$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/A5656D2E892B11EE94747D6BC4F9AE02.roa File: A5656D2E892B11EE94747D6BC4F9AE02.roa (raw, json) Hash identifier: /k9F9UoMVvvC6p1jgV3pWpP4PVT7CPpxGz+wVVYMTRg= Subject key identifier: 22:28:FE:06:E1:E7:44:68:47:AA:32:A1:38:11:D9:8A:CE:20:4F:2E Certificate issuer: /CN=A91B4713/serialNumber=69A486FBF21484F1412FB8A80A278A248CEFBEB2 Certificate serial: 01BB Authority key identifier: 69:A4:86:FB:F2:14:84:F1:41:2F:B8:A8:0A:27:8A:24:8C:EF:BE:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaSG-_IUhPFBL7ioCieKJIzvvrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/A5656D2E892B11EE94747D6BC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:23:10 +0000 ROA not before: Mon 23 Feb 2026 03:23:28 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 138004 IP address blocks: 180.94.20.0/23 maxlen: 23 180.94.20.0/24 maxlen: 24 180.94.21.0/24 maxlen: 24 2401:51e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.crl rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaSG-_IUhPFBL7ioCieKJIzvvrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4713, serialNumber=69A486FBF21484F1412FB8A80A278A248CEFBEB2 Validity Not Before: Feb 23 03:23:28 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a43dbe-74ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bd:6c:43:89:06:1f:16:48:91:46:70:cb:10: cf:57:35:6d:a5:19:ea:92:51:9f:13:ae:9e:e4:43: be:78:ec:33:cc:3a:58:51:e4:13:88:89:3d:5f:b8: b5:90:e4:73:d1:8e:c0:77:9c:1c:5b:13:8d:30:a0: 45:b9:b8:ce:11:9f:15:e7:47:ef:a4:bd:db:f2:07: 9b:f2:ba:28:b6:e5:35:ba:01:85:21:8b:c8:a7:1b: 93:22:b9:33:b5:80:e6:f0:dd:39:71:9d:19:27:6f: ec:d4:40:53:e1:ef:2e:c7:02:28:8a:5e:7a:d3:e0: d7:8f:e3:2a:46:98:9a:ae:7a:68:e8:26:ca:5b:bf: fb:ff:f7:2d:b8:49:ea:fc:66:78:87:12:76:ec:08: c5:8d:87:e9:3e:95:bc:1f:94:45:2d:4d:45:18:94: 65:51:49:33:31:d8:e7:63:61:31:ed:16:9d:c9:08: 38:07:11:a4:2d:33:c4:11:5d:37:51:cb:44:f9:4e: 62:8b:77:2c:a2:4c:0d:04:cd:49:07:9a:76:cb:e7: 47:16:b4:c2:e4:48:7c:a7:ad:03:0e:57:2c:99:ff: 55:09:41:0a:6d:01:03:81:8a:fe:1e:b5:11:26:6b: 66:19:6e:92:77:17:9b:6d:85:b7:c5:22:bd:59:32: 38:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:28:FE:06:E1:E7:44:68:47:AA:32:A1:38:11:D9:8A:CE:20:4F:2E X509v3 Authority Key Identifier: keyid:69:A4:86:FB:F2:14:84:F1:41:2F:B8:A8:0A:27:8A:24:8C:EF:BE:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaSG-_IUhPFBL7ioCieKJIzvvrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/A5656D2E892B11EE94747D6BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 