$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/C4391160305611EABE7DF272C4F9AE02.roa File: C4391160305611EABE7DF272C4F9AE02.roa (raw, json) Hash identifier: BMZ1UeFP1Job+RaL0SOd32/rdZOcQ/RtABlN62ClMsw= Subject key identifier: 5F:7C:08:3F:13:9E:45:39:C5:93:F4:11:FE:D5:E7:47:C5:78:BA:00 Certificate issuer: /CN=A91DA649/serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2 Certificate serial: 0CAA Authority key identifier: B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/C4391160305611EABE7DF272C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:41:30 +0000 ROA not before: Thu 14 Aug 2025 18:58:57 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 45276 IP address blocks: 115.69.208.0/21 maxlen: 21 115.69.208.0/23 maxlen: 24 115.69.210.0/24 maxlen: 24 115.69.211.0/24 maxlen: 24 115.69.212.0/23 maxlen: 24 115.69.214.0/24 maxlen: 24 115.69.215.0/24 maxlen: 24 2400:1020::/32 maxlen: 32 2400:1020::/48 maxlen: 48 2400:1020:1100::/44 maxlen: 44 2400:1020:1110::/44 maxlen: 44 2400:1020:1160::/44 maxlen: 44 2400:1020:1167::/48 maxlen: 48 2400:1020:2000::/40 maxlen: 40 2400:1020:2100::/40 maxlen: 40 2400:1020:2110::/44 maxlen: 44 2400:1020:a000::/44 maxlen: 44 2400:1020:a000::/48 maxlen: 48 2400:1020:a001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3242 (0xcaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA649, serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2 Validity Not Before: Aug 14 18:58:57 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a425ea-02f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f2:cf:e5:83:a3:8a:95:49:0b:be:26:ca:ee: 34:e0:78:b5:99:08:16:29:f2:49:3f:9e:2a:28:0f: 3f:7d:1e:48:2e:e9:c2:77:6d:91:82:cd:67:22:fa: 5e:d5:cd:75:0a:26:2a:27:2d:3f:1b:3e:eb:36:72: c6:d0:7e:38:19:d0:63:0a:e1:95:9e:31:03:3a:38: 54:59:0b:36:24:c8:d0:7f:20:f2:20:fd:7c:06:62: 1e:49:2e:3e:28:d4:bd:a1:0e:ce:29:f0:75:db:99: 86:52:f1:93:be:ab:3e:07:ac:55:8f:b1:60:88:15: b1:b2:c8:39:a7:33:84:0d:c2:69:df:23:02:e1:1d: c8:39:e1:38:b0:ba:be:7e:44:2d:bc:5d:ac:af:28: 9a:b3:7a:e2:db:9d:e4:83:79:b5:8a:f8:86:ba:52: 99:62:82:76:73:6b:69:e1:4a:f4:9a:cf:7a:0c:e8: a3:07:d9:e1:1a:fc:c3:62:c1:9c:e2:22:1d:85:33: c4:02:f6:68:04:28:67:7b:42:2d:a9:3e:0e:04:e9: bc:7b:da:de:2f:a1:bc:ee:df:a9:9e:75:a6:75:c5: c8:fd:bf:8d:ff:ce:3f:82:cd:56:b8:a5:8f:b8:31: 05:f6:fd:e6:a0:54:28:d5:d7:b4:31:c1:0f:47:93: 0c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:7C:08:3F:13:9E:45:39:C5:93:F4:11:FE:D5:E7:47:C5:78:BA:00 X509v3 Authority Key Identifier: keyid:B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/C4391160305611EABE7DF272C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 