client -vvf rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/5FB89FD4DA8511EEBD7AF854C4F9AE02.roa File: 5FB89FD4DA8511EEBD7AF854C4F9AE02.roa (raw, json) Hash identifier: XSSSfE9iJebrluIiHWJs0Zhb1i4/3PM9OkDY26rCm9Q= Subject key identifier: 5F:7D:9E:49:58:CF:92:4E:28:70:C1:33:7A:3B:FF:9C:BE:59:81:54 Certificate issuer: /CN=A91477C3/serialNumber=B20E9FE64AF3CE8C982725D012A142927263CEF0 Certificate serial: 08A0 Authority key identifier: B2:0E:9F:E6:4A:F3:CE:8C:98:27:25:D0:12:A1:42:92:72:63:CE:F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/5FB89FD4DA8511EEBD7AF854C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:46:01 +0000 ROA not before: Fri 06 Feb 2026 02:31:36 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 45270 IP address blocks: 43.252.0.0/22 maxlen: 22 101.234.192.0/24 maxlen: 24 101.234.193.0/24 maxlen: 24 101.234.194.0/24 maxlen: 24 101.234.195.0/24 maxlen: 24 101.234.196.0/24 maxlen: 24 101.234.200.0/24 maxlen: 24 101.234.201.0/24 maxlen: 24 101.234.202.0/24 maxlen: 24 103.233.16.0/22 maxlen: 22 223.25.228.0/23 maxlen: 23 223.25.231.0/24 maxlen: 24 2407:ab00::/48 maxlen: 48 2407:ab00:1::/48 maxlen: 48 2407:ab00:2::/48 maxlen: 48 2407:ab00:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.crl rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2208 (0x8a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91477C3, serialNumber=B20E9FE64AF3CE8C982725D012A142927263CEF0 Validity Not Before: Feb 6 02:31:36 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a46d49-269c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:68:df:f3:de:11:d5:76:b9:40:ae:78:3f:44: 54:39:13:15:5b:4e:15:da:c8:9e:cf:58:12:ec:24: d3:22:f8:94:ea:ab:c7:29:d0:37:54:94:2e:f6:b7: 97:d4:83:94:87:a5:98:24:ed:40:78:50:f7:1a:8a: c2:10:f2:f2:9f:2b:d9:32:f6:5b:ff:7d:3c:a2:a8: bc:f1:eb:0c:c9:dc:83:78:be:7b:b9:81:b3:88:39: f6:0f:ac:b8:4f:2f:23:f2:b4:96:08:ff:0d:5d:0f: e3:f1:ee:03:9f:37:b3:ff:73:a3:65:36:46:ab:e1: 28:d0:e0:e0:c0:1b:3b:91:95:13:7a:ac:f9:69:37: d9:66:09:dc:8a:fc:0b:7e:64:6e:fb:8b:33:b2:6c: 85:97:5d:87:f4:39:ba:e2:d7:9b:aa:73:fc:f1:26: 59:b2:db:e8:a3:9f:aa:43:b6:31:42:29:d0:f8:44: d6:46:21:b0:99:bb:86:49:e6:f8:9a:8b:05:e2:72: bd:77:7f:a4:2f:a6:4e:bd:e1:9a:1a:a0:60:0c:ea: 44:24:91:96:a6:65:72:44:0a:6b:a2:ef:36:10:18: c5:87:3c:11:52:0b:ca:dd:e9:04:2c:4b:e5:14:ab: cb:67:ff:b3:dc:a9:e9:6c:9b:12:82:4e:c6:d4:10: 3d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:7D:9E:49:58:CF:92:4E:28:70:C1:33:7A:3B:FF:9C:BE:59:81:54 X509v3 Authority Key Identifier: keyid:B2:0E:9F:E6:4A:F3:CE:8C:98:27:25:D0:12:A1:42:92:72:63:CE:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/5FB89FD4DA8511EEBD7AF854C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.252.0.0/22 