$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/654665EA197611F09D2B1C76C4F9AE02.roa File: 654665EA197611F09D2B1C76C4F9AE02.roa (raw, json) Hash identifier: EKk887jvD91sa5mqsDwh0zo559XyowQgVll88eOizFM= Subject key identifier: CB:56:C7:B9:AF:81:13:63:E8:1B:C4:5E:8E:51:5E:92:0C:B9:7A:83 Certificate issuer: /CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Certificate serial: 08DE Authority key identifier: 52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/654665EA197611F09D2B1C76C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:03:47 +0000 ROA not before: Wed 16 Jul 2025 16:55:19 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 58889 IP address blocks: 45.64.136.0/24 maxlen: 24 45.64.138.0/24 maxlen: 24 45.64.139.0/24 maxlen: 24 2401:1980::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2270 (0x8de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91582D9, serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Validity Not Before: Jul 16 16:55:19 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a48d93-5172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bc:ad:9e:d2:2d:50:d3:cf:43:73:11:15:cb: d7:2f:04:05:5c:50:be:40:e4:1d:9e:2f:7c:a3:70: a2:52:0b:42:15:c3:1c:21:49:28:46:0d:5c:b9:0f: a8:35:aa:51:1a:e2:18:11:cc:12:41:96:61:86:b7: e7:2e:17:81:56:8d:42:92:c1:2b:85:ae:ab:76:d9: 66:07:74:a9:e5:d2:d0:dc:8c:a6:71:32:01:f2:02: 2f:d4:e9:3c:ae:02:14:27:82:b7:c4:71:3f:66:1f: 5c:1a:27:8f:fb:f8:1e:11:63:80:32:72:ff:24:dd: a7:ec:16:c0:ea:ab:e2:c8:f1:9b:82:d2:45:90:32: 38:38:59:34:4a:ee:26:c4:54:7d:7b:ad:7b:2e:7b: 57:2f:22:b5:73:56:28:48:0e:49:35:b7:7f:66:b9: eb:f1:bc:91:5d:ef:a2:b9:16:6e:b7:74:ed:78:79: 47:cd:ce:20:6e:62:76:e3:f2:75:d8:ba:33:a7:4d: 60:a4:17:9d:f2:bf:26:8a:8b:d7:f5:0f:e7:0e:7d: 8a:fe:01:ba:28:da:4c:04:73:5e:fc:79:a1:4c:66: 92:53:7c:c5:d4:9f:e9:9d:69:b6:32:d0:22:89:fb: 07:8c:c3:c1:ca:69:b8:3c:b0:79:a4:f3:ee:01:b0: 75:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:56:C7:B9:AF:81:13:63:E8:1B:C4:5E:8E:51:5E:92:0C:B9:7A:83 X509v3 Authority Key Identifier: keyid:52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/654665EA197611F09D2B1C76C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.64.136.0/24 45.64.138.0/23 IPv6: 2401:1980::/32 Signature Algorithm: sha256WithRSAEncryption 80:83:aa:04:e0:60:4f:67:54:1b:18:a6:b2:4e:de:6a:f8:90: dc:88:b4:d5:55:b0:e1:8c:44:f2:90:96:34:91:0b:16:b4:08: 9f:a0:3d:48:9b:17:80:fc:14:ed:d3:ed:24:64:42:79:89:c9: bf:c2:27:30:15:18:f5:d7:40:b7:f0:5d:86:d3:6c:af:6d:7a: 03:f4:6b:60:be:51:59:ce:27:fa:e5:f7:0e:4f:8a:94:a5:9a: 1c:4a:96:3c:ac:3c:37:ac:9c:58:7d:cb:df:26:c0:f0:5f:58: 1f:36:08:a3:6d:d1:03:b4:65:34:69:13:2f:38:82:04:59:c0: cf:e5:39:2e:2b:2f:12:a8:eb:44:0b:2a:88:65:55:9e:53:82: ae:53:e7:a6:a9:74:45:ba:d7:c4:46:98:21:d2:c5:22:7d:72: e7:2a:95:ab:0e:66:90:9b:0a:8d:cf:dc:f2:e7:8f:28:20:60: 6d:34:4d:83:af:ef:c4:34:be:39:9b:10:ee:32:30:1f:c1:a0: 31:96:1f:80:3c:15:55:29:77:84:b3:d8:58:37:a6:94:db:77: 37:0c:9f:df:6b:a3:19:c2:0c:15:27:40:18:8d:04:da:ae:ee: 3a:49:d5:b5:18:cc:f3:43:82:97:95:e7:65:f9:83:36:b1:4a: 49:89:5d:fb -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgyRDkxMTAvBgNVBAUTKDUyODJBNDY0MkFGN0QzNTc5OTI5MUJCQTQ0N0VBMTQy NTFBNEQ1RkMwHhcNMjUwNzE2MTY1NTE5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGQ5My01MTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17ytntItUNPPQ3MRFcvXLwQFXFC+QOQdni98o3CiUgtCFcMcIUkoRg1cuQ+o NapRGuIYEcwSQZZhhrfnLheBVo1CksErha6rdtlmB3Sp5dLQ3IymcTIB8gIv1Ok8 rgIUJ4K3xHE/Zh9cGieP+/geEWOAMnL/JN2n7BbA6qviyPGbgtJFkDI4OFk0Su4m xFR9e617LntXLyK1c1YoSA5JNbd/Zrnr8byRXe+iuRZut3TteHlHzc4gbmJ24/J1 2Lozp01gpBed8r8miovX9Q/nDn2K/gG6KNpMBHNe/HmhTGaSU3zF1J/pnWm2MtAi ifsHjMPBymm4PLB5pPPuAbB1zQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFMtWx7mv gRNj6BvEXo5RXpIMuXqDMB8GA1UdIwQYMBaAFFKCpGQq99NXmSkbukR+oUJRpNX8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODJEOS8wRURBNkQ1RUNE REExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAxZVpLUnU2Ukg2aFFsR2sx ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvS2taQ3IzMDFlWktSdTZSSDZoUWxHazFmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTgyRDkvMEVEQTZENUVDRERBMTFFN0JERUE4QzJCQzRGOUFFMDIvNjU0NjY1RUEx OTc2MTFGMDlEMkIxQzc2QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQALUCIAwQBLUCKMA0EAgACMAcDBQAkARmAMA0GCSqGSIb3DQEBCwUA A4IBAQCAg6oE4GBPZ1QbGKayTt5q+JDciLTVVbDhjETykJY0kQsWtAifoD1ImxeA /BTt0+0kZEJ5icm/wicwFRj110C38F2G02yvbXoD9GtgvlFZzif65fcOT4qUpZoc SpY8rDw3rJxYfcvfJsDwX1gfNgijbdEDtGU0aRMvOIIEWcDP5TkuKy8SqOtECyqI ZVWeU4KuU+emqXRFutfERpgh0sUifXLnKpWrDmaQmwqNz9zy548oIGBtNE2Dr+/E NL45mxDuMjAfwaAxlh+APBVVKXeEs9hYN6aU23c3DJ/fa6MZwgwVJ0AYjQTaru46 SdW1GMzzQ4KXledl+YM2sUpJiV37 -----END CERTIFICATE-----Generated at Mon Mar 2 20:37:42 2026 by rpki-client