$ rpki-client -vvf rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/EABCE94C932111EE8C70453EC4F9AE02.roa File: EABCE94C932111EE8C70453EC4F9AE02.roa (raw, json) Hash identifier: Z5EXSqflUL/D/r+AuGpyvr0kie3DyXjBi6gYsTGAE8s= Subject key identifier: 21:A4:9A:42:96:04:C6:CA:78:AE:78:29:FB:83:91:97:DB:F2:37:60 Certificate issuer: /CN=A91E563F/serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F Certificate serial: 096F Authority key identifier: 48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/EABCE94C932111EE8C70453EC4F9AE02.roa Signing time: Mon 02 Mar 2026 13:45:48 +0000 ROA not before: Sat 12 Jul 2025 21:00:44 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 17894 IP address blocks: 202.52.160.0/20 maxlen: 20 202.52.160.0/23 maxlen: 23 202.95.224.0/24 maxlen: 24 202.95.225.0/24 maxlen: 24 202.95.226.0/24 maxlen: 24 202.95.227.0/24 maxlen: 24 202.95.228.0/24 maxlen: 24 202.95.229.0/24 maxlen: 24 202.95.230.0/24 maxlen: 24 202.95.231.0/24 maxlen: 24 202.95.232.0/24 maxlen: 24 202.95.235.0/24 maxlen: 24 202.95.236.0/24 maxlen: 24 202.95.237.0/24 maxlen: 24 202.95.238.0/24 maxlen: 24 202.95.239.0/24 maxlen: 24 202.126.32.0/20 maxlen: 24 2401:b900::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2415 (0x96f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E563F, serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F Validity Not Before: Jul 12 21:00:44 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a5948c-03ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c6:da:a4:d6:e6:29:02:be:63:22:77:bc:15: af:d0:2a:62:b1:ea:79:13:c0:33:b0:d8:18:d1:8e: 05:fa:57:6d:e2:93:bf:2b:4f:d3:4b:0e:c5:10:fe: 49:15:0d:73:ec:5e:77:be:17:63:88:2e:e0:bc:41: 37:5d:dd:d6:00:a8:ae:13:57:83:c3:cd:34:cb:38: e3:0b:c4:c0:b0:86:e7:f3:23:fe:08:a1:75:cd:5e: 1b:b2:af:cd:a5:57:fd:e8:d1:a1:f7:9f:44:a3:13: da:6e:4e:b2:3c:4c:71:6a:e0:e7:1e:41:5e:ca:cd: 51:60:86:b4:45:44:d8:06:11:c9:d0:47:92:45:63: 42:a3:52:9b:06:e7:8d:4a:bf:7b:57:3b:c8:84:44: 9a:71:4f:31:eb:c0:45:2d:1b:61:d7:90:df:b9:6c: dc:cc:d4:19:cf:f0:2f:f6:9b:99:8e:ec:ab:d0:0c: 3e:8d:04:64:6d:5e:65:75:9d:b2:ad:f4:74:42:c2: 6b:80:a2:56:eb:37:db:29:70:37:8b:8b:40:f8:0e: 31:a6:78:0d:1a:ed:e2:0a:6e:04:fa:af:ba:a0:54: 5c:49:8c:e1:0b:1b:63:50:e6:1f:a2:4b:72:cc:35: 30:c6:c2:1b:a3:54:8b:fc:73:a2:d1:49:1c:59:65: 89:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A4:9A:42:96:04:C6:CA:78:AE:78:29:FB:83:91:97:DB:F2:37:60 X509v3 Authority Key Identifier: keyid:48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/EABCE94C932111EE8C70453EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.52.160.0/20 202.95.224.0-202.95.232.255 