$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/355461A4372C11EDB1059640C4F9AE02.roa File: 355461A4372C11EDB1059640C4F9AE02.roa (raw, json) Hash identifier: NxJ2unXmkGj4Yr8VVZLWqjZNZJ7C6FQB8WBXPKvyldA= Subject key identifier: 71:99:6F:15:01:80:D8:D0:76:B0:BF:1C:51:75:A0:6E:91:19:07:43 Certificate issuer: /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Certificate serial: 3662 Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/355461A4372C11EDB1059640C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:18:40 +0000 ROA not before: Wed 04 Jun 2025 15:10:54 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 58778 IP address blocks: 114.130.10.0/24 maxlen: 24 114.130.36.0/24 maxlen: 24 114.130.46.0/24 maxlen: 24 114.130.47.0/24 maxlen: 24 114.130.48.0/24 maxlen: 24 114.130.50.0/24 maxlen: 24 114.130.101.0/24 maxlen: 24 114.130.112.0/24 maxlen: 24 114.130.113.0/24 maxlen: 24 114.130.115.0/24 maxlen: 24 114.130.121.0/24 maxlen: 24 114.130.122.0/24 maxlen: 24 2403:ec00:36::/48 maxlen: 48 2403:ec00:37::/48 maxlen: 48 2403:ec00:40::/48 maxlen: 48 2403:ec00:41::/48 maxlen: 48 2403:ec00:51::/48 maxlen: 48 2403:ec00:112::/48 maxlen: 48 2403:ec00:113::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13922 (0x3662) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AABB1, serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Validity Not Before: Jun 4 15:10:54 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a474f0-3d9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d9:c0:c7:73:1c:df:c8:cc:26:92:81:a1:d3: 9b:d9:6f:b6:82:6d:e5:58:3c:84:db:28:94:77:e5: d6:fa:41:92:76:b6:36:5f:c3:47:19:8b:36:30:87: 47:c6:b5:5e:69:1e:94:b1:b5:81:a3:e2:c4:8d:68: e5:cc:52:68:22:30:99:78:3e:75:f3:81:cc:06:97: 61:fe:b2:9f:1f:10:59:97:94:34:f3:a1:4f:cb:c6: 7e:bf:03:e7:cc:39:94:bb:57:3a:99:73:f4:35:bf: 3d:44:87:3f:d4:1a:77:7f:e6:bc:a3:6d:3b:23:1b: 81:78:cc:7e:b1:f1:98:25:5f:6a:33:8e:4c:16:16: a5:60:b1:c0:3d:23:2e:32:56:94:4c:ce:1b:04:12: c2:4e:cc:4d:13:fc:98:87:b3:6e:b1:a3:9e:cd:48: d1:dd:39:c1:f2:f1:9d:b4:c6:58:1d:06:c6:e5:57: cd:c6:d2:fd:23:47:13:6b:31:8a:86:aa:2f:a9:de: 0b:4c:d8:51:26:56:6c:05:41:e8:c0:a9:31:52:e0: 62:1b:e1:71:5c:c6:8b:76:15:f0:48:f3:a9:fa:dd: 9d:ad:8b:ff:d4:15:5f:f7:71:1c:86:6c:05:eb:1f: 75:f0:6c:99:02:4c:d7:e3:03:a5:f5:0e:5f:67:7e: 61:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:99:6F:15:01:80:D8:D0:76:B0:BF:1C:51:75:A0:6E:91:19:07:43 X509v3 Authority Key Identifier: keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/355461A4372C11EDB1059640C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 114.130.10.0/24 114.130.36.0/24 114.130.46.0-114.130.48.255 114.130.50.0/24 114.130.101.0/24 114.130.112.0/23 114.130.115.0/24 114.130.121.0-114.130.122.255 