$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/1585570A544C11E9BDFF2B2DC4F9AE02.roa File: 1585570A544C11E9BDFF2B2DC4F9AE02.roa (raw, json) Hash identifier: qFHFmRVCbMNHnJYtHdzfYVVLl0Q/VMUun8JPyz9/IMs= Subject key identifier: 78:FE:1F:29:D3:E9:A3:D3:34:38:0B:81:89:82:AC:2E:7B:5D:FB:77 Certificate issuer: /CN=A91AE9F7/serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237 Certificate serial: 106E Authority key identifier: 01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/1585570A544C11E9BDFF2B2DC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:48:16 +0000 ROA not before: Tue 04 Nov 2025 17:36:28 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 138191 IP address blocks: 58.84.32.0/24 maxlen: 24 103.129.200.0/24 maxlen: 24 103.129.201.0/24 maxlen: 24 103.129.202.0/24 maxlen: 24 103.129.203.0/24 maxlen: 24 103.197.48.0/24 maxlen: 24 2403:8540::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:19:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4206 (0x106e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE9F7, serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237 Validity Not Before: Nov 4 17:36:28 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a443a0-bebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:07:9a:1f:9d:fa:0c:87:8d:0a:0d:03:74:8b: f2:23:42:a2:ff:8e:06:eb:60:dd:17:c2:b0:e5:b7: b2:75:57:93:7a:c2:2c:0f:7f:8d:00:c0:c3:ad:0e: 0b:40:23:64:32:74:c0:e5:4f:08:14:5a:ed:34:52: 65:c1:89:26:e3:63:23:df:55:e9:74:14:2c:9b:19: e0:cc:dd:9b:f5:a5:4f:17:9c:e6:78:4a:4c:12:ec: 1c:75:0e:e9:8a:50:50:df:ed:69:35:f2:68:bc:ae: 80:0b:34:96:97:ab:d9:4e:25:87:75:3c:82:11:bb: 80:d7:8a:bc:21:be:ca:e6:92:ce:fb:37:60:d4:5f: 06:9f:98:55:d9:57:26:75:10:ec:d8:ed:1f:7b:b0: 70:95:eb:ef:26:64:25:63:89:ff:fb:d2:bc:ba:2a: 52:e0:18:85:36:26:b7:30:fe:4e:2e:56:03:34:00: ff:dc:19:55:fa:ca:c6:28:e1:34:6c:3c:8b:d4:97: 07:a2:b3:e7:57:a5:b1:f9:f6:cd:a9:eb:86:7c:35: 20:f5:15:8f:57:bb:34:83:4c:9d:32:59:2e:83:f8: ff:68:9d:88:eb:5b:0c:1e:db:d5:39:7b:b9:fe:11: 0a:f1:7b:94:90:04:7f:a2:fa:14:44:5a:78:dd:42: 8b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:FE:1F:29:D3:E9:A3:D3:34:38:0B:81:89:82:AC:2E:7B:5D:FB:77 X509v3 Authority Key Identifier: keyid:01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/1585570A544C11E9BDFF2B2DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 58.84.32.0/24 103.129.200.0/22 103.197.48.0/24 IPv6: 2403:8540::/32 Signature Algorithm: sha256WithRSAEncryption 