$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CF2E434C011511F181A4535E456F56BC.roa File: CF2E434C011511F181A4535E456F56BC.roa (raw, json) Hash identifier: ZOxVvj7B6tSWQNlNyxaRt/zrGC0D8N6GNKsfu0AT1kQ= Subject key identifier: 6C:21:95:B6:EE:BF:01:66:48:27:B2:39:C5:7D:C5:39:BC:86:C0:C7 Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Certificate serial: 2D29 Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CF2E434C011511F181A4535E456F56BC.roa Signing time: Sun 01 Mar 2026 21:27:17 +0000 ROA not before: Tue 03 Feb 2026 15:34:21 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 38547 IP address blocks: 103.151.27.0/24 maxlen: 24 115.167.72.0/24 maxlen: 24 115.167.74.0/24 maxlen: 24 115.167.75.0/24 maxlen: 24 202.92.16.0/24 maxlen: 24 202.92.17.0/24 maxlen: 24 202.92.18.0/24 maxlen: 24 202.92.19.0/24 maxlen: 24 202.92.23.0/24 maxlen: 24 202.92.24.0/24 maxlen: 24 202.92.24.32/27 maxlen: 27 202.92.25.0/24 maxlen: 24 202.92.27.0/24 maxlen: 24 202.92.28.0/24 maxlen: 24 202.92.29.0/24 maxlen: 24 202.92.30.0/24 maxlen: 24 202.92.31.0/24 maxlen: 24 2400:9560:1::/48 maxlen: 48 2400:9560:5::/48 maxlen: 48 2400:9560:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11561 (0x2d29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Validity Not Before: Feb 3 15:34:21 2026 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a4af35-515c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2a:89:50:46:70:63:4a:b0:76:34:3a:d1:63: 24:f2:b9:78:73:d9:14:4d:22:69:47:d6:7e:67:e6: 11:60:56:54:d2:31:a7:44:2b:72:f4:07:60:9a:7d: 2f:4f:0f:be:8c:73:0d:9a:2a:ad:de:99:44:76:f5: 3f:ac:67:ad:2e:a2:29:60:01:da:81:24:21:97:69: 61:38:91:6e:af:c4:2d:dd:d7:d2:93:65:66:53:39: 88:41:11:50:4a:87:24:31:1f:b3:25:75:1f:d0:5c: 3c:a5:43:e0:1e:ec:19:76:64:e7:c1:5b:7d:18:fb: d6:2a:20:f9:98:7a:a2:21:95:0d:62:14:7f:f5:54: 3d:ff:8b:c1:82:86:c8:e8:86:e8:22:d9:52:56:ff: 8a:1a:90:f7:4f:b3:4d:f5:fa:f9:13:21:eb:1c:6b: 44:cc:91:d7:43:2d:1b:ac:2c:cc:44:2f:b1:8f:e6: 3d:b7:c0:87:ae:bd:ab:24:5c:0b:da:cc:b6:6f:e1: 54:10:76:fb:e4:53:5b:bc:37:58:93:42:fe:41:a5: 60:7a:08:c0:f6:4d:c8:7f:e9:b9:6b:5b:97:48:fb: 50:0e:ef:dc:3a:b0:1f:19:ce:1b:84:1a:ed:14:8d: e2:04:53:1a:6a:d0:b6:18:68:cf:a4:d2:df:36:1c: 5c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:21:95:B6:EE:BF:01:66:48:27:B2:39:C5:7D:C5:39:BC:86:C0:C7 X509v3 Authority Key Identifier: keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CF2E434C011511F181A4535E456F56BC.roa