$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/5A69D6D4824811EC9AAB122AC4F9AE02.roa File: 5A69D6D4824811EC9AAB122AC4F9AE02.roa (raw, json) Hash identifier: uG1n6oQlH/BD2kN8eezzTV0mrmttdYgvZK05ssYpezk= Subject key identifier: D3:24:8E:29:CF:9B:4E:0E:14:1D:81:FC:1F:21:0C:C3:39:D0:FD:ED Certificate issuer: /CN=A91E2364/serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Certificate serial: 0D33 Authority key identifier: 64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/5A69D6D4824811EC9AAB122AC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:34:58 +0000 ROA not before: Fri 28 Nov 2025 17:50:24 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 38600 IP address blocks: 202.56.0.0/22 maxlen: 24 203.18.216.0/21 maxlen: 21 203.18.216.0/24 maxlen: 24 203.18.217.0/24 maxlen: 24 203.18.218.0/24 maxlen: 24 203.18.219.0/24 maxlen: 24 203.18.220.0/24 maxlen: 24 203.18.221.0/24 maxlen: 24 203.18.222.0/24 maxlen: 24 203.18.223.0/24 maxlen: 24 2401:9700:d000::/36 maxlen: 36 2401:9700:d000::/40 maxlen: 48 2401:9700:e000::/36 maxlen: 36 2401:9700:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3379 (0xd33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2364, serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Validity Not Before: Nov 28 17:50:24 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a45ca2-9642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:1b:a4:c9:5c:91:96:a8:be:e1:45:a2:f4:e2: b8:10:d3:cf:ce:94:8c:9c:17:2c:89:4f:9b:59:dd: 3b:f7:7d:15:3d:bb:b5:b8:35:a9:c1:9a:c4:0f:30: f6:8c:14:82:be:ae:28:c2:4b:28:de:11:ef:66:29: 30:d6:0f:25:7e:1a:5e:f3:79:38:8b:84:80:d7:54: 48:32:dc:46:45:a0:3f:21:8c:e3:71:84:5b:5b:97: e2:4f:11:48:a5:d4:4b:5a:68:a4:51:cb:31:0b:81: 77:9d:97:a3:51:ec:2e:8b:1a:2a:fe:01:7f:e5:73: 17:7a:4f:f8:07:e0:48:55:59:32:2a:29:76:2e:59: 74:41:78:ca:10:03:5f:21:97:90:db:da:34:00:90: dc:26:58:67:67:27:e6:49:1a:ff:9b:2b:44:cb:19: e5:7c:4f:e5:97:04:e7:dd:13:2b:d4:ac:e2:df:38: 50:b7:7c:6f:ca:ad:0b:59:d2:ea:ab:dc:54:f4:0f: 3f:07:d6:78:a9:49:53:76:f4:75:80:eb:74:11:c2: 2a:bb:99:6b:50:f6:6d:d9:dd:0a:61:a6:1f:7e:07: b4:24:91:21:d4:2e:2f:a0:b8:c2:8e:26:ca:d4:5f: 49:d0:32:cb:4d:89:af:06:17:90:57:e3:d6:b0:99: bc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:24:8E:29:CF:9B:4E:0E:14:1D:81:FC:1F:21:0C:C3:39:D0:FD:ED X509v3 Authority Key Identifier: keyid:64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/5A69D6D4824811EC9AAB122AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.56.0.0/22 203.18.216.0/21 IPv6: 2401:9700:d000::-2401:9700:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 