$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/58D5764A683311ECB9C17757C4F9AE02.roa File: 58D5764A683311ECB9C17757C4F9AE02.roa (raw, json) Hash identifier: y6Cb0qWIx1yRlu9RsKzzdkQCpXsOgAgmZ5vTiuWgcQo= Subject key identifier: 42:BB:0B:0B:8C:41:AF:7D:46:FD:3F:19:C7:03:C0:C8:40:6A:5F:47 Certificate issuer: /CN=A91A9EE2/serialNumber=BA9D2BADA8268784F00AE858702EF8E29E72B4BC Certificate serial: 3547 Authority key identifier: BA:9D:2B:AD:A8:26:87:84:F0:0A:E8:58:70:2E:F8:E2:9E:72:B4:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/58D5764A683311ECB9C17757C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:52:13 +0000 ROA not before: Thu 12 Feb 2026 15:10:28 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 17480 IP address blocks: 43.255.236.0/22 maxlen: 22 103.23.52.0/22 maxlen: 22 113.21.96.0/20 maxlen: 20 113.21.112.0/20 maxlen: 20 202.171.64.0/20 maxlen: 20 203.147.64.0/20 maxlen: 20 203.147.80.0/21 maxlen: 21 220.156.160.0/20 maxlen: 20 2401:c00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.crl rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13639 (0x3547) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9EE2, serialNumber=BA9D2BADA8268784F00AE858702EF8E29E72B4BC Validity Not Before: Feb 12 15:10:28 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a460ad-20d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:69:cf:c0:44:27:a2:54:31:ce:94:0e:6f:6c: 3c:1b:6f:f7:ff:a6:bc:0f:65:09:9f:cc:d8:e8:78: fc:ea:28:71:33:ed:57:3d:42:40:7d:16:8b:fb:4b: 6a:1c:fc:ca:e1:02:54:dc:ee:f1:25:c4:1d:8f:01: e1:c1:c1:45:c9:0b:40:a2:f4:44:d6:47:a7:9b:4d: 48:5e:f3:38:af:d4:ed:f2:0d:95:7c:80:5b:6f:b5: 0c:fb:2f:47:a0:48:44:96:fc:c9:9d:09:9b:cc:f3: a3:16:28:c1:71:e3:3d:70:79:ed:a6:7c:0e:33:8c: 2c:d1:25:30:c7:e3:65:21:02:34:08:30:d0:c3:f8: 48:15:db:bb:71:1b:6b:b3:54:95:b9:74:85:45:f2: 23:5e:7c:43:29:98:32:3a:1a:77:7e:8b:d8:69:76: 1c:81:7d:09:89:4d:18:7f:bc:81:86:3e:51:77:52: d1:46:c5:44:f1:a2:f2:17:1e:e2:12:bd:90:88:8c: 8f:73:7f:d1:49:98:68:00:76:29:0e:bf:35:c7:bb: fd:29:df:e1:7a:3e:41:15:73:8c:20:33:da:93:ff: ce:5d:75:5a:e4:66:66:99:dc:22:6b:db:55:83:17: 33:de:29:4b:18:8d:7c:5e:29:4e:44:44:d5:50:2d: 49:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BB:0B:0B:8C:41:AF:7D:46:FD:3F:19:C7:03:C0:C8:40:6A:5F:47 X509v3 Authority Key Identifier: keyid:BA:9D:2B:AD:A8:26:87:84:F0:0A:E8:58:70:2E:F8:E2:9E:72:B4:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/58D5764A683311ECB9C17757C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.255.236.0/22 103.23.52.0/22 113.21.96.0/19 202.171.64.0/20 