$ rpki-client -vvf rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/2131145E9E4C11EABF30421BC4F9AE02.roa File: 2131145E9E4C11EABF30421BC4F9AE02.roa (raw, json) Hash identifier: VDytKa3oASt9OTdZc+aGUvmktKBET9wZ7geLWdEBN+s= Subject key identifier: 82:DF:A1:69:76:76:2B:0C:E2:CA:E1:C4:18:F4:A0:B6:6D:20:71:2E Certificate issuer: /CN=A91E734C/serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3 Certificate serial: 0ADA Authority key identifier: 6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/2131145E9E4C11EABF30421BC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:39:13 +0000 ROA not before: Wed 06 Aug 2025 20:31:26 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 24570 IP address blocks: 58.181.65.0/24 maxlen: 24 58.181.69.0/24 maxlen: 24 58.181.72.0/24 maxlen: 24 58.181.73.0/24 maxlen: 24 58.181.75.0/24 maxlen: 24 58.181.77.0/24 maxlen: 24 58.181.77.240/29 maxlen: 29 58.181.80.0/24 maxlen: 24 58.181.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2778 (0xada) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E734C, serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3 Validity Not Before: Aug 6 20:31:26 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a45da0-a2bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2f:26:ad:10:09:dc:7d:e0:6e:41:88:13:b1: 76:b1:2d:28:04:64:1c:b1:61:2b:df:44:02:b5:31: 60:36:52:93:51:98:61:27:a6:fe:8f:a0:34:73:cd: e1:16:4e:fb:b6:be:0e:1f:10:9c:fe:b6:1d:79:05: 7b:6f:86:b6:f7:b4:f7:77:56:27:e8:e9:44:78:cf: 1e:0b:a8:a0:17:39:0c:91:05:3d:16:95:ed:0b:b9: 5e:00:ab:a4:c4:70:29:45:b8:c9:1e:6e:41:b0:19: 21:b7:1d:a5:b6:1f:b0:10:72:eb:0a:71:6f:d9:56: dc:c3:88:61:9a:8b:40:5c:8d:41:9b:9c:fa:9c:fc: d4:e8:60:df:77:d1:0f:81:e3:0c:c7:79:6a:b8:cc: 23:78:82:ef:1c:48:76:c9:ef:dc:5a:03:04:61:d8: 91:55:9e:38:6b:85:f5:0a:f7:7f:b6:f6:40:fb:1b: 44:8f:8c:a2:af:a9:d4:08:61:97:0b:fc:0d:f2:85: c2:97:6f:35:5b:57:7b:9f:a7:7a:2e:03:91:48:27: 92:23:ba:7a:82:80:21:42:d1:84:bf:8f:8b:85:37: 47:0a:9c:85:cc:20:a6:4b:a1:95:eb:24:a3:c8:10: 2f:63:60:56:a9:2b:ad:cd:e4:32:95:e3:b7:8b:fd: ca:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:DF:A1:69:76:76:2B:0C:E2:CA:E1:C4:18:F4:A0:B6:6D:20:71:2E X509v3 Authority Key Identifier: keyid:6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/2131145E9E4C11EABF30421BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 58.181.65.0/24 58.181.69.0/24 58.181.72.0/23 58.181.75.0/24 58.181.77.0/24 58.181.80.0/24 58.181.95.