$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/233533AABAE011F09A0D810BC4F9AE02.roa File: 233533AABAE011F09A0D810BC4F9AE02.roa (raw, json) Hash identifier: LWpPpQVEFvZXJ/A0WVbfexaelfiUfHvBt11JmSNJ8FY= Subject key identifier: 9A:2F:08:D1:E1:B4:E3:AD:FF:C3:6C:C9:EE:7D:BC:53:FF:7F:D3:F6 Certificate issuer: /CN=A91EBA1C/serialNumber=51C2611B461DD511835A5141F8AEE502D3A39AEB Certificate serial: 2323 Authority key identifier: 51:C2:61:1B:46:1D:D5:11:83:5A:51:41:F8:AE:E5:02:D3:A3:9A:EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/233533AABAE011F09A0D810BC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:24:01 +0000 ROA not before: Thu 06 Nov 2025 07:14:25 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 63980 IP address blocks: 59.153.200.0/23 maxlen: 24 103.57.20.0/22 maxlen: 24 2402:5380::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8995 (0x2323) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA1C, serialNumber=51C2611B461DD511835A5141F8AEE502D3A39AEB Validity Not Before: Nov 6 07:14:25 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a46821-5a58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b6:4b:d9:53:94:ed:88:c0:ff:23:3a:cd:d9: d1:1c:18:9c:18:ab:42:ab:f4:85:b5:93:4f:bd:10: 01:93:c4:35:5f:34:88:11:e3:a1:a4:bf:c7:a2:a3: 70:6e:06:13:1f:ff:d0:b0:7c:1f:ac:17:5b:97:85: be:0d:44:5a:4a:cb:87:e7:3d:f4:f0:99:09:ff:53: bc:33:7c:14:cc:81:4d:d0:f4:45:bb:61:2e:ac:38: 5f:a7:e0:91:08:d2:9b:93:32:d0:57:fb:6b:be:a9: f1:0b:94:2d:1c:a6:3a:47:54:92:90:b0:fc:6f:70: 2b:05:80:a9:77:d2:e0:82:d6:25:43:27:2e:99:89: ad:37:15:22:a1:da:b0:dd:85:f4:77:5a:0e:af:e9: 92:c8:16:b2:8e:0e:4d:94:91:87:58:8b:e4:f6:de: 35:5d:d5:09:b4:8a:b6:0c:f3:11:d9:ff:74:81:36: e3:98:d8:9d:b4:a3:06:7a:ea:37:8a:51:4b:07:86: 43:3c:87:bc:b2:d9:89:20:c4:75:39:5b:4d:d7:99: 0e:40:ae:2c:74:f5:76:53:c3:35:67:31:be:b5:d7: 74:77:05:07:c3:d6:cc:a2:04:ff:a2:a3:6c:af:d2: 31:23:34:83:3c:a7:27:96:f4:ff:6a:8b:6f:aa:b7: 34:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2F:08:D1:E1:B4:E3:AD:FF:C3:6C:C9:EE:7D:BC:53:FF:7F:D3:F6 X509v3 Authority Key Identifier: keyid:51:C2:61:1B:46:1D:D5:11:83:5A:51:41:F8:AE:E5:02:D3:A3:9A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/233533AABAE011F09A0D810BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 59.153.200.0/23 103.57.20.0/22 IPv6: 2402:5380::/32 Signature Algorithm: sha256WithRSAEncryption 21:37:1d:62:b6:af:09:63:fa:a6:c0:b0:89:cd:b3:11:b3:46: 