$ rpki-client -vvf rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/CCBF0CF6B55911EC9256FE19C4F9AE02.roa File: CCBF0CF6B55911EC9256FE19C4F9AE02.roa (raw, json) Hash identifier: xihXskffyMmX6uPdr43LH17SKnUp1mNtBqH6MhLI3sk= Subject key identifier: BC:3C:38:20:2F:ED:3B:AC:D9:E2:49:11:66:BB:A1:22:4E:28:13:08 Certificate issuer: /CN=A91A546E/serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Certificate serial: 09C1 Authority key identifier: 6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/CCBF0CF6B55911EC9256FE19C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:41:09 +0000 ROA not before: Sat 20 Dec 2025 20:17:07 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 133934 IP address blocks: 101.234.128.0/18 maxlen: 24 111.125.160.0/20 maxlen: 24 114.111.128.0/20 maxlen: 24 114.111.144.0/20 maxlen: 24 122.100.0.0/21 maxlen: 24 122.100.8.0/21 maxlen: 24 2406:5800::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2497 (0x9c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A546E, serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Validity Not Before: Dec 20 20:17:07 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a47a34-24df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bf:13:43:a9:d7:e0:d8:7b:34:04:9c:c8:de: f1:6b:9c:e8:87:4a:dc:36:0e:41:97:18:ef:de:54: e6:08:33:1a:7e:43:7a:e0:c9:6b:e0:75:3f:4e:47: 86:ce:5c:e8:4f:b4:1e:7c:00:f6:ef:8c:c0:a4:6a: a9:cb:48:c4:70:81:b1:4a:f9:59:7d:d0:dd:3a:00: 89:eb:95:50:65:0e:cc:42:52:84:59:98:ab:49:e9: f7:c6:dc:b5:96:6a:7a:18:27:75:64:48:ef:c6:d5: fa:1c:80:b3:d7:e4:2a:9b:19:8d:94:07:ee:a9:c3: 88:4a:e2:82:05:8c:b4:b0:77:9a:c5:fe:5a:4f:fb: fa:00:27:66:e5:ed:26:0e:9c:44:84:94:a1:ca:09: cc:6d:be:80:9a:7d:20:76:d9:0e:43:ea:9a:a1:ea: b0:fd:db:9b:94:57:3d:43:68:76:2f:71:8e:c1:ab: 78:b8:08:37:22:c3:34:43:c5:9f:22:04:3a:d8:d7: a1:0e:0f:77:56:f8:e2:72:0a:f5:c3:e4:9c:bc:40: 08:55:9c:83:26:e5:35:ee:43:6b:dc:55:6a:75:7b: 0f:c7:5f:4d:b8:8b:97:dc:c0:e2:51:4a:25:f8:92: 98:56:a1:02:d6:b2:21:8b:f1:5d:42:e1:08:c6:8e: c9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:3C:38:20:2F:ED:3B:AC:D9:E2:49:11:66:BB:A1:22:4E:28:13:08 X509v3 Authority Key Identifier: keyid:6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/CCBF0CF6B55911EC9256FE19C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 101.234.128.0/18 111.125.160.0/20 114.111.128.0/19 122.100.0.0/20 IPv6: 2406:5800::/32 Signature Algorithm: sha256WithRSAEncryption 7a:2e:f1:aa:8e:81:ab:23:82:c2:e7:d0:3e:6f:2d:41:29:0f: 