$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/48BEEFFEF52F11EDADE1B280C4F9AE02.roa File: 48BEEFFEF52F11EDADE1B280C4F9AE02.roa (raw, json) Hash identifier: cOiTv4jIjEC1QGh5pKSW61/U/hcuKiSP4jdxBNCSef0= Subject key identifier: AD:8A:7C:D3:96:BC:AB:15:52:13:DF:06:E0:FF:CF:C0:27:59:25:76 Certificate issuer: /CN=A91ECB9B/serialNumber=0D654D6FCECD33E1516E20C2E3734F85406E7246 Certificate serial: 050B Authority key identifier: 0D:65:4D:6F:CE:CD:33:E1:51:6E:20:C2:E3:73:4F:85:40:6E:72:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/48BEEFFEF52F11EDADE1B280C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:45:31 +0000 ROA not before: Mon 13 Oct 2025 01:55:56 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 133041 IP address blocks: 45.120.44.0/24 maxlen: 24 45.120.45.0/24 maxlen: 24 45.120.46.0/24 maxlen: 24 45.120.47.0/24 maxlen: 24 103.75.0.0/24 maxlen: 24 103.75.1.0/24 maxlen: 24 103.75.2.0/24 maxlen: 24 103.75.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.crl rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:43:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1291 (0x50b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECB9B, serialNumber=0D654D6FCECD33E1516E20C2E3734F85406E7246 Validity Not Before: Oct 13 01:55:56 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a434eb-b578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:92:2c:d9:17:8a:63:6c:03:21:cb:76:91:16: 02:7c:95:92:63:30:fb:a4:ac:8c:40:56:23:26:d2: 85:e1:12:3b:2d:2d:33:66:86:b1:1a:ce:98:a9:21: 9d:95:32:53:27:8c:a7:a0:e1:34:fb:05:d2:3b:bc: f9:46:15:dc:b2:7e:96:a2:dc:e7:0e:8f:7a:72:fb: 30:d6:eb:3a:6c:ea:cd:aa:11:69:96:18:21:5a:36: e5:36:d0:c1:3c:cd:65:30:32:16:5c:47:04:77:52: 96:be:07:67:55:27:11:a4:f6:68:e0:09:d6:13:86: 6f:47:4c:8a:b5:c5:43:ce:2f:1b:d1:ad:8b:d6:10: 60:32:3b:81:4d:ff:23:2c:70:63:f7:98:89:8f:9c: 70:27:61:1e:77:5c:54:d1:f2:97:12:e8:bf:48:8a: 04:dc:73:32:58:c7:86:e2:02:10:0e:1c:78:b5:9b: 16:e2:4a:c4:5b:52:36:84:d7:d9:2b:56:bc:78:ad: 38:12:1a:76:cb:53:3c:b1:e8:e0:c2:79:d3:11:80: 80:34:27:3b:6f:b2:26:a7:0d:0d:08:70:ac:70:eb: 2e:07:3e:10:21:f2:21:99:ec:24:cf:92:21:51:04: 71:82:28:ca:09:9f:c3:8a:b6:09:47:cf:71:c3:53: 58:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8A:7C:D3:96:BC:AB:15:52:13:DF:06:E0:FF:CF:C0:27:59:25:76 X509v3 Authority Key Identifier: keyid:0D:65:4D:6F:CE:CD:33:E1:51:6E:20:C2:E3:73:4F:85:40:6E:72:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/48BEEFFEF52F11EDADE1B280C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.120.44.0/22 