203.147.64.0-203.147.87.255 220.156.160.0/20 IPv6: 2401:c00::/32 Signature Algorithm: sha256WithRSAEncryption 01:7a:2d:de:cc:7b:29:36:09:87:d1:77:a8:46:5e:42:e4:57: db:8b:c7:62:d5:42:f7:6a:18:84:88:29:59:02:95:f2:ce:14: cf:d8:80:aa:11:39:a1:48:a0:58:44:c5:db:95:6f:55:19:48: f4:39:3d:c9:b8:71:4c:e0:e3:08:46:3b:b4:c3:09:f5:0e:a0: 95:90:da:3d:1b:69:7d:0e:c5:25:9b:ce:f0:6c:d6:d1:87:99: fb:d1:7f:7d:7d:57:f1:89:40:99:1d:25:cb:c0:03:6a:95:6a: 33:96:cb:b4:af:61:57:09:08:a1:f6:37:00:67:8d:ae:2f:ae: 04:2c:4b:55:6a:bd:32:67:d4:3c:b3:4c:bd:c0:f0:eb:26:44: d8:06:70:ef:9a:bb:ef:fa:92:ec:01:af:57:f2:a5:45:be:02: 8a:4f:01:f6:30:89:7a:f0:35:4d:4d:2d:c1:37:e6:90:cf:23: 00:d0:53:e9:aa:2d:7f:16:50:f2:89:41:b1:d3:91:94:61:8b: ce:c3:4f:e3:c2:97:ac:fa:f5:b3:fb:e4:c6:30:26:69:0f:cf: dc:e8:bf:bb:62:44:3f:38:f4:33:71:db:83:86:33:ba:fc:a3: 7c:46:0f:e6:ea:39:70:15:02:18:76:4a:13:66:5e:78:d8:eb: 00:5b:e0:5d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlFRTIxMTAvBgNVBAUTKEJBOUQyQkFEQTgyNjg3ODRGMDBBRTg1ODcwMkVGOEUy OUU3MkI0QkMwHhcNMjYwMjEyMTUxMDI4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjBhZC0yMGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2nPwEQnolQxzpQOb2w8G2/3/6a8D2UJn8zY6Hj86ihxM+1XPUJAfRaL+0tq HPzK4QJU3O7xJcQdjwHhwcFFyQtAovRE1kenm01IXvM4r9Tt8g2VfIBbb7UM+y9H oEhElvzJnQmbzPOjFijBceM9cHntpnwOM4ws0SUwx+NlIQI0CDDQw/hIFdu7cRtr s1SVuXSFRfIjXnxDKZgyOhp3fovYaXYcgX0JiU0Yf7yBhj5Rd1LRRsVE8aLyFx7i Er2QiIyPc3/RSZhoAHYpDr81x7v9Kd/hej5BFXOMIDPak//OXXVa5GZmmdwia9tV gxcz3ilLGI18XilORETVUC1JuwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEK7CwuM Qa99Rv0/GccDwMhAal9HMB8GA1UdIwQYMBaAFLqdK62oJoeE8AroWHAu+OKecrS8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUVFMi82NDMyNEREODFE ODgxMUUyQkRFRjE0RTEwOEIwMkNEMi91cDBycmFnbWg0VHdDdWhZY0M3NDRwNXl0 THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VwMHJyYWdtaDRUd0N1aFljQzc0NHA1eXRMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTlFRTIvNjQzMjRERDgxRDg4MTFFMkJERUYxNEUxMDhCMDJDRDIvNThENTc2NEE2 ODMzMTFFQ0I5QzE3NzU3QzRGOUFFMDIucm9hMFQGCCsGAQUFBwEHAQH/BEUwQzAy BAIAATAsAwQCK//sAwQCZxc0AwQFcRVgAwQEyqtAMAwDBAbLk0ADBAPLk1ADBATc nKAwDQQCAAIwBwMFACQBDAAwDQYJKoZIhvcNAQELBQADggEBAAF6Ld7Meyk2CYfR d6hGXkLkV9uLx2LVQvdqGISIKVkClfLOFM/YgKoROaFIoFhExduVb1UZSPQ5Pcm4 cUzg4whGO7TDCfUOoJWQ2j0baX0OxSWbzvBs1tGHmfvRf319V/GJQJkdJcvAA2qV ajOWy7SvYVcJCKH2NwBnja4vrgQsS1VqvTJn1DyzTL3A8OsmRNgGcO+au+/6kuwB r1fypUW+AopPAfYwiXrwNU1NLcE35pDPIwDQU+mqLX8WUPKJQbHTkZRhi87DT+PC l6z69bP75MYwJmkPz9zov7tiRD849DNx24OGM7r8o3xGD+bqOXAVAhh2ShNmXnjY 6wBb4F0= -----END CERTIFICATE-----Generated at Mon Mar 2 17:04:44 2026 by rpki-client