$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/58FDD2EA10C211EA977E7378C4F9AE02.roa File: 58FDD2EA10C211EA977E7378C4F9AE02.roa (raw, json) Hash identifier: 6nMr9po5FUO/6NYfd0esqHnOLHyHERnqiMq2SWSxTpQ= Subject key identifier: 5F:0C:10:8E:D4:97:89:2E:7C:34:51:57:96:DA:B9:2D:71:15:4D:5D Certificate issuer: /CN=A91BE1BC/serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71 Certificate serial: 10C9 Authority key identifier: 42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/58FDD2EA10C211EA977E7378C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:21:06 +0000 ROA not before: Mon 12 Jan 2026 17:14:59 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 9587 IP address blocks: 103.26.20.0/22 maxlen: 22 103.26.22.0/24 maxlen: 24 103.26.23.0/24 maxlen: 24 124.40.224.0/20 maxlen: 20 124.40.230.0/24 maxlen: 24 124.40.231.0/24 maxlen: 24 124.40.233.0/24 maxlen: 24 124.40.234.0/24 maxlen: 24 124.40.235.0/24 maxlen: 24 124.40.238.0/24 maxlen: 24 2407:ed00::/32 maxlen: 32 2407:ed00:1000::/36 maxlen: 36 2407:ed00:1e00::/40 maxlen: 40 2407:ed00:1eff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:37:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4297 (0x10c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE1BC, serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71 Validity Not Before: Jan 12 17:14:59 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a47582-4d0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3f:d9:00:a0:f3:52:66:f4:1f:9b:83:e7:e5: 63:ae:60:cd:ca:fc:ca:aa:1a:d5:da:a3:fb:38:94: dd:0a:5d:af:73:f3:7c:a4:88:9f:6c:e7:e9:c8:3a: a4:c7:61:84:cc:73:68:2e:f0:19:ff:a7:9d:ff:85: 22:e9:fc:d4:ba:c0:2e:df:fd:c7:55:9d:dc:ec:5c: a6:b4:59:4e:65:e7:f2:39:26:95:11:6c:6d:29:35: 35:3f:e1:de:b3:c5:30:53:be:5b:0d:55:ba:5f:3b: 34:60:d0:ce:5f:1e:c9:66:01:b6:f2:de:68:2e:9c: 70:e4:c2:d7:39:71:d0:7c:e0:e3:e0:24:bb:74:d3: d6:ed:3c:1b:7d:30:38:32:5c:a9:55:6a:fd:c7:53: e5:40:d6:2c:3c:32:f1:04:9f:b2:66:76:fb:92:b3: 2e:02:f5:40:37:be:a9:e0:94:79:79:0c:e8:68:e6: 85:3e:2e:e8:c7:bb:31:a3:55:65:f9:67:b2:c7:1b: 82:c5:d2:e0:13:04:8e:4b:18:65:72:fd:6a:4d:d7: b1:5a:96:29:39:c6:df:d0:b2:08:6f:15:7c:9b:ae: 61:19:48:e1:5c:b0:47:1e:b3:d8:37:9f:8a:99:e0: ad:f5:c3:40:d9:9b:bc:72:b2:a9:d3:20:bc:19:df: 75:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0C:10:8E:D4:97:89:2E:7C:34:51:57:96:DA:B9:2D:71:15:4D:5D X509v3 Authority Key Identifier: keyid:42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/58FDD2EA10C211EA977E7378C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.26.20.0/22 124.40.224.0/20 