$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/94855EA0357711EDB81B8A34C4F9AE02.roa File: 94855EA0357711EDB81B8A34C4F9AE02.roa (raw, json) Hash identifier: nL9E2tdaldWQHCFWVTXQos7/DGsQgJh1brQRveQ/27g= Subject key identifier: 10:3E:78:E6:D3:99:06:E7:B1:F9:72:31:21:B2:B6:ED:A1:23:95:20 Certificate issuer: /CN=A91C31A2/serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Certificate serial: 02C5 Authority key identifier: 40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/94855EA0357711EDB81B8A34C4F9AE02.roa Signing time: Sun 25 Jan 2026 11:13:46 +0000 ROA not before: Sun 25 Jan 2026 11:13:46 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 63199 IP address blocks: 164.52.14.0/23 maxlen: 23 164.52.14.0/24 maxlen: 24 164.52.15.0/24 maxlen: 24 164.52.26.0/24 maxlen: 24 164.52.27.0/24 maxlen: 24 164.52.62.0/23 maxlen: 24 164.52.78.0/24 maxlen: 24 164.52.79.0/24 maxlen: 24 164.52.81.0/24 maxlen: 24 164.52.96.0/24 maxlen: 24 164.52.99.0/24 maxlen: 24 164.52.105.0/24 maxlen: 24 164.52.118.0/24 maxlen: 24 164.52.120.0/23 maxlen: 23 164.52.120.0/24 maxlen: 24 164.52.121.0/24 maxlen: 24 164.52.122.0/24 maxlen: 24 164.52.123.0/24 maxlen: 24 164.52.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 02:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 709 (0x2c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31A2, serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Validity Not Before: Jan 25 11:13:46 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6975faea-7c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:58:fb:05:ff:8f:13:5a:03:90:52:dd:3e:c7: 5a:1a:fd:f2:e8:cd:ce:86:d9:b7:ae:03:c4:13:0d: c0:1c:0e:3c:94:7b:3f:d9:1c:68:fe:83:84:17:63: f0:4f:ce:b9:f3:70:8a:fc:1a:65:12:12:1b:ef:8a: 3b:3d:d1:06:3e:37:69:c0:3e:7f:94:82:9d:dc:a2: 60:f7:34:a2:5a:54:29:0f:50:09:3e:08:cb:a1:69: c9:92:73:aa:37:c5:0f:06:22:38:9d:4b:96:8c:a5: 56:5e:bb:3d:36:42:e4:cd:08:87:d2:c6:47:e2:a6: 35:48:4b:77:dc:2b:aa:3a:53:d3:e2:eb:1d:5c:b7: ff:5c:84:4e:ff:8c:e9:b9:d0:b1:35:78:62:21:c3: 88:b0:47:74:93:09:94:85:14:16:87:4d:40:33:70: 88:f1:0d:26:eb:80:bf:29:6e:d6:2f:b5:d4:c3:5e: 2f:44:0f:4e:e1:6f:b6:ab:db:2f:23:8c:15:b0:d6: 08:7c:de:38:65:1b:0b:0b:7e:83:d3:9f:f5:f8:f4: b7:cc:5e:27:e6:e7:29:18:ff:95:af:28:c7:3c:9f: 1b:f2:6f:13:74:5f:2a:57:90:8e:91:0b:86:da:d4: 5e:05:37:91:5f:3a:89:d8:ce:a0:17:4e:d4:57:8d: 7a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3E:78:E6:D3:99:06:E7:B1:F9:72:31:21:B2:B6:ED:A1:23:95:20 X509v3 Authority Key Identifier: keyid:40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/94855EA0357711EDB81B8A34C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 164.52.14.0/23 164.52.26.0/23 164.52.62.0/23 164.52.78.0/23 164.52.81.0/24 