$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/AC8EE79E975B11EFB1D18E82C4F9AE02.roa File: AC8EE79E975B11EFB1D18E82C4F9AE02.roa (raw, json) Hash identifier: VLhCb+vfKEWFL1X277T/kVDyevVkGtgS/fAG+Gv65Mc= Subject key identifier: F5:A0:23:A4:1F:8A:6E:63:90:61:B4:F4:25:32:DA:81:01:59:88:00 Certificate issuer: /CN=A91CD60C/serialNumber=E72376339DBD5D302A59CCFA77AC09CD1723954D Certificate serial: 0105 Authority key identifier: E7:23:76:33:9D:BD:5D:30:2A:59:CC:FA:77:AC:09:CD:17:23:95:4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/AC8EE79E975B11EFB1D18E82C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:54:57 +0000 ROA not before: Sat 03 May 2025 06:42:58 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 56190 IP address blocks: 202.51.128.0/24 maxlen: 24 202.51.129.0/24 maxlen: 24 202.51.130.0/24 maxlen: 24 202.51.131.0/24 maxlen: 24 202.51.132.0/24 maxlen: 24 202.51.133.0/24 maxlen: 24 202.51.134.0/24 maxlen: 24 202.51.135.0/24 maxlen: 24 202.51.136.0/24 maxlen: 24 202.51.137.0/24 maxlen: 24 202.51.138.0/24 maxlen: 24 202.51.139.0/24 maxlen: 24 202.51.140.0/24 maxlen: 24 202.51.141.0/24 maxlen: 24 202.51.142.0/24 maxlen: 24 202.51.143.0/24 maxlen: 24 202.51.144.0/24 maxlen: 24 202.51.145.0/24 maxlen: 24 202.51.146.0/24 maxlen: 24 202.51.147.0/24 maxlen: 24 202.51.148.0/24 maxlen: 24 202.51.149.0/24 maxlen: 24 202.51.150.0/24 maxlen: 24 202.51.151.0/24 maxlen: 24 202.51.152.0/24 maxlen: 24 202.51.153.0/24 maxlen: 24 202.51.154.0/24 maxlen: 24 202.51.155.0/24 maxlen: 24 202.51.156.0/24 maxlen: 24 202.51.157.0/24 maxlen: 24 202.51.158.0/24 maxlen: 24 202.51.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.crl rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 07:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD60C, serialNumber=E72376339DBD5D302A59CCFA77AC09CD1723954D Validity Not Before: May 3 06:42:58 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a3e2c1-4c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:35:47:ee:0b:9c:26:e7:d9:9b:72:c1:dc:69: 75:20:57:e8:46:e3:6b:ae:2e:38:49:9c:a5:e4:c0: 35:af:ac:39:25:ee:15:38:12:08:94:03:76:e1:f2: d4:af:4d:0b:5b:e1:a8:25:ba:af:4c:02:85:5b:6c: ed:a1:66:bd:fa:95:7d:5b:71:64:4c:6f:ee:8e:ae: 40:11:1f:26:f4:50:ed:59:22:ba:21:f4:eb:27:1f: 05:b1:c7:8a:0d:5e:94:f4:d3:bf:8e:9a:0c:f7:26: cc:e2:9c:9e:fd:47:94:c8:5c:90:79:f2:5d:c2:ee: 43:a2:52:88:c0:14:eb:38:c0:cd:a1:62:1f:2f:36: d9:7c:13:01:9a:79:c2:60:ea:25:97:50:bd:85:c4: c6:48:ff:f4:05:e5:36:0b:aa:59:f3:d5:8e:5b:6c: ee:73:b3:e3:20:a7:f2:63:3b:8b:a3:02:42:94:c1: 80:c6:2f:39:f2:7c:a2:61:a9:6d:3a:d1:0e:d0:9c: bc:9a:de:6b:b2:93:d8:17:1e:ec:f9:be:a6:21:61: 1b:89:2d:ef:21:dd:6f:9e:50:b5:24:5c:2e:2c:99: d5:5f:66:4a:36:6d:59:9d:fc:94:6d:ed:d4:af:21: 9a:35:44:45:00:a7:96:ee:97:ab:b1:69:2d:f7:39: 