$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/2CC5D50CDEC911EBA828524CC4F9AE02.roa File: 2CC5D50CDEC911EBA828524CC4F9AE02.roa (raw, json) Hash identifier: 90DgDT5NeM7xQ03ACEtF57cO7mWeIuHF/7OMNDwtBac= Subject key identifier: B0:97:A4:09:48:52:E9:7C:1F:AB:C3:48:4E:83:2C:1C:31:3B:81:E4 Certificate issuer: /CN=A91ACBB7/serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Certificate serial: 0D81 Authority key identifier: 74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/2CC5D50CDEC911EBA828524CC4F9AE02.roa Signing time: Thu 02 Apr 2026 18:22:23 +0000 ROA not before: Thu 02 Apr 2026 18:22:23 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 63969 IP address blocks: 45.114.84.0/22 maxlen: 24 103.54.36.0/22 maxlen: 24 103.143.148.0/24 maxlen: 24 2403:41c0::/32 maxlen: 36 2403:41c0:19::/48 maxlen: 48 2403:41c0:1a::/48 maxlen: 48 2403:41c0:2a::/48 maxlen: 48 2403:41c0:3a::/48 maxlen: 48 2403:41c0:41::/48 maxlen: 48 2403:41c0:fc00::/48 maxlen: 48 2403:41c0:fc05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:55:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3457 (0xd81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACBB7, serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Validity Not Before: Apr 2 18:22:23 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69ceb3df-8c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:80:a3:9d:b5:d4:eb:bb:df:d2:57:b9:b7:f8: 3b:1d:f8:90:bc:43:80:50:c6:78:25:2c:5a:bd:b5: 02:f2:95:a9:fb:f4:0e:e6:83:09:46:3e:e2:87:22: 49:59:89:e8:d4:4e:03:23:11:cd:d9:2d:43:4e:59: 7a:16:fd:8c:6a:d5:30:e8:8d:14:74:10:57:81:67: 61:84:fe:b0:f3:e2:4d:f6:6a:30:67:41:fd:9f:71: 10:f7:9c:fc:3f:03:e3:47:b3:af:1c:34:0f:b6:20: bc:6e:e4:ec:c3:2b:86:f0:e8:11:9a:19:37:71:ef: 9b:53:4e:6c:be:6b:ca:4b:4e:a7:23:04:12:45:14: fc:84:ca:b8:97:de:2c:64:c1:5d:c8:81:69:c5:a4: c9:13:d2:a9:74:07:42:28:80:01:a3:7c:b1:04:6a: fc:98:d7:44:0a:5a:83:de:5a:86:b7:10:d4:0d:a8: 8e:7d:2d:89:c1:b1:ac:c5:9e:65:cb:c7:da:56:3c: bc:9f:b5:ec:a1:8a:60:89:07:27:30:59:33:36:0d: 03:bc:79:45:40:25:59:de:ab:ff:99:1d:d2:1c:d8: ab:4e:83:e7:62:8f:58:ce:cf:96:a4:27:15:31:46: ad:57:53:14:12:a6:40:ef:9b:40:5b:70:36:5d:f1: 8f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:97:A4:09:48:52:E9:7C:1F:AB:C3:48:4E:83:2C:1C:31:3B:81:E4 X509v3 Authority Key Identifier: keyid:74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/2CC5D50CDEC911EBA828524CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.114.84.0/22 103.54.36.0/22 103.143.148.0/24 IPv6: 2403:41c0::/32 Signature