$ rpki-client -vvf rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/0A86FD7C95E011F0B2B5CE77C4F9AE02.roa File: 0A86FD7C95E011F0B2B5CE77C4F9AE02.roa (raw, json) Hash identifier: 0j15PdC5hkiOJdDKSJMqwGQCvyEX5XT7bkPvF+W+KeI= Subject key identifier: AF:12:EB:90:C3:F4:C3:35:C6:14:13:A7:22:5F:7D:AE:F8:70:E3:78 Certificate issuer: /CN=A91951AF/serialNumber=18ECE629EEF3B6A2696EBAB34B3FB02EF8A8B887 Certificate serial: 5B Authority key identifier: 18:EC:E6:29:EE:F3:B6:A2:69:6E:BA:B3:4B:3F:B0:2E:F8:A8:B8:87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/0A86FD7C95E011F0B2B5CE77C4F9AE02.roa Signing time: Sun 01 Mar 2026 07:14:22 +0000 ROA not before: Sat 20 Sep 2025 05:09:53 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 9829 IP address blocks: 45.117.84.0/24 maxlen: 24 45.117.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.crl rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91951AF, serialNumber=18ECE629EEF3B6A2696EBAB34B3FB02EF8A8B887 Validity Not Before: Sep 20 05:09:53 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a3e74e-1647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2f:5e:3f:31:a5:7e:c8:0e:45:a3:ee:ee:c3: 46:e2:a5:d2:6d:df:c4:04:00:b4:44:bd:78:0b:3d: 3a:31:20:88:24:69:ec:a1:d0:fa:33:5e:c4:a4:bf: 79:cc:97:a1:59:3e:4a:2d:87:86:22:05:c1:28:0e: 10:2c:ca:8f:9b:eb:4a:5e:b2:6c:b1:08:a3:9a:8c: d0:d1:32:19:ea:01:16:bd:bf:a2:fc:8e:8b:43:6d: 56:fb:14:d1:35:06:1e:e5:44:dd:5b:0e:81:b2:b8: 31:48:47:c1:3a:87:7b:ef:53:98:51:ef:ee:cc:b6: d2:57:3b:c2:c9:13:12:ad:e0:3c:60:f5:eb:9f:b1: b5:21:4a:b9:4e:b2:98:d9:75:e9:76:69:0c:9e:ef: 42:d1:ec:34:04:8f:76:0a:7f:47:51:7a:e6:30:ca: 66:0b:a2:b6:46:ba:40:ee:af:30:37:27:14:c1:4f: 02:dc:6b:14:71:ee:13:f0:a9:da:db:17:d2:21:f5: f1:04:5f:3f:8a:ef:a1:c9:0b:ad:0b:45:d7:43:63: 43:78:ae:77:21:94:30:cc:6c:a5:24:b0:b8:34:2a: 2e:58:c3:7b:ff:0e:6b:9b:d6:c1:6c:31:58:b7:92: 0b:8c:69:f7:46:e0:8b:dc:db:57:46:ef:c0:ce:db: d8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:12:EB:90:C3:F4:C3:35:C6:14:13:A7:22:5F:7D:AE:F8:70:E3:78 X509v3 Authority Key Identifier: keyid:18:EC:E6:29:EE:F3:B6:A2:69:6E:BA:B3:4B:3F:B0:2E:F8:A8:B8:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/0A86FD7C95E011F0B2B5CE77C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.117.84.0/23 Signature Algorithm: sha256WithRSAEncryption 83:d5:e8:74:8d:d9:16:69:3f:13:52:30:34:d0:bf:27:e7:3f: