$ rpki-client -vvf rpki.apnic.net/member_repository/A91A06BB/9C63105CFCE011F09F33A4896F6F56BC/448E51A6FCE111F0BAFBF562706F56BC.roa File: 448E51A6FCE111F0BAFBF562706F56BC.roa (raw, json) Hash identifier: Q/k8f4KHU9rw70gcNcv9NR2wRmt43g2EOQ3jnBc1XaE= Subject key identifier: 31:F7:8B:19:55:7D:39:0A:9B:52:03:CE:7D:1B:4C:3F:17:B2:A5:D7 Certificate issuer: /CN=A91A06BB/serialNumber=49B163BF44FA010CC21B287D14AE239CF9B9FB9D Certificate serial: 14 Authority key identifier: 49:B1:63:BF:44:FA:01:0C:C2:1B:28:7D:14:AE:23:9C:F9:B9:FB:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbFjv0T6AQzCGyh9FK4jnPm5-50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A06BB/9C63105CFCE011F09F33A4896F6F56BC/448E51A6FCE111F0BAFBF562706F56BC.roa Signing time: Sun 01 Mar 2026 05:39:32 +0000 ROA not before: Thu 29 Jan 2026 07:08:10 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 24314 IP address blocks: 202.45.132.0/24 maxlen: 24 202.45.133.0/24 maxlen: 24 2407:2880:c001::/48 maxlen: 48 2407:2880:c002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A06BB/9C63105CFCE011F09F33A4896F6F56BC/SbFjv0T6AQzCGyh9FK4jnPm5-50.crl rsync://rpki.apnic.net/member_repository/A91A06BB/9C63105CFCE011F09F33A4896F6F56BC/SbFjv0T6AQzCGyh9FK4jnPm5-50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbFjv0T6AQzCGyh9FK4jnPm5-50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:30:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A06BB, serialNumber=49B163BF44FA010CC21B287D14AE239CF9B9FB9D Validity Not Before: Jan 29 07:08:10 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a3d114-e40f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f0:87:f4:4a:d1:bd:ea:99:28:79:5c:44:e8: df:ec:51:38:a1:3b:dd:dc:e7:01:f7:f8:af:2f:0e: f8:e7:96:c1:fa:a9:d0:40:f2:59:2a:62:1e:76:91: fc:86:20:86:21:1d:f8:8d:ec:99:e4:10:71:fd:70: ac:c8:3c:88:0f:e0:20:6e:f2:78:8c:a1:60:13:61: 1c:bb:d0:0b:bf:48:28:84:0e:82:b8:cc:e3:84:10: e2:b5:c0:9e:17:eb:bb:0b:2c:e5:b7:c4:10:8a:f9: 96:32:5b:41:68:7c:31:5f:e9:e0:57:61:f9:b0:45: 3f:ab:48:d1:52:dc:11:61:24:a1:f0:e1:2c:6f:f7: fa:4f:f9:c5:55:18:96:39:00:37:1c:99:9f:67:e5: 23:95:30:ea:75:2a:38:8f:4d:e1:9d:06:cb:d0:83: ce:04:35:94:0c:ce:4f:f4:1a:74:81:66:a2:0f:4e: 83:d0:bd:eb:25:3c:42:28:22:71:6a:aa:06:9e:68: 2f:59:1b:10:b9:f6:ef:f9:74:c2:db:6c:e6:5d:22: 0f:5c:06:99:90:c5:24:dd:fc:26:74:2e:a4:0b:6d: 3d:ce:1e:71:ab:f4:df:f5:c5:74:84:8d:c9:a3:34: f4:cc:46:6a:ce:86:0f:f0:1a:40:1c:88:0e:9f:db: f3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F7:8B:19:55:7D:39:0A:9B:52:03:CE:7D:1B:4C:3F:17:B2:A5:D7 X509v3 Authority Key Identifier: keyid:49:B1:63:BF:44:FA:01:0C:C2:1B:28:7D:14:AE:23:9C:F9:B9:FB:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A06BB/9C63105CFCE011F09F33A4896F6F56BC/SbFjv0T6AQzCGyh9FK4jnPm5-50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbFjv0T6AQzCGyh9FK4jnPm5-50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A06BB/9C63105CFCE011F09F33A4896F6F56BC/448E51A6FCE111F0BAFBF562706F56BC.roa sbgp-ipAddrBlock: critical IPv4: 202.45.132.0/23 IPv6: 2407:2880:c001::-2407:2880:c002:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 89:3a:33:69:fa:80:b8:f7:be:5c:a8:a7:fa:64:a6:74:fb:4f: 1f:4d:32:e6:55:0a:9d:1f:5a:39:f2:be:b9:c8:a7:ec:f4:1c: 27:14:53:53:ab:c2:7d:cb:9b:b8:69:c3:bf:d1:43:fb:60:6f: b0:53:a4:66:1b:87:20:1d:3e:67:d3:f5:65:68:e0:f7:81:a9: 33:83:1f:8a:1b:f0:83:7b:e1:7e:8b:99:39:5e:b1:7d:5f:01: ea:5d:03:d5:10:4f:6c:1f:4f:cc:d8:41:d4:7d:bd:e3:49:f6: 5a:2b:9a:83:56:9c:1b:95:ca:fc:0e:a5:4c:6a:39:20:6a:70: d3:e6:4d:cc:c1:3b:ce:82:fc:5e:74:e3:84:66:58:9c:b1:b9: 0d:37:a3:b2:f9:1b:ec:3f:c8:06:bd:f3:37:86:0d:46:8e:02: 28:a3:87:ea:22:eb:21:87:aa:8c:ac:95:00:8a:09:3e:06:52: 48:b7:3a:23:12:a3:d4:a6:71:f9:70:b6:64:fa:7f:91:52:fa: e7:60:83:fa:7a:37:3a:ec:7a:d6:be:70:df:42:c5:3f:1e:36: 53:b7:5a:20:4b:90:8b:c3:0a:50:f7:d4:62:1b:94:c0:0c:a6: 0d:f5:0f:fd:2c:07:65:70:4e:5d:da:8d:90:7c:77:1e:13:48: 95:db:d6:4e -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDZCQjExMC8GA1UEBRMoNDlCMTYzQkY0NEZBMDEwQ0MyMUIyODdEMTRBRTIzOUNG OUI5RkI5RDAeFw0yNjAxMjkwNzA4MTBaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkMTE0LWU0MGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDe8If0StG96pkoeVxE6N/sUTihO93c5wH3+K8vDvjnlsH6qdBA8lkqYh52kfyG IIYhHfiN7JnkEHH9cKzIPIgP4CBu8niMoWATYRy70Au/SCiEDoK4zOOEEOK1wJ4X 67sLLOW3xBCK+ZYyW0FofDFf6eBXYfmwRT+rSNFS3BFhJKHw4Sxv9/pP+cVVGJY5 ADccmZ9n5SOVMOp1KjiPTeGdBsvQg84ENZQMzk/0GnSBZqIPToPQveslPEIoInFq qgaeaC9ZGxC59u/5dMLbbOZdIg9cBpmQxSTd/CZ0LqQLbT3OHnGr9N/1xXSEjcmj NPTMRmrOhg/wGkAciA6f2/PPAgMBAAGjggJ8MIICeDAdBgNVHQ4EFgQUMfeLGVV9 OQqbUgPOfRtMPxeypdcwHwYDVR0jBBgwFoAUSbFjv0T6AQzCGyh9FK4jnPm5+50w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwNkJCLzlDNjMxMDVDRkNF MDExRjA5RjMzQTQ4OTZGNkY1NkJDL1NiRmp2MFQ2QVF6Q0d5aDlGSzRqblBtNS01 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU2JGanYwVDZBUXpDR3loOUZLNGpuUG01LTUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDZCQi85QzYzMTA1Q0ZDRTAxMUYwOUYzM0E0ODk2RjZGNTZCQy80NDhFNTFBNkZD RTExMUYwQkFGQkY1NjI3MDZGNTZCQy5yb2EwOwYIKwYBBQUHAQcBAf8ELDAqMAwE AgABMAYDBAHKLYQwGgQCAAIwFDASAwcAJAcogMABAwcAJAcogMACMA0GCSqGSIb3 DQEBCwUAA4IBAQCJOjNp+oC4975cqKf6ZKZ0+08fTTLmVQqdH1o58r65yKfs9Bwn FFNTq8J9y5u4acO/0UP7YG+wU6RmG4cgHT5n0/VlaOD3gakzgx+KG/CDe+F+i5k5 XrF9XwHqXQPVEE9sH0/M2EHUfb3jSfZaK5qDVpwblcr8DqVMajkganDT5k3MwTvO gvxedOOEZlicsbkNN6Oy+RvsP8gGvfM3hg1GjgIoo4fqIushh6qMrJUAigk+BlJI tzojEqPUpnH5cLZk+n+RUvrnYIP6ejc67HrWvnDfQsU/HjZTt1ogS5CLwwpQ99Ri G5TADKYN9Q/9LAdlcE5d2o2QfHceE0iV29ZO -----END CERTIFICATE-----Generated at Mon Mar 2 15:46:30 2026 by rpki-client