180.94.20.0/23 IPv6: 2401:51e0::/32 Signature Algorithm: sha256WithRSAEncryption 22:ec:7e:6a:79:15:48:cd:79:1e:46:40:25:0c:b3:38:17:67: 7b:82:07:3b:9b:b8:8b:43:73:ed:7f:b0:d6:1b:61:c5:00:ad: bf:50:fd:22:f7:da:20:a4:9b:a5:ce:7e:dd:b0:cc:18:b9:d2: 8a:f7:87:8d:c6:4a:9b:eb:ad:c3:67:0a:52:ea:f8:2b:6b:3e: 26:66:48:31:3f:1c:1a:0a:c6:87:b4:92:9c:51:cc:c6:13:bd: b4:99:ea:8a:f2:a6:be:9a:a7:7e:29:69:0a:91:08:31:46:e9: 4f:5c:ca:a3:2a:57:33:83:ab:ef:77:0a:59:00:80:03:02:b8: e4:6d:a8:62:16:3a:fe:44:a4:d9:d7:55:a6:9b:43:3b:01:ea: eb:55:a5:bc:df:2b:b0:fc:ff:98:3f:1f:dd:ac:60:b1:74:48: c5:0c:56:ef:e8:e5:0a:f8:72:e9:30:04:4d:04:7c:e5:73:17: 4d:e4:53:ae:d7:be:0c:e1:52:23:f0:67:26:8c:ea:73:56:59: 04:73:36:8c:41:de:97:94:4e:0e:dd:c9:96:3f:50:39:a7:00: 90:66:a4:06:95:41:20:17:c8:33:8f:fb:71:6e:b1:ce:28:23: 5f:57:40:6f:e3:0d:74:37:6c:43:44:dc:f9:87:95:17:58:1a: d4:63:50:ab -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ3MTMxMTAvBgNVBAUTKDY5QTQ4NkZCRjIxNDg0RjE0MTJGQjhBODBBMjc4QTI0 OENFRkJFQjIwHhcNMjYwMjIzMDMyMzI4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0M2RiZS03NGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvb1sQ4kGHxZIkUZwyxDPVzVtpRnqklGfE66e5EO+eOwzzDpYUeQTiIk9X7i1 kORz0Y7Ad5wcWxONMKBFubjOEZ8V50fvpL3b8geb8rootuU1ugGFIYvIpxuTIrkz tYDm8N05cZ0ZJ2/s1EBT4e8uxwIoil560+DXj+MqRpiarnpo6CbKW7/7//ctuEnq /GZ4hxJ27AjFjYfpPpW8H5RFLU1FGJRlUUkzMdjnY2Ex7RadyQg4BxGkLTPEEV03 UctE+U5ii3csokwNBM1JB5p2y+dHFrTC5Eh8p60DDlcsmf9VCUEKbQEDgYr+HrUR JmtmGW6SdxebbYW3xSK9WTI4qwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFCIo/gbh 50RoR6oyoTgR2YrOIE8uMB8GA1UdIwQYMBaAFGmkhvvyFITxQS+4qAoniiSM776y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDcxMy9GRTFCRDk3Qzg5 MkExMUVFQjYxNDgyNkFDNEY5QUUwMi9hYVNHLV9JVWhQRkJMN2lvQ2llS0pJenZ2 ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhU0ctX0lVaFBGQkw3aW9DaWVLSkl6dnZySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjQ3MTMvRkUxQkQ5N0M4OTJBMTFFRUI2MTQ4MjZBQzRGOUFFMDIvQTU2NTZEMkU4 OTJCMTFFRTk0NzQ3RDZCQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBtF4UMA0EAgACMAcDBQAkAVHgMA0GCSqGSIb3DQEBCwUAA4IBAQAi 7H5qeRVIzXkeRkAlDLM4F2d7ggc7m7iLQ3Ptf7DWG2HFAK2/UP0i99ogpJulzn7d sMwYudKK94eNxkqb663DZwpS6vgraz4mZkgxPxwaCsaHtJKcUczGE720meqK8qa+ mqd+KWkKkQgxRulPXMqjKlczg6vvdwpZAIADArjkbahiFjr+RKTZ11Wmm0M7Aerr VaW83yuw/P+YPx/drGCxdEjFDFbv6OUK+HLpMARNBHzlcxdN5FOu174M4VIj8Gcm jOpzVlkEczaMQd6XlE4O3cmWP1A5pwCQZqQGlUEgF8gzj/txbrHOKCNfV0Bv4w10 N2xDRNz5h5UXWBrUY1Cr -----END CERTIFICATE-----Generated at Mon Mar 2 13:49:04 2026 by rpki-client