IPv6: 2407:ed00::/32 Signature Algorithm: sha256WithRSAEncryption c3:f1:b4:16:93:46:7a:35:54:55:20:c5:5c:eb:5a:97:c8:c0: d1:82:24:59:19:f3:91:a7:4e:10:f5:ef:82:cb:f2:35:6a:fd: a6:f4:7b:56:60:d1:fe:1c:27:5a:50:f6:dc:3b:72:7f:f9:ec: 02:85:87:df:7d:a5:8d:59:7a:d4:a0:28:6c:73:c8:e0:18:0e: d2:30:1f:59:43:e3:69:f9:9c:ca:e9:67:2a:0c:8b:be:49:d8: f1:d3:9e:3b:22:35:1f:1e:10:d1:9f:d3:37:d5:9a:f4:29:39: 5a:e2:c4:94:1c:21:ed:dd:6c:4d:1b:dc:52:ed:08:8a:1b:4b: 9b:ed:20:52:a0:b9:e7:54:e1:44:b9:9b:2c:13:6c:3d:25:53: cf:d4:cb:4a:b2:fd:f6:ed:52:bb:97:4d:ee:ae:f6:a7:d3:ad: fa:5f:62:07:9d:22:5d:d7:35:d3:de:9c:f6:74:f8:63:89:8e: f1:35:fd:a5:9e:3d:c3:7f:c2:9e:29:08:9c:be:ad:c7:9c:a0: 42:21:4c:15:50:b5:c3:00:1b:31:04:82:78:d9:95:54:29:4a: 9e:34:92:36:74:28:53:ed:d5:41:fb:8c:6a:48:1c:91:db:e3: cf:8a:af:13:5e:45:39:66:32:6f:8f:7c:b0:6b:ad:69:8f:71: 27:d1:2c:85 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICEMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUxQkMxMTAvBgNVBAUTKDQyOUU5QkREQTI5NjYyMDAwM0NFQzVFRkFCQjgyM0Qz MDNGRTRGNzEwHhcNMjYwMTEyMTcxNDU5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzU4Mi00ZDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqj/ZAKDzUmb0H5uD5+VjrmDNyvzKqhrV2qP7OJTdCl2vc/N8pIifbOfpyDqk x2GEzHNoLvAZ/6ed/4Ui6fzUusAu3/3HVZ3c7FymtFlOZefyOSaVEWxtKTU1P+He s8UwU75bDVW6Xzs0YNDOXx7JZgG28t5oLpxw5MLXOXHQfODj4CS7dNPW7TwbfTA4 MlypVWr9x1PlQNYsPDLxBJ+yZnb7krMuAvVAN76p4JR5eQzoaOaFPi7ox7sxo1Vl +WeyxxuCxdLgEwSOSxhlcv1qTdexWpYpOcbf0LIIbxV8m65hGUjhXLBHHrPYN5+K meCt9cNA2Zu8crKp0yC8Gd91rwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFF8MEI7U l4kufDRRV5bauS1xFU1dMB8GA1UdIwQYMBaAFEKem92ilmIAA87F76u4I9MD/k9x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTFCQy84OTZDNkM0ODQ2 Q0UxMUU5OTI4NTBBM0NDNEY5QUUwMi9RcDZiM2FLV1lnQUR6c1h2cTdnajB3UC1U M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FwNmIzYUtXWWdBRHpzWHZxN2dqMHdQLVQzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkUxQkMvODk2QzZDNDg0NkNFMTFFOTkyODUwQTNDQzRGOUFFMDIvNThGREQyRUEx MEMyMTFFQTk3N0U3Mzc4QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZxoUAwQEfCjgMA0EAgACMAcDBQAkB+0AMA0GCSqGSIb3DQEBCwUA A4IBAQDD8bQWk0Z6NVRVIMVc61qXyMDRgiRZGfORp04Q9e+Cy/I1av2m9HtWYNH+ HCdaUPbcO3J/+ewChYfffaWNWXrUoChsc8jgGA7SMB9ZQ+Np+ZzK6WcqDIu+Sdjx 0547IjUfHhDRn9M31Zr0KTla4sSUHCHt3WxNG9xS7QiKG0ub7SBSoLnnVOFEuZss E2w9JVPP1MtKsv327VK7l03urvan0636X2IHnSJd1zXT3pz2dPhjiY7xNf2lnj3D f8KeKQicvq3HnKBCIUwVULXDABsxBIJ42ZVUKUqeNJI2dChT7dVB+4xqSByR2+PP iq8TXkU5ZjJvj3ywa61pj3En0SyF -----END CERTIFICATE-----Generated at Mon Mar 2 18:09:35 2026 by rpki-client