$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/254E9F807D4A11EEABBD1328C4F9AE02.roa File: 254E9F807D4A11EEABBD1328C4F9AE02.roa (raw, json) Hash identifier: wgZY6CZu4QF64tBtckX4XM82ZwiMInYJliPcrt7Ct0M= Subject key identifier: 88:17:55:94:17:DE:50:A2:49:29:6D:8F:E3:C0:7D:AA:3D:36:16:8A Certificate issuer: /CN=A91BCDC6/serialNumber=F84FBB415D9A4543362EDF7265F537E2CFF9F820 Certificate serial: 01BB Authority key identifier: F8:4F:BB:41:5D:9A:45:43:36:2E:DF:72:65:F5:37:E2:CF:F9:F8:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/254E9F807D4A11EEABBD1328C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:09:33 +0000 ROA not before: Thu 09 Oct 2025 04:51:47 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 151788 IP address blocks: 103.72.58.0/23 maxlen: 23 103.72.58.0/24 maxlen: 24 103.72.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.crl rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCDC6, serialNumber=F84FBB415D9A4543362EDF7265F537E2CFF9F820 Validity Not Before: Oct 9 04:51:47 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a456ad-3f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:de:42:58:f2:c8:e8:8f:81:05:6b:b4:3f:76: 1e:6e:8a:d1:9f:d7:0c:c9:7a:57:fe:d0:86:6b:d4: 26:b1:7e:8d:f2:ea:a4:0e:72:7f:9d:53:ad:e5:25: 62:dc:a9:14:48:e0:28:7b:0c:d2:24:5b:ac:de:ab: 51:1c:ba:5f:a3:99:99:51:a5:93:80:b9:c7:a2:f7: 36:fc:68:43:13:ce:f3:37:01:87:7f:f1:0e:6c:c9: 05:bf:2f:f5:02:ef:eb:bc:7c:76:a0:ef:2e:66:96: 68:4a:57:32:52:50:8f:10:a6:73:c7:0a:35:e2:3c: dc:7d:3f:81:a7:4c:48:e3:ff:14:6f:fe:5e:c5:2a: 7a:34:b9:cc:bc:65:8a:ca:6b:fe:1d:59:e9:50:3e: 0a:12:a0:31:17:ae:80:1c:f4:d4:37:1a:01:82:a2: 44:bf:9c:87:f3:ab:a2:95:6b:4f:e6:55:ea:4a:10: 5d:97:26:45:e5:f4:82:1d:8b:fb:fc:0f:d1:d6:f5: 1c:27:5e:51:d4:39:76:f4:58:b7:14:5d:5d:fd:74: cd:c3:70:cc:c8:ee:97:3b:86:95:7c:0f:a3:e2:4b: 9e:d0:14:c1:cb:51:56:9a:82:c8:ad:d3:c3:cc:09: 48:2f:dd:7f:a3:df:e2:a3:48:62:97:11:12:f7:26: c4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:17:55:94:17:DE:50:A2:49:29:6D:8F:E3:C0:7D:AA:3D:36:16:8A X509v3 Authority Key Identifier: keyid:F8:4F:BB:41:5D:9A:45:43:36:2E:DF:72:65:F5:37:E2:CF:F9:F8:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/254E9F807D4A11EEABBD1328C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.72.58.0/23 Signature Algorithm: sha256WithRSAEncryption 61:cb:9b:fe:f1:87:78:15:29:46:49:ab:84:da:34:dc:e5:a1: