$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/A55C1282ACA311EFBA427354C4F9AE02.roa File: A55C1282ACA311EFBA427354C4F9AE02.roa (raw, json) Hash identifier: MEjWiqABTdhN78FaTJw7zpdNYI15rHUaUXaBhHqc1lA= Subject key identifier: E2:A2:0A:8B:96:EC:A0:F9:DB:DE:21:AE:6B:10:0F:E2:D5:68:F1:EC Certificate issuer: /CN=A91BD000/serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9 Certificate serial: 0CB3 Authority key identifier: 40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/A55C1282ACA311EFBA427354C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:24:13 +0000 ROA not before: Tue 20 May 2025 19:13:49 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 58912 IP address blocks: 45.124.12.0/22 maxlen: 24 103.25.80.0/22 maxlen: 24 2407:9ac0::/32 maxlen: 32 2407:9ac0::/36 maxlen: 36 2407:9ac0:1000::/36 maxlen: 36 2407:9ac0:2000::/36 maxlen: 36 2407:9ac0:3000::/36 maxlen: 36 2407:9ac0:4000::/36 maxlen: 36 2407:9ac0:5000::/36 maxlen: 36 2407:9ac0:6000::/36 maxlen: 36 2407:9ac0:7000::/36 maxlen: 36 2407:9ac0:8000::/36 maxlen: 36 2407:9ac0:9000::/36 maxlen: 36 2407:9ac0:a000::/36 maxlen: 36 2407:9ac0:b000::/36 maxlen: 36 2407:9ac0:c000::/36 maxlen: 36 2407:9ac0:d000::/36 maxlen: 36 2407:9ac0:e000::/36 maxlen: 36 2407:9ac0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3251 (0xcb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD000, serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9 Validity Not Before: May 20 19:13:49 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a405bd-c4c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:dd:13:61:54:d0:2b:93:51:88:a1:73:e3:ef: fa:8f:f0:6d:0f:44:a4:fa:a0:2d:90:b9:b0:89:25: 8a:ce:d5:48:02:a0:e1:c9:a0:99:5f:82:af:8d:e4: dc:03:95:4a:07:1c:1b:94:45:2e:b3:28:29:29:ec: 2a:15:4b:8f:05:5b:24:ae:70:0e:78:fe:2f:f5:e0: 8b:e1:26:92:f3:e6:74:ec:6c:75:2c:d3:42:c5:46: 19:0d:e1:1f:13:8f:cc:3a:ed:96:70:35:9b:16:b0: 8b:07:1f:3c:94:b6:a3:ed:67:ca:f5:72:c3:28:b9: 26:34:e6:51:f5:a4:be:49:90:4e:3b:33:ac:b2:ec: ea:40:13:fe:f3:18:61:12:6f:cb:3d:6b:07:80:38: 5e:23:ab:fd:99:c6:43:5f:5b:ad:8e:fd:92:53:ea: 4a:49:67:bd:d4:6a:4a:16:dc:b7:30:e0:ab:e0:91: b2:97:48:45:3e:d0:25:14:a7:ed:5d:1e:d2:86:9b: 45:17:6f:4b:c2:9f:44:0e:dc:14:fd:e6:9c:b8:79: 3f:32:14:23:70:be:99:a1:27:07:a2:d2:eb:cf:a6: e9:9d:c3:25:f0:89:e1:1c:76:47:ff:18:ea:15:6e: ba:e2:bf:b8:38:00:ce:b9:10:96:27:fd:83:1c:c2: db:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A2:0A:8B:96:EC:A0:F9:DB:DE:21:AE:6B:10:0F:E2:D5:68:F1:EC X509v3 Authority Key Identifier: keyid:40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/A55C1282ACA311EFBA427354C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.124.12.0/22 