$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/945922AECEBA11EDBBFD9E28C4F9AE02.roa File: 945922AECEBA11EDBBFD9E28C4F9AE02.roa (raw, json) Hash identifier: mwJTu9ubLJ5CecmwYFCQ6y7GrlQ3uGcRqvbvaSw7Luw= Subject key identifier: E4:03:F8:6D:0F:B7:39:A0:2D:2C:76:9F:8D:E4:E2:E7:9C:3E:B1:F0 Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Certificate serial: 36E9 Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/945922AECEBA11EDBBFD9E28C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:43:50 +0000 ROA not before: Fri 12 Dec 2025 14:30:36 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 138985 IP address blocks: 116.90.106.0/24 maxlen: 24 116.90.107.0/24 maxlen: 24 116.90.108.0/24 maxlen: 24 116.90.109.0/24 maxlen: 24 202.69.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:42:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14057 (0x36e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Validity Not Before: Dec 12 14:30:36 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a488e6-f454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b6:f6:7f:62:99:3f:4d:25:91:8d:71:97:74: d9:82:c5:c1:a2:8a:e4:bd:51:3e:35:0a:3b:27:71: 59:50:5b:ae:78:a1:00:cf:34:8b:d4:eb:fd:25:23: 11:5c:9c:63:7f:55:b9:23:d1:28:8a:31:b8:29:4f: 65:48:9c:f0:a6:99:51:22:df:25:c2:11:0e:bf:08: 10:7e:c3:bf:c3:c8:e1:cb:bd:e7:54:ea:85:46:6d: df:fb:1c:65:c6:b7:51:43:1e:9b:7d:77:69:ce:c5: 3b:bc:07:e8:dc:98:a6:7a:91:2b:0b:26:7d:4d:c0: 45:e3:77:cf:7a:1b:d3:c1:50:84:82:93:a8:aa:2f: 17:3c:ef:fc:9d:72:f5:4a:70:85:2e:02:a7:ac:c2: 2e:08:ed:30:7d:41:31:3e:0e:9a:0b:4d:58:85:b1: 2f:52:de:ec:da:2e:c8:3c:e4:34:77:04:37:ab:c0: 9d:2d:32:6f:a8:a1:ef:29:5c:02:fd:3c:49:6b:61: 29:11:07:3d:36:88:8d:14:b4:aa:61:b4:7c:c0:5c: 46:7d:eb:0c:89:01:42:26:4f:ca:71:af:80:e4:3b: d7:d9:0d:be:d6:05:c6:0e:55:7b:67:9e:67:8d:7b: 36:d5:41:d6:dc:60:5a:46:63:d5:c9:02:53:8a:01: 19:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:03:F8:6D:0F:B7:39:A0:2D:2C:76:9F:8D:E4:E2:E7:9C:3E:B1:F0 X509v3 Authority Key Identifier: keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/945922AECEBA11EDBBFD9E28C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 116.90.106.0-116.90.109.255 202.69.42.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:6e:64:eb:74:00:a4:fb:83:eb:be:c3:c9:27:67:47:5b:5b: 11:e2:b0:31:77:15:36:6e:b6:c4:6d:c5:4d:5d:59:ac:a3:0b: 71:c4:63:fe:fd:61:5b:b3:0a:c6:3d:40:72:ba:11:6f:78:dd: b4:a3:dc:1e:51:6f:40:01:46:54:9a:03:73:ff:8b:72:de:09: bd:78:5c:6e:b4:d0:99:cc:48:a6:4c:ff:15:41:b0:b5:bb:ec: f6:e2:1c:c2:f5:51:c4:d2:36:35:2c:1e:5a:39:db:ac:c2:3a: 7d:72:ac:7d:8e:ed:cb:af:c1:f4:61:98:be:8e:57:57:74:4c: 47:a5:fb:4c:89:84:2f:ec:74:3a:a2:7b:3f:a8:05:fe:2c:31: 00:e3:21:43:97:b2:3c:a3:98:6f:54:71:28:e0:9b:95:4f:24: 0c:3a:a0:6a:c6:b0:0d:7e:9e:49:9f:f8:68:15:52:1d:dc:d8: 92:14:97:54:c4:63:c4:8a:34:4d:5e:8c:9e:c9:ed:86:be:3f: 9e:42:3e:05:28:af:27:c2:0f:c4:f3:10:74:c2:ec:70:86:43: a2:79:cc:fb:1f:65:db:bc:fb:07:29:9d:1d:ac:d0:cf:31:80: b9:94:f6:b7:bd:2a:a9:05:0d:b7:9e:44:08:a7:e7:a4:65:95: 04:f3:10:57 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICNukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx NkQxNTdCMzQwHhcNMjUxMjEyMTQzMDM2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODhlNi1mNDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoLb2f2KZP00lkY1xl3TZgsXBoorkvVE+NQo7J3FZUFuueKEAzzSL1Ov9JSMR XJxjf1W5I9EoijG4KU9lSJzwpplRIt8lwhEOvwgQfsO/w8jhy73nVOqFRm3f+xxl xrdRQx6bfXdpzsU7vAfo3JimepErCyZ9TcBF43fPehvTwVCEgpOoqi8XPO/8nXL1 SnCFLgKnrMIuCO0wfUExPg6aC01YhbEvUt7s2i7IPOQ0dwQ3q8CdLTJvqKHvKVwC /TxJa2EpEQc9NoiNFLSqYbR8wFxGfesMiQFCJk/Kca+A5DvX2Q2+1gXGDlV7Z55n jXs21UHW3GBaRmPVyQJTigEZlQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFOQD+G0P tzmgLSx2n43k4uecPrHwMB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjVEN0UvRUNBNjgyMzQxRDg3MTFFMjk4MzIyREUwMDhCMDJDRDIvOTQ1OTIyQUVD RUJBMTFFREJCRkQ5RTI4QzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUMAwDBAF0WmoDBAF0WmwDBADKRSowDQYJKoZIhvcNAQELBQADggEBADxu ZOt0AKT7g+u+w8knZ0dbWxHisDF3FTZutsRtxU1dWayjC3HEY/79YVuzCsY9QHK6 EW943bSj3B5Rb0ABRlSaA3P/i3LeCb14XG600JnMSKZM/xVBsLW77PbiHML1UcTS NjUsHlo526zCOn1yrH2O7cuvwfRhmL6OV1d0TEel+0yJhC/sdDqiez+oBf4sMQDj IUOXsjyjmG9UcSjgm5VPJAw6oGrGsA1+nkmf+GgVUh3c2JIUl1TEY8SKNE1ejJ7J 7Ya+P55CPgUoryfCD8TzEHTC7HCGQ6J5zPsfZdu8+wcpnR2s0M8xgLmU9re9KqkF DbeeRAin56RllQTzEFc= -----END CERTIFICATE-----Generated at Mon Mar 2 14:27:06 2026 by rpki-client