115.69.208.0/21 IPv6: 2400:1020::/32 Signature Algorithm: sha256WithRSAEncryption 67:de:12:56:46:b1:71:40:5e:a6:bc:a0:cb:24:fe:8e:4e:af: 0f:48:d3:df:97:a8:33:ce:b9:ce:68:be:62:7d:ee:88:40:ba: c4:58:27:cc:5c:12:3d:9c:f3:79:fd:92:ba:a1:e3:14:c6:08: 2c:20:d2:3f:f9:59:2f:76:91:6c:4b:97:f7:f0:3d:bb:8e:85: 2b:01:7b:23:3d:96:fd:35:62:79:67:aa:86:b9:ef:69:de:79: d4:c2:92:a0:d8:8f:71:25:17:41:f9:9a:0f:2d:69:26:6d:79: 8f:6d:9b:79:f4:3c:c5:98:01:f5:11:73:8b:c9:aa:78:12:d2: 40:a6:53:60:ae:ed:95:47:75:ed:84:46:62:04:62:92:2e:cb: 95:d4:41:ce:f7:70:21:ec:c9:4f:17:35:15:cb:d8:aa:c3:37: da:6b:0f:5c:8b:d9:79:98:1d:e8:96:b3:79:5a:fb:90:ef:95: 6b:43:45:d6:1e:48:ea:9b:7a:21:46:cf:bb:d7:15:9b:dc:9a: 9c:81:dd:16:69:c4:b6:39:fb:1d:ea:a5:41:05:19:44:54:f7: 86:73:2b:c1:e4:a9:78:f3:36:8e:a8:b4:d1:67:5c:78:ff:65: 64:c6:94:2b:75:24:8d:2f:6d:55:bb:c3:ff:76:7f:39:38:62: 69:bf:78:8c -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE2NDkxMTAvBgNVBAUTKEI5RUIxNTQ4NjY3NzczN0RCMjczOUZENjU0NjJBRUU3 OTA2MTY4QzIwHhcNMjUwODE0MTg1ODU3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjVlYS0wMmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4vLP5YOjipVJC74myu404Hi1mQgWKfJJP54qKA8/fR5ILunCd22Rgs1nIvpe 1c11CiYqJy0/Gz7rNnLG0H44GdBjCuGVnjEDOjhUWQs2JMjQfyDyIP18BmIeSS4+ KNS9oQ7OKfB125mGUvGTvqs+B6xVj7FgiBWxssg5pzOEDcJp3yMC4R3IOeE4sLq+ fkQtvF2sryias3ri253kg3m1iviGulKZYoJ2c2tp4Ur0ms96DOijB9nhGvzDYsGc 4iIdhTPEAvZoBChne0ItqT4OBOm8e9reL6G87t+pnnWmdcXI/b+N/84/gs1WuKWP uDEF9v3moFQo1de0McEPR5MMbwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFF98CD8T nkU5xZP0Ef7V50fFeLoAMB8GA1UdIwQYMBaAFLnrFUhmd3N9snOf1lRirueQYWjC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTY0OS81RDk3Nzc0QzBG NTExMUVBOEM0QTVDMEFDNEY5QUUwMi91ZXNWU0daM2MzMnljNV9XVkdLdTU1Qmhh TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vlc1ZTR1ozYzMyeWM1X1dWR0t1NTVCaGFNSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REE2NDkvNUQ5Nzc3NEMwRjUxMTFFQThDNEE1QzBBQzRGOUFFMDIvQzQzOTExNjAz MDU2MTFFQUJFN0RGMjcyQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQDc0XQMA0EAgACMAcDBQAkABAgMA0GCSqGSIb3DQEBCwUAA4IBAQBn 3hJWRrFxQF6mvKDLJP6OTq8PSNPfl6gzzrnOaL5ife6IQLrEWCfMXBI9nPN5/ZK6 oeMUxggsINI/+VkvdpFsS5f38D27joUrAXsjPZb9NWJ5Z6qGue9p3nnUwpKg2I9x JRdB+ZoPLWkmbXmPbZt59DzFmAH1EXOLyap4EtJAplNgru2VR3XthEZiBGKSLsuV 1EHO93Ah7MlPFzUVy9iqwzfaaw9ci9l5mB3olrN5WvuQ75VrQ0XWHkjqm3ohRs+7 1xWb3Jqcgd0WacS2Ofsd6qVBBRlEVPeGcyvB5Kl48zaOqLTRZ1x4/2VkxpQrdSSN L21Vu8P/dn85OGJpv3iM -----END CERTIFICATE-----Generated at Mon Mar 2 12:38:34 2026 by rpki-client