IPv6: 2403:ec00:36::/47 2403:ec00:40::/47 2403:ec00:51::/48 2403:ec00:112::/47 Signature Algorithm: sha256WithRSAEncryption 39:6a:3a:26:b7:35:6d:0c:5d:35:9a:bd:c7:0b:1e:72:4d:69: fc:39:13:16:95:86:49:ce:a2:6b:14:f8:8e:2d:2b:7c:93:19: 50:b4:3e:88:22:64:07:8b:64:10:53:c4:17:6b:bd:97:ac:b0: b4:df:77:59:6f:c9:9a:7f:0d:11:d6:ef:7e:eb:58:a0:a5:01: 5d:d2:44:43:3b:f7:3d:a9:4e:5b:bc:f1:a3:a5:5f:fd:5d:50: 9c:6e:ac:a6:65:c1:00:fb:79:63:7a:a7:ef:7d:95:19:b8:ce: e9:e7:2b:49:a1:e4:e5:eb:aa:dd:68:b0:19:50:c0:d0:5d:39: a9:22:6a:26:e7:66:3a:ae:6b:bd:07:f8:dd:5d:84:ba:df:22: ff:08:87:cd:ec:84:32:0d:9f:1b:50:f4:73:7c:b5:d8:6a:43: c3:9b:af:82:55:ea:db:70:9f:6f:c1:0a:18:46:16:7c:a2:e5: d5:a4:e4:4f:b0:28:f5:74:61:0b:71:b4:c7:84:86:2a:50:1c: d4:c8:51:5a:f5:01:d3:2c:f4:75:ba:77:eb:e5:43:9e:a9:7f: c9:b3:8b:5c:df:d7:1f:5b:7d:83:bb:74:93:7a:54:d4:e7:0a: 3c:34:40:8f:d8:73:5c:c4:dd:97:6d:1a:ff:09:0e:44:d9:64: 01:ef:5f:6d -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgICNmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFCQjExMTAvBgNVBAUTKEVCN0ZFOTg5MkRGMDAwMjU1RkNGM0FDMEIyQjREMTJB RUE2RkY4MDYwHhcNMjUwNjA0MTUxMDU0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzRmMC0zZDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5tnAx3Mc38jMJpKBodOb2W+2gm3lWDyE2yiUd+XW+kGSdrY2X8NHGYs2MIdH xrVeaR6UsbWBo+LEjWjlzFJoIjCZeD5184HMBpdh/rKfHxBZl5Q086FPy8Z+vwPn zDmUu1c6mXP0Nb89RIc/1Bp3f+a8o207IxuBeMx+sfGYJV9qM45MFhalYLHAPSMu MlaUTM4bBBLCTsxNE/yYh7NusaOezUjR3TnB8vGdtMZYHQbG5VfNxtL9I0cTazGK hqovqd4LTNhRJlZsBUHowKkxUuBiG+FxXMaLdhXwSPOp+t2drYv/1BVf93EchmwF 6x918GyZAkzX4wOl9Q5fZ35hrQIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFHGZbxUB gNjQdrC/HFF1oG6RGQdDMB8GA1UdIwQYMBaAFOt/6Ykt8AAlX886wLK00Srqb/gG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUJCMS84ODc0RTlFODFE OTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FDVmZ6enJBc3JUUkt1cHYt QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYzX3BpUzN3QUNWZnp6ckFzclRSS3Vwdi1BWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFCQjEvODg3NEU5RTgxRDk4MTFFMjk3ODhBOTgyMDhCMDJDRDIvMzU1NDYxQTQz NzJDMTFFREIxMDU5NjQwQzRGOUFFMDIucm9hMIGFBggrBgEFBQcBBwEB/wR2MHQw RgQCAAEwQAMEAHKCCgMEAHKCJDAMAwQBcoIuAwQAcoIwAwQAcoIyAwQAcoJlAwQB coJwAwQAcoJzMAwDBABygnkDBABygnowKgQCAAIwJAMHASQD7AAANgMHASQD7AAA QAMHACQD7AAAUQMHASQD7AABEjANBgkqhkiG9w0BAQsFAAOCAQEAOWo6Jrc1bQxd NZq9xwseck1p/DkTFpWGSc6iaxT4ji0rfJMZULQ+iCJkB4tkEFPEF2u9l6ywtN93 WW/Jmn8NEdbvfutYoKUBXdJEQzv3PalOW7zxo6Vf/V1QnG6spmXBAPt5Y3qn732V GbjO6ecrSaHk5euq3WiwGVDA0F05qSJqJudmOq5rvQf43V2Eut8i/wiHzeyEMg2f G1D0c3y12GpDw5uvglXq23Cfb8EKGEYWfKLl1aTkT7Ao9XRhC3G0x4SGKlAc1MhR WvUB0yz0dbp36+VDnql/ybOLXN/XH1t9g7t0k3pU1OcKPDRAj9hzXMTdl20a/wkO RNlkAe9fbQ== -----END CERTIFICATE-----Generated at Mon Mar 2 17:44:40 2026 by rpki-client