$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/2870E2347EB211F09B907A6BC4F9AE02.roa File: 2870E2347EB211F09B907A6BC4F9AE02.roa (raw, json) Hash identifier: 9XpDqx6Xcy610EWPbcuBIhNi9mO9u1+/rkKxHtaBMFk= Subject key identifier: E6:BB:05:56:C1:60:70:DE:44:9A:E5:41:8A:ED:AD:B4:DD:1D:E7:90 Certificate issuer: /CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D Certificate serial: 03DF Authority key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/2870E2347EB211F09B907A6BC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:25:43 +0000 ROA not before: Mon 01 Sep 2025 12:49:07 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 64245 IP address blocks: 45.114.119.0/24 maxlen: 24 2402:2f80:42::/48 maxlen: 48 2402:2f80:64::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:59:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 991 (0x3df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAA44, serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D Validity Not Before: Sep 1 12:49:07 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a44c67-f197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7b:80:d3:44:5a:91:67:53:0d:f9:21:f9:b2: 12:39:74:e3:ee:af:fc:df:e7:20:03:52:49:2a:0e: 4d:3e:7c:ef:08:24:00:aa:31:6e:b9:46:0f:6f:ff: 39:0b:47:09:bb:d1:70:4f:53:1a:1d:9b:96:cd:c7: 6f:4f:2e:35:54:ad:20:3b:ba:6b:e0:ec:d7:e6:5c: d1:ae:ec:03:be:2c:71:88:18:11:98:09:eb:08:dd: f6:02:bf:f0:ab:a8:21:13:b1:1c:8e:7f:ca:77:93: e8:a4:b9:46:2f:b0:ab:b5:62:27:37:05:25:d6:5b: 0d:42:18:0e:60:40:45:f8:73:0e:e1:8f:22:15:30: af:7d:47:48:d2:b2:a1:b8:77:03:ad:79:5b:57:7a: d5:5b:49:c9:14:af:bc:e9:ec:d0:2e:ef:e9:03:7b: 07:9e:67:c8:ad:46:0c:b3:d2:56:0f:d0:b8:53:b2: 68:3b:03:eb:a1:87:69:f7:dd:f1:a7:20:00:69:46: 6c:d8:fc:1e:a0:b3:68:3a:91:c5:0f:9a:c4:0d:26: 1c:5a:0a:17:53:37:fe:e2:4e:89:05:f5:d3:19:2b: 69:d9:8f:19:42:a1:3e:5e:fb:9f:09:66:86:a5:2a: 9c:25:f2:63:31:d6:ee:c2:3a:e4:77:e7:97:33:a8: 3f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:BB:05:56:C1:60:70:DE:44:9A:E5:41:8A:ED:AD:B4:DD:1D:E7:90 X509v3 Authority Key Identifier: keyid:2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/2870E2347EB211F09B907A6BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.114.119.0/24 IPv6: 2402:2f80:42::/48 2402:2f80:64::/48 Signature Algorithm: sha256WithRSAEncryption 36:9f:59:58:b3:c3:24:b0:30:40:45:e9:52:62:77:3f:99:a4: 67:35:c8:6b:8a:d3:00:c2:4b:84:ad:03:39:25:c2:fa:fb:83: 9b:99:6c:f2:16:b0:d3:4f:27:0d:26:c7:7f:f6:f8:f2:b3:04: 55:25:14:0b:3e:1c:a2:51:cd:ac:a4:b6:ee:d1:c3:9d:ec:fa: 99:9a:af:0e:93:89:f3:3e:93:64:41:38:6a:09:12:85:a3:47: aa:39:df:e1:f3:d2:f1:b4:c9:2e:68:a0:8b:a2:08:56:14:0a: 33:8e:aa:f5:ae:4f:aa:f8:a3:f5:f4:6c:26:3f:e3:39:c2:81: 61:53:29:32:3e:a9:94:32:b6:ba:bc:da:28:e9:44:a7:d5:fc: 7d:9e:3a:85:58:2d:cd:76:19:33:47:c0:eb:23:56:80:fe:83: b3:60:c7:40:5d:78:26:d0:ac:78:98:89:c9:f6:84:bb:30:01: 66:c6:ef:4b:0a:fa:94:69:c3:59:27:f8:c6:b9:4e:8f:f9:bf: 4a:47:4b:6c:a2:2d:69:0b:aa:5c:7c:c2:17:85:58:ad:cd:96: df:e7:d7:d4:0c:c1:66:85:9b:a9:24:a6:4b:17:8a:db:3b:2c: 57:96:e4:95:4c:1a:97:e3:0e:63:8c:15:05:dd:a5:74:50:7e: f7:e4:c4:63 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICA98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFBNDQxMTAvBgNVBAUTKDJDQzMzRkJDQjg2NDA4NDAyMDg5NEE3MkREMDg4NTA1 QUY5QkI2NkQwHhcNMjUwOTAxMTI0OTA3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGM2Ny1mMTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXuA00RakWdTDfkh+bISOXTj7q/83+cgA1JJKg5NPnzvCCQAqjFuuUYPb/85 C0cJu9FwT1MaHZuWzcdvTy41VK0gO7pr4OzX5lzRruwDvixxiBgRmAnrCN32Ar/w q6ghE7Ecjn/Kd5PopLlGL7CrtWInNwUl1lsNQhgOYEBF+HMO4Y8iFTCvfUdI0rKh uHcDrXlbV3rVW0nJFK+86ezQLu/pA3sHnmfIrUYMs9JWD9C4U7JoOwProYdp993x pyAAaUZs2PweoLNoOpHFD5rEDSYcWgoXUzf+4k6JBfXTGStp2Y8ZQqE+XvufCWaG pSqcJfJjMdbuwjrkd+eXM6g/bQIDAQABo4ICejCCAnYwHQYDVR0OBBYEFOa7BVbB YHDeRJrlQYrtrbTdHeeQMB8GA1UdIwQYMBaAFCzDP7y4ZAhAIIlKct0IhQWvm7Zt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUE0NC85Q0MwMEE5Q0M3 RkYxMUVDOUJEQkZFNEJDNEY5QUUwMi9MTU1fdkxoa0NFQWdpVXB5M1FpRkJhLWJ0 bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xNTV92TGhrQ0VBZ2lVcHkzUWlGQmEtYnRtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkFBNDQvOUNDMDBBOUNDN0ZGMTFFQzlCREJGRTRCQzRGOUFFMDIvMjg3MEUyMzQ3 RUIyMTFGMDlCOTA3QTZCQzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAM BAIAATAGAwQALXJ3MBgEAgACMBIDBwAkAi+AAEIDBwAkAi+AAGQwDQYJKoZIhvcN AQELBQADggEBADafWVizwySwMEBF6VJidz+ZpGc1yGuK0wDCS4StAzklwvr7g5uZ bPIWsNNPJw0mx3/2+PKzBFUlFAs+HKJRzayktu7Rw53s+pmarw6TifM+k2RBOGoJ EoWjR6o53+Hz0vG0yS5ooIuiCFYUCjOOqvWuT6r4o/X0bCY/4znCgWFTKTI+qZQy trq82ijpRKfV/H2eOoVYLc12GTNHwOsjVoD+g7Ngx0BdeCbQrHiYicn2hLswAWbG 70sK+pRpw1kn+Ma5To/5v0pHS2yiLWkLqlx8wheFWK3Nlt/n19QMwWaFm6kkpksX its7LFeW5JVMGpfjDmOMFQXdpXRQfvfkxGM= -----END CERTIFICATE-----Generated at Mon Mar 2 05:42:38 2026 by rpki-client