sbgp-ipAddrBlock: critical IPv4: 103.151.27.0/24 115.167.72.0/24 115.167.74.0/23 202.92.16.0/22 202.92.23.0-202.92.25.255 202.92.27.0-202.92.31.255 IPv6: 2400:9560:1::/48 2400:9560:5::/48 2400:9560:9::/48 Signature Algorithm: sha256WithRSAEncryption 66:26:f0:f4:c2:82:0c:66:81:d0:b4:08:2e:bb:f0:ea:c5:98: 6a:62:f9:34:d2:b8:59:48:e9:24:5e:9a:a7:e6:fe:68:16:c9: 28:c9:0f:41:0b:28:29:e1:b4:53:f8:ba:a4:90:8c:30:e6:ec: 74:43:5a:33:42:ef:d5:db:58:05:4a:36:27:38:1d:1c:55:fc: 5f:59:46:5d:41:2d:f8:1b:04:48:9b:2d:83:bc:20:6a:f9:ea: c0:4f:60:e6:a7:ed:69:45:f7:47:a5:9b:19:84:de:04:a0:f5: 39:50:23:d5:f8:55:f3:ff:4a:35:6c:be:49:e6:a5:66:18:c9: 09:d3:95:b8:bd:b1:57:67:56:89:24:e3:28:32:03:d6:bb:8a: 90:a9:d2:a4:fd:1b:77:99:7f:0f:da:4d:71:f2:fc:84:a1:ad: 3a:a9:8c:f9:a7:be:48:22:e8:34:40:5b:a4:53:8b:86:b5:df: 49:6b:dc:c8:cc:a2:5a:e1:00:69:a8:6f:d8:fb:3e:25:1e:9e: 66:32:4c:aa:5e:df:e8:84:32:cc:8d:60:b9:3e:48:eb:85:e1: 94:02:50:3d:b6:a3:6d:64:cb:a1:fb:5e:b6:56:b0:f6:17:f9: d1:cf:f1:85:2d:ce:43:77:cb:7b:a3:d4:cd:10:fc:03:20:17: 2a:f2:56:fe -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICLSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy MUU1QjM5QzQwHhcNMjYwMjAzMTUzNDIxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YWYzNS01MTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhSqJUEZwY0qwdjQ60WMk8rl4c9kUTSJpR9Z+Z+YRYFZU0jGnRCty9Adgmn0v Tw++jHMNmiqt3plEdvU/rGetLqIpYAHagSQhl2lhOJFur8Qt3dfSk2VmUzmIQRFQ SockMR+zJXUf0Fw8pUPgHuwZdmTnwVt9GPvWKiD5mHqiIZUNYhR/9VQ9/4vBgobI 6IboItlSVv+KGpD3T7NN9fr5EyHrHGtEzJHXQy0brCzMRC+xj+Y9t8CHrr2rJFwL 2sy2b+FUEHb75FNbvDdYk0L+QaVgegjA9k3If+m5a1uXSPtQDu/cOrAfGc4bhBrt FI3iBFMaatC2GGjPpNLfNhxcXQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFGwhlbbu vwFmSCeyOcV9xTm8hsDHMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvQ0YyRTQzNEMw MTE1MTFGMTgxQTQ1MzVFNDU2RjU2QkMucm9hMHAGCCsGAQUFBwEHAQH/BGEwXzA6 BAIAATA0AwQAZ5cbAwQAc6dIAwQBc6dKAwQCylwQMAwDBADKXBcDBAHKXBgwDAME AMpcGwMEBcpcADAhBAIAAjAbAwcAJACVYAABAwcAJACVYAAFAwcAJACVYAAJMA0G CSqGSIb3DQEBCwUAA4IBAQBmJvD0woIMZoHQtAguu/DqxZhqYvk00rhZSOkkXpqn 5v5oFskoyQ9BCygp4bRT+LqkkIww5ux0Q1ozQu/V21gFSjYnOB0cVfxfWUZdQS34 GwRImy2DvCBq+erAT2Dmp+1pRfdHpZsZhN4EoPU5UCPV+FXz/0o1bL5J5qVmGMkJ 05W4vbFXZ1aJJOMoMgPWu4qQqdKk/Rt3mX8P2k1x8vyEoa06qYz5p75IIug0QFuk U4uGtd9Ja9zIzKJa4QBpqG/Y+z4lHp5mMkyqXt/ohDLMjWC5PkjrheGUAlA9tqNt ZMuh+162VrD2F/nRz/GFLc5Dd8t7o9TNEPwDIBcq8lb+ -----END CERTIFICATE-----Generated at Mon Mar 2 03:38:34 2026 by rpki-client