$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/5CB841E69B1411EEA456FE83C4F9AE02.roa File: 5CB841E69B1411EEA456FE83C4F9AE02.roa (raw, json) Hash identifier: vuhGbAXmdFyZHU5zcn6qI6D4hSXtuQyTQbfw33B7PYM= Subject key identifier: 01:98:3F:12:9B:C4:E1:3E:7C:F7:52:66:C0:FC:E6:72:51:3D:0C:54 Certificate issuer: /CN=A91C7AB9/serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6 Certificate serial: 01B2 Authority key identifier: 59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/5CB841E69B1411EEA456FE83C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:12:44 +0000 ROA not before: Thu 29 Jan 2026 03:23:21 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 152179 IP address blocks: 36.50.130.0/23 maxlen: 24 2001:df3:49c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:10:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7AB9, serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6 Validity Not Before: Jan 29 03:23:21 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a4657c-8ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:20:2d:74:f4:c9:f2:0f:4a:8d:9d:bc:8a:a8: 89:e3:15:36:1d:19:3b:a7:93:68:32:b9:36:43:78: b7:3f:ec:8e:99:6e:ac:b8:45:4c:8f:1f:a2:46:61: af:96:d4:63:9a:a8:25:74:ba:5c:e5:92:d8:e8:a3: 99:8f:d3:ed:b8:1b:56:68:1f:63:5b:cd:f0:37:cf: 9d:d7:76:29:43:80:aa:39:f2:43:6e:88:68:da:1d: 56:ec:c8:5b:35:55:7e:67:2a:f3:a6:13:80:58:7b: 5d:b8:47:3b:99:24:b0:c7:b6:c1:2d:2c:22:a9:b0: 58:4a:b7:52:ac:87:87:d6:04:9b:29:59:2b:21:44: 8f:cb:82:4d:e3:41:fb:f7:c1:ad:ba:b6:7f:2f:e6: 55:fd:91:5e:11:86:18:1a:cb:d5:72:7d:40:e6:70: d2:17:79:01:cb:35:8b:a4:d9:5d:ee:03:3e:80:88: 44:bc:d0:05:c6:c2:17:84:2e:fc:b2:92:0c:df:87: 45:df:9c:ec:65:f0:bc:81:f4:25:80:a7:6f:63:ac: 1a:1d:e1:53:a6:00:1e:25:20:69:0d:d2:6d:f2:56: ec:44:e1:aa:90:ec:46:4b:44:f7:e3:92:ae:6b:7c: 6a:c8:dc:3a:ce:25:a0:c8:1c:5e:fd:82:1c:bf:bd: fd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:98:3F:12:9B:C4:E1:3E:7C:F7:52:66:C0:FC:E6:72:51:3D:0C:54 X509v3 Authority Key Identifier: keyid:59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/5CB841E69B1411EEA456FE83C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.50.130.0/23 IPv6: 2001:df3:49c0::/48 Signature Algorithm: sha256WithRSAEncryption 68:92:5e:52:82:f5:7d:0d:b4:ab:67:af:ab:09:cd:0b:d1:4b: e2:57:26:6d:ec:cf:74:77:d2:4e:86:10:77:91:5d:3c:e5:48: d2:5e:88:cd:41:48:e0:29:b0:7b:0e:68:9c:1e:e1:6b:50:b1: ba:80:94:66:50:3d:09:cb:e0:fb:fe:b0:9b:1f:eb:57:6d:fa: 11:25:39:c5:f6:29:13:dd:8c:f1:00:b8:d4:9f:f0:b9:54:6f: 6b:65:7b:d0:ae:18:ef:72:29:28:82:fb:6c:e3:2a:8f:38:52: 0e:06:75:3c:c0:08:6e:4d:4b:fc:58:e1:bd:3e:3c:5b:2f:97: 94:7f:26:6c:90:c3:51:60:26:27:56:dc:86:80:e3:64:88:52: 55:3b:27:1a:a4:b1:b4:23:53:d5:50:7b:61:9c:0e:77:a0:df: 87:c1:ee:1d:38:78:c7:20:51:81:4f:e2:f7:9d:a7:fe:fa:c3: 34:71:58:4f:2b:2f:93:e2:a0:b3:c6:3b:b7:0e:00:6c:61:e3: 9c:8a:7d:7e:0c:e3:cf:2b:e9:74:31:38:28:e8:4f:73:35:2d: 65:f9:4b:69:61:cf:69:04:b2:14:c2:d4:10:4f:97:06:25:87: 77:58:98:eb:39:01:d7:85:88:ea:fe:6c:20:81:00:18:8e:66: 62:ee:45:64 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdBQjkxMTAvBgNVBAUTKDU5Q0EwRUQ2Qjk2QjcwQzI5QjNERDhFNEVDNTk4RUEx MkUwREMyRTYwHhcNMjYwMTI5MDMyMzIxWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjU3Yy04YmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtiAtdPTJ8g9KjZ28iqiJ4xU2HRk7p5NoMrk2Q3i3P+yOmW6suEVMjx+iRmGv ltRjmqgldLpc5ZLY6KOZj9PtuBtWaB9jW83wN8+d13YpQ4CqOfJDboho2h1W7Mhb NVV+ZyrzphOAWHtduEc7mSSwx7bBLSwiqbBYSrdSrIeH1gSbKVkrIUSPy4JN40H7 98GturZ/L+ZV/ZFeEYYYGsvVcn1A5nDSF3kByzWLpNld7gM+gIhEvNAFxsIXhC78 spIM34dF35zsZfC8gfQlgKdvY6waHeFTpgAeJSBpDdJt8lbsROGqkOxGS0T345Ku a3xqyNw6ziWgyBxe/YIcv739CwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFAGYPxKb xOE+fPdSZsD85nJRPQxUMB8GA1UdIwQYMBaAFFnKDta5a3DCmz3Y5OxZjqEuDcLm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0FCOS9BQjU3NTMwNjlC MTMxMUVFQUFBQTM5ODJDNEY5QUUwMi9XY29PMXJscmNNS2JQZGprN0ZtT29TNE53 dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1djb08xcmxyY01LYlBkams3Rm1Pb1M0Tnd1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzdBQjkvQUI1NzUzMDY5QjEzMTFFRUFBQUEzOTgyQzRGOUFFMDIvNUNCODQxRTY5 QjE0MTFFRUE0NTZGRTgzQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBJDKCMA8EAgACMAkDBwAgAQ3zScAwDQYJKoZIhvcNAQELBQADggEB AGiSXlKC9X0NtKtnr6sJzQvRS+JXJm3sz3R30k6GEHeRXTzlSNJeiM1BSOApsHsO aJwe4WtQsbqAlGZQPQnL4Pv+sJsf61dt+hElOcX2KRPdjPEAuNSf8LlUb2tle9Cu GO9yKSiC+2zjKo84Ug4GdTzACG5NS/xY4b0+PFsvl5R/JmyQw1FgJidW3IaA42SI UlU7JxqksbQjU9VQe2GcDneg34fB7h04eMcgUYFP4vedp/76wzRxWE8rL5PioLPG O7cOAGxh45yKfX4M488r6XQxOCjoT3M1LWX5S2lhz2kEshTC1BBPlwYlh3dYmOs5 AdeFiOr+bCCBABiOZmLuRWQ= -----END CERTIFICATE-----Generated at Mon Mar 2 11:54:40 2026 by rpki-client