$ rpki-client -vvf rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/D00FC228F46111ECA631AC55C4F9AE02.roa File: D00FC228F46111ECA631AC55C4F9AE02.roa (raw, json) Hash identifier: CCeYRNeMxbpOCPaIE3BqCoWORj/K4Cmf/wyUKaeIcyQ= Subject key identifier: 33:F6:4C:D7:8C:8A:69:76:95:4A:6B:D5:89:CA:FB:F6:3B:25:F6:5E Certificate issuer: /CN=A91D112B/serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D Certificate serial: 07D4 Authority key identifier: F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/D00FC228F46111ECA631AC55C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:41:18 +0000 ROA not before: Wed 16 Jul 2025 22:02:00 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 134236 IP address blocks: 45.120.96.0/22 maxlen: 22 45.120.96.0/23 maxlen: 23 45.120.96.0/24 maxlen: 24 45.120.97.0/24 maxlen: 24 45.120.98.0/23 maxlen: 23 45.120.98.0/24 maxlen: 24 45.120.99.0/24 maxlen: 24 103.60.160.0/22 maxlen: 22 103.60.160.0/23 maxlen: 23 103.60.160.0/24 maxlen: 24 103.60.161.0/24 maxlen: 24 103.60.162.0/23 maxlen: 23 103.60.162.0/24 maxlen: 24 103.60.163.0/24 maxlen: 24 2406:cc40::/32 maxlen: 32 2406:cc40:1::/48 maxlen: 48 2406:cc40:2::/48 maxlen: 48 2406:cc40:a::/48 maxlen: 48 2406:cc40:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:19:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2004 (0x7d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D112B, serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D Validity Not Before: Jul 16 22:02:00 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a409be-607c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2c:1f:45:52:36:45:87:7e:40:1d:36:39:df: a1:82:c1:ea:09:2b:a9:b4:fb:7e:75:6c:51:b9:3b: de:85:e3:5c:89:95:f7:e6:9d:78:f9:1b:8d:a0:fc: a0:29:63:4c:41:41:c3:cb:34:8d:8e:c7:8e:6f:e7: 1d:42:7b:da:ca:76:35:d6:e2:61:f0:6c:b9:8a:e4: 5a:b6:96:1e:e9:a5:bb:44:56:5e:11:85:c8:a5:1f: 61:8b:36:44:2b:53:b3:d6:60:b4:5e:18:2f:95:c0: f0:1b:29:1f:be:ce:4e:55:2e:e0:50:d5:63:04:0b: 37:8d:fe:93:08:71:c9:c3:55:45:b6:3a:45:5e:81: 12:ac:dc:a4:d1:bc:a1:a1:6b:67:0d:0d:55:e0:1f: 43:8b:6d:28:3f:d3:6d:f3:0f:dc:21:fb:15:d3:7d: 80:aa:9b:b8:cb:96:6a:c7:62:90:6a:c3:97:21:85: 68:15:2b:e4:79:1c:73:85:04:da:6e:b3:07:d3:aa: 7d:5a:1d:e5:df:22:af:57:54:62:34:20:3b:6e:ee: 2b:b7:eb:8f:9f:96:32:c7:10:10:22:26:a7:50:7d: db:92:80:66:9b:19:18:b3:b8:5c:38:ff:69:ba:db: eb:3d:ad:cf:46:18:39:22:91:3c:f4:3e:45:dc:b7: d7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F6:4C:D7:8C:8A:69:76:95:4A:6B:D5:89:CA:FB:F6:3B:25:F6:5E X509v3 Authority Key Identifier: keyid:F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/D00FC228F46111ECA631AC55C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.120.96.0/22 