$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/F1FC74DE7DE111EEB1BFD61AC4F9AE02.roa File: F1FC74DE7DE111EEB1BFD61AC4F9AE02.roa (raw, json) Hash identifier: pNMivkkOLffKPDrh/XyyiMiyvZdESt4jTfT5doztz7c= Subject key identifier: C0:2D:B5:9D:BC:FE:DD:F6:F0:DC:1F:1A:57:D8:18:27:90:D2:AC:58 Certificate issuer: /CN=A91E0875/serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D Certificate serial: 0B73 Authority key identifier: F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/F1FC74DE7DE111EEB1BFD61AC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:47:05 +0000 ROA not before: Sat 28 Feb 2026 20:16:31 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 10204 IP address blocks: 43.231.224.0/22 maxlen: 24 45.115.220.0/22 maxlen: 24 103.51.48.0/22 maxlen: 22 103.51.48.0/23 maxlen: 24 103.51.50.0/23 maxlen: 23 103.51.50.0/24 maxlen: 24 103.51.51.0/24 maxlen: 24 202.6.248.0/22 maxlen: 24 2402:1a80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2931 (0xb73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0875, serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D Validity Not Before: Feb 28 20:16:31 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a47b99-1433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:36:6c:d3:a2:45:cb:44:fd:c6:6f:56:36:72: 68:90:a1:a5:42:38:58:cf:9d:f0:3e:eb:70:02:86: f4:5d:3f:fd:db:a3:2f:16:a5:7e:50:0a:83:91:41: 1d:c7:58:dd:47:f6:ed:3a:86:17:3c:bc:11:2c:a2: db:58:0f:68:3a:a3:2f:6e:e6:08:6c:63:6a:d3:74: b7:bb:83:d1:ae:f8:15:ea:93:65:4b:b9:f4:27:fd: d5:a0:51:fe:91:5b:a2:7e:ba:4a:ff:e5:75:62:89: fb:b5:b1:47:af:ba:06:6b:ea:ca:fa:0f:92:a2:ba: 2b:db:8e:5e:2e:6c:e4:5f:9d:f2:89:38:41:0f:9c: f8:b4:7b:a9:0a:76:4a:d7:78:2b:b3:14:56:ab:c7: b5:98:f2:5d:46:02:ba:39:dc:6b:7e:2c:9e:e6:70: 3c:97:4f:3e:13:af:54:dc:7e:e2:c5:97:d5:47:98: d7:18:ba:8b:3d:87:77:a9:16:96:70:8c:8b:ed:ba: 60:60:30:94:2e:c2:18:2b:a8:75:d2:3e:37:e0:cf: 0a:bd:32:5f:78:1e:c1:9e:6d:45:08:0a:e8:50:dd: 6d:db:24:1d:5c:a0:52:b8:6d:d9:1b:bf:93:86:da: 77:d2:f8:bc:f6:ca:1b:57:fb:8d:34:3c:a1:6d:7e: 11:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:2D:B5:9D:BC:FE:DD:F6:F0:DC:1F:1A:57:D8:18:27:90:D2:AC:58 X509v3 Authority Key Identifier: keyid:F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/F1FC74DE7DE111EEB1BFD61AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.231.224.0/22 45.115.220.0/22 103.51.48.0/22 202.6.248.0/22 IPv6: 2402:1a80::/32 Signature Algorithm: sha256WithRSAEncryption 