103.75.0.0/22 Signature Algorithm: sha256WithRSAEncryption 89:f7:a4:30:38:b7:98:3c:43:cc:c9:0f:f4:ec:46:c2:18:68: f1:5a:69:67:db:39:d0:c7:8a:89:3d:5e:7b:98:b7:84:1a:27: 70:11:8a:1b:92:1b:39:a6:f6:ba:6d:79:60:8e:cd:e2:68:a7: ff:a9:1e:24:85:85:a8:82:12:b6:e1:98:52:d5:9e:17:8d:ba: 8c:d8:17:4f:3e:e8:73:80:b6:44:a4:73:57:06:56:3d:30:61: ec:18:6b:e1:57:81:1f:31:90:55:f4:2b:40:0b:dd:7b:13:ac: 32:67:f3:d7:9c:55:71:f6:05:a9:8a:84:49:c4:db:e5:6b:85: d6:73:24:41:da:31:3f:d1:e9:ce:78:05:59:91:f4:7c:2a:8f: a5:0e:97:16:0f:df:1b:ee:e0:ce:5d:9d:f0:cd:01:5a:d6:8c: 13:83:20:26:67:a4:e4:a6:40:f2:1d:e2:66:78:69:8f:48:0e: e4:51:90:c1:86:47:ed:fe:8a:2f:2d:22:0f:37:74:49:a2:26: cc:fa:24:2c:f6:6f:f6:51:a4:d4:e8:dc:24:7e:72:33:26:0d: 82:dd:81:64:1b:d2:6f:84:98:82:ad:23:cb:42:f9:b7:4d:8a: 93:e7:86:ab:8d:c1:c8:89:e2:f4:bc:90:03:49:f6:64:09:0a: 96:e8:a5:04 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNCOUIxMTAvBgNVBAUTKDBENjU0RDZGQ0VDRDMzRTE1MTZFMjBDMkUzNzM0Rjg1 NDA2RTcyNDYwHhcNMjUxMDEzMDE1NTU2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzRlYi1iNTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlpIs2ReKY2wDIct2kRYCfJWSYzD7pKyMQFYjJtKF4RI7LS0zZoaxGs6YqSGd lTJTJ4ynoOE0+wXSO7z5RhXcsn6WotznDo96cvsw1us6bOrNqhFplhghWjblNtDB PM1lMDIWXEcEd1KWvgdnVScRpPZo4AnWE4ZvR0yKtcVDzi8b0a2L1hBgMjuBTf8j LHBj95iJj5xwJ2Eed1xU0fKXEui/SIoE3HMyWMeG4gIQDhx4tZsW4krEW1I2hNfZ K1a8eK04Ehp2y1M8sejgwnnTEYCANCc7b7Impw0NCHCscOsuBz4QIfIhmewkz5Ih UQRxgijKCZ/DirYJR89xw1NYcQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFK2KfNOW vKsVUhPfBuD/z8AnWSV2MB8GA1UdIwQYMBaAFA1lTW/OzTPhUW4gwuNzT4VAbnJG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0I5Qi8zOURBMjg3MDQ1 REUxMUVDQTgyM0M1NzFDNEY5QUUwMi9EV1ZOYjg3Tk0tRlJiaURDNDNOUGhVQnVj a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RXVk5iODdOTS1GUmJpREM0M05QaFVCdWNrWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUNCOUIvMzlEQTI4NzA0NURFMTFFQ0E4MjNDNTcxQzRGOUFFMDIvNDhCRUVGRkVG NTJGMTFFREFERTFCMjgwQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCLXgsAwQCZ0sAMA0GCSqGSIb3DQEBCwUAA4IBAQCJ96QwOLeYPEPM yQ/07EbCGGjxWmln2znQx4qJPV57mLeEGidwEYobkhs5pva6bXlgjs3iaKf/qR4k hYWoghK24ZhS1Z4XjbqM2BdPPuhzgLZEpHNXBlY9MGHsGGvhV4EfMZBV9CtAC917 E6wyZ/PXnFVx9gWpioRJxNvla4XWcyRB2jE/0enOeAVZkfR8Ko+lDpcWD98b7uDO XZ3wzQFa1owTgyAmZ6TkpkDyHeJmeGmPSA7kUZDBhkft/oovLSIPN3RJoibM+iQs 9m/2UaTU6NwkfnIzJg2C3YFkG9JvhJiCrSPLQvm3TYqT54arjcHIieL0vJADSfZk CQqW6KUE -----END CERTIFICATE-----Generated at Mon Mar 2 12:34:47 2026 by rpki-client