a5:4d:4a:56:65:4e:7c:04:1f:77:2f:ca:23:b1:06:6c:cf:b4: 94:e7:b0:bf:ed:3b:01:f6:77:87:ad:f3:63:2f:44:5e:69:a2: e5:97:4b:c9:21:0a:bb:0b:98:e7:bd:40:20:6f:b2:0f:11:0d: 89:60:cf:0e:e9:a9:1b:5e:45:20:d6:ad:0d:10:a5:c3:2b:13: d8:14:e8:46:2d:7a:81:09:a8:1d:bb:56:cb:d8:b5:47:6d:31: 0f:2f:b0:a3:a2:5b:6f:50:55:ce:20:37:25:5f:1e:27:cf:f4: 22:59:8d:b6:c7:9c:9d:95:3c:77:2e:b6:01:85:61:80:2b:9a: 54:4a:e4:d2:f5:4a:df:00:f0:ee:57:dd:84:ad:6e:b1:ae:59: 72:18:2d:14:6a:d4:c0:67:d8:32:25:3a:df:60:d3:2e:e7:6e: a9:2c:0c:bd:b8:70:c8:f2:88:47:38:5f:ea:ec:ff:ec:a2:f9: b4:05:ed:00:f3:61:2f:9c:93:42:9c:6c:1e:7f:19:57:4f:95: 75:d5:1f:8f:62:74:cd:da:f4:86:d0:4d:c0:e8:62:ec:6f:47: e1:ed:a0:b6:6b:cb:85:80:b9:c8:e7:37:9d:16:16:47:02:c4: 7f:eb:ab:81 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NTFBRjExMC8GA1UEBRMoMThFQ0U2MjlFRUYzQjZBMjY5NkVCQUIzNEIzRkIwMkVG OEE4Qjg4NzAeFw0yNTA5MjAwNTA5NTNaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNlNzRlLTE2NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/L14/MaV+yA5Fo+7uw0bipdJt38QEALREvXgLPToxIIgkaeyh0PozXsSkv3nM l6FZPkoth4YiBcEoDhAsyo+b60pesmyxCKOajNDRMhnqARa9v6L8jotDbVb7FNE1 Bh7lRN1bDoGyuDFIR8E6h3vvU5hR7+7MttJXO8LJExKt4Dxg9eufsbUhSrlOspjZ del2aQye70LR7DQEj3YKf0dReuYwymYLorZGukDurzA3JxTBTwLcaxRx7hPwqdrb F9Ih9fEEXz+K76HJC60LRddDY0N4rnchlDDMbKUksLg0Ki5Yw3v/Dmub1sFsMVi3 kguMafdG4Ivc21dG78DO29jVAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUrxLrkMP0 wzXGFBOnIl99rvhw43gwHwYDVR0jBBgwFoAUGOzmKe7ztqJpbrqzSz+wLviouIcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1MUFGLzZCMjhCM0U0OTVD NDExRjA5NEU4NEUzNkM0RjlBRTAyL0dPem1LZTd6dHFKcGJycXpTei13THZpb3VJ Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR096bUtlN3p0cUpwYnJxelN6LXdMdmlvdUljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTFBRi82QjI4QjNFNDk1QzQxMUYwOTRFODRFMzZDNEY5QUUwMi8wQTg2RkQ3Qzk1 RTAxMUYwQjJCNUNFNzdDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAEtdVQwDQYJKoZIhvcNAQELBQADggEBAIPV6HSN2RZpPxNSMDTQvyfn P6VNSlZlTnwEH3cvyiOxBmzPtJTnsL/tOwH2d4et82MvRF5pouWXS8khCrsLmOe9 QCBvsg8RDYlgzw7pqRteRSDWrQ0QpcMrE9gU6EYteoEJqB27VsvYtUdtMQ8vsKOi W29QVc4gNyVfHifP9CJZjbbHnJ2VPHcutgGFYYArmlRK5NL1St8A8O5X3YStbrGu WXIYLRRq1MBn2DIlOt9g0y7nbqksDL24cMjyiEc4X+rs/+yi+bQF7QDzYS+ck0Kc bB5/GVdPlXXVH49idM3a9IbQTcDoYuxvR+HtoLZry4WAucjnN50WFkcCxH/rq4E= -----END CERTIFICATE-----Generated at Sun Mar 1 23:00:06 2026 by rpki-client