5a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A0:23:A4:1F:8A:6E:63:90:61:B4:F4:25:32:DA:81:01:59:88:00 X509v3 Authority Key Identifier: keyid:E7:23:76:33:9D:BD:5D:30:2A:59:CC:FA:77:AC:09:CD:17:23:95:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/AC8EE79E975B11EFB1D18E82C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.51.128.0/19 Signature Algorithm: sha256WithRSAEncryption 55:5f:eb:ed:d6:e3:ff:38:ac:fa:36:fc:7b:9a:91:be:14:81: 70:f5:a8:b8:4a:6b:fb:55:51:67:c4:86:0f:8d:0f:ca:de:77: 1f:48:58:33:4d:7b:a8:16:01:9b:dc:a5:1f:47:f2:06:55:ac: cc:a0:f4:1d:bd:44:7b:a2:09:ce:82:82:f5:2b:f9:03:a7:44: 74:ad:48:14:52:de:97:1a:f9:93:5f:a6:2a:40:9c:60:c2:db: 19:5e:d9:45:1b:3b:9e:06:1e:74:3d:8c:7f:70:3f:6e:7e:de: 1c:93:e5:14:13:d9:63:4e:7b:e9:9f:62:39:b6:4a:ca:4d:bd: 92:31:f6:0c:31:23:db:36:dd:b3:5d:61:17:40:db:2d:5d:b6: 71:1e:e4:b1:05:17:7f:ec:67:4b:44:47:ab:d5:58:f9:b4:56: 2d:11:de:70:a5:4a:0c:6f:5e:a8:50:d2:31:93:06:83:74:b8: d5:e0:e3:71:98:2c:ae:f3:95:0b:1f:38:e0:1c:fd:44:57:47: 99:48:70:6d:7e:b6:f7:a0:51:b9:a0:d9:4c:80:33:a3:1f:c7: 67:17:14:a5:28:63:44:cc:09:56:54:9d:f1:e8:a8:ff:db:0f: 54:6a:f2:56:fa:ac:53:25:38:34:e6:3b:a5:1b:26:91:32:a3: 6a:2e:c4:c1 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q2MEMxMTAvBgNVBAUTKEU3MjM3NjMzOURCRDVEMzAyQTU5Q0NGQTc3QUMwOUNE MTcyMzk1NEQwHhcNMjUwNTAzMDY0MjU4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZTJjMS00YzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzVH7gucJufZm3LB3Gl1IFfoRuNrri44SZyl5MA1r6w5Je4VOBIIlAN24fLU r00LW+GoJbqvTAKFW2ztoWa9+pV9W3FkTG/ujq5AER8m9FDtWSK6IfTrJx8FsceK DV6U9NO/jpoM9ybM4pye/UeUyFyQefJdwu5DolKIwBTrOMDNoWIfLzbZfBMBmnnC YOoll1C9hcTGSP/0BeU2C6pZ89WOW2zuc7PjIKfyYzuLowJClMGAxi858nyiYalt OtEO0Jy8mt5rspPYFx7s+b6mIWEbiS3vId1vnlC1JFwuLJnVX2ZKNm1ZnfyUbe3U ryGaNURFAKeW7persWkt9zlaAQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPWgI6Qf im5jkGG09CUy2oEBWYgAMB8GA1UdIwQYMBaAFOcjdjOdvV0wKlnM+nesCc0XI5VN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDYwQy8xODhGMTE3Mjk3 M0QxMUVGQTUxOTYwNThDNEY5QUUwMi81eU4yTTUyOVhUQXFXY3o2ZDZ3SnpSY2ps VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV5TjJNNTI5WFRBcVdjejZkNndKelJjamxVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0Q2MEMvMTg4RjExNzI5NzNEMTFFRkE1MTk2MDU4QzRGOUFFMDIvQUM4RUU3OUU5 NzVCMTFFRkIxRDE4RTgyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQFyjOAMA0GCSqGSIb3DQEBCwUAA4IBAQBVX+vt1uP/OKz6Nvx7mpG+ FIFw9ai4Smv7VVFnxIYPjQ/K3ncfSFgzTXuoFgGb3KUfR/IGVazMoPQdvUR7ognO goL1K/kDp0R0rUgUUt6XGvmTX6YqQJxgwtsZXtlFGzueBh50PYx/cD9uft4ck+UU E9ljTnvpn2I5tkrKTb2SMfYMMSPbNt2zXWEXQNstXbZxHuSxBRd/7GdLREer1Vj5 tFYtEd5wpUoMb16oUNIxkwaDdLjV4ONxmCyu85ULHzjgHP1EV0eZSHBtfrb3oFG5 oNlMgDOjH8dnFxSlKGNEzAlWVJ3x6Kj/2w9UavJW+qxTJTg05julGyaRMqNqLsTB -----END CERTIFICATE-----Generated at Sun Mar 1 22:59:59 2026 by rpki-client