202.95.235.0-202.95.239.255 202.126.32.0/20 IPv6: 2401:b900::/32 Signature Algorithm: sha256WithRSAEncryption 6a:a7:08:fd:51:68:eb:bb:19:30:d5:74:da:81:93:59:83:bd: 69:c4:64:94:e4:55:31:3e:c6:1a:48:c1:db:2b:2a:59:10:24: 37:4a:1d:e6:2c:0b:bc:37:80:30:c6:93:c3:8c:32:c5:01:a3: 36:54:95:97:8a:a4:f3:b3:7f:47:bd:4a:88:4e:e1:45:81:30: 8b:e5:7e:85:09:27:31:24:1d:16:d2:65:55:ec:86:0a:a4:bf: 38:00:91:14:f7:c8:40:9d:50:ae:09:80:bb:03:bf:ec:97:02: ec:13:99:34:c4:80:41:37:4f:d7:c4:ba:7f:c3:13:20:89:ad: b5:2b:52:c4:d9:bc:e2:4c:f9:ff:87:48:69:67:92:45:d3:6a: 34:1c:79:f5:a0:84:72:a5:7a:a4:77:c7:94:d9:52:5e:fc:97: a3:f8:cf:ba:0c:e7:ef:94:d6:c6:cd:47:ac:a4:3c:f8:f6:9e: 78:43:d4:3c:fe:f5:d8:68:48:4d:61:b7:d3:8d:4e:03:e4:91: 84:c9:1e:a3:86:c4:64:a8:8e:40:9c:36:61:81:60:e7:9b:86: 00:fa:5b:dd:7e:7f:9d:38:13:9c:ad:bd:58:70:fa:67:a8:f8: c6:f4:5c:62:63:2c:86:e2:d7:fb:16:b1:5f:8f:86:74:02:43: f9:5f:48:97 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgICCW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU2M0YxMTAvBgNVBAUTKDQ4MjAxNkU1NkEwMjQxRkQyRDM1QkZENzdCQzk3MkU2 NzNDRTlGMkYwHhcNMjUwNzEyMjEwMDQ0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTQ4Yy0wM2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnsbapNbmKQK+YyJ3vBWv0Cpisep5E8AzsNgY0Y4F+ldt4pO/K0/TSw7FEP5J FQ1z7F53vhdjiC7gvEE3Xd3WAKiuE1eDw800yzjjC8TAsIbn8yP+CKF1zV4bsq/N pVf96NGh959EoxPabk6yPExxauDnHkFeys1RYIa0RUTYBhHJ0EeSRWNCo1KbBueN Sr97VzvIhESacU8x68BFLRth15DfuWzczNQZz/Av9puZjuyr0Aw+jQRkbV5ldZ2y rfR0QsJrgKJW6zfbKXA3i4tA+A4xpngNGu3iCm4E+q+6oFRcSYzhCxtjUOYfokty zDUwxsIbo1SL/HOi0UkcWWWJswIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFCGkmkKW BMbKeK54KfuDkZfb8jdgMB8GA1UdIwQYMBaAFEggFuVqAkH9LTW/13vJcuZzzp8v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTYzRi8wQUI3NzdEQUI2 QTgxMUVBQUVFMTRGN0JDNEY5QUUwMi9TQ0FXNVdvQ1FmMHROYl9YZThseTVuUE9u eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDQVc1V29DUWYwdE5iX1hlOGx5NW5QT255OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTU2M0YvMEFCNzc3REFCNkE4MTFFQUFFRTE0RjdCQzRGOUFFMDIvRUFCQ0U5NEM5 MzIxMTFFRThDNzA0NTNFQzRGOUFFMDIucm9hMFAGCCsGAQUFBwEHAQH/BEEwPzAu BAIAATAoAwQEyjSgMAwDBAXKX+ADBADKX+gwDAMEAMpf6wMEBMpf4AMEBMp+IDAN BAIAAjAHAwUAJAG5ADANBgkqhkiG9w0BAQsFAAOCAQEAaqcI/VFo67sZMNV02oGT WYO9acRklORVMT7GGkjB2ysqWRAkN0od5iwLvDeAMMaTw4wyxQGjNlSVl4qk87N/ R71KiE7hRYEwi+V+hQknMSQdFtJlVeyGCqS/OACRFPfIQJ1QrgmAuwO/7JcC7BOZ NMSAQTdP18S6f8MTIImttStSxNm84kz5/4dIaWeSRdNqNBx59aCEcqV6pHfHlNlS XvyXo/jPugzn75TWxs1HrKQ8+PaeeEPUPP712GhITWG3041OA+SRhMkeo4bEZKiO QJw2YYFg55uGAPpb3X5/nTgTnK29WHD6Z6j4xvRcYmMshuLX+xaxX4+GdAJD+V9I lw== -----END CERTIFICATE-----Generated at Mon Mar 2 16:25:26 2026 by rpki-client