$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/A84D830AA54511EAA942C683C4F9AE02.roa File: A84D830AA54511EAA942C683C4F9AE02.roa (raw, json) Hash identifier: VMvzxhiehHi/wirXLSq0a4LrzP8G8/9jPwtQ7bwnvI4= Subject key identifier: 37:A7:CB:EA:36:AC:71:C9:D6:43:52:3C:87:46:37:E4:E7:2D:94:D8 Certificate issuer: /CN=A91C40D6/serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF Certificate serial: 09C0 Authority key identifier: 8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/A84D830AA54511EAA942C683C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:02:58 +0000 ROA not before: Mon 24 Nov 2025 19:40:10 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 139750 IP address blocks: 45.253.248.0/24 maxlen: 24 45.253.249.0/24 maxlen: 24 45.253.250.0/24 maxlen: 24 45.253.251.0/24 maxlen: 24 45.253.252.0/24 maxlen: 24 45.253.253.0/24 maxlen: 24 45.253.254.0/24 maxlen: 24 45.253.255.0/24 maxlen: 24 103.144.140.0/24 maxlen: 24 103.144.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:03:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2496 (0x9c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C40D6, serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF Validity Not Before: Nov 24 19:40:10 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a44712-d191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:26:5e:ba:ce:fc:cc:f3:f6:d1:58:df:77:18: 69:af:95:c3:ed:26:fe:b7:27:72:7e:11:86:18:2f: 65:13:f7:f1:e3:1c:3d:ad:4d:70:6b:96:73:77:a8: d1:d9:33:a4:a6:1d:df:fb:a9:d4:e7:7d:ff:4a:63: d1:99:5c:7f:c5:ea:86:d1:32:8f:94:bd:eb:f3:12: b0:a5:7d:81:be:66:8b:ad:88:d5:b2:fe:f6:49:1a: 6f:6c:57:29:b9:c1:65:97:8c:43:71:47:49:4c:59: a1:79:a8:e2:9b:17:99:61:3f:4b:7b:96:be:22:1a: 0c:a4:fe:b4:1e:3e:53:57:57:67:cc:2c:cc:a5:0d: ef:ea:29:e6:52:8b:15:44:b5:e1:27:98:7a:3b:76: 25:ae:cf:3e:8d:b7:4f:66:28:26:c3:68:d1:e9:9d: 8b:a4:23:04:44:c2:a7:03:d9:d3:87:37:6c:bf:5f: 5b:08:46:4f:f0:94:3c:2b:27:cd:da:cf:d6:41:b7: 6b:25:3f:d0:38:25:5c:52:60:3d:e4:90:ff:5e:ae: 3b:2c:0b:b2:4e:5c:be:0b:37:31:e3:e0:ed:04:9d: 5d:59:dc:da:7c:f4:4d:c5:d9:ec:c6:17:ac:15:48: 84:a9:6c:0e:f8:8e:47:83:19:55:05:cc:df:7a:61: fc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A7:CB:EA:36:AC:71:C9:D6:43:52:3C:87:46:37:E4:E7:2D:94:D8 X509v3 Authority Key Identifier: keyid:8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/A84D830AA54511EAA942C683C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.253.248.0/21 103.144.140.0/23 