2e:b4:96:93:8b:5d:b8:75:80:4c:4b:85:5a:c4:df:00:ea:64: fe:2d:6a:89:c5:81:29:fc:31:b5:7c:db:27:1a:5e:13:0a:57: b4:88:0c:20:04:af:ae:27:e7:19:27:69:82:32:ae:60:ef:3f: 3e:0a:5e:32:7f:61:eb:28:68:d2:31:cd:74:a0:13:f6:48:6b: 07:77:45:8f:c8:72:21:5b:c3:a9:f9:42:56:50:da:eb:1e:ff: 5e:79:77:d1:1a:42:17:b1:67:1a:e0:4f:26:4a:d0:c5:99:e2: e8:9f:3f:a1:3f:4b:60:24:22:26:03:09:71:03:b6:75:b5:ef: 7f:91:00:c9:28:c2:13:d3:64:d8:bf:f6:3d:8e:fe:8e:0a:35: c8:25:96:b1:85:14:a1:48:bd:36:ba:40:6a:6b:d1:ad:da:0b: 73:ee:8b:87:e3:a5:6c:14:45:18:24:0e:68:02:19:1d:2e:98: 6f:e1:58:01:8b:72:b3:b2:9c:55:20:aa:50:a7:20:ca:91:70: 30:75:20:60:30:d4:27:89:c1:7b:be:96:aa:fd:55:f5:76:02: 73:dd:f6:47:8e:49:75:cd:27:d5:77:c7:b4:39:47:33:85:4e: 1b:7c:79:4f:ab:37:94:5f:d5:75:65:97:77:dc:fa:c6:b3:22: 51:0f:86:92 -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgICDTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIzNjQxMTAvBgNVBAUTKDY0N0IxNDlFRjAxNkNDNTM1NkE3RUQ3MzBGMTMzRTAw MkMwRTdGQUEwHhcNMjUxMTI4MTc1MDI0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWNhMi05NjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9xukyVyRlqi+4UWi9OK4ENPPzpSMnBcsiU+bWd07930VPbu1uDWpwZrEDzD2 jBSCvq4owkso3hHvZikw1g8lfhpe83k4i4SA11RIMtxGRaA/IYzjcYRbW5fiTxFI pdRLWmikUcsxC4F3nZejUewuixoq/gF/5XMXek/4B+BIVVkyKil2Lll0QXjKEANf IZeQ29o0AJDcJlhnZyfmSRr/mytEyxnlfE/llwTn3RMr1Kzi3zhQt3xvyq0LWdLq q9xU9A8/B9Z4qUlTdvR1gOt0EcIqu5lrUPZt2d0KYaYffge0JJEh1C4voLjCjibK 1F9J0DLLTYmvBheQV+PWsJm8wQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFNMkjinP m04OFB2B/B8hDMM50P3tMB8GA1UdIwQYMBaAFGR7FJ7wFsxTVqftcw8TPgAsDn+q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjM2NC84RkU3MTc4NkZG OUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pGTldwLTF6RHhNLUFDd09m Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIc1VudkFXekZOV3AtMXpEeE0tQUN3T2Y2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTIzNjQvOEZFNzE3ODZGRjlCMTFFOUI3RjRBNzcyQzRGOUFFMDIvNUE2OUQ2RDQ4 MjQ4MTFFQzlBQUIxMjJBQzRGOUFFMDIucm9hMD4GCCsGAQUFBwEHAQH/BC8wLTAS BAIAATAMAwQCyjgAAwQDyxLYMBcEAgACMBEwDwMGBCQBlwDQAwUAJAGXADANBgkq hkiG9w0BAQsFAAOCAQEALrSWk4tduHWATEuFWsTfAOpk/i1qicWBKfwxtXzbJxpe EwpXtIgMIASvrifnGSdpgjKuYO8/PgpeMn9h6yho0jHNdKAT9khrB3dFj8hyIVvD qflCVlDa6x7/Xnl30RpCF7FnGuBPJkrQxZni6J8/oT9LYCQiJgMJcQO2dbXvf5EA ySjCE9Nk2L/2PY7+jgo1yCWWsYUUoUi9NrpAamvRrdoLc+6Lh+OlbBRFGCQOaAIZ HS6Yb+FYAYtys7KcVSCqUKcgypFwMHUgYDDUJ4nBe76Wqv1V9XYCc932R45Jdc0n 1XfHtDlHM4VOG3x5T6s3lF/VdWWXd9z6xrMiUQ+Gkg== -----END CERTIFICATE-----Generated at Mon Mar 2 02:33:58 2026 by rpki-client