$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/2CC5D50CDEC911EBA828524CC4F9AE02.roa File: 2CC5D50CDEC911EBA828524CC4F9AE02.roa (raw, json) Hash identifier: /AhmE34i61p6Wi2ThEiAHofXwlJ6VL0v1ZoTN8bzfIw= Subject key identifier: FB:8B:60:08:08:9C:5D:6B:7E:0F:CB:A2:C5:1D:17:DE:68:4A:B6:20 Certificate issuer: /CN=A91ACBB7/serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Certificate serial: 0D6B Authority key identifier: 74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/2CC5D50CDEC911EBA828524CC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:34:39 +0000 ROA not before: Thu 16 Oct 2025 09:54:48 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 63969 IP address blocks: 45.114.84.0/22 maxlen: 24 103.54.36.0/22 maxlen: 24 103.143.148.0/24 maxlen: 24 2403:41c0::/32 maxlen: 36 2403:41c0:19::/48 maxlen: 48 2403:41c0:1a::/48 maxlen: 48 2403:41c0:2a::/48 maxlen: 48 2403:41c0:3a::/48 maxlen: 48 2403:41c0:41::/48 maxlen: 48 2403:41c0:fc00::/48 maxlen: 48 2403:41c0:fc05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:14:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3435 (0xd6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACBB7, serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Validity Not Before: Oct 16 09:54:48 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a45c8f-a245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f2:69:50:23:8e:d9:a9:76:a0:92:48:6b:6a: 4f:3b:2a:86:9d:1b:31:8e:5a:e9:bf:4e:c3:86:a9: 8f:c2:a1:33:9b:1f:81:e3:1b:bd:3e:00:e6:79:05: 7f:30:28:52:3e:56:8d:00:e4:74:01:d1:ed:fc:2b: 5a:db:3c:87:21:53:16:6f:05:33:4d:02:3e:23:4b: fe:b5:a1:fe:31:e0:1b:d4:4a:13:5f:ee:2d:36:f2: 8d:09:30:8c:23:d7:e5:a7:c9:ce:1b:3b:e3:d8:83: 78:eb:28:16:2a:cc:af:73:75:ef:19:d8:32:ad:62: 19:0a:be:98:95:b6:76:c7:b8:94:e8:16:be:17:11: bc:06:91:ab:d3:c8:8d:34:98:3b:d2:65:ae:db:d3: b4:1b:55:bb:1e:6e:b2:68:b3:4a:95:0f:e4:f5:86: 07:ad:79:bb:24:8b:e1:17:fd:6b:79:d0:33:60:ac: a9:92:39:29:e0:78:98:a4:c7:51:ce:5a:b7:62:99: 76:d8:d3:79:e3:11:c2:32:01:ec:5d:a8:92:7c:3a: ff:0c:bf:ef:b8:da:30:3b:1a:e8:47:74:c0:29:98: ae:9a:e4:55:0c:18:6e:d0:73:1a:90:22:71:a9:d5: 33:4e:23:ac:33:b3:f5:b7:41:f2:5e:c7:3d:dd:25: c5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8B:60:08:08:9C:5D:6B:7E:0F:CB:A2:C5:1D:17:DE:68:4A:B6:20 X509v3 Authority Key Identifier: keyid:74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/2CC5D50CDEC911EBA828524CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.114.84.0/22 103.54.36.0/22 103.143.148.0/24 IPv6: 2403:41c0::/32 