101.234.192.0-101.234.196.255 101.234.200.0-101.234.202.255 103.233.16.0/22 223.25.228.0/23 223.25.231.0/24 IPv6: 2407:ab00::/46 Signature Algorithm: sha256WithRSAEncryption 0e:6f:0e:a6:ed:5a:cb:3d:9c:74:a6:fc:82:16:d9:90:e1:f8: 0f:ae:9d:62:9a:6b:a4:db:58:37:b9:7f:5d:c8:b0:60:fc:93: 6b:9d:88:9a:6e:80:e6:00:9f:84:8e:48:45:b0:5a:75:5d:2b: 6c:23:b6:31:fa:64:2d:4d:4a:e5:3f:c7:79:40:f6:b3:46:64: 81:9e:43:5f:ba:55:9e:77:83:77:63:ff:0e:82:a0:98:f6:16: 4f:7a:d3:3e:68:ab:c1:34:be:9d:e0:c4:c9:88:b0:e9:2d:46: 7d:c6:e4:ba:d4:4e:d0:8d:bb:7e:a5:22:bb:89:1d:d1:e5:1c: 8c:91:b3:95:6f:88:39:33:f9:df:91:3b:7d:b2:3e:ff:ca:35: eb:51:1f:d9:3a:7b:5a:82:e8:7b:eb:ff:b0:02:7f:67:f2:ee: 43:df:74:ae:d9:21:75:48:96:e6:01:e3:c5:ee:13:10:0c:17: cf:f0:42:1c:d3:95:5c:fc:7d:bd:a1:2b:67:3c:35:61:2b:c4: af:83:45:4d:ce:c6:f6:10:88:e8:8a:f1:51:88:87:24:ce:1a: b6:75:7f:74:ec:e7:a6:0b:95:dd:ce:9f:e8:db:ed:b5:ab:82: 97:01:e3:c9:92:39:bc:ac:7f:49:f4:bb:ba:1c:6b:5e:60:c1: 73:31:cb:c2 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgICCKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc3QzMxMTAvBgNVBAUTKEIyMEU5RkU2NEFGM0NFOEM5ODI3MjVEMDEyQTE0Mjky NzI2M0NFRjAwHhcNMjYwMjA2MDIzMTM2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmQ0OS0yNjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm2jf894R1Xa5QK54P0RUORMVW04V2siez1gS7CTTIviU6qvHKdA3VJQu9reX 1IOUh6WYJO1AeFD3GorCEPLynyvZMvZb/308oqi88esMydyDeL57uYGziDn2D6y4 Ty8j8rSWCP8NXQ/j8e4Dnzez/3OjZTZGq+Eo0ODgwBs7kZUTeqz5aTfZZgncivwL fmRu+4szsmyFl12H9Dm64tebqnP88SZZstvoo5+qQ7YxQinQ+ETWRiGwmbuGSeb4 mosF4nK9d3+kL6ZOveGaGqBgDOpEJJGWpmVyRAprou82EBjFhzwRUgvK3ekELEvl FKvLZ/+z3KnpbJsSgk7G1BA9NwIDAQABo4ICnzCCApswHQYDVR0OBBYEFF99nklY z5JOKHDBM3o7/5y+WYFUMB8GA1UdIwQYMBaAFLIOn+ZK886MmCcl0BKhQpJyY87w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzdDMy81REE0OEMyMEU3 NkUxMUVBODE0MkE4MzlDNEY5QUUwMi9zZzZmNWtyenpveVlKeVhRRXFGQ2tuSmp6 dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NnNmY1a3J6em95WUp5WFFFcUZDa25Kanp2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc3QzMvNURBNDhDMjBFNzZFMTFFQTgxNDJBODM5QzRGOUFFMDIvNUZCODlGRDRE QTg1MTFFRUJEN0FGODU0QzRGOUFFMDIucm9hMF4GCCsGAQUFBwEHAQH/BE8wTTA6 BAIAATA0AwQCK/wAMAwDBAZl6sADBABl6sQwDAMEA2XqyAMEAGXqygMEAmfpEAME Ad8Z5AMEAN8Z5zAPBAIAAjAJAwcCJAerAAAAMA0GCSqGSIb3DQEBCwUAA4IBAQAO bw6m7VrLPZx0pvyCFtmQ4fgPrp1immuk21g3uX9dyLBg/JNrnYiaboDmAJ+EjkhF sFp1XStsI7Yx+mQtTUrlP8d5QPazRmSBnkNfulWed4N3Y/8OgqCY9hZPetM+aKvB NL6d4MTJiLDpLUZ9xuS61E7Qjbt+pSK7iR3R5RyMkbOVb4g5M/nfkTt9sj7/yjXr UR/ZOntaguh76/+wAn9n8u5D33Su2SF1SJbmAePF7hMQDBfP8EIc05Vc/H29oStn PDVhK8Svg0VNzsb2EIjoivFRiIckzhq2dX907OemC5Xdzp/o2+21q4KXAePJkjm8 rH9J9Lu6HGteYMFzMcvC -----END CERTIFICATE-----Generated at Mon Mar 2 08:02:31 2026 by rpki-client