$ rpki-client -vvf rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/2486E806F0E311EAA1C58D62C4F9AE02.roa File: 2486E806F0E311EAA1C58D62C4F9AE02.roa (raw, json) Hash identifier: l+zP+x/ZY9cq3nbV4r5XpYolKqUr/0Lu8hDJSfvQgkI= Subject key identifier: 43:EF:EC:45:D0:A6:C3:D4:21:C8:BF:AC:CB:01:47:83:DC:7F:D0:09 Certificate issuer: /CN=A91650A5/serialNumber=408C999C3C1EC01644945B3477A9F2234EB5791C Certificate serial: 2545 Authority key identifier: 40:8C:99:9C:3C:1E:C0:16:44:94:5B:34:77:A9:F2:23:4E:B5:79:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/2486E806F0E311EAA1C58D62C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:48:40 +0000 ROA not before: Fri 24 Oct 2025 16:03:09 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 19905 IP address blocks: 116.0.107.0/24 maxlen: 24 124.158.230.0/24 maxlen: 24 124.158.233.0/24 maxlen: 24 203.223.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.crl rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9541 (0x2545) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91650A5, serialNumber=408C999C3C1EC01644945B3477A9F2234EB5791C Validity Not Before: Oct 24 16:03:09 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a47bf8-39b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:00:76:67:de:05:94:ea:24:c8:89:2a:f7:ec: 15:42:0d:08:5d:96:46:f9:22:0d:7a:f7:59:6a:12: ad:a7:4b:c8:bb:cb:3c:eb:6e:04:f0:42:3c:ef:99: dc:ea:b9:dd:4f:e9:a8:a7:78:07:5c:93:ee:bd:e6: 47:26:43:21:d3:d7:4f:92:94:41:52:b4:ea:2c:12: ce:03:66:54:3d:47:9e:0d:bb:46:49:80:10:93:12: b1:59:1e:b5:b1:dc:57:19:a8:f0:03:dc:e5:06:cc: e7:a8:aa:2d:ea:95:d9:a5:77:33:cb:81:99:d2:5a: 74:a8:b5:23:cc:88:54:e7:02:35:78:d7:8f:6c:b1: 87:7f:29:a7:28:e0:38:19:f7:2b:f2:80:41:1a:27: 60:f6:9d:b1:57:fb:72:fb:0a:c3:01:e3:b7:35:66: 0a:21:4d:54:a2:b3:a9:f0:ab:e2:fd:74:49:00:06: 6d:54:c0:dc:7a:b7:71:42:2e:2c:65:0f:4b:32:76: be:fe:62:5e:e3:92:60:5b:32:d4:63:50:de:5e:22: eb:a5:36:c5:96:ef:ae:70:93:e7:b3:5d:7e:06:e4: 68:6d:f2:92:4d:8e:ba:ef:0b:08:99:ed:86:02:54: 7e:7e:d2:74:6b:03:7e:f3:28:17:53:91:e4:f2:2d: 46:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EF:EC:45:D0:A6:C3:D4:21:C8:BF:AC:CB:01:47:83:DC:7F:D0:09 X509v3 Authority Key Identifier: keyid:40:8C:99:9C:3C:1E:C0:16:44:94:5B:34:77:A9:F2:23:4E:B5:79:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/2486E806F0E311EAA1C58D62C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 116.0.107.0/24 124.158.230.0/24 124.158.233.0/24 203.223.145.0/24 Signature Algorithm: sha256WithRSAEncryption