Signature Algorithm: sha256WithRSAEncryption 08:05:f5:78:e3:61:df:f6:e2:77:a7:4d:88:3c:01:61:a0:8c: ec:0c:44:b8:0d:2d:05:ea:73:a5:db:9b:91:01:2c:99:7c:95: 1c:13:dc:5b:a6:e5:5c:d9:62:04:31:a0:3e:23:dd:72:b8:d8: 82:03:a6:05:19:ee:15:0f:43:c3:0f:fd:25:4d:4c:c0:0d:81: 94:27:7f:3f:09:a6:e8:2e:eb:de:b1:2c:98:a3:3d:30:c9:ec: a2:b5:31:01:92:3e:f6:9a:6a:4a:36:0a:7a:69:6d:f2:6e:16: f7:7c:d7:08:28:ac:98:e9:40:a2:fb:ec:52:66:f9:7c:c4:f5: c3:87:a7:29:9d:5b:40:e5:1c:a7:d7:74:f1:61:23:d0:d6:84: 62:78:4d:e6:27:dc:5d:46:5b:06:9a:13:b6:7f:5d:29:54:a3: d3:1b:2b:bb:ff:58:47:a5:3c:93:59:33:87:ed:99:3c:32:35: b4:22:17:10:9e:2b:3f:03:4b:ca:bd:da:19:cf:81:11:2a:80: 87:48:e3:f4:29:07:5a:9c:8c:40:81:b6:c1:54:01:8a:8b:64: b3:ad:4a:21:31:43:56:32:a3:d1:b8:ab:f1:88:c9:92:b7:26: 71:0d:8b:95:3c:15:d2:70:5c:5d:53:75:7b:f2:46:67:ef:06: f5:de:5f:22 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICDWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNCQjcxMTAvBgNVBAUTKDc0NjI0MUFEQTc3RERCREZFQTBGRTE0NEVGRTIxMzkx RTNGQzRGRDkwHhcNMjUxMDE2MDk1NDQ4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWM4Zi1hMjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/JpUCOO2al2oJJIa2pPOyqGnRsxjlrpv07DhqmPwqEzmx+B4xu9PgDmeQV/ MChSPlaNAOR0AdHt/Cta2zyHIVMWbwUzTQI+I0v+taH+MeAb1EoTX+4tNvKNCTCM I9flp8nOGzvj2IN46ygWKsyvc3XvGdgyrWIZCr6YlbZ2x7iU6Ba+FxG8BpGr08iN NJg70mWu29O0G1W7Hm6yaLNKlQ/k9YYHrXm7JIvhF/1redAzYKypkjkp4HiYpMdR zlq3Ypl22NN54xHCMgHsXaiSfDr/DL/vuNowOxroR3TAKZiumuRVDBhu0HMakCJx qdUzTiOsM7P1t0HyXsc93SXFRQIDAQABo4ICezCCAncwHQYDVR0OBBYEFPuLYAgI nF1rfg/LosUdF95oSrYgMB8GA1UdIwQYMBaAFHRiQa2nfdvf6g/hRO/iE5Hj/E/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0JCNy81RTFGQ0VCQ0Yz RjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5X3FELUZFNy1JVGtlUDhU OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RHSkJyYWQ5MjlfcUQtRkU3LUlUa2VQOFQ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUNCQjcvNUUxRkNFQkNGM0Y5MTFFOUI4QTgzMTBBQzRGOUFFMDIvMkNDNUQ1MENE RUM5MTFFQkE4Mjg1MjRDQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCLXJUAwQCZzYkAwQAZ4+UMA0EAgACMAcDBQAkA0HAMA0GCSqGSIb3 DQEBCwUAA4IBAQAIBfV442Hf9uJ3p02IPAFhoIzsDES4DS0F6nOl25uRASyZfJUc E9xbpuVc2WIEMaA+I91yuNiCA6YFGe4VD0PDD/0lTUzADYGUJ38/CaboLuvesSyY oz0wyeyitTEBkj72mmpKNgp6aW3ybhb3fNcIKKyY6UCi++xSZvl8xPXDh6cpnVtA 5Ryn13TxYSPQ1oRieE3mJ9xdRlsGmhO2f10pVKPTGyu7/1hHpTyTWTOH7Zk8MjW0 IhcQnis/A0vKvdoZz4ERKoCHSOP0KQdanIxAgbbBVAGKi2SzrUohMUNWMqPRuKvx iMmStyZxDYuVPBXScFxdU3V78kZn7wb13l8i -----END CERTIFICATE-----Generated at Mon Mar 2 08:51:48 2026 by rpki-client