3f:eb:6c:a1:87:54:0d:1f:ed:e7:9a:07:b6:8a:e1:14:be:1e: 40:05:1c:13:e4:95:d2:21:3d:59:9b:63:57:23:85:c2:79:18: 3a:d0:33:68:f1:11:85:c0:ca:1c:35:ae:b2:ed:ba:c2:03:e0: b0:f8:ef:41:12:85:d7:dd:22:3e:7b:f2:d3:25:c1:ec:64:b1: ab:3a:f0:9e:81:fd:70:d9:5b:e1:22:8b:ba:60:b7:4c:5e:e0: 0b:66:f6:10:9d:5e:cd:8f:27:1a:47:26:6b:e8:76:5d:cb:72: e9:6e:88:53:64:1e:e9:1e:f0:30:66:f9:9f:60:5b:48:ba:ec: 2a:1b:69:1e:c8:49:69:e9:aa:0b:b5:3b:e8:47:ca:4b:18:cf: 0a:8b:2c:ef:fe:ac:c8:c8:9a:46:f7:26:0c:11:6f:64:f9:30: 66:b3:58:9f:64:76:f8:8a:5e:b5:3d:b3:62:a8:89:46:66:e8: 9c:05:33:8a:d6:a3:ad:72:95:b8:b5:31:05:f8:cc:81:39:e6: f1:4d:67:35:d8:12:cf:9b:67:65:47:ad:49:20:6d:ed:39:fd: 62:5c:56:5c:54:56:a9:28:5d:81:58:14:01:a3:c1:9a:9b:72: b2:5c:e5:19:dd:a7:ba:80:47:e1:1f:af:9e:39:f8:d7:fa:b6: 6f:77:84:6a -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICEG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5RjcxMTAvBgNVBAUTKDAxNzBCMEUwRDA2RTMxNDczQ0FDMTY0RTRCMEI2RDIx QkRGNEQyMzcwHhcNMjUxMTA0MTczNjI4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDNhMC1iZWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQeaH536DIeNCg0DdIvyI0Ki/44G62DdF8Kw5beydVeTesIsD3+NAMDDrQ4L QCNkMnTA5U8IFFrtNFJlwYkm42Mj31XpdBQsmxngzN2b9aVPF5zmeEpMEuwcdQ7p ilBQ3+1pNfJovK6ACzSWl6vZTiWHdTyCEbuA14q8Ib7K5pLO+zdg1F8Gn5hV2Vcm dRDs2O0fe7BwlevvJmQlY4n/+9K8uipS4BiFNia3MP5OLlYDNAD/3BlV+srGKOE0 bDyL1JcHorPnV6Wx+fbNqeuGfDUg9RWPV7s0g0ydMlkug/j/aJ2I61sMHtvVOXu5 /hEK8XuUkAR/ovoURFp43UKLcwIDAQABo4ICezCCAncwHQYDVR0OBBYEFHj+HynT 6aPTNDgLgYmCrC57Xft3MB8GA1UdIwQYMBaAFAFwsODQbjFHPKwWTksLbSG99NI3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlGNy8zNzlFQzc0MjU0 NEExMUU5QTM1MEMxMjdDNEY5QUUwMi9BWEN3NE5CdU1VYzhyQlpPU3d0dEliMzAw amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FYQ3c0TkJ1TVVjOHJCWk9Td3R0SWIzMDBqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUU5RjcvMzc5RUM3NDI1NDRBMTFFOUEzNTBDMTI3QzRGOUFFMDIvMTU4NTU3MEE1 NDRDMTFFOUJERkYyQjJEQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQAOlQgAwQCZ4HIAwQAZ8UwMA0EAgACMAcDBQAkA4VAMA0GCSqGSIb3 DQEBCwUAA4IBAQA/62yhh1QNH+3nmge2iuEUvh5ABRwT5JXSIT1Zm2NXI4XCeRg6 0DNo8RGFwMocNa6y7brCA+Cw+O9BEoXX3SI+e/LTJcHsZLGrOvCegf1w2VvhIou6 YLdMXuALZvYQnV7NjycaRyZr6HZdy3LpbohTZB7pHvAwZvmfYFtIuuwqG2keyElp 6aoLtTvoR8pLGM8Kiyzv/qzIyJpG9yYMEW9k+TBms1ifZHb4il61PbNiqIlGZuic BTOK1qOtcpW4tTEF+MyBOebxTWc12BLPm2dlR61JIG3tOf1iXFZcVFapKF2BWBQB o8Gam3KyXOUZ3ae6gEfhH6+eOfjX+rZvd4Rq -----END CERTIFICATE-----Generated at Mon Mar 2 14:37:59 2026 by rpki-client