cb:44:f8:51:ef:34:95:08:70:ee:03:08:93:61:05:78:e9:ad: f5:6c:90:7e:89:b3:bd:91:ad:eb:72:b3:f5:63:19:2c:6f:d5: 30:5e:ee:76:69:a1:63:bb:92:45:bf:b9:85:64:91:0c:2d:03: da:81:1a:95:4c:7c:c5:e7:fd:8d:8e:08:7b:17:8d:d6:b5:b0: 3c:b2:02:c9:7b:f0:d2:0e:b1:cd:32:c6:fc:2f:7a:72:53:65: 97:68:2c:7c:2d:74:c4:ae:42:8c:fb:eb:04:4b:12:81:ba:30: d9:30:d5:38:cb:40:01:8d:c0:49:b8:29:47:67:5f:e5:8f:93: 2a:2b:db:71:c7:70:53:22:8b:28:69:49:e3:02:e5:a5:8e:f2: 0c:9e:31:4c:b6:f1:5d:ef:45:3f:43:fe:3f:c5:21:1b:27:0b: 70:f2:7e:b0:36:59:dd:29:b9:4b:e3:ba:78:bc:1c:d8:3a:71: 61:9b:3c:55:ff:78:16:3f:5d:a6:cd:52:0d:8c:cc:7f:68:9a: 1e:dc:36:3d:fa:c9:f2:33:85:7e:a8:90:a2:ad:70:b1:90:c2: 10:1f:3d:46:ff:90:a8:dd:d8:b7:2c:04:e9:1d:63:cd:1e:2f: fa:00:f7:c8:51:78:79:68:d5:ec:98:86:32:c1:61:ad:7d:fc: 71:a3:3e:67 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICJUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUwQTUxMTAvBgNVBAUTKDQwOEM5OTlDM0MxRUMwMTY0NDk0NUIzNDc3QTlGMjIz NEVCNTc5MUMwHhcNMjUxMDI0MTYwMzA5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2JmOC0zOWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQB2Z94FlOokyIkq9+wVQg0IXZZG+SINevdZahKtp0vIu8s8624E8EI875nc 6rndT+mop3gHXJPuveZHJkMh09dPkpRBUrTqLBLOA2ZUPUeeDbtGSYAQkxKxWR61 sdxXGajwA9zlBsznqKot6pXZpXczy4GZ0lp0qLUjzIhU5wI1eNePbLGHfymnKOA4 Gfcr8oBBGidg9p2xV/ty+wrDAeO3NWYKIU1UorOp8Kvi/XRJAAZtVMDcerdxQi4s ZQ9LMna+/mJe45JgWzLUY1DeXiLrpTbFlu+ucJPns11+BuRobfKSTY667wsIme2G AlR+ftJ0awN+8ygXU5Hk8i1GPQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFEPv7EXQ psPUIci/rMsBR4Pcf9AJMB8GA1UdIwQYMBaAFECMmZw8HsAWRJRbNHep8iNOtXkc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTBBNS8xN0RGQjM1QTQ2 RTYxMUU1QjA4REExN0JDNEY5QUUwMi9RSXlabkR3ZXdCWkVsRnMwZDZueUkwNjFl UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FJeVpuRHdld0JaRWxGczBkNm55STA2MWVSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjUwQTUvMTdERkIzNUE0NkU2MTFFNUIwOERBMTdCQzRGOUFFMDIvMjQ4NkU4MDZG MEUzMTFFQUExQzU4RDYyQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAdABrAwQAfJ7mAwQAfJ7pAwQAy9+RMA0GCSqGSIb3DQEBCwUAA4IB AQDLRPhR7zSVCHDuAwiTYQV46a31bJB+ibO9ka3rcrP1Yxksb9UwXu52aaFju5JF v7mFZJEMLQPagRqVTHzF5/2Njgh7F43WtbA8sgLJe/DSDrHNMsb8L3pyU2WXaCx8 LXTErkKM++sESxKBujDZMNU4y0ABjcBJuClHZ1/lj5MqK9txx3BTIosoaUnjAuWl jvIMnjFMtvFd70U/Q/4/xSEbJwtw8n6wNlndKblL47p4vBzYOnFhmzxV/3gWP12m zVINjMx/aJoe3DY9+snyM4V+qJCirXCxkMIQHz1G/5Co3di3LATpHWPNHi/6APfI UXh5aNXsmIYywWGtffxxoz5n -----END CERTIFICATE-----Generated at Mon Mar 2 12:50:54 2026 by rpki-client