$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/5A034FE6BD9011EF8EBE9D64C4F9AE02.roa File: 5A034FE6BD9011EF8EBE9D64C4F9AE02.roa (raw, json) Hash identifier: F75QXCxGZr3+/SASqc++qXUU4Ak7hy/ZkNV6fX02oFA= Subject key identifier: 14:43:54:83:01:7D:31:39:05:03:AD:FB:33:3F:3A:7C:4C:E4:DA:25 Certificate issuer: /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Certificate serial: 091D Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/5A034FE6BD9011EF8EBE9D64C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:12:02 +0000 ROA not before: Tue 02 Dec 2025 21:25:41 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 45411 IP address blocks: 58.87.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2333 (0x91d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB4FE, serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Validity Not Before: Dec 2 21:25:41 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a47361-27b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:15:15:89:06:ae:ad:e9:48:a7:a9:fd:32:91: 54:7b:91:b9:95:ba:ee:77:c1:2b:8f:0a:66:23:4d: 08:0a:c2:12:76:7f:25:05:b6:bf:45:2d:bb:6f:3a: 1c:95:a1:60:92:bb:d2:57:a2:7f:48:05:1f:5e:17: fe:f5:66:03:ef:3c:9a:21:09:07:33:44:61:89:75: c6:87:20:76:35:d2:49:82:dc:6e:98:5e:29:45:f6: 81:fc:68:35:f9:17:32:67:2d:13:3a:4f:42:22:33: 86:04:b2:76:de:89:0e:44:20:36:52:10:c0:96:64: 1a:a8:3c:af:ef:c9:da:4b:47:bd:a6:fc:80:e7:55: d7:c3:4b:e1:24:1f:46:db:99:26:5c:30:31:60:aa: bb:84:4b:3f:b3:3a:97:30:21:10:8d:5e:6b:b6:76: d2:16:6c:77:ea:3b:6e:39:b1:0b:4c:29:12:dd:c5: 57:37:6f:18:58:6b:10:db:d1:97:36:bb:81:55:50: ce:e4:f4:c8:d2:99:b8:8f:19:dc:fa:74:35:44:e8: 29:51:db:77:16:a9:36:f1:fb:5c:a7:4e:7a:87:95: 8d:3e:1d:b4:e9:22:ff:88:1a:6c:b3:a7:47:bd:01: a2:d7:69:58:84:f6:0f:98:81:fc:5f:49:e6:cf:c6: a4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:43:54:83:01:7D:31:39:05:03:AD:FB:33:3F:3A:7C:4C:E4:DA:25 X509v3 Authority Key Identifier: keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/5A034FE6BD9011EF8EBE9D64C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 58.87.4.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:08:d0:9b:2b:9d:27:d5:0f:ea:50:8f:c0:ac:6f:28:2a:79: f9:8f:f7:e2:ae:9a:3f:26:23:9a:2b:4d:d3:2f:24:2b:a9:60: 3d:e4:36:20:7e:2e:b6:71:59:fa:5f:07:06:8f:5f:74:8e:1c: 10:3d:21:c5:c4:5d:c3:dd:4e:6d:7a:15:1d:15:3b:01:09:0a: 76:16:e2:c8:89:d6:f5:45:60:86:d3:e8:19:09:81:ec:f3:37: 16:0b:88:c7:fb:76:ae:83:af:69:fa:07:80:6b:17:dd:8e:09: a8:38:25:49:ca:43:32:af:43:97:d0:3c:01:b3:72:b2:ab:c8: 56:42:9f:2f:93:64:0f:53:b2:be:f9:7f:ba:db:c2:0d:85:15: 89:87:f5:83:33:6f:b1:c0:75:c4:74:a1:a2:26:40:f7:14:1b: ab:c5:a9:62:bb:d1:6d:2d:0d:b6:f6:b2:c5:b9:b3:88:95:7c: 5f:05:3e:db:80:26:e3:59:84:c9:86:3f:60:85:c2:e7:93:85: c0:99:e7:ca:c1:da:4a:66:1b:b8:ec:43:5d:2d:08:c3:d5:53: 66:da:bf:bc:7c:b5:b1:62:b7:e6:48:81:fe:dc:af:b6:72:f7: c8:4d:c9:b6:ed:56:1c:55:4c:52:cd:b0:30:56:fa:13:2b:24: 3d:ac:37:44 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0RkUxMTAvBgNVBAUTKDdGNkJFMUQ1QTI3MzBGQzIyN0ZBRkM4OTZEMTM0MzMy NDE3ODMxNzkwHhcNMjUxMjAyMjEyNTQxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzM2MS0yN2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqxUViQaurelIp6n9MpFUe5G5lbrud8ErjwpmI00ICsISdn8lBba/RS27bzoc laFgkrvSV6J/SAUfXhf+9WYD7zyaIQkHM0RhiXXGhyB2NdJJgtxumF4pRfaB/Gg1 +RcyZy0TOk9CIjOGBLJ23okORCA2UhDAlmQaqDyv78naS0e9pvyA51XXw0vhJB9G 25kmXDAxYKq7hEs/szqXMCEQjV5rtnbSFmx36jtuObELTCkS3cVXN28YWGsQ29GX NruBVVDO5PTI0pm4jxnc+nQ1ROgpUdt3Fqk28ftcp056h5WNPh206SL/iBpss6dH vQGi12lYhPYPmIH8X0nmz8akOwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBRDVIMB fTE5BQOt+zM/OnxM5NolMB8GA1UdIwQYMBaAFH9r4dWicw/CJ/r8iW0TQzJBeDF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjRGRS9DRjRBMTBFQTg1 RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4SW4tdnlKYlJORE1rRjRN WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YydmgxYUp6RDhJbi12eUpiUk5ETWtGNE1Yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REI0RkUvQ0Y0QTEwRUE4NUUxMTFFQkFGQjUxRTg0QzRGOUFFMDIvNUEwMzRGRTZC RDkwMTFFRjhFQkU5RDY0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBOlcEMA0GCSqGSIb3DQEBCwUAA4IBAQAfCNCbK50n1Q/qUI/ArG8o Knn5j/firpo/JiOaK03TLyQrqWA95DYgfi62cVn6XwcGj190jhwQPSHFxF3D3U5t ehUdFTsBCQp2FuLIidb1RWCG0+gZCYHs8zcWC4jH+3aug69p+geAaxfdjgmoOCVJ ykMyr0OX0DwBs3Kyq8hWQp8vk2QPU7K++X+628INhRWJh/WDM2+xwHXEdKGiJkD3 FBurxaliu9FtLQ229rLFubOIlXxfBT7bgCbjWYTJhj9ghcLnk4XAmefKwdpKZhu4 7ENdLQjD1VNm2r+8fLWxYrfmSIH+3K+2cvfITcm27VYcVUxSzbAwVvoTKyQ9rDdE -----END CERTIFICATE-----Generated at Mon Mar 2 09:19:58 2026 by rpki-client