e0:9b:64:45:3d:37:55:90:bb:41:4a:4e:6f:a0:d7:10:0e:5b: 57:71:ba:74:c3:22:46:a1:eb:72:61:ec:a1:2b:a9:da:bb:bf: 53:42:cc:08:e3:9e:a7:85:5f:d3:7c:47:fe:c4:df:57:08:77: 80:11:e9:a0:c5:49:17:eb:83:72:1c:4c:fe:c3:b8:c2:e3:c4: ee:21:dd:77:09:55:89:fd:e9:9c:48:f3:25:cb:cc:e3:ce:59: 02:ff:60:7b:51:e9:3f:94:3a:1a:a9:de:af:eb:5f:fb:92:69: 4c:4e:7e:13:87:4c:fb:7a:cc:46:f0:8f:1b:cd:a5:e0:4d:44: cd:d3:06:f6:c7:43:3c:ee:a6:4a:86:7b:77:a1:8f:6c:d6:a7: 9c:a2:82:02:77:a9:08:b2:72:a6:47:c2:69:bd:45:67:72:56: ad:ea:b8:e3:f1:d7:a0:71:7f:34:87:9b:c4:2f:45:38:76:6c: 2d:55:23:96:14:79:6d:28:08:37:79:55:4b:c8:a9:5c:79:32: 09:c6:59:1a:90:6b:e0:88:fd:aa:8d:bf:0e:84:15:c4:24:1c: a1:7e:cb:4d:e2:0a:2d:fb:cf:75:a5:0f:ba:b2:bb:83:c0:76: b1:98:54:46 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNEQzYxMTAvBgNVBAUTKEY4NEZCQjQxNUQ5QTQ1NDMzNjJFREY3MjY1RjUzN0Uy Q0ZGOUY4MjAwHhcNMjUxMDA5MDQ1MTQ3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTZhZC0zZjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvt5CWPLI6I+BBWu0P3YeborRn9cMyXpX/tCGa9QmsX6N8uqkDnJ/nVOt5SVi 3KkUSOAoewzSJFus3qtRHLpfo5mZUaWTgLnHovc2/GhDE87zNwGHf/EObMkFvy/1 Au/rvHx2oO8uZpZoSlcyUlCPEKZzxwo14jzcfT+Bp0xI4/8Ub/5exSp6NLnMvGWK ymv+HVnpUD4KEqAxF66AHPTUNxoBgqJEv5yH86uilWtP5lXqShBdlyZF5fSCHYv7 /A/R1vUcJ15R1Dl29Fi3FF1d/XTNw3DMyO6XO4aVfA+j4kue0BTBy1FWmoLIrdPD zAlIL91/o9/io0hilxES9ybEEwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIgXVZQX 3lCiSSltj+PAfao9NhaKMB8GA1UdIwQYMBaAFPhPu0FdmkVDNi7fcmX1N+LP+fgg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0RDNi84MDEyOEVDODdE NDkxMUVFQjlDNkRDMjZDNEY5QUUwMi8tRS03UVYyYVJVTTJMdDl5WmZVMzRzXzUt Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1FLTdRVjJhUlVNMkx0OXlaZlUzNHNfNS1DQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkNEQzYvODAxMjhFQzg3RDQ5MTFFRUI5QzZEQzI2QzRGOUFFMDIvMjU0RTlGODA3 RDRBMTFFRUFCQkQxMzI4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ0g6MA0GCSqGSIb3DQEBCwUAA4IBAQBhy5v+8Yd4FSlGSauE2jTc 5aHgm2RFPTdVkLtBSk5voNcQDltXcbp0wyJGoetyYeyhK6nau79TQswI456nhV/T fEf+xN9XCHeAEemgxUkX64NyHEz+w7jC48TuId13CVWJ/emcSPMly8zjzlkC/2B7 Uek/lDoaqd6v61/7kmlMTn4Th0z7esxG8I8bzaXgTUTN0wb2x0M87qZKhnt3oY9s 1qecooICd6kIsnKmR8JpvUVnclat6rjj8degcX80h5vEL0U4dmwtVSOWFHltKAg3 eVVLyKlceTIJxlkakGvgiP2qjb8OhBXEJByhfstN4got+891pQ+6sruDwHaxmFRG -----END CERTIFICATE-----Generated at Mon Mar 2 10:53:53 2026 by rpki-client