$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/9CDAADC2091E11EAB375615BC4F9AE02.roa File: 9CDAADC2091E11EAB375615BC4F9AE02.roa (raw, json) Hash identifier: fAD2UhVbdXxK3yvHhBNX/OTwhbz7NTbaHzVJ1i+yBR8= Subject key identifier: E7:97:8F:53:F5:F8:B6:AD:DF:80:D6:A4:FC:5F:CF:7D:00:AE:8D:89 Certificate issuer: /CN=A91EE6E8/serialNumber=9629AC710D3E21D5991928D59A4DB65411A96BFF Certificate serial: 0CC5 Authority key identifier: 96:29:AC:71:0D:3E:21:D5:99:19:28:D5:9A:4D:B6:54:11:A9:6B:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/limscQ0-IdWZGSjVmk22VBGpa_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/9CDAADC2091E11EAB375615BC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:23:44 +0000 ROA not before: Fri 10 Jan 2025 18:37:51 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 55406 IP address blocks: 45.251.56.0/22 maxlen: 22 45.251.56.0/24 maxlen: 24 45.251.57.0/24 maxlen: 24 45.251.58.0/24 maxlen: 24 45.251.59.0/24 maxlen: 24 103.20.52.0/22 maxlen: 22 103.20.52.0/24 maxlen: 24 103.20.53.0/24 maxlen: 24 103.20.54.0/24 maxlen: 24 103.20.55.0/24 maxlen: 24 103.254.84.0/22 maxlen: 22 103.254.84.0/24 maxlen: 24 103.254.85.0/24 maxlen: 24 103.254.86.0/24 maxlen: 24 103.254.87.0/24 maxlen: 24 182.16.156.0/22 maxlen: 22 182.16.156.0/24 maxlen: 24 182.16.157.0/24 maxlen: 24 182.16.158.0/24 maxlen: 24 182.16.159.0/24 maxlen: 24 2405:f200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