$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/2086256888B911ECAC54E716C4F9AE02.roa File: 2086256888B911ECAC54E716C4F9AE02.roa (raw, json) Hash identifier: /dwrVAqJ9uiVj1Lv7xJ/5fbktcGugWNmrf3kKQXfOnw= Subject key identifier: 08:94:10:1C:72:59:7E:23:F7:24:D5:47:C8:9D:C0:8E:37:22:6E:60 Certificate issuer: /CN=A91DDCB6/serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC Certificate serial: 0915 Authority key identifier: FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/2086256888B911ECAC54E716C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:42:01 +0000 ROA not before: Wed 08 Oct 2025 20:51:37 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 17439 IP address blocks: 43.252.88.0/22 maxlen: 24 101.53.128.0/19 maxlen: 24 103.20.212.0/22 maxlen: 24 2001:df0:411::/48 maxlen: 48 2001:df4:3500::/48 maxlen: 48 2406:69c0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2325 (0x915) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC Validity Not Before: Oct 8 20:51:37 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a45e49-ed05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c0:a1:d3:a4:bc:e6:b1:cd:42:9f:7a:4d:e3: 1c:66:95:d5:da:13:cc:5a:49:4b:37:76:29:18:66: aa:08:c3:f2:9a:d7:14:1f:e7:32:8a:77:ba:cd:de: b7:7f:75:d1:c2:30:23:a5:f8:5d:48:cb:f8:16:0a: 3d:62:5b:47:2a:bb:7a:8f:f0:b8:cc:b4:9d:bc:b0: 49:71:78:35:9c:9b:d7:9f:42:3d:88:38:fd:8a:8c: e9:44:32:27:3f:f6:f0:69:f9:15:6b:0d:04:d2:86: a0:3b:ab:91:14:2a:12:d0:e9:ef:3a:62:1f:8b:80: b0:a0:7b:b8:eb:ea:b9:74:07:a6:61:88:10:01:93: a6:fd:91:29:6b:74:fd:ee:a4:cb:c8:19:4e:17:43: a7:11:b8:8c:c0:c9:22:c1:f4:88:a9:98:6f:eb:4f: 0a:4a:c4:4a:c6:36:e2:72:dc:5a:c3:3e:b5:71:64: 02:a1:82:ef:32:e3:f0:8e:08:3e:21:fb:59:e5:41: 27:b2:c3:77:38:cf:68:59:3d:52:93:f4:cb:d1:d0: 20:33:1b:5c:db:3c:63:db:e2:44:89:13:bb:38:0d: 08:63:3e:ac:52:2d:8a:71:85:97:96:51:5a:05:3e: 6f:49:23:8b:a2:3d:0e:bb:81:b8:af:1f:32:34:46: 43:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:94:10:1C:72:59:7E:23:F7:24:D5:47:C8:9D:C0:8E:37:22:6E:60 X509v3 Authority Key Identifier: keyid:FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/2086256888B911ECAC54E716C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.252.88.0/22 101.53.128.0/19 103.20.212.0/22 IPv6: 2001:df0:411::/48 2001:df4:3500::/48 2406:69c0::/32 Signature Algorithm: sha256WithRSAEncryption 78:72:2f:a8:14:da:25:62:d3:d2:7a:b1:3a:3a:ef:21:f7:77: 