103.60.160.0/22 IPv6: 2406:cc40::/32 Signature Algorithm: sha256WithRSAEncryption 60:33:a0:41:40:e6:cb:0a:40:67:dc:b6:b9:dc:ca:6a:f6:a7: 78:5f:a6:78:d7:70:e1:66:a3:07:8c:8e:c0:f9:bc:e4:e1:26: 2f:6f:fa:68:92:c8:45:9a:31:b7:5a:9f:e7:be:d1:15:67:00: f5:a3:06:e0:15:37:4d:d2:81:16:81:18:da:66:21:1c:05:4a: 17:c8:f4:59:03:87:06:27:81:74:e3:65:cb:1d:bd:10:63:8a: f7:b7:64:62:fc:90:52:e7:14:a6:e7:e2:1a:b6:86:66:99:17: 00:70:ed:89:24:ba:b7:da:50:8e:b8:84:93:8e:dc:18:74:c3: 62:df:5a:f9:96:d5:44:8e:80:93:90:2c:ad:9a:e6:a7:8a:08: aa:f7:8f:bb:d7:a3:0c:13:a1:db:59:4e:84:42:f8:25:b4:28: 6d:51:c8:ce:cb:e4:4a:4d:a0:db:1a:d6:6b:88:a6:55:f0:b4: 14:a6:8c:5d:b2:ac:bb:2a:80:0e:c4:24:0c:58:f1:04:e0:ef: f9:31:22:d3:cc:26:25:c5:72:16:f1:8a:61:ec:15:e9:f0:6d: ce:75:c3:3b:73:48:dc:ae:34:bb:32:15:29:0e:54:8f:92:6c: c7:99:6a:73:c4:4f:64:9b:9a:5e:56:72:f1:70:d1:f3:06:91: e5:c3:28:6e -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICB9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMkIxMTAvBgNVBAUTKEYwNEIyNEQyNDgyRUYwMUY4OEI3RDBENjJBNTM5MjI3 MzlCNzg4MEQwHhcNMjUwNzE2MjIwMjAwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDliZS02MDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsywfRVI2RYd+QB02Od+hgsHqCSuptPt+dWxRuTveheNciZX35p14+RuNoPyg KWNMQUHDyzSNjseOb+cdQnvaynY11uJh8Gy5iuRatpYe6aW7RFZeEYXIpR9hizZE K1Oz1mC0XhgvlcDwGykfvs5OVS7gUNVjBAs3jf6TCHHJw1VFtjpFXoESrNyk0byh oWtnDQ1V4B9Di20oP9Nt8w/cIfsV032Aqpu4y5Zqx2KQasOXIYVoFSvkeRxzhQTa brMH06p9Wh3l3yKvV1RiNCA7bu4rt+uPn5YyxxAQIianUH3bkoBmmxkYs7hcOP9p utvrPa3PRhg5IpE89D5F3LfXvQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFDP2TNeM iml2lUpr1YnK+/Y7JfZeMB8GA1UdIwQYMBaAFPBLJNJILvAfiLfQ1ipTkic5t4gN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEyQi8xQ0QwRTA1MDJG MzQxMUVCOTdGRTE3ODZDNEY5QUUwMi84RXNrMGtndThCLUl0OURXS2xPU0p6bTNp QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFc2swa2d1OEItSXQ5RFdLbE9TSnptM2lBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDExMkIvMUNEMEUwNTAyRjM0MTFFQjk3RkUxNzg2QzRGOUFFMDIvRDAwRkMyMjhG NDYxMTFFQ0E2MzFBQzU1QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCLXhgAwQCZzygMA0EAgACMAcDBQAkBsxAMA0GCSqGSIb3DQEBCwUA A4IBAQBgM6BBQObLCkBn3La53Mpq9qd4X6Z413DhZqMHjI7A+bzk4SYvb/pokshF mjG3Wp/nvtEVZwD1owbgFTdN0oEWgRjaZiEcBUoXyPRZA4cGJ4F042XLHb0QY4r3 t2Ri/JBS5xSm5+IatoZmmRcAcO2JJLq32lCOuISTjtwYdMNi31r5ltVEjoCTkCyt muanigiq94+716MME6HbWU6EQvgltChtUcjOy+RKTaDbGtZriKZV8LQUpoxdsqy7 KoAOxCQMWPEE4O/5MSLTzCYlxXIW8Yph7BXp8G3OdcM7c0jcrjS7MhUpDlSPkmzH mWpzxE9km5peVnLxcNHzBpHlwyhu -----END CERTIFICATE-----Generated at Mon Mar 2 07:07:33 2026 by rpki-client