164.52.96.0/24 164.52.99.0/24 164.52.105.0/24 164.52.118.0/24 164.52.120.0/22 164.52.126.0/23 Signature Algorithm: sha256WithRSAEncryption a2:8e:d6:0c:bf:58:19:c9:4b:64:ed:c3:35:4c:e5:7b:8b:c1: 4b:48:85:97:5d:fd:18:0a:1d:32:09:fa:58:c2:47:44:a9:1f: 74:47:43:94:ba:e4:c5:ee:7d:10:8b:80:fe:4d:b9:97:f4:c0: 9d:18:6c:27:e7:d8:18:2d:35:ae:c0:0a:73:a6:6a:75:4e:39: c9:4b:ae:a1:06:27:10:96:bb:aa:6d:fc:ce:6f:1f:ff:d9:3c: 61:b4:9f:60:56:22:67:b4:94:15:df:80:05:e5:68:7d:c3:b2: a0:63:48:0c:3c:9b:69:b7:67:6d:6f:7f:e7:9f:dd:16:38:a3: fd:c0:4d:84:fc:ae:5d:0a:04:19:7a:14:61:c7:d2:eb:ec:b0: 72:50:0c:17:6b:75:9a:3b:e7:f6:2d:dd:e9:8c:73:ef:01:34: fe:10:36:b0:42:39:04:48:7d:30:4f:6a:9d:c6:84:b9:2a:84: 71:84:64:f6:a5:bb:fb:06:1c:ec:d5:25:6a:5c:54:5f:7b:09: 3b:99:52:08:97:81:99:20:f2:28:6a:82:31:51:23:d1:78:e7: 19:a5:f6:20:92:e4:8b:b7:2d:fe:9c:c3:8e:16:02:d3:d2:0d: cb:12:bc:94:94:66:5e:14:15:1a:6a:f5:72:02:98:b5:19:ec: 4b:97:b1:5a -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgICAsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QzMxQTIxMTAvBgNVBAUTKDQwRTU4MjYzOTcyQjlFMjQxNDJCQUE5QjVBRkEwNTM0 ODFBMzcxOUUwHhcNMjYwMTI1MTExMzQ2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTc1ZmFlYS03YzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAolj7Bf+PE1oDkFLdPsdaGv3y6M3Ohtm3rgPEEw3AHA48lHs/2Rxo/oOEF2Pw T86583CK/BplEhIb74o7PdEGPjdpwD5/lIKd3KJg9zSiWlQpD1AJPgjLoWnJknOq N8UPBiI4nUuWjKVWXrs9NkLkzQiH0sZH4qY1SEt33CuqOlPT4usdXLf/XIRO/4zp udCxNXhiIcOIsEd0kwmUhRQWh01AM3CI8Q0m64C/KW7WL7XUw14vRA9O4W+2q9sv I4wVsNYIfN44ZRsLC36D05/1+PS3zF4n5ucpGP+VryjHPJ8b8m8TdF8qV5COkQuG 2tReBTeRXzqJ2M6gF07UV416eQIDAQABo4IC0TCCAs0wHQYDVR0OBBYEFBA+eObT mQbnsflyMSGytu2hI5UgMB8GA1UdIwQYMBaAFEDlgmOXK54kFCuqm1r6BTSBo3Ge MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFBMi9ENDc2RUQ3NjM1 NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5pUVVLNnFiV3ZvRk5JR2pj WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FPV0NZNWNybmlRVUs2cWJXdm9GTklHamNaNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzMxQTIvRDQ3NkVENzYzNTcyMTFFREFFOTc3ODM5QzRGOUFFMDIvOTQ4NTVFQTAz NTc3MTFFREI4MUI4QTM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwWwYIKwYBBQUHAQcBAf8E TDBKMEgEAgABMEIDBAGkNA4DBAGkNBoDBAGkND4DBAGkNE4DBACkNFEDBACkNGAD BACkNGMDBACkNGkDBACkNHYDBAKkNHgDBAGkNH4wDQYJKoZIhvcNAQELBQADggEB AKKO1gy/WBnJS2TtwzVM5XuLwUtIhZdd/RgKHTIJ+ljCR0SpH3RHQ5S65MXufRCL gP5NuZf0wJ0YbCfn2BgtNa7ACnOmanVOOclLrqEGJxCWu6pt/M5vH//ZPGG0n2BW Ime0lBXfgAXlaH3DsqBjSAw8m2m3Z21vf+ef3RY4o/3ATYT8rl0KBBl6FGHH0uvs sHJQDBdrdZo75/Yt3emMc+8BNP4QNrBCOQRIfTBPap3GhLkqhHGEZPalu/sGHOzV JWpcVF97CTuZUgiXgZkg8ihqgjFRI9F45xml9iCS5Iu3Lf6cw44WAtPSDcsSvJSU Zl4UFRpq9XICmLUZ7EuXsVo= -----END CERTIFICATE-----Generated at Mon Mar 2 03:11:22 2026 by rpki-client