$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/8FF00754732F11EE90078C13C4F9AE02.roa File: 8FF00754732F11EE90078C13C4F9AE02.roa (raw, json) Hash identifier: YKihQA85OZGMIoxiktXscM0JZAAS7N+DfWFx0LMvOUU= Subject key identifier: 15:11:49:D1:1E:9F:E7:EE:97:A7:48:33:46:E7:05:D5:CB:0F:DA:4F Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Certificate serial: 36EC Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/8FF00754732F11EE90078C13C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:43:53 +0000 ROA not before: Fri 12 Dec 2025 14:30:39 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 141342 IP address blocks: 116.90.96.0/24 maxlen: 24 116.90.97.0/24 maxlen: 24 116.90.98.0/24 maxlen: 24 116.90.99.0/24 maxlen: 24 116.90.102.0/24 maxlen: 24 116.90.103.0/24 maxlen: 24 116.90.104.0/24 maxlen: 24 116.90.112.0/24 maxlen: 24 116.90.113.0/24 maxlen: 24 116.90.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:42:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14060 (0x36ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Validity Not Before: Dec 12 14:30:39 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a488e8-9916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:98:42:89:0f:07:99:64:11:08:ed:76:58:2a: 7c:38:11:ce:11:fc:78:9b:3f:4f:d1:2a:56:8b:77: 3f:c7:c5:e3:54:13:ab:0e:7c:0a:63:e2:db:f1:86: db:c5:c5:43:43:da:6f:0c:19:c3:2a:16:80:a2:c7: ea:8f:ca:88:e8:38:20:dc:4c:23:36:82:c7:b2:bd: e3:2f:63:f8:57:8d:81:d3:4f:87:a3:23:d1:29:6c: c6:28:02:e4:6a:a6:2f:ae:5b:32:9f:c9:f3:cf:09: 5a:d9:66:41:80:92:d0:40:12:5a:36:5c:e1:e8:a4: 31:00:b5:16:d8:e3:18:64:e4:b1:ee:d1:b1:01:1c: 8b:41:b6:00:1e:79:b0:b3:fc:d0:15:c9:50:08:70: f5:28:d7:9d:ec:89:22:7b:54:38:ed:c9:4e:84:c8: ab:a2:7c:50:46:4b:7d:ca:1f:53:c1:fd:53:30:a2: b0:2d:68:a8:f3:fa:0f:ff:ee:68:e9:e0:3e:51:29: d3:b2:94:4b:86:6f:63:36:dd:a6:49:7f:14:08:80: 9b:8d:5f:2c:84:b3:37:96:48:00:12:42:8e:8a:43: 87:c3:00:9a:b9:9b:de:45:de:e0:58:e1:84:60:a2: 09:ef:4d:58:63:73:ce:1d:41:89:94:0e:37:6b:c8: f3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:11:49:D1:1E:9F:E7:EE:97:A7:48:33:46:E7:05:D5:CB:0F:DA:4F X509v3 Authority Key Identifier: keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/8FF00754732F11EE90078C13C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 116.90.96.0/22 116.90.102.0-116.90.104.255 116.90.112.0-116.90.114.255 Signature Algorithm: sha256WithRSAEncryption 3c:36:c7:f7:a3:3e:9d:5b:8e:ed:55:2e:a8:76:11:2b:b3:cf: 0f:d3:1b:81:32:89:d1:7c:18:a7:ac:40:d1:32:15:a4:8b:f8: 86:18:01:30:21:56:b0:08:1d:55:fc:bc:9e:27:ae:ad:6f:26: da:9d:db:e3:c8:4d:5f:12:21:e9:49:a3:1a:fd:d7:55:44:05: 79:e7:37:31:69:b9:2e:c8:07:4e:1a:47:4e:9b:21:7f:e8:45: d6:76:58:2c:9c:ab:b7:23:38:77:c9:1e:69:ed:2d:a6:b8:e1: 05:d3:8f:05:3c:30:2c:7a:4c:83:e4:5e:f2:32:87:72:41:46: b8:cf:81:f9:b6:f8:98:7b:48:78:84:2c:16:98:90:6b:c7:3f: 7d:35:f3:56:3f:67:36:c3:0b:98:ac:09:ae:d5:af:c4:76:e3: d1:05:8e:db:33:11:dc:a4:2b:a5:4b:11:6c:1b:cd:bf:67:83: 3b:47:96:f8:7e:cb:64:2d:e9:ff:28:0f:7f:fb:df:59:77:7c: 99:7d:c2:2f:80:e5:5f:1e:22:3b:bc:5e:48:83:06:54:52:3c: 16:ad:6b:83:fa:7a:ef:03:c1:26:6a:64:12:a7:54:06:53:60: 84:db:ce:30:58:bd:29:07:f3:4a:25:f2:e6:bf:f9:d0:b3:65: ea:ce:f4:59 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgICNuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx NkQxNTdCMzQwHhcNMjUxMjEyMTQzMDM5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODhlOC05OTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxphCiQ8HmWQRCO12WCp8OBHOEfx4mz9P0SpWi3c/x8XjVBOrDnwKY+Lb8Ybb xcVDQ9pvDBnDKhaAosfqj8qI6Dgg3EwjNoLHsr3jL2P4V42B00+HoyPRKWzGKALk aqYvrlsyn8nzzwla2WZBgJLQQBJaNlzh6KQxALUW2OMYZOSx7tGxARyLQbYAHnmw s/zQFclQCHD1KNed7Ikie1Q47clOhMironxQRkt9yh9Twf1TMKKwLWio8/oP/+5o 6eA+USnTspRLhm9jNt2mSX8UCICbjV8shLM3lkgAEkKOikOHwwCauZveRd7gWOGE YKIJ701YY3POHUGJlA43a8jz3QIDAQABo4ICfDCCAngwHQYDVR0OBBYEFBURSdEe n+ful6dIM0bnBdXLD9pPMB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjVEN0UvRUNBNjgyMzQxRDg3MTFFMjk4MzIyREUwMDhCMDJDRDIvOEZGMDA3NTQ3 MzJGMTFFRTkwMDc4QzEzQzRGOUFFMDIucm9hMDsGCCsGAQUFBwEHAQH/BCwwKjAo BAIAATAiAwQCdFpgMAwDBAF0WmYDBAB0WmgwDAMEBHRacAMEAHRacjANBgkqhkiG 9w0BAQsFAAOCAQEAPDbH96M+nVuO7VUuqHYRK7PPD9MbgTKJ0XwYp6xA0TIVpIv4 hhgBMCFWsAgdVfy8nieurW8m2p3b48hNXxIh6UmjGv3XVUQFeec3MWm5LsgHThpH Tpshf+hF1nZYLJyrtyM4d8keae0tprjhBdOPBTwwLHpMg+Re8jKHckFGuM+B+bb4 mHtIeIQsFpiQa8c/fTXzVj9nNsMLmKwJrtWvxHbj0QWO2zMR3KQrpUsRbBvNv2eD O0eW+H7LZC3p/ygPf/vfWXd8mX3CL4DlXx4iO7xeSIMGVFI8Fq1rg/p67wPBJmpk EqdUBlNghNvOMFi9KQfzSiXy5r/50LNl6s70WQ== -----END CERTIFICATE-----Generated at Mon Mar 2 04:35:58 2026 by rpki-client