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:c5:46:7c:1e:21:19:98:98:fa:43:a5:73:9e:98:69:81:43: 31:34:da:ee:a2:ff:36:9a:49:07:1e:0b:90:c2:87:25:79:cf: d9:78:ac:49:81:7c:4a:df:ad:20:28:6d:4e:00:ad:2c:a9:32: ce:cf:93:a7:c2:9f:13:7a:53:c6:4b:14:3c:4c:22:e9:3c:40: f9:de:e4:d3:86:5e:97:c3:55:d2:87:4b:7f:e1:4e:1b:c4:01: ba:17:33:15:6d:82:d4:bf:dc:15:ce:30:19:fe:95:0c:7f:7e: f9:84:02:07:26:8a:2b:05:cb:28:58:c4:38:65:c3:4c:b7:e7: c5:bb:fc:5b:eb:b9:d0:a8:33:39:5a:d2:26:94:52:84:ac:48: 6b:18:5c:65:16:6a:e0:47:3b:db:1d:d4:f5:a7:8e:93:3b:0d: 17:15:c5:99:4e:33:54:19:6e:65:20:9e:3d:1e:04:66:08:ae: d5:3f:fc:18:44:70:39:d2:68:d0:54:c9:46:0f:7c:ca:c7:bf: 36:f7:24:a4:c2:1d:09:19:be:24:47:32:1a:69:75:84:bd:2a: d3:98:b3:32:a0:5c:dd:e7:a1:bc:56:cb:0b:84:d4:19:db:1f: c9:77:23:72:28:5e:9e:12:1a:d2:d1:a4:49:46:77:88:46:09: d8:11:6d:a1 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgICCtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTczNEMxMTAvBgNVBAUTKDZDNjgwODQwMzgxQzFFRjMyRDNDOERCQkYzQUNDNDA4 MkNGNkE1QjMwHhcNMjUwODA2MjAzMTI2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWRhMC1hMmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwC8mrRAJ3H3gbkGIE7F2sS0oBGQcsWEr30QCtTFgNlKTUZhhJ6b+j6A0c83h Fk77tr4OHxCc/rYdeQV7b4a297T3d1Yn6OlEeM8eC6igFzkMkQU9FpXtC7leAKuk xHApRbjJHm5BsBkhtx2lth+wEHLrCnFv2Vbcw4hhmotAXI1Bm5z6nPzU6GDfd9EP geMMx3lquMwjeILvHEh2ye/cWgMEYdiRVZ44a4X1Cvd/tvZA+xtEj4yir6nUCGGX C/wN8oXCl281W1d7n6d6LgORSCeSI7p6goAhQtGEv4+LhTdHCpyFzCCmS6GV6ySj yBAvY2BWqSutzeQyleO3i/3KMQIDAQABo4IChDCCAoAwHQYDVR0OBBYEFILfoWl2 disM4srhxBj0oLZtIHEuMB8GA1UdIwQYMBaAFGxoCEA4HB7zLTyNu/OsxAgs9qWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzM0Qy9BNzMyMzVFQzcz QzIxMUVBOUQ0MEI4ODVDNEY5QUUwMi9iR2dJUURnY0h2TXRQSTI3ODZ6RUNDejJw Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JHZ0lRRGdjSHZNdFBJMjc4NnpFQ0N6MnBiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTczNEMvQTczMjM1RUM3M0MyMTFFQTlENDBCODg1QzRGOUFFMDIvMjEzMTE0NUU5 RTRDMTFFQUJGMzA0MjFCQzRGOUFFMDIucm9hMEMGCCsGAQUFBwEHAQH/BDQwMjAw BAIAATAqAwQAOrVBAwQAOrVFAwQBOrVIAwQAOrVLAwQAOrVNAwQAOrVQAwQAOrVf MA0GCSqGSIb3DQEBCwUAA4IBAQCLxUZ8HiEZmJj6Q6VznphpgUMxNNruov82mkkH HguQwoclec/ZeKxJgXxK360gKG1OAK0sqTLOz5Onwp8TelPGSxQ8TCLpPED53uTT hl6Xw1XSh0t/4U4bxAG6FzMVbYLUv9wVzjAZ/pUMf375hAIHJoorBcsoWMQ4ZcNM t+fFu/xb67nQqDM5WtImlFKErEhrGFxlFmrgRzvbHdT1p46TOw0XFcWZTjNUGW5l IJ49HgRmCK7VP/wYRHA50mjQVMlGD3zKx7829ySkwh0JGb4kRzIaaXWEvSrTmLMy oFzd56G8VssLhNQZ2x/JdyNyKF6eEhrS0aRJRneIRgnYEW2h -----END CERTIFICATE-----Generated at Mon Mar 2 12:49:34 2026 by rpki-client