103.25.80.0/22 IPv6: 2407:9ac0::/32 Signature Algorithm: sha256WithRSAEncryption 70:0a:c5:cc:cd:db:97:a8:bd:3d:7a:7a:52:9a:e3:8c:07:80: 6b:6f:48:fa:ca:62:66:ef:44:9d:9c:47:43:8c:e3:81:fd:4e: 69:f1:1d:ca:17:a0:6a:14:bf:06:53:fb:85:63:1a:f8:1e:cb: 1b:c9:61:05:39:4f:cf:2f:0a:d5:a5:3a:6a:6b:e1:94:c9:3f: a1:e2:65:79:79:24:ea:a3:9c:a0:84:57:af:35:8b:e4:f6:9e: 75:06:87:9b:52:6a:60:e0:a7:95:3d:94:c9:36:74:f9:b3:6d: 34:14:a9:7d:b7:69:52:49:7e:d1:b7:ce:ca:bc:6a:f6:17:04: e6:0f:70:36:4e:70:22:58:9a:e0:49:68:a5:25:76:a9:ce:3c: 58:7a:37:d9:fb:35:61:e4:c7:db:43:4b:7e:ff:1c:2a:d0:0a: 58:a9:be:6a:f1:1d:dc:00:14:e1:86:26:03:aa:cb:cd:99:48: 37:7d:66:d2:f2:5b:17:a0:69:37:75:95:dd:24:e7:b8:13:92: 3f:4a:da:3e:55:53:cb:fc:5f:bc:ce:17:c7:e8:94:34:e6:35: bf:66:9a:2d:ff:d8:a7:9c:7b:73:16:76:5f:77:f8:d1:8a:56: 47:92:4e:31:ce:63:f4:ef:57:24:49:5a:c6:8e:69:8d:bf:cf: 31:52:83:19 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICDLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQwMDAxMTAvBgNVBAUTKDQwRTk2Q0FFQjE5RDQxRTBEQUQ2NTJGNDM1QUQwOEU3 QUU4MDlFRjkwHhcNMjUwNTIwMTkxMzQ5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDViZC1jNGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl90TYVTQK5NRiKFz4+/6j/BtD0Sk+qAtkLmwiSWKztVIAqDhyaCZX4KvjeTc A5VKBxwblEUusygpKewqFUuPBVskrnAOeP4v9eCL4SaS8+Z07Gx1LNNCxUYZDeEf E4/MOu2WcDWbFrCLBx88lLaj7WfK9XLDKLkmNOZR9aS+SZBOOzOssuzqQBP+8xhh Em/LPWsHgDheI6v9mcZDX1utjv2SU+pKSWe91GpKFty3MOCr4JGyl0hFPtAlFKft XR7ShptFF29Lwp9EDtwU/eacuHk/MhQjcL6ZoScHotLrz6bpncMl8InhHHZH/xjq FW664r+4OADOuRCWJ/2DHMLbwQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFOKiCouW 7KD5294hrmsQD+LVaPHsMB8GA1UdIwQYMBaAFEDpbK6xnUHg2tZS9DWtCOeugJ75 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDAwMC9FNjYwMkVEMjBE QjQxMUVBQkE1QzFEN0ZDNEY5QUUwMi9RT2xzcnJHZFFlRGExbEwwTmEwSTU2NkFu dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPbHNyckdkUWVEYTFsTDBOYTBJNTY2QW52ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkQwMDAvRTY2MDJFRDIwREI0MTFFQUJBNUMxRDdGQzRGOUFFMDIvQTU1QzEyODJB Q0EzMTFFRkJBNDI3MzU0QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCLXwMAwQCZxlQMA0EAgACMAcDBQAkB5rAMA0GCSqGSIb3DQEBCwUA A4IBAQBwCsXMzduXqL09enpSmuOMB4Brb0j6ymJm70SdnEdDjOOB/U5p8R3KF6Bq FL8GU/uFYxr4HssbyWEFOU/PLwrVpTpqa+GUyT+h4mV5eSTqo5yghFevNYvk9p51 BoebUmpg4KeVPZTJNnT5s200FKl9t2lSSX7Rt87KvGr2FwTmD3A2TnAiWJrgSWil JXapzjxYejfZ+zVh5MfbQ0t+/xwq0ApYqb5q8R3cABThhiYDqsvNmUg3fWbS8lsX oGk3dZXdJOe4E5I/Sto+VVPL/F+8zhfH6JQ05jW/Zpot/9innHtzFnZfd/jRilZH kk4xzmP071ckSVrGjmmNv88xUoMZ -----END CERTIFICATE-----Generated at Mon Mar 2 13:19:57 2026 by rpki-client