$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/54AB633219D211F09C581262C4F9AE02.roa File: 54AB633219D211F09C581262C4F9AE02.roa (raw, json) Hash identifier: ikTD47sskq5df7NdzOni7LQ2W1ieiVdSgEvZGRAxZUk= Subject key identifier: A8:1B:C9:E9:80:D1:3C:B0:9F:8D:67:A0:98:43:28:71:74:04:3F:F3 Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Certificate serial: 0FFD Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/54AB633219D211F09C581262C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:47:04 +0000 ROA not before: Wed 14 Jan 2026 18:15:06 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 26344 IP address blocks: 125.252.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4093 (0xffd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFA0, serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Validity Not Before: Jan 14 18:15:06 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a489a8-75da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:be:27:45:fb:0b:be:78:c4:d8:58:eb:60:be: c3:d1:55:b4:65:af:63:19:25:1c:2b:b2:33:81:29: 43:c5:49:3d:89:c0:2c:43:2c:35:45:8a:d6:f7:77: e5:68:48:20:c2:4a:91:f4:86:6d:af:1a:f9:d2:98: 64:40:9a:4b:1f:c3:36:f5:23:c3:ae:77:ef:94:45: c9:35:1b:25:45:05:5a:42:64:78:b8:f4:e7:73:9f: e4:fe:2d:d5:a6:35:36:8a:e3:e9:03:35:94:97:79: e6:d0:94:d8:44:38:65:8e:73:85:04:05:6c:69:76: 24:54:d6:67:3e:0e:39:1d:d5:9d:22:a2:05:23:66: 33:b6:0a:55:dd:f4:12:b2:53:16:94:86:b6:c4:da: 0e:99:ef:83:b2:d6:ef:1d:d4:f1:e5:d1:7b:a6:a7: 2c:4c:38:5f:15:36:2e:19:e5:83:6d:7a:77:ee:e5: 89:af:34:a6:2f:92:fb:67:ca:f1:af:db:16:7d:f9: 53:fe:8f:77:b5:51:ad:46:da:a2:73:5e:f9:d4:54: 3a:d2:48:01:c9:46:77:e9:1f:1d:95:0f:ed:4d:ba: 72:36:b8:01:bb:63:ec:01:ba:f3:0f:58:45:0c:e6: 41:ce:83:d4:84:d6:17:7b:95:e2:3c:f6:dc:77:5c: 81:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:1B:C9:E9:80:D1:3C:B0:9F:8D:67:A0:98:43:28:71:74:04:3F:F3 X509v3 Authority Key Identifier: keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/54AB633219D211F09C581262C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 125.252.78.0/24 Signature Algorithm: sha256WithRSAEncryption 13:3a:7d:ec:b7:db:56:ca:ae:49:51:50:e6:e1:4a:18:92:1b: 70:4b:44:2a:a8:f0:c5:25:58:6c:d1:4c:3f:df:e0:13:09:3a: 00:a2:57:52:f3:83:1b:8b:43:fe:e2:22:68:80:4e:33:e3:59: ef:ea:a1:0b:bb:96:1d:40:d2:1b:7d:86:c8:e0:8a:96:3f:29: aa:21:9c:dd:ef:02:43:26:d2:5f:6b:1b:e8:3e:d9:d1:78:57: b8:f8:a6:02:19:c4:ae:54:38:60:91:d4:5c:db:a7:cd:dc:ce: 63:ab:e5:ba:66:46:21:5f:7e:0d:bd:1a:21:25:a1:c8:f1:51: 99:6e:8f:e2:17:23:6b:a5:20:90:f5:fe:20:b2:85:69:e7:75: fb:89:62:a4:1c:83:c5:8e:44:3a:77:8b:1b:d7:53:02:a9:b7: 54:57:32:83:5e:55:33:17:fe:89:1e:bb:4f:37:40:e3:8a:39: c1:a9:d9:e5:d9:8c:2c:a6:e0:66:d3:ab:19:4b:8b:d8:b5:82: fa:6b:96:85:97:99:d3:ad:df:65:4a:0b:0e:c9:4c:93:81:e5: 54:c4:5f:8b:3c:a3:12:c3:05:64:0e:3d:28:c1:b0:07:a6:38: a1:cf:fd:37:3a:16:af:89:5b:ec:d3:99:9c:86:18:1e:34:87: d7:c8:d2:d7 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICD/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQTAxMTAvBgNVBAUTKEFERDk0MThGMEY5QjU1RjNCNzM3NkEwOTNEQjExREJB RDNBRUZFQzgwHhcNMjYwMTE0MTgxNTA2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODlhOC03NWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp74nRfsLvnjE2FjrYL7D0VW0Za9jGSUcK7IzgSlDxUk9icAsQyw1RYrW93fl aEggwkqR9IZtrxr50phkQJpLH8M29SPDrnfvlEXJNRslRQVaQmR4uPTnc5/k/i3V pjU2iuPpAzWUl3nm0JTYRDhljnOFBAVsaXYkVNZnPg45HdWdIqIFI2YztgpV3fQS slMWlIa2xNoOme+DstbvHdTx5dF7pqcsTDhfFTYuGeWDbXp37uWJrzSmL5L7Z8rx r9sWfflT/o93tVGtRtqic1751FQ60kgByUZ36R8dlQ/tTbpyNrgBu2PsAbrzD1hF DOZBzoPUhNYXe5XiPPbcd1yB4QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKgbyemA 0Tywn41noJhDKHF0BD/zMB8GA1UdIwQYMBaAFK3ZQY8Pm1XztzdqCT2xHbrTrv7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xRDY2RDQ4NkQ4 Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9yZGxCanctYlZmTzNOMm9KUGJFZHV0T3Vf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkbEJqdy1iVmZPM04yb0pQYkVkdXRPdV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZGQTAvMUQ2NkQ0ODZEOENCMTFFOUJBRTI0RDIxQzRGOUFFMDIvNTRBQjYzMzIx OUQyMTFGMDlDNTgxMjYyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAffxOMA0GCSqGSIb3DQEBCwUAA4IBAQATOn3st9tWyq5JUVDm4UoY khtwS0QqqPDFJVhs0Uw/3+ATCToAoldS84Mbi0P+4iJogE4z41nv6qELu5YdQNIb fYbI4IqWPymqIZzd7wJDJtJfaxvoPtnReFe4+KYCGcSuVDhgkdRc26fN3M5jq+W6 ZkYhX34NvRohJaHI8VGZbo/iFyNrpSCQ9f4gsoVp53X7iWKkHIPFjkQ6d4sb11MC qbdUVzKDXlUzF/6JHrtPN0DjijnBqdnl2YwspuBm06sZS4vYtYL6a5aFl5nTrd9l SgsOyUyTgeVUxF+LPKMSwwVkDj0owbAHpjihz/03OhaviVvs05mchhgeNIfXyNLX -----END CERTIFICATE-----Generated at Mon Mar 2 07:42:08 2026 by rpki-client