$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/9907DC46D4BC11EF9BDDAF2EC4F9AE02.roa File: 9907DC46D4BC11EF9BDDAF2EC4F9AE02.roa (raw, json) Hash identifier: S4nPh4zTGC2QdGuAUvATaghlQaT7UNDUq/9SQDT9igE= Subject key identifier: 6D:82:9D:A9:3B:5B:A9:8E:05:8A:4C:2E:B8:DD:83:B4:64:DC:58:D4 Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Certificate serial: 1B75 Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/9907DC46D4BC11EF9BDDAF2EC4F9AE02.roa Signing time: Sun 01 Mar 2026 21:12:55 +0000 ROA not before: Mon 24 Mar 2025 14:50:38 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 3949 IP address blocks: 116.51.19.0/24 maxlen: 24 116.51.20.0/24 maxlen: 24 116.51.22.240/28 maxlen: 32 116.51.23.192/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7029 (0x1b75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Validity Not Before: Mar 24 14:50:38 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a4abd6-110b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e9:61:5e:63:19:38:dd:5d:53:d1:74:28:6c: 44:e0:cd:06:12:9e:e9:f2:25:17:13:62:e7:78:50: 86:23:da:87:6c:56:51:67:af:9f:bc:91:91:d3:68: 74:6e:a7:18:d4:0c:f9:a5:91:01:aa:b0:1f:38:b2: a8:47:f1:8d:c0:d0:75:03:5c:0e:8f:0c:e2:31:cb: 4a:94:a3:eb:22:08:92:ee:31:96:d7:44:32:fc:f7: d2:b3:9f:60:6a:c4:0b:5c:04:18:c1:3e:c4:aa:5a: 88:e3:3e:e9:42:3c:16:0e:47:91:ec:20:60:06:18: 16:09:55:a4:69:68:38:0c:c3:f0:71:0a:26:46:85: 4c:e6:23:c4:9f:dd:50:26:c6:64:d6:e7:4c:75:5f: 6a:55:d6:a3:5d:50:b7:7b:6f:ad:34:90:7e:85:43: 0c:e0:ff:bf:31:25:2b:53:4c:a9:7c:7d:dc:01:89: 47:20:48:0f:f1:39:35:a8:4e:f5:77:4d:ff:4b:3e: 89:32:64:92:26:9e:77:07:0e:d0:73:e6:42:82:fe: 0e:fc:20:26:69:5e:1a:bc:de:c3:4a:13:bc:e8:7d: 3d:f0:68:12:1e:ae:bc:bd:e0:c3:80:41:4e:a5:91: 51:e5:96:21:78:55:46:aa:dc:14:e3:ad:da:22:6e: be:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:82:9D:A9:3B:5B:A9:8E:05:8A:4C:2E:B8:DD:83:B4:64:DC:58:D4 X509v3 Authority Key Identifier: keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/9907DC46D4BC11EF9BDDAF2EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 116.51.19.0-116.51.20.255 116.51.22.240/28 116.51.23.192/27 Signature Algorithm: sha256WithRSAEncryption 12:52:3a:90:bd:a0:29:88:48:61:38:d9:85:c6:e9:03:e7:02: 1c:62:b3:4b:38:8b:3e:f1:09:e7:db:48:35:9e:31:f3:d4:47: 1d:36:29:e7:7e:2f:f1:31:e9:04:74:99:92:87:0a:5b:6c:c1: ef:dc:24:10:32:96:9f:8c:8e:8d:7e:19:03:bd:2a:9a:05:aa: cb:77:94:8f:47:c4:d7:71:16:be:a0:47:96:14:3d:06:ab:37: 33:1f:06:2a:61:dc:03:00:01:47:85:63:10:27:9f:ea:25:9e: ea:fa:12:11:e1:04:9f:1e:ee:12:ba:73:c5:42:e6:c5:4c:59: 40:61:41:54:82:39:e3:96:16:f3:e6:aa:b2:82:21:85:dd:88: cf:bd:9d:68:c2:f5:da:b9:13:f2:bd:aa:19:1d:09:70:4b:9e: 6f:60:89:66:09:cb:b2:4f:66:d8:f6:ad:ce:de:5e:b2:da:9e: 4c:5c:99:ca:5a:d9:bc:b3:17:42:a2:d9:31:5f:bb:3e:85:b3: 37:77:fd:11:69:40:cc:8d:90:98:d3:48:57:fa:40:03:58:cb: ac:c5:33:65:28:04:72:b9:a0:2e:91:1d:75:1a:d3:c0:de:7f: d5:33:e5:74:b2:86:2b:68:f7:5c:2b:c3:de:bd:27:1f:f0:54: 85:e0:ea:e2 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgICG3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDY0QTY2NTgxNkFFRkVENzNCMzA3NTAwN0RBNTMzN0FD N0RFQzRCODEwHhcNMjUwMzI0MTQ1MDM4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YWJkNi0xMTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4OlhXmMZON1dU9F0KGxE4M0GEp7p8iUXE2LneFCGI9qHbFZRZ6+fvJGR02h0 bqcY1Az5pZEBqrAfOLKoR/GNwNB1A1wOjwziMctKlKPrIgiS7jGW10Qy/PfSs59g asQLXAQYwT7EqlqI4z7pQjwWDkeR7CBgBhgWCVWkaWg4DMPwcQomRoVM5iPEn91Q JsZk1udMdV9qVdajXVC3e2+tNJB+hUMM4P+/MSUrU0ypfH3cAYlHIEgP8Tk1qE71 d03/Sz6JMmSSJp53Bw7Qc+ZCgv4O/CAmaV4avN7DShO86H098GgSHq68veDDgEFO pZFR5ZYheFVGqtwU463aIm6+QwIDAQABo4ICdjCCAnIwHQYDVR0OBBYEFG2Cnak7 W6mOBYpMLrjdg7Rk3FjUMB8GA1UdIwQYMBaAFGSmZYFq7+1zswdQB9pTN6x97EuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdYT3pCMUFIMmxNM3JIM3NT NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLWmxnV3J2N1hPekIxQUgybE0zckgzc1M0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTZENUQvOURDQjY4RTAxRDg4MTFFMjk0Qjk1NUUxMDhCMDJDRDIvOTkwN0RDNDZE NEJDMTFFRjlCRERBRjJFQzRGOUFFMDIucm9hMDUGCCsGAQUFBwEHAQH/BCYwJDAi BAIAATAcMAwDBAB0MxMDBAB0MxQDBQR0MxbwAwUFdDMXwDANBgkqhkiG9w0BAQsF AAOCAQEAElI6kL2gKYhIYTjZhcbpA+cCHGKzSziLPvEJ59tINZ4x89RHHTYp534v 8THpBHSZkocKW2zB79wkEDKWn4yOjX4ZA70qmgWqy3eUj0fE13EWvqBHlhQ9Bqs3 Mx8GKmHcAwABR4VjECef6iWe6voSEeEEnx7uErpzxULmxUxZQGFBVII545YW8+aq soIhhd2Iz72daML12rkT8r2qGR0JcEueb2CJZgnLsk9m2Patzt5estqeTFyZylrZ vLMXQqLZMV+7PoWzN3f9EWlAzI2QmNNIV/pAA1jLrMUzZSgEcrmgLpEddRrTwN5/ 1TPldLKGK2j3XCvD3r0nH/BUheDq4g== -----END CERTIFICATE-----Generated at Mon Mar 2 07:39:35 2026 by rpki-client