$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/959AC422557911EBBD21EB2FC4F9AE02.roa File: 959AC422557911EBBD21EB2FC4F9AE02.roa (raw, json) Hash identifier: YKfVc/1kWhtiSN/JgbbvpApeCbmTeJDdHpPmRnKp0f8= Subject key identifier: 28:6E:39:EF:1C:4C:56:9B:C0:06:6C:C1:EC:EC:4D:51:C9:35:B3:1D Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Certificate serial: 1B8C Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/959AC422557911EBBD21EB2FC4F9AE02.roa Signing time: Thu 26 Mar 2026 15:10:50 +0000 ROA not before: Thu 26 Mar 2026 15:10:50 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 17645 IP address blocks: 58.65.0.0/19 maxlen: 19 58.65.12.0/22 maxlen: 22 58.65.16.0/22 maxlen: 22 58.65.20.0/22 maxlen: 22 58.65.24.0/23 maxlen: 23 58.65.26.0/23 maxlen: 23 116.51.0.0/16 maxlen: 16 116.51.4.0/24 maxlen: 24 116.51.8.0/23 maxlen: 23 116.51.36.0/24 maxlen: 24 175.28.8.0/22 maxlen: 22 202.136.160.0/19 maxlen: 19 202.136.166.0/24 maxlen: 24 202.136.168.0/23 maxlen: 23 202.136.170.0/24 maxlen: 24 202.136.188.0/22 maxlen: 22 2402:2c00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:30:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7052 (0x1b8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Validity Not Before: Mar 26 15:10:50 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69c54c7a-1ccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3a:2f:c1:18:19:5b:62:8b:24:66:e6:63:2b: a9:f4:44:84:df:78:24:11:0f:da:82:6f:3d:6c:39: fb:0a:9e:2f:59:02:31:9f:a5:6a:10:b6:5c:b3:1a: 28:ad:0e:ec:53:7f:82:f8:63:7c:0d:81:a0:c4:ea: 7f:ef:30:5a:38:95:7e:0f:52:9a:06:8f:34:72:63: 46:ed:16:4e:3a:db:3e:46:65:5e:26:e9:01:5d:20: a2:57:19:c5:66:3c:1f:84:27:20:75:2e:f1:e1:4c: 04:a7:84:65:73:b2:b7:00:77:44:6e:02:34:d6:81: 28:ee:42:29:70:62:ed:a0:21:bd:9f:22:7d:a6:ad: 55:16:29:5b:8f:17:fe:b9:05:ef:7f:7c:57:20:4f: b9:e0:d0:5b:37:17:79:80:39:dc:60:a5:62:3b:2a: a3:ad:77:84:d9:85:8b:6a:17:9a:60:70:70:bf:2e: 88:74:eb:95:ef:45:57:6d:a0:c4:f0:8a:51:f5:3f: 6b:68:d4:87:a8:d2:e5:a6:07:df:b3:7b:96:9c:66: dc:98:13:2a:84:ca:2d:4c:93:f7:da:0a:6e:e0:05: 1a:33:aa:24:b1:39:91:3d:ec:04:ee:3f:5e:ec:88: 46:13:9c:d5:43:57:7f:9e:2b:0f:94:af:5e:95:5d: 85:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6E:39:EF:1C:4C:56:9B:C0:06:6C:C1:EC:EC:4D:51:C9:35:B3:1D X509v3 Authority Key Identifier: keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/959AC422557911EBBD21EB2FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 58.65.0.0/19 116.51.0.0/16 175.28.8.0/22 202.136.160.0/19 IPv6: 