$ rpki-client -vvf rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/5CCDCD7C9BEA11EFBCB36227C4F9AE02.roa File: 5CCDCD7C9BEA11EFBCB36227C4F9AE02.roa (raw, json) Hash identifier: lEGaA4sdvdJB9ZdOckx6GXw78zY9nH89g3CEg6GczLQ= Subject key identifier: 4D:EB:0F:1A:70:95:21:47:74:63:25:47:B6:39:F9:4E:C2:23:94:90 Certificate issuer: /CN=A91B67D1/serialNumber=767872BDD0EF826A6495D8126A139FC40493800F Certificate serial: 1047 Authority key identifier: 76:78:72:BD:D0:EF:82:6A:64:95:D8:12:6A:13:9F:C4:04:93:80:0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/5CCDCD7C9BEA11EFBCB36227C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:32:36 +0000 ROA not before: Tue 02 Sep 2025 18:07:34 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 63689 IP address blocks: 45.114.236.0/22 maxlen: 24 103.71.24.0/24 maxlen: 24 2401:d640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.crl rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4167 (0x1047) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B67D1, serialNumber=767872BDD0EF826A6495D8126A139FC40493800F Validity Not Before: Sep 2 18:07:34 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a45c14-6ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:63:9e:7c:aa:e8:de:1f:4f:52:5d:73:66:28: 81:4f:06:cd:1b:7f:0b:26:75:98:e3:b7:ae:ff:22: 66:b5:c7:30:1d:a6:79:5f:97:30:99:d5:89:b7:6a: 6a:a1:68:fc:46:f6:47:24:0b:c1:2a:25:8b:46:3a: ba:a7:59:4c:f4:d5:62:cf:fb:2f:8a:02:2c:e1:ff: 7d:eb:b2:9d:69:7e:b3:a1:49:92:a9:9e:db:5a:fb: 09:dd:36:ab:a5:37:28:61:fe:a0:cb:23:57:58:9f: 98:1b:fd:44:97:ec:d4:d7:a6:33:a0:6b:46:8c:6d: d2:00:c9:68:d9:69:4f:19:1d:7f:e4:d1:bc:b3:a3: d4:18:35:07:54:43:a2:b3:75:b7:8f:2f:5c:81:e6: d3:0c:e4:d9:e0:2b:c1:62:75:a8:4b:20:fa:8e:f4: 21:5c:7b:c7:d2:d7:19:e2:95:6c:d5:db:74:7b:58: 79:17:16:a2:68:7d:2c:ff:fb:d5:8f:b7:1d:74:5e: 87:9e:d2:13:d3:82:d8:23:66:b5:03:49:c1:ae:d9: d4:35:d2:77:94:6a:a4:b8:6d:0f:66:4e:81:ea:17: 49:26:93:b1:81:92:53:0d:c1:3b:e2:48:0f:56:53: c6:6c:54:ee:8c:6d:07:f0:30:6c:c4:c7:75:72:33: 1e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:EB:0F:1A:70:95:21:47:74:63:25:47:B6:39:F9:4E:C2:23:94:90 X509v3 Authority Key Identifier: keyid:76:78:72:BD:D0:EF:82:6A:64:95:D8:12:6A:13:9F:C4:04:93:80:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/5CCDCD7C9BEA11EFBCB36227C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.114.236.0/22 103.71.24.0/24 IPv6: 2401:d640::/32 Signature Algorithm: sha256WithRSAEncryption 