8e:fb:2a:fc:af:87:39:fc:eb:0e:32:30:45:e3:a7:fb:da:40: 76:06:3d:f8:fc:1e:0a:ee:44:23:c0:89:dc:4e:cb:6f:fe:e2: 3c:6e:d2:01:a9:65:b0:b1:68:59:ba:63:2d:5a:81:f2:57:9a: 99:f3:10:9b:0a:51:d2:3d:20:35:33:6a:c2:cc:30:60:26:8e: c5:8a:fa:b6:ba:2f:bb:be:5c:f8:43:d8:4f:aa:61:ae:88:74: 5c:20:26:4e:08:d9:77:13:04:0d:46:57:7f:bf:75:a7:dd:cd: 56:96:75:84:e9:f3:bd:31:60:95:d5:8d:85:b4:a2:97:e4:f6: 7b:70:a7:27:f6:ce:9c:b0:3d:b0:a1:ad:ed:e9:92:6e:aa:23: 68:aa:0d:17:07:56:3e:4b:f7:9f:7d:f1:df:de:f6:56:ff:38: fe:9a:16:c1:e8:09:1a:8a:1d:a1:ac:33:6a:30:29:c2:b0:a5: e8:4f:35:c5:6a:9d:91:a6:5c:37:0b:21:95:6d:15:a8:3b:27: b4:85:b5:53:6e:db:76:e7:6d:16:87:5b:6a:1b:37:c6:a8:f7: 21:e8:a8:35:36:dd:12:b1:8f:ec:a0:d2:9c:e3:90:52:b7:ff: 3d:8e:75:7d -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICCcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0NkUxMTAvBgNVBAUTKDZDNUE1ODlGOTI0Q0U5QkVEMUZEODlGNUFGRjYzMEM5 Mjc1NzQ0MjAwHhcNMjUxMjIwMjAxNzA3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2EzNC0yNGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0r8TQ6nX4Nh7NAScyN7xa5zoh0rcNg5Blxjv3lTmCDMafkN64Mlr4HU/TkeG zlzoT7QefAD274zApGqpy0jEcIGxSvlZfdDdOgCJ65VQZQ7MQlKEWZirSen3xty1 lmp6GCd1ZEjvxtX6HICz1+QqmxmNlAfuqcOISuKCBYy0sHeaxf5aT/v6ACdm5e0m DpxEhJShygnMbb6Amn0gdtkOQ+qaoeqw/dublFc9Q2h2L3GOwat4uAg3IsM0Q8Wf IgQ62NehDg93Vvjicgr1w+ScvEAIVZyDJuU17kNr3FVqdXsPx19NuIuX3MDiUUol +JKYVqEC1rIhi/FdQuEIxo7JMQIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFLw8OCAv 7Tus2eJJEWa7oSJOKBMIMB8GA1UdIwQYMBaAFGxaWJ+STOm+0f2J9a/2MMknV0Qg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTQ2RS8wQ0Q0MURBOEI3 NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZiN1JfWW4xcl9Zd3lTZFhS Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JGcFluNUpNNmI3Ul9ZbjFyX1l3eVNkWFJDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU0NkUvMENENDFEQThCNzZBMTFFQTgxNEY1MDg0QzRGOUFFMDIvQ0NCRjBDRjZC NTU5MTFFQzkyNTZGRTE5QzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQGZeqAAwQEb32gAwQFcm+AAwQEemQAMA0EAgACMAcDBQAkBlgAMA0G CSqGSIb3DQEBCwUAA4IBAQB6LvGqjoGrI4LC59A+by1BKQ+O+yr8r4c5/OsOMjBF 46f72kB2Bj34/B4K7kQjwIncTstv/uI8btIBqWWwsWhZumMtWoHyV5qZ8xCbClHS PSA1M2rCzDBgJo7Fivq2ui+7vlz4Q9hPqmGuiHRcICZOCNl3EwQNRld/v3Wn3c1W lnWE6fO9MWCV1Y2FtKKX5PZ7cKcn9s6csD2woa3t6ZJuqiNoqg0XB1Y+S/efffHf 3vZW/zj+mhbB6Akaih2hrDNqMCnCsKXoTzXFap2Rplw3CyGVbRWoOye0hbVTbtt2 520Wh1tqGzfGqPch6Kg1Nt0SsY/soNKc45BSt/89jnV9 -----END CERTIFICATE-----Generated at Mon Mar 2 06:18:52 2026 by rpki-client