Signature Algorithm: sha256WithRSAEncryption bd:10:56:c8:0c:73:aa:1e:88:4e:a3:b1:29:76:32:70:f6:f2: 98:41:d4:d4:48:48:8b:0e:3b:1f:36:1b:85:43:39:5a:d8:42: f4:1e:b1:09:a3:9f:c8:3b:1f:49:bc:00:93:20:8a:f5:37:e6: 9d:61:91:29:11:07:27:48:9e:9f:fa:a8:14:03:2f:3e:34:d7: 4d:6d:21:45:66:48:9d:7a:f8:06:6b:6a:ce:ec:ed:e9:d7:0b: 3f:a4:ed:09:29:51:cf:38:ed:1d:15:b1:b4:3d:48:14:ce:af: 6c:93:b7:95:1f:e2:f5:f4:f3:bb:b1:5f:04:4e:85:b4:64:9e: 5d:fa:3e:08:1b:41:8d:13:a4:7f:c1:2e:de:21:b0:51:9b:fe: 39:e9:ca:26:8b:71:ab:c6:ec:05:a2:29:29:cb:b3:c0:00:81: 42:aa:c6:b7:e4:c9:24:26:27:a3:d7:77:3b:8f:7a:79:08:fa: 16:be:65:ae:81:53:3d:db:cb:5e:71:0b:69:b6:0f:f1:c2:fd: 12:a9:19:aa:c9:02:d5:4e:01:19:72:c9:4a:c0:bc:0b:3c:d3: 75:5b:79:32:82:4a:9e:8a:4c:15:b4:04:ea:60:dd:fb:25:30: 3e:61:71:0d:c1:ba:71:b7:3b:6f:5b:e8:1a:b5:e3:06:54:d2: 62:51:7d:d3 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQwRDYxMTAvBgNVBAUTKDhFNzg0MzQ5RUYyRERGNzg1NzVGRDU0Q0M3OEVEOEM0 NUM5NzZDQkYwHhcNMjUxMTI0MTk0MDEwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDcxMi1kMTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0yZeus78zPP20Vjfdxhpr5XD7Sb+tydyfhGGGC9lE/fx4xw9rU1wa5Zzd6jR 2TOkph3f+6nU533/SmPRmVx/xeqG0TKPlL3r8xKwpX2BvmaLrYjVsv72SRpvbFcp ucFll4xDcUdJTFmheajimxeZYT9Le5a+IhoMpP60Hj5TV1dnzCzMpQ3v6inmUosV RLXhJ5h6O3Ylrs8+jbdPZigmw2jR6Z2LpCMERMKnA9nThzdsv19bCEZP8JQ8KyfN 2s/WQbdrJT/QOCVcUmA95JD/Xq47LAuyTly+Czcx4+DtBJ1dWdzafPRNxdnsxhes FUiEqWwO+I5HgxlVBczfemH84wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFDeny+o2 rHHJ1kNSPIdGN+TnLZTYMB8GA1UdIwQYMBaAFI54Q0nvLd94V1/VTMeO2MRcl2y/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDBENi9DQThFN0Y3RUE1 NDQxMUVBOTREQTM2ODNDNEY5QUUwMi9qbmhEU2U4dDMzaFhYOVZNeDQ3WXhGeVhi TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2puaERTZTh0MzNoWFg5Vk14NDdZeEZ5WGJMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzQwRDYvQ0E4RTdGN0VBNTQ0MTFFQTk0REEzNjgzQzRGOUFFMDIvQTg0RDgzMEFB NTQ1MTFFQUE5NDJDNjgzQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQDLf34AwQBZ5CMMA0GCSqGSIb3DQEBCwUAA4IBAQC9EFbIDHOqHohO o7EpdjJw9vKYQdTUSEiLDjsfNhuFQzla2EL0HrEJo5/IOx9JvACTIIr1N+adYZEp EQcnSJ6f+qgUAy8+NNdNbSFFZkidevgGa2rO7O3p1ws/pO0JKVHPOO0dFbG0PUgU zq9sk7eVH+L19PO7sV8EToW0ZJ5d+j4IG0GNE6R/wS7eIbBRm/456comi3GrxuwF oikpy7PAAIFCqsa35MkkJiej13c7j3p5CPoWvmWugVM928tecQtptg/xwv0SqRmq yQLVTgEZcslKwLwLPNN1W3kygkqeikwVtATqYN37JTA+YXENwbpxtztvW+gateMG VNJiUX3T -----END CERTIFICATE-----Generated at Mon Mar 2 08:18:34 2026 by rpki-client