65:51:af:09:7a:2f:51:7a:47:5e:f4:73:82:ce:ca:fb:8f:84: d2:17:23:87:60:0c:a0:fd:25:19:15:ef:5a:b3:0b:f3:f2:3d: be:bd:c5:ef:5a:f2:47:29:50:a2:72:d9:ca:d9:02:36:75:15: d0:55:00:d1:04:47:a3:39:6e:71:06:d0:96:06:ba:af:d5:34: 8e:39:01:c0:29:63:b3:45:38:e1:87:2e:eb:b9:44:1b:63:e8: 92:d9:a3:47:e5:42:db:38:88:3a:75:49:af:18:1b:72:5c:fd: ac:41:c2:ca:e8:39:f8:dd:70:cb:76:38:2f:d2:90:44:10:51: 78:88:00:4c:9f:fb:6a:74:9e:e8:30:dd:06:a2:03:81:90:89: c0:68:80:91:6f:0a:a5:63:bd:31:03:74:af:a4:b5:79:5e:ef: b0:57:9e:7d:0b:48:58:fb:c7:83:02:79:a1:0d:61:41:42:ef: 2b:0a:26:02:42:ba:d1:66:ca:1e:e1:e9:81:68:46:cb:08:44: 93:84:8b:e9:13:5d:51:38:8a:7a:af:86:f9:bd:3a:2b:a5:67: 19:dd:80:ac:c6:fe:af:d0:22:51:6f:08:30:c7:25:2d:7f:6d: 7a:0c:e3:84:01:d7:ca:77:e2:d6:2f:1f:9b:4c:1e:76:fb:a1: e1:b3:70:48 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICC3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA4NzUxMTAvBgNVBAUTKEY5NzM0OTJFRDY0NjkyOEVEMUYxMERFODQ2NjJFNTUy M0Y1NUNDOEQwHhcNMjYwMjI4MjAxNjMxWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2I5OS0xNDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjZs06JFy0T9xm9WNnJokKGlQjhYz53wPutwAob0XT/926MvFqV+UAqDkUEd x1jdR/btOoYXPLwRLKLbWA9oOqMvbuYIbGNq03S3u4PRrvgV6pNlS7n0J/3VoFH+ kVuifrpK/+V1Yon7tbFHr7oGa+rK+g+Soror245eLmzkX53yiThBD5z4tHupCnZK 13grsxRWq8e1mPJdRgK6Odxrfiye5nA8l08+E69U3H7ixZfVR5jXGLqLPYd3qRaW cIyL7bpgYDCULsIYK6h10j434M8KvTJfeB7Bnm1FCAroUN1t2yQdXKBSuG3ZG7+T htp30vi89sobV/uNNDyhbX4R3wIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFMAttZ28 /t328NwfGlfYGCeQ0qxYMB8GA1UdIwQYMBaAFPlzSS7WRpKO0fEN6EZi5VI/VcyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg3NS82RDkxQUFCQzU5 MzExMUVBQUEzMUI0MEFDNEY5QUUwMi8tWE5KTHRaR2tvN1I4UTNvUm1MbFVqOVZ6 STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YTkpMdFpHa283UjhRM29SbUxsVWo5VnpJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTA4NzUvNkQ5MUFBQkM1OTMxMTFFQUFBMzFCNDBBQzRGOUFFMDIvRjFGQzc0REU3 REUxMTFFRUIxQkZENjFBQzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQCK+fgAwQCLXPcAwQCZzMwAwQCygb4MA0EAgACMAcDBQAkAhqAMA0G CSqGSIb3DQEBCwUAA4IBAQBlUa8Jei9Rekde9HOCzsr7j4TSFyOHYAyg/SUZFe9a swvz8j2+vcXvWvJHKVCictnK2QI2dRXQVQDRBEejOW5xBtCWBrqv1TSOOQHAKWOz RTjhhy7ruUQbY+iS2aNH5ULbOIg6dUmvGBtyXP2sQcLK6Dn43XDLdjgv0pBEEFF4 iABMn/tqdJ7oMN0GogOBkInAaICRbwqlY70xA3SvpLV5Xu+wV559C0hY+8eDAnmh DWFBQu8rCiYCQrrRZsoe4emBaEbLCESThIvpE11ROIp6r4b5vTorpWcZ3YCsxv6v 0CJRbwgwxyUtf216DOOEAdfKd+LWLx+bTB52+6Hhs3BI -----END CERTIFICATE-----Generated at Mon Mar 2 14:59:21 2026 by rpki-client