$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/C24FF4C8050D11EA8626AD5DC4F9AE02.roa File: C24FF4C8050D11EA8626AD5DC4F9AE02.roa (raw, json) Hash identifier: xKENUn13Ef2bP0B62DPkEXchyNaPtBjxu7QmsrqxB9E= Subject key identifier: 5A:70:8C:0F:19:C7:9E:89:0E:43:1E:D6:AA:F6:EA:50:F3:0E:C7:4A Certificate issuer: /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Certificate serial: 149A Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/C24FF4C8050D11EA8626AD5DC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:15:04 +0000 ROA not before: Thu 08 Jan 2026 07:53:50 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 45588 IP address blocks: 114.130.128.0/18 maxlen: 24 114.130.224.0/20 maxlen: 24 123.49.0.0/18 maxlen: 24 180.211.128.0/17 maxlen: 24 203.112.192.0/19 maxlen: 24 2407:5000::/32 maxlen: 40 2407:5000:1::/48 maxlen: 48 2407:5000:2::/48 maxlen: 48 2407:5000:3::/48 maxlen: 48 2407:5000:88::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:31:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5274 (0x149a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC847, serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Validity Not Before: Jan 8 07:53:50 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a48228-24f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:76:aa:15:c9:54:d9:39:37:80:fb:fb:5c:75: a8:b8:f0:7b:6d:80:37:df:67:29:fc:e5:89:14:7d: 59:ad:65:01:e0:79:b0:97:8e:d2:ab:17:f6:f2:83: 15:3b:90:1e:56:f6:c5:89:ed:6b:6b:d8:38:4e:0a: 5c:81:73:d2:4f:d4:3b:ec:e6:88:b9:56:76:04:2d: d7:7b:7f:ab:4e:cd:75:f3:39:f1:be:ca:65:65:36: e0:7f:57:9f:bc:5e:5b:1c:ac:09:d5:d1:2d:fc:c0: f8:45:31:d1:84:3f:35:b7:97:78:bc:50:b2:86:07: 7d:4a:14:70:12:28:fa:96:e5:11:c6:11:e6:ae:5c: 78:88:c6:2b:06:f1:b3:63:8f:d7:82:03:a4:0f:ec: 6c:b5:1a:7b:45:46:9b:9d:bf:af:44:5b:26:b2:66: 47:5e:e0:59:b8:19:47:a2:e5:38:97:6b:61:2e:16: dd:fa:fb:19:f1:94:f6:5b:1c:9a:2d:b3:cd:bd:d2: d9:9e:cd:d4:c6:80:bb:72:0a:2c:a5:ba:d4:04:5d: e0:13:f4:5b:f9:75:27:ae:5d:6c:8c:62:9b:c5:0c: a3:d1:8d:dc:41:9c:e2:e1:6f:6c:b1:8e:d6:43:15: 8b:6f:bb:f0:d7:ce:cd:85:ee:ca:70:b7:7f:24:73: a1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:70:8C:0F:19:C7:9E:89:0E:43:1E:D6:AA:F6:EA:50:F3:0E:C7:4A X509v3 Authority Key Identifier: keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/C24FF4C8050D11EA8626AD5DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 114.130.128.0/18 114.130.224.0/20 123.49.0.0/18 180.211.128.0/17 203.112.192.0/19 IPv6: 2407:5000::/32 Signature Algorithm: sha256WithRSAEncryption 