$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/D55D2990561F11E7B9B5FB2CC4F9AE02.roa File: D55D2990561F11E7B9B5FB2CC4F9AE02.roa (raw, json) Hash identifier: f/lcS6bLLjVH8wwIobnaBz8sL5pzSiGiCHWpfFVVqW0= Subject key identifier: B6:AE:F2:18:E2:B2:B6:5D:49:96:FD:79:3C:95:0E:D8:B1:C6:7A:0E Certificate issuer: /CN=A91DC866/serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90 Certificate serial: 353D Authority key identifier: EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/D55D2990561F11E7B9B5FB2CC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:35:32 +0000 ROA not before: Wed 26 Nov 2025 15:00:54 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 38896 IP address blocks: 103.2.144.0/22 maxlen: 24 121.58.184.0/21 maxlen: 24 122.129.96.0/20 maxlen: 24 122.129.112.0/21 maxlen: 24 2402:8600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:31:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13629 (0x353d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC866, serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90 Validity Not Before: Nov 26 15:00:54 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a440a4-b5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:75:05:cb:2b:b7:8a:a2:5a:5b:29:bc:4b:98: 89:e9:c8:86:20:e8:6d:cd:97:15:ff:6a:57:ac:3c: b8:ff:5c:7d:45:23:96:97:cb:fa:9e:fe:5a:f8:e5: 0a:9a:c9:a9:d6:22:ba:75:1a:d7:49:fc:18:51:92: c5:f1:56:ab:3a:52:8d:97:da:0d:00:e1:12:37:77: e9:18:e1:9f:36:9b:9a:12:04:92:63:f1:5e:8f:21: 8c:ba:c1:2d:78:8f:7a:73:aa:a3:d0:66:fc:39:ef: 7d:4e:74:e1:d3:20:4b:0a:33:05:83:79:ea:e5:75: ae:c2:bc:0c:1d:8c:28:8f:13:94:7b:b6:a6:7f:fa: f8:4c:2b:f8:59:20:3d:26:a8:87:a7:29:42:75:e5: 77:85:c7:c9:09:06:45:2f:c4:ff:79:61:9f:44:de: dc:7e:fc:2a:3f:10:08:e7:27:ee:0a:c3:3f:5f:98: 13:65:84:82:bb:7c:ba:8c:61:41:8e:ba:b4:5f:16: 01:cb:d9:85:b0:1f:81:76:73:c6:42:49:15:b5:e9: 28:46:f3:d9:0d:9f:33:be:f4:1e:fb:2e:59:98:4d: 6d:24:73:6d:aa:30:bb:5b:51:54:ec:c0:a5:08:92: 0c:71:4b:73:65:9d:43:11:c8:69:d0:ef:d2:5d:53: f8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AE:F2:18:E2:B2:B6:5D:49:96:FD:79:3C:95:0E:D8:B1:C6:7A:0E X509v3 Authority Key Identifier: keyid:EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/D55D2990561F11E7B9B5FB2CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.2.144.0/22 121.58.184.0/21 122.129.96.0-122.129.119.255 IPv6: 2402:8600::/32 Signature Algorithm: sha256WithRSAEncryption be:19:74:61:39:50:21:b6:fb:a9:e2:4c:58:ab:a7:76:3c:b8: 