72:da:86:56:70:30:5e:54:ad:3f:f2:17:96:1f:58:82:b1:78: 07:d2:ac:df:49:3d:da:95:99:c7:d5:ba:d7:b7:6e:7a:6e:93: ae:f5:ba:8f:68:a1:c8:f3:d1:57:8a:af:e4:db:87:0a:53:d7: 1c:ef:b8:59:d2:ae:d3:ae:9d:71:79:e4:f2:a1:6f:97:65:dc: 1a:08:52:49:4c:0a:d1:9b:96:14:de:d7:c0:52:15:b7:52:6b: ea:7b:fe:a1:bb:78:8b:f6:99:63:63:82:52:aa:d0:64:4f:16: 12:41:8b:1f:57:98:e7:12:4a:e9:47:a3:a9:62:d2:92:c3:b9: 0b:ba:57:48:f0:57:a1:98:8b:06:51:93:81:85:ec:a9:28:3c: 85:c1:7d:39:df:3d:e2:3a:a3:ad:0f:77:45:40:86:93:3e:ba: 36:81:17:1b:1f:2b:07:1d:1c:c4:07:9d:7a:7a:b9:4d:72:84: 17:c4:8c:9e:09:79:c1:7a:e3:e0:09:43:cb:79:98:09:68:94: 50:f9:b8:22:2d:4e:8e:b6:a3:6a:9a:e6:5e:c7:fe:d2:08:bd: 16:b2:a2:9b:bc:bc:02:d6:fb:24:38:00:92:91:60:e3:f5:23: 88:85:ce:b3 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgICCRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKEZFQTE0RjIzRkRCOTc3QUM2NDg5RDIxMDZFMzVFMDIz QjI4OTY4REMwHhcNMjUxMDA4MjA1MTM3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWU0OS1lZDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsCh06S85rHNQp96TeMcZpXV2hPMWklLN3YpGGaqCMPymtcUH+cyine6zd63 f3XRwjAjpfhdSMv4Fgo9YltHKrt6j/C4zLSdvLBJcXg1nJvXn0I9iDj9iozpRDIn P/bwafkVaw0E0oagO6uRFCoS0OnvOmIfi4CwoHu46+q5dAemYYgQAZOm/ZEpa3T9 7qTLyBlOF0OnEbiMwMkiwfSIqZhv608KSsRKxjbictxawz61cWQCoYLvMuPwjgg+ IftZ5UEnssN3OM9oWT1Sk/TL0dAgMxtc2zxj2+JEiRO7OA0IYz6sUi2KcYWXllFa BT5vSSOLoj0Ou4G4rx8yNEZDzwIDAQABo4ICjTCCAokwHQYDVR0OBBYEFAiUEBxy WX4j9yTVR8idwI43Im5gMB8GA1UdIwQYMBaAFP6hTyP9uXesZInSEG414COyiWjc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9GMDc3NTk4RUND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9fcUZQSV8yNWQ2eGtpZElRYmpYZ0k3S0ph TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19xRlBJXzI1ZDZ4a2lkSVFialhnSTdLSmFOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RERDQjYvRjA3NzU5OEVDQzNEMTFFQThCQzQ1QzI5QzRGOUFFMDIvMjA4NjI1Njg4 OEI5MTFFQ0FDNTRFNzE2QzRGOUFFMDIucm9hMEwGCCsGAQUFBwEHAQH/BD0wOzAY BAIAATASAwQCK/xYAwQFZTWAAwQCZxTUMB8EAgACMBkDBwAgAQ3wBBEDBwAgAQ30 NQADBQAkBmnAMA0GCSqGSIb3DQEBCwUAA4IBAQB4ci+oFNolYtPSerE6Ou8h93dy 2oZWcDBeVK0/8heWH1iCsXgH0qzfST3alZnH1brXt256bpOu9bqPaKHI89FXiq/k 24cKU9cc77hZ0q7Trp1xeeTyoW+XZdwaCFJJTArRm5YU3tfAUhW3Umvqe/6hu3iL 9pljY4JSqtBkTxYSQYsfV5jnEkrpR6OpYtKSw7kLuldI8FehmIsGUZOBheypKDyF wX053z3iOqOtD3dFQIaTPro2gRcbHysHHRzEB516erlNcoQXxIyeCXnBeuPgCUPL eZgJaJRQ+bgiLU6OtqNqmuZex/7SCL0WsqKbvLwC1vskOACSkWDj9SOIhc6z -----END CERTIFICATE-----Generated at Mon Mar 2 05:49:53 2026 by rpki-client