77:e4:e8:86:ff:8d:fd:03:87:5a:9b:d4:dc:e7:2a:23:43:97: 3d:eb:ee:64:ab:7d:28:c2:5d:02:d8:44:93:7a:fa:c0:ef:3f: c1:3a:cb:64:a0:7f:cc:94:12:c8:11:af:3d:49:18:80:c6:b1: a1:41:73:37:2e:2d:01:0f:4b:16:04:a1:0a:2d:20:04:ed:1c: d1:22:c8:5b:d5:60:07:54:ef:ab:7d:b0:a8:ac:18:bc:7c:73: e8:35:e2:5f:20:7d:dd:78:54:1c:e7:56:4a:c8:ff:51:7f:40: b3:a6:03:63:dd:06:f5:16:c3:ff:15:f6:27:4c:44:ef:37:be: 81:10:73:bd:8b:75:06:7c:6c:14:b4:4d:26:f0:29:54:27:6a: 16:eb:74:46:13:52:47:3d:ef:9d:e3:86:8e:f2:cc:58:38:83: be:d8:81:d4:82:a9:83:bd:59:ec:62:ef:9d:8c:0e:e2:9a:36: 33:96:6d:40:8f:a2:ce:64:34:c4:cc:6d:d3:58:7e:7a:a6:dc: 69:14:70:0d:d3:bc:a9:1b:04:4e:82:e0:2b:21:bb:d4:89:5b: 5f:2a:e8:35:5a:97:4e:91:d9:19:9a:6a:29:10:9b:c3:b6:20: 09:33:a4:60:de:eb:33:e0:9a:5e:b2:11:cf:6d:95:f2:62:48: b4:e2:12:84 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICEEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY3RDExMTAvBgNVBAUTKDc2Nzg3MkJERDBFRjgyNkE2NDk1RDgxMjZBMTM5RkM0 MDQ5MzgwMEYwHhcNMjUwOTAyMTgwNzM0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWMxNC02ZmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxWOefKro3h9PUl1zZiiBTwbNG38LJnWY47eu/yJmtccwHaZ5X5cwmdWJt2pq oWj8RvZHJAvBKiWLRjq6p1lM9NViz/svigIs4f9967KdaX6zoUmSqZ7bWvsJ3Tar pTcoYf6gyyNXWJ+YG/1El+zU16YzoGtGjG3SAMlo2WlPGR1/5NG8s6PUGDUHVEOi s3W3jy9cgebTDOTZ4CvBYnWoSyD6jvQhXHvH0tcZ4pVs1dt0e1h5FxaiaH0s//vV j7cddF6HntIT04LYI2a1A0nBrtnUNdJ3lGqkuG0PZk6B6hdJJpOxgZJTDcE74kgP VlPGbFTujG0H8DBsxMd1cjMezQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFE3rDxpw lSFHdGMlR7Y5+U7CI5SQMB8GA1UdIwQYMBaAFHZ4cr3Q74JqZJXYEmoTn8QEk4AP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjdEMS82Q0JDOUI0MDYx MUQxMUU5QjAxMkRCMzdDNEY5QUUwMi9kbmh5dmREdmdtcGtsZGdTYWhPZnhBU1Rn QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RuaHl2ZER2Z21wa2xkZ1NhaE9meEFTVGdBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjY3RDEvNkNCQzlCNDA2MTFEMTFFOUIwMTJEQjM3QzRGOUFFMDIvNUNDRENEN0M5 QkVBMTFFRkJDQjM2MjI3QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCLXLsAwQAZ0cYMA0EAgACMAcDBQAkAdZAMA0GCSqGSIb3DQEBCwUA A4IBAQB35OiG/439A4dam9Tc5yojQ5c96+5kq30owl0C2ESTevrA7z/BOstkoH/M lBLIEa89SRiAxrGhQXM3Li0BD0sWBKEKLSAE7RzRIshb1WAHVO+rfbCorBi8fHPo NeJfIH3deFQc51ZKyP9Rf0CzpgNj3Qb1FsP/FfYnTETvN76BEHO9i3UGfGwUtE0m 8ClUJ2oW63RGE1JHPe+d44aO8sxYOIO+2IHUgqmDvVnsYu+djA7imjYzlm1Aj6LO ZDTEzG3TWH56ptxpFHAN07ypGwROguArIbvUiVtfKug1WpdOkdkZmmopEJvDtiAJ M6Rg3usz4JpeshHPbZXyYki04hKE -----END CERTIFICATE-----Generated at Mon Mar 2 09:04:28 2026 by rpki-client