41:e0:1b:56:75:58:6b:20:8a:e2:c5:fe:95:8d:fb:c5:78:29: bc:78:da:09:6f:ce:28:db:aa:77:31:01:c5:10:89:06:5d:68: bc:f0:86:53:31:66:d5:4c:69:46:8a:76:a3:e1:eb:1d:b8:85: ca:5d:ae:c0:ed:fe:f1:7f:5d:66:47:e3:e1:ef:cd:50:bd:01: f0:db:da:b3:16:21:16:b9:0b:bb:f7:d2:e0:58:d5:1a:33:b0: e4:be:b6:f7:78:92:cb:f6:f7:2c:4d:1c:75:3f:a9:00:f4:97: 80:04:12:d1:0a:5c:ae:d9:ca:9a:52:a4:fc:9f:e8:f3:da:44: 62:b7:7b:30:39:60:1b:fc:4e:1d:0d:83:99:d3:86:9a:fa:c9: d9:80:42:6a:92:c0:b2:c1:11:5c:7d:0c:1f:69:b1:39:63:e2: 9e:63:3a:3b:6d:06:55:80:a9:5a:ed:3a:aa:53:bc:87:a3:eb: 80:9e:b7:5c:53:5b:fd:a8:a0:e8:a2:da:fc:8f:3d:5e:7d:ff: 7a:b7:e5:60:8e:34:25:0e:0f:bf:93:c9:54:f1:fa:12:c5:7c: ce:81:36:6c:44:d3:ad:73:9e:60:d3:b5:60:fb:d4:12:70:19: 94:37:66:5e -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgICNT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4NjYxMTAvBgNVBAUTKEVCNjgwQjdERTRDNEExQjQ0M0FCRDc5OUJBRjUyNDlE RDRCMEVBOTAwHhcNMjUxMTI2MTUwMDU0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDBhNC1iNWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4nUFyyu3iqJaWym8S5iJ6ciGIOhtzZcV/2pXrDy4/1x9RSOWl8v6nv5a+OUK msmp1iK6dRrXSfwYUZLF8VarOlKNl9oNAOESN3fpGOGfNpuaEgSSY/FejyGMusEt eI96c6qj0Gb8Oe99TnTh0yBLCjMFg3nq5XWuwrwMHYwojxOUe7amf/r4TCv4WSA9 JqiHpylCdeV3hcfJCQZFL8T/eWGfRN7cfvwqPxAI5yfuCsM/X5gTZYSCu3y6jGFB jrq0XxYBy9mFsB+BdnPGQkkVtekoRvPZDZ8zvvQe+y5ZmE1tJHNtqjC7W1FU7MCl CJIMcUtzZZ1DEchp0O/SXVP4WQIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFLau8hji srZdSZb9eTyVDtixxnoOMB8GA1UdIwQYMBaAFOtoC33kxKG0Q6vXmbr1JJ3UsOqQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzg2Ni82QTBERjlCQTFE OTYxMUUyQjdCNTA1N0YwOEIwMkNEMi82MmdMZmVURW9iUkRxOWVadXZVa25kU3c2 cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYyZ0xmZVRFb2JSRHE5ZVp1dlVrbmRTdzZwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REM4NjYvNkEwREY5QkExRDk2MTFFMkI3QjUwNTdGMDhCMDJDRDIvRDU1RDI5OTA1 NjFGMTFFN0I5QjVGQjJDQzRGOUFFMDIucm9hMEIGCCsGAQUFBwEHAQH/BDMwMTAg BAIAATAaAwQCZwKQAwQDeTq4MAwDBAV6gWADBAN6gXAwDQQCAAIwBwMFACQChgAw DQYJKoZIhvcNAQELBQADggEBAL4ZdGE5UCG2+6niTFirp3Y8uEHgG1Z1WGsgiuLF /pWN+8V4Kbx42glvzijbqncxAcUQiQZdaLzwhlMxZtVMaUaKdqPh6x24hcpdrsDt /vF/XWZH4+HvzVC9AfDb2rMWIRa5C7v30uBY1RozsOS+tvd4ksv29yxNHHU/qQD0 l4AEEtEKXK7ZyppSpPyf6PPaRGK3ezA5YBv8Th0Ng5nThpr6ydmAQmqSwLLBEVx9 DB9psTlj4p5jOjttBlWAqVrtOqpTvIej64Cet1xTW/2ooOii2vyPPV59/3q35WCO NCUOD7+TyVTx+hLFfM6BNmxE061znmDTtWD71BJwGZQ3Zl4= -----END CERTIFICATE-----Generated at Mon Mar 2 07:25:25 2026 by rpki-client