Algorithm: sha256WithRSAEncryption 62:5d:0b:70:f7:2c:e5:9c:93:ec:ec:b4:e9:73:47:75:b2:81: b2:ad:2e:16:6e:19:82:0d:60:46:ca:ec:c0:72:12:38:b6:92: 93:b1:2f:c4:f9:5a:6a:77:3d:8e:f5:48:54:df:5e:89:85:a8: 17:af:22:56:70:15:32:4b:48:90:88:a4:f9:07:fb:4e:d2:55: 45:41:a9:34:2d:88:49:b5:98:17:a5:d6:fa:57:c2:f0:6b:39: 91:1c:9e:4d:16:a3:ac:30:68:79:48:9a:e0:b2:83:1d:70:99: 21:cd:f8:31:eb:2c:1e:5c:39:8d:07:b6:db:db:ab:0a:51:1d: e6:fe:e3:b8:3c:0d:1f:f5:fa:0f:8b:b5:75:2b:7a:0d:fd:cc: 00:84:cd:81:ef:db:83:ee:eb:62:41:ac:14:b9:87:43:6a:5d: 4e:14:ac:8c:95:9b:80:53:94:ec:89:fd:d0:dd:22:81:58:0e: 9f:9b:5d:48:bd:a6:f4:5b:40:6e:8e:c0:06:84:91:03:b0:fc: ac:af:e2:10:94:a1:9a:d1:13:ec:dc:1e:d4:2e:24:34:e5:49: 2d:15:ee:a9:fb:4a:38:dc:f7:40:1b:45:7a:f2:16:c3:10:66: 40:a4:91:b3:47:8b:53:83:c3:09:03:c3:b4:2a:c9:39:0a:d9: 8e:3c:ce:a3 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICDYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNCQjcxMTAvBgNVBAUTKDc0NjI0MUFEQTc3RERCREZFQTBGRTE0NEVGRTIxMzkx RTNGQzRGRDkwHhcNMjYwNDAyMTgyMjIzWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWNlYjNkZi04YzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4CjnbXU67vf0le5t/g7HfiQvEOAUMZ4JSxavbUC8pWp+/QO5oMJRj7ihyJJ WYno1E4DIxHN2S1DTll6Fv2MatUw6I0UdBBXgWdhhP6w8+JN9mowZ0H9n3EQ95z8 PwPjR7OvHDQPtiC8buTswyuG8OgRmhk3ce+bU05svmvKS06nIwQSRRT8hMq4l94s ZMFdyIFpxaTJE9KpdAdCKIABo3yxBGr8mNdEClqD3lqGtxDUDaiOfS2JwbGsxZ5l y8faVjy8n7XsoYpgiQcnMFkzNg0DvHlFQCVZ3qv/mR3SHNirToPnYo9Yzs+WpCcV MUatV1MUEqZA75tAW3A2XfGPLQIDAQABo4ICezCCAncwHQYDVR0OBBYEFLCXpAlI Uul8H6vDSE6DLBwxO4HkMB8GA1UdIwQYMBaAFHRiQa2nfdvf6g/hRO/iE5Hj/E/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0JCNy81RTFGQ0VCQ0Yz RjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5X3FELUZFNy1JVGtlUDhU OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RHSkJyYWQ5MjlfcUQtRkU3LUlUa2VQOFQ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUNCQjcvNUUxRkNFQkNGM0Y5MTFFOUI4QTgzMTBBQzRGOUFFMDIvMkNDNUQ1MENE RUM5MTFFQkE4Mjg1MjRDQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCLXJUAwQCZzYkAwQAZ4+UMA0EAgACMAcDBQAkA0HAMA0GCSqGSIb3 DQEBCwUAA4IBAQBiXQtw9yzlnJPs7LTpc0d1soGyrS4WbhmCDWBGyuzAchI4tpKT sS/E+Vpqdz2O9UhU316JhagXryJWcBUyS0iQiKT5B/tO0lVFQak0LYhJtZgXpdb6 V8LwazmRHJ5NFqOsMGh5SJrgsoMdcJkhzfgx6yweXDmNB7bb26sKUR3m/uO4PA0f 9foPi7V1K3oN/cwAhM2B79uD7utiQawUuYdDal1OFKyMlZuAU5Tsif3Q3SKBWA6f m11Ivab0W0BujsAGhJEDsPysr+IQlKGa0RPs3B7ULiQ05UktFe6p+0o43PdAG0V6 8hbDEGZApJGzR4tTg8MJA8O0Ksk5CtmOPM6j -----END CERTIFICATE-----Generated at Fri Apr 17 15:26:26 2026 by rpki-client