2402:2c00::/32 Signature Algorithm: sha256WithRSAEncryption 1c:5b:a6:53:7b:b8:9f:5d:0c:d9:96:6f:82:18:22:63:31:ff: 4d:aa:9b:a7:f0:6c:06:8a:48:ed:00:9d:95:22:b7:4d:ee:ab: 39:af:c6:d9:a3:fb:7b:3c:45:25:6d:21:f7:d8:c9:6f:2e:e9: 6f:78:a9:30:3c:83:3d:81:14:b8:76:99:c8:21:e1:31:e0:f6: a3:38:50:40:95:44:a2:f2:35:0e:bf:f4:ff:f9:60:d7:dd:f8: 3e:ee:59:86:fa:bc:69:9a:8d:88:2a:b9:7b:61:6e:18:e3:e2: 80:e0:52:a1:a4:f5:a1:b4:43:4b:2c:dc:0d:2e:a6:b5:af:d2: 5f:53:5b:9b:32:7f:ab:d7:5b:2e:49:2a:34:b4:65:39:ee:fb: 2e:6b:c3:12:9b:ed:0b:68:30:f4:a9:a8:08:55:88:17:6d:7d: ee:14:1a:d0:23:85:44:fa:2b:33:cd:69:c4:60:a4:a6:c0:c1: 47:ba:6e:41:be:82:a6:0c:16:89:f6:65:cc:2b:ba:6f:db:34: da:27:a7:75:11:89:f4:9c:5b:f4:c3:47:d2:e1:0a:77:d6:b5: 78:3d:e4:0d:52:19:fc:41:f3:1f:c6:85:0b:04:56:2a:33:6f: e0:fa:e5:11:fb:ef:cd:47:37:08:a6:fa:a3:13:71:f1:81:f3: 67:fc:05:78 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICG4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDY0QTY2NTgxNkFFRkVENzNCMzA3NTAwN0RBNTMzN0FD N0RFQzRCODEwHhcNMjYwMzI2MTUxMDUwWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWM1NGM3YS0xY2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjovwRgZW2KLJGbmYyup9ESE33gkEQ/agm89bDn7Cp4vWQIxn6VqELZcsxoo rQ7sU3+C+GN8DYGgxOp/7zBaOJV+D1KaBo80cmNG7RZOOts+RmVeJukBXSCiVxnF ZjwfhCcgdS7x4UwEp4Rlc7K3AHdEbgI01oEo7kIpcGLtoCG9nyJ9pq1VFilbjxf+ uQXvf3xXIE+54NBbNxd5gDncYKViOyqjrXeE2YWLaheaYHBwvy6IdOuV70VXbaDE 8IpR9T9raNSHqNLlpgffs3uWnGbcmBMqhMotTJP32gpu4AUaM6oksTmRPewE7j9e 7IhGE5zVQ1d/nisPlK9elV2FJwIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFChuOe8c TFabwAZswezsTVHJNbMdMB8GA1UdIwQYMBaAFGSmZYFq7+1zswdQB9pTN6x97EuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdYT3pCMUFIMmxNM3JIM3NT NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLWmxnV3J2N1hPekIxQUgybE0zckgzc1M0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTZENUQvOURDQjY4RTAxRDg4MTFFMjk0Qjk1NUUxMDhCMDJDRDIvOTU5QUM0MjI1 NTc5MTFFQkJEMjFFQjJGQzRGOUFFMDIucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAd BAIAATAXAwQFOkEAAwMAdDMDBAKvHAgDBAXKiKAwDQQCAAIwBwMFACQCLAAwDQYJ KoZIhvcNAQELBQADggEBABxbplN7uJ9dDNmWb4IYImMx/02qm6fwbAaKSO0AnZUi t03uqzmvxtmj+3s8RSVtIffYyW8u6W94qTA8gz2BFLh2mcgh4THg9qM4UECVRKLy NQ6/9P/5YNfd+D7uWYb6vGmajYgquXthbhjj4oDgUqGk9aG0Q0ss3A0uprWv0l9T W5syf6vXWy5JKjS0ZTnu+y5rwxKb7QtoMPSpqAhViBdtfe4UGtAjhUT6KzPNacRg pKbAwUe6bkG+gqYMFon2Zcwrum/bNNonp3URifScW/TDR9LhCnfWtXg95A1SGfxB 8x/GhQsEViozb+D65RH7781HNwim+qMTcfGB82f8BXg= -----END CERTIFICATE-----Generated at Fri Apr 17 22:43:26 2026 by rpki-client