5b:44:6b:f2:80:5a:04:d7:d1:f8:0c:28:7b:b9:8a:a6:20:3c: 97:0e:b7:ff:73:c0:a5:dd:e3:bb:92:77:31:72:14:88:a9:df: a5:4e:2f:9c:4a:7d:02:4d:a1:3b:24:78:7c:fe:10:4c:cd:17: bb:3f:c4:cd:87:21:e9:5a:80:c7:d1:32:5a:26:15:11:6e:34: 0b:4a:74:b0:53:f4:fd:fd:65:67:9c:84:2f:09:e9:f6:d3:ab: 6d:16:ec:dc:01:b2:2e:ca:2a:06:a9:ca:7d:1e:04:74:6e:b7: a4:49:31:1c:a5:b1:10:22:2d:ab:47:e3:24:a8:58:c2:fd:8d: 38:e9:aa:7d:5e:c5:c7:cb:45:0c:1e:e4:17:39:e3:b9:ad:59: e2:22:b5:80:c0:79:f5:93:9b:86:03:c1:c5:6a:97:2f:fb:cf: 04:7d:f6:89:01:4c:5b:ec:12:e2:f8:d5:fc:f2:6e:a6:ed:76: 08:e7:04:6f:87:45:7b:cf:6d:d6:d0:2e:fd:d4:1f:93:fc:37: 85:da:a3:b0:4d:59:19:20:18:f9:12:4c:16:4f:75:a5:12:b3: bb:8e:db:b5:ae:48:47:be:2a:88:35:3c:eb:14:92:67:f6:ed: d7:26:25:55:bc:69:e3:e3:e7:0e:5e:6f:a9:ec:71:1e:b5:b7: 4c:b2:df:95 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgICFJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM4NDcxMTAvBgNVBAUTKDc5RDY2QzY0QTYxNjVBMkU0Q0IzN0Q0OTcwMEU2Qzc2 MTg0MUMzOUEwHhcNMjYwMTA4MDc1MzUwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODIyOC0yNGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2HaqFclU2Tk3gPv7XHWouPB7bYA332cp/OWJFH1ZrWUB4Hmwl47Sqxf28oMV O5AeVvbFie1ra9g4TgpcgXPST9Q77OaIuVZ2BC3Xe3+rTs118znxvsplZTbgf1ef vF5bHKwJ1dEt/MD4RTHRhD81t5d4vFCyhgd9ShRwEij6luURxhHmrlx4iMYrBvGz Y4/XggOkD+xstRp7RUabnb+vRFsmsmZHXuBZuBlHouU4l2thLhbd+vsZ8ZT2Wxya LbPNvdLZns3UxoC7cgospbrUBF3gE/Rb+XUnrl1sjGKbxQyj0Y3cQZzi4W9ssY7W QxWLb7vw187Nhe7KcLd/JHOh5QIDAQABo4IChzCCAoMwHQYDVR0OBBYEFFpwjA8Z x56JDkMe1qr26lDzDsdKMB8GA1UdIwQYMBaAFHnWbGSmFlouTLN9SXAObHYYQcOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzg0Ny9BQ0Y5NDM1MjlB RjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dpNU1zMzFKY0E1c2RoaEJ3 NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VkWnNaS1lXV2k1TXMzMUpjQTVzZGhoQnc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkM4NDcvQUNGOTQzNTI5QUYzMTFFOEFBQjRENTVEQzRGOUFFMDIvQzI0RkY0Qzgw NTBEMTFFQTg2MjZBRDVEQzRGOUFFMDIucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAk BAIAATAeAwQGcoKAAwQEcoLgAwQGezEAAwQHtNOAAwQFy3DAMA0EAgACMAcDBQAk B1AAMA0GCSqGSIb3DQEBCwUAA4IBAQBbRGvygFoE19H4DCh7uYqmIDyXDrf/c8Cl 3eO7kncxchSIqd+lTi+cSn0CTaE7JHh8/hBMzRe7P8TNhyHpWoDH0TJaJhURbjQL SnSwU/T9/WVnnIQvCen206ttFuzcAbIuyioGqcp9HgR0brekSTEcpbEQIi2rR+Mk qFjC/Y046ap9XsXHy0UMHuQXOeO5rVniIrWAwHn1k5uGA8HFapcv+88EffaJAUxb 7BLi+NX88m6m7XYI5wRvh0V7z23W0C791B+T/DeF2qOwTVkZIBj5EkwWT3WlErO7 jtu1rkhHviqINTzrFJJn9u3XJiVVvGnj4+cOXm+p7HEetbdMst+V -----END CERTIFICATE-----Generated at Mon Mar 2 04:10:24 2026 by rpki-client