25:1b:4d:f0:1c:92:e0:bd:d2:cc:5f:dd:a2:ae:26:30:00:45: 23:02:42:de:82:77:b4:d0:d2:c4:44:5a:7d:3a:83:e1:92:65: 5e:c0:f6:b0:68:b3:43:00:24:52:2d:3d:a9:6f:18:72:1b:c1: a7:f4:17:c5:c4:d2:f3:b0:3d:78:c5:92:2f:e7:ad:86:06:11: 90:1c:91:de:25:b1:b0:e7:0b:97:1f:b5:eb:83:8d:af:83:69: 92:a9:61:98:e5:43:8d:ef:b1:62:2b:9c:85:cb:2e:9f:e3:c7: aa:b5:d6:83:cd:1d:44:c1:e7:ed:cb:c9:0a:1d:7c:57:3f:8b: 66:41:1a:6d:e8:99:f7:02:c4:a5:30:07:c8:77:3b:e1:ba:9b: 5f:dd:b8:f1:ed:7a:6f:32:9c:99:e9:b7:b7:f1:7d:25:e1:75: 46:ac:71:23:42:74:84:e7:b4:3e:33:69:ff:a6:74:49:f3:2e: e9:52:27:02:30:aa:9a:96:91:03:55:a0:92:60:f2:62:0a:63: 17:21:11:c1:92:e4:af:c4:ae:2b:99:90:3e:1d:85:b5:39:ae: 17:46:2d:6d:f5:b0:3e:0f:52:01:71:f7:2b:0e:6b:c3:8e:30: 0b:49:78:7c -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICIyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBMUMxMTAvBgNVBAUTKDUxQzI2MTFCNDYxREQ1MTE4MzVBNTE0MUY4QUVFNTAy RDNBMzlBRUIwHhcNMjUxMTA2MDcxNDI1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjgyMS01YTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLZL2VOU7YjA/yM6zdnRHBicGKtCq/SFtZNPvRABk8Q1XzSIEeOhpL/HoqNw bgYTH//QsHwfrBdbl4W+DURaSsuH5z308JkJ/1O8M3wUzIFN0PRFu2EurDhfp+CR CNKbkzLQV/trvqnxC5QtHKY6R1SSkLD8b3ArBYCpd9LggtYlQycumYmtNxUiodqw 3YX0d1oOr+mSyBayjg5NlJGHWIvk9t41XdUJtIq2DPMR2f90gTbjmNidtKMGeuo3 ilFLB4ZDPIe8stmJIMR1OVtN15kOQK4sdPV2U8M1ZzG+tdd0dwUHw9bMogT/oqNs r9IxIzSDPKcnlvT/aotvqrc0IwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFJovCNHh tOOt/8Nsye59vFP/f9P2MB8GA1UdIwQYMBaAFFHCYRtGHdURg1pRQfiu5QLTo5rr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkExQy82M0IyMTRBMkM4 MTUxMUU1ODFEMjA4ODRDNEY5QUUwMi9VY0poRzBZZDFSR0RXbEZCLUs3bEF0T2pt dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VjSmhHMFlkMVJHRFdsRkItSzdsQXRPam11cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUJBMUMvNjNCMjE0QTJDODE1MTFFNTgxRDIwODg0QzRGOUFFMDIvMjMzNTMzQUFC QUUwMTFGMDlBMEQ4MTBCQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQBO5nIAwQCZzkUMA0EAgACMAcDBQAkAlOAMA0GCSqGSIb3DQEBCwUA A4IBAQAhNx1itq8JY/qmwLCJzbMRs0YlG03wHJLgvdLMX92iriYwAEUjAkLegne0 0NLERFp9OoPhkmVewPawaLNDACRSLT2pbxhyG8Gn9BfFxNLzsD14xZIv562GBhGQ HJHeJbGw5wuXH7Xrg42vg2mSqWGY5UON77FiK5yFyy6f48eqtdaDzR1Ewefty8kK HXxXP4tmQRpt6Jn3AsSlMAfIdzvhuptf3bjx7XpvMpyZ6be38X0l4XVGrHEjQnSE 57Q+M2n/pnRJ8y7pUicCMKqalpEDVaCSYPJiCmMXIRHBkuSvxK4rmZA+HYW1Oa4X Ri1t9bA+D1IBcfcrDmvDjjALSXh8 -----END CERTIFICATE-----Generated at Mon Mar 2 11:38:16 2026 by rpki-client