$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/E879EE7C144111EFB247B936C4F9AE02.roa File: E879EE7C144111EFB247B936C4F9AE02.roa (raw, json) Hash identifier: ZeAGLGAA4h+CcuwE4PZxgCpOScaMQUl6R6qDfBF+VLY= Subject key identifier: 5C:7E:B1:88:E0:A9:F8:9B:38:77:15:04:98:AC:21:08:73:BC:AD:42 Certificate issuer: /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638 Certificate serial: 03D1 Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/E879EE7C144111EFB247B936C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:13:36 +0000 ROA not before: Wed 03 Sep 2025 03:20:08 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 134450 IP address blocks: 45.125.246.0/24 maxlen: 24 103.239.213.0/24 maxlen: 24 103.241.52.0/22 maxlen: 22 202.94.174.0/24 maxlen: 24 2402:bd80::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 977 (0x3d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6587, serialNumber=2D634077CC847B59D4048D43E04B3309698FE638 Validity Not Before: Sep 3 03:20:08 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a481d0-4329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:86:3d:86:4c:ec:8b:03:a5:18:b5:cb:50:1b: b7:78:b5:5d:97:74:50:e8:c8:b9:cc:5b:41:47:c2: c4:87:0a:b5:fd:1a:ec:08:15:3a:30:34:6c:e8:fa: c1:de:f0:77:54:ca:29:9d:ed:ae:02:d2:05:a9:ec: 14:f2:4e:8c:99:73:b9:4e:9b:4a:2d:7e:08:9e:dd: 04:51:55:83:b1:a4:13:63:72:80:c4:d1:65:f9:36: db:95:c3:cd:fb:8a:68:1c:f2:c9:d7:f9:a5:5a:2c: a7:dd:fa:89:9b:11:99:77:29:53:aa:29:3d:a1:88: 87:9c:85:54:60:c8:5d:17:12:c4:41:c6:77:4a:69: 13:c3:44:e0:f5:1e:99:76:92:a9:bc:01:0a:5b:be: ce:db:8e:b5:e1:90:5b:3e:5d:9f:e5:a1:33:34:3c: b8:eb:3d:95:31:d9:f7:c6:79:33:63:d3:95:b3:a0: 59:93:43:f2:05:44:30:e2:f9:0e:0b:ad:f4:57:35: 68:a1:37:34:ea:ba:ea:71:cf:18:98:51:49:f7:e9: 4a:65:7a:e1:42:73:67:a8:c7:3c:db:c5:30:5a:ed: 68:d6:6a:ac:49:9c:6f:7e:81:19:a8:29:e2:a2:ae: 1d:15:78:77:9b:d5:b6:a4:c5:5d:54:1f:9b:10:58: 9f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:7E:B1:88:E0:A9:F8:9B:38:77:15:04:98:AC:21:08:73:BC:AD:42 X509v3 Authority Key Identifier: keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/E879EE7C144111EFB247B936C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.125.246.0/24 103.239.213.0/24 103.241.52.0/22 202.94.174.0/24 IPv6: 2402:bd80::/30 Signature Algorithm: sha256WithRSAEncryption 62:38:42:f1:86:8f:dd:48:56:95:b4:7c:f0:8c:0c:f9:6f:3f: 4a:ce:a4:22:23:48:3b:26:0c:31:65:05:a9:e4:e4:d1:ca:bc: 2c:87:b3:8a:81:15:db:74:08:28:0e:e6:20:0b:1f:55:29:4c: 0b:c6:f9:fa:f9:c1:1e:5a:68:62:94:66:b5:80:bd:0c:1d:3b: eb:78:bb:91:63:a8:eb:64:75:15:33:d5:37:e8:59:91:89:84: b9:7d:c6:02:1f:fe:a1:3a:40:6f:7a:23:12:ea:b0:2e:11:fb: 5e:cd:18:86:cb:d6:86:23:4f:0c:4a:9a:69:bc:ae:6f:52:eb: f3:86:eb:db:77:69:f5:85:1d:96:45:b0:e8:bf:61:8b:8e:50: 30:55:6d:72:d8:1c:2e:ee:e9:6b:2a:19:f7:52:55:89:04:fe: 25:de:69:1e:ac:df:c2:92:7e:b7:17:fe:5f:f3:43:b6:ef:0e: a6:de:4f:13:bb:90:9e:b1:1a:35:35:4a:7c:27:f2:06:d9:f9: 2b:2a:31:9c:b0:af:4e:5e:12:2b:d0:51:76:3e:c3:b8:11:3c: 67:9e:c3:56:d7:e1:b8:44:3e:b0:b3:58:9c:b8:03:8a:cb:89: 03:05:5f:7e:11:a9:de:08:d6:55:71:2d:e9:ed:0a:d7:28:11: 65:17:9c:b2 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICA9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1ODcxMTAvBgNVBAUTKDJENjM0MDc3Q0M4NDdCNTlENDA0OEQ0M0UwNEIzMzA5 Njk4RkU2MzgwHhcNMjUwOTAzMDMyMDA4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODFkMC00MzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApIY9hkzsiwOlGLXLUBu3eLVdl3RQ6Mi5zFtBR8LEhwq1/RrsCBU6MDRs6PrB 3vB3VMopne2uAtIFqewU8k6MmXO5TptKLX4Int0EUVWDsaQTY3KAxNFl+TbblcPN +4poHPLJ1/mlWiyn3fqJmxGZdylTqik9oYiHnIVUYMhdFxLEQcZ3SmkTw0Tg9R6Z dpKpvAEKW77O24614ZBbPl2f5aEzNDy46z2VMdn3xnkzY9OVs6BZk0PyBUQw4vkO C630VzVooTc06rrqcc8YmFFJ9+lKZXrhQnNnqMc828UwWu1o1mqsSZxvfoEZqCni oq4dFXh3m9W2pMVdVB+bEFifLwIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFFx+sYjg qfibOHcVBJisIQhzvK1CMB8GA1UdIwQYMBaAFC1jQHfMhHtZ1ASNQ+BLMwlpj+Y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjU4Ny80MTdENzFCNDkx ODYxMUVEQTg0QTEyNERDNEY5QUUwMi9MV05BZDh5RWUxblVCSTFENEVzekNXbVA1 amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xXTkFkOHlFZTFuVUJJMUQ0RXN6Q1dtUDVqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjY1ODcvNDE3RDcxQjQ5MTg2MTFFREE4NEExMjREQzRGOUFFMDIvRTg3OUVFN0Mx NDQxMTFFRkIyNDdCOTM2QzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQALX32AwQAZ+/VAwQCZ/E0AwQAyl6uMA0EAgACMAcDBQIkAr2AMA0G CSqGSIb3DQEBCwUAA4IBAQBiOELxho/dSFaVtHzwjAz5bz9KzqQiI0g7JgwxZQWp 5OTRyrwsh7OKgRXbdAgoDuYgCx9VKUwLxvn6+cEeWmhilGa1gL0MHTvreLuRY6jr ZHUVM9U36FmRiYS5fcYCH/6hOkBveiMS6rAuEftezRiGy9aGI08MSpppvK5vUuvz huvbd2n1hR2WRbDov2GLjlAwVW1y2Bwu7ulrKhn3UlWJBP4l3mkerN/Ckn63F/5f 80O27w6m3k8Tu5CesRo1NUp8J/IG2fkrKjGcsK9OXhIr0FF2PsO4ETxnnsNW1+G4 RD6ws1icuAOKy4kDBV9+EaneCNZVcS3p7QrXKBFlF5yy -----END CERTIFICATE-----Generated at Mon Mar 2 10:55:38 2026 by rpki-client