$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/D53B3AEE89FE11E6A44EAA55C4F9AE02.roa File: D53B3AEE89FE11E6A44EAA55C4F9AE02.roa (raw, json) Hash identifier: R6YXr6mLTUDY2MoinQ6/ghJTAUyVeETH/6l5X7fp+n8= Subject key identifier: 28:93:A1:F0:D6:38:7A:35:A8:E0:3D:8F:BF:8E:75:26:E2:12:DF:42 Certificate issuer: /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Certificate serial: 3663 Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/D53B3AEE89FE11E6A44EAA55C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:18:41 +0000 ROA not before: Wed 04 Jun 2025 15:10:55 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 63932 IP address blocks: 114.130.54.0/23 maxlen: 23 114.130.54.0/24 maxlen: 24 114.130.55.0/24 maxlen: 24 114.130.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13923 (0x3663) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AABB1, serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Validity Not Before: Jun 4 15:10:55 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a474f0-7f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c9:2a:47:fd:8d:96:e6:97:da:4d:cc:9f:90: e4:87:4a:f8:9b:dd:df:e5:60:46:c8:76:5b:fa:96: 1b:2a:59:df:b9:1a:bb:e3:5a:e1:46:fa:b9:3b:a1: 4a:65:d4:5f:eb:9c:11:eb:4a:d7:ac:75:c6:b2:de: a4:01:62:d3:9b:c2:d8:d3:fb:aa:67:9d:87:b1:33: fe:71:fd:90:62:09:f7:90:eb:e1:bf:2c:ea:c5:ed: d3:45:44:44:40:92:fa:2d:d1:32:d8:7f:c6:6a:5e: 46:5d:78:8b:55:de:7b:c3:39:36:51:ac:2d:4d:6c: 2c:84:b0:54:50:59:f5:1c:3e:a7:a7:66:3a:8b:95: a2:d7:59:14:ad:0f:b9:a3:93:32:50:08:23:92:1b: 7a:a0:45:cb:e6:ec:db:9d:01:3c:04:47:de:09:c1: 9e:94:01:b6:4f:b1:30:61:7b:ca:d6:ed:43:1f:b5: 00:a2:53:74:1e:da:a3:53:05:bb:3d:99:00:f5:fe: 88:3a:54:b6:e9:7c:cc:91:15:43:9a:85:5f:ce:c3: 9b:9f:ef:5f:08:3b:9a:ea:52:7a:01:5f:76:6e:3b: 94:e1:e3:36:8d:e1:5e:5a:34:25:df:9b:f3:21:a6: a5:9c:8e:de:e3:8f:21:53:22:78:d8:96:91:ff:27: de:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:93:A1:F0:D6:38:7A:35:A8:E0:3D:8F:BF:8E:75:26:E2:12:DF:42 X509v3 Authority Key Identifier: keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/D53B3AEE89FE11E6A44EAA55C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 114.130.54.0/23 114.130.116.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:9a:17:b8:d6:f1:d8:27:88:66:b3:36:0c:77:88:e3:53:a3: db:4c:cd:d6:49:2f:29:86:ca:a2:f6:63:8a:1e:c9:22:13:be: d4:a8:ce:de:91:a7:74:67:21:9f:ff:b9:70:15:1d:c6:7c:53: 2c:a8:ab:33:7e:53:f5:14:7d:a7:99:dd:9d:2e:53:3f:4d:b3: b7:18:42:71:4e:2b:ee:7d:ed:6a:ac:91:42:e3:34:d1:83:8e: 80:7d:8d:fc:d6:5f:fc:ca:fc:53:9d:a9:35:1e:86:f0:f8:26: 19:bb:9e:70:13:f1:7d:d5:d0:75:4b:a4:fb:3d:96:b8:e1:34: c8:ed:9d:e6:f1:89:e9:bf:77:6e:ef:6b:80:e4:b1:b0:aa:23: 76:68:73:f0:ab:08:05:7e:51:99:d2:d8:be:af:f3:c3:4c:10: 00:7e:b4:df:38:fd:67:15:17:1a:d3:fd:6c:13:93:6e:55:39: c3:83:ee:7c:9c:f9:88:dd:77:c9:16:97:73:be:1c:e5:b3:4f: 5d:e1:36:5c:ca:7e:34:34:24:ce:ce:fc:3d:d9:63:94:26:2b: 55:1c:b8:af:60:a5:84:01:0d:ee:00:44:3b:45:e1:07:62:25: 62:f6:0b:fd:c5:fa:09:4c:b0:ee:59:58:7b:05:6a:44:02:ab: cc:5a:5d:64 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICNmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFCQjExMTAvBgNVBAUTKEVCN0ZFOTg5MkRGMDAwMjU1RkNGM0FDMEIyQjREMTJB RUE2RkY4MDYwHhcNMjUwNjA0MTUxMDU1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzRmMC03ZjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuckqR/2NluaX2k3Mn5Dkh0r4m93f5WBGyHZb+pYbKlnfuRq741rhRvq5O6FK ZdRf65wR60rXrHXGst6kAWLTm8LY0/uqZ52HsTP+cf2QYgn3kOvhvyzqxe3TRURE QJL6LdEy2H/Gal5GXXiLVd57wzk2UawtTWwshLBUUFn1HD6np2Y6i5Wi11kUrQ+5 o5MyUAgjkht6oEXL5uzbnQE8BEfeCcGelAG2T7EwYXvK1u1DH7UAolN0HtqjUwW7 PZkA9f6IOlS26XzMkRVDmoVfzsObn+9fCDua6lJ6AV92bjuU4eM2jeFeWjQl35vz IaalnI7e448hUyJ42JaR/yfelwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFCiTofDW OHo1qOA9j7+OdSbiEt9CMB8GA1UdIwQYMBaAFOt/6Ykt8AAlX886wLK00Srqb/gG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUJCMS84ODc0RTlFODFE OTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FDVmZ6enJBc3JUUkt1cHYt QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYzX3BpUzN3QUNWZnp6ckFzclRSS3Vwdi1BWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFCQjEvODg3NEU5RTgxRDk4MTFFMjk3ODhBOTgyMDhCMDJDRDIvRDUzQjNBRUU4 OUZFMTFFNkE0NEVBQTU1QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBcoI2AwQCcoJ0MA0GCSqGSIb3DQEBCwUAA4IBAQB7mhe41vHYJ4hm szYMd4jjU6PbTM3WSS8phsqi9mOKHskiE77UqM7ekad0ZyGf/7lwFR3GfFMsqKsz flP1FH2nmd2dLlM/TbO3GEJxTivufe1qrJFC4zTRg46AfY381l/8yvxTnak1Hobw +CYZu55wE/F91dB1S6T7PZa44TTI7Z3m8Ynpv3du72uA5LGwqiN2aHPwqwgFflGZ 0ti+r/PDTBAAfrTfOP1nFRca0/1sE5NuVTnDg+58nPmI3XfJFpdzvhzls09d4TZc yn40NCTOzvw92WOUJitVHLivYKWEAQ3uAEQ7ReEHYiVi9gv9xfoJTLDuWVh7BWpE AqvMWl1k -----END CERTIFICATE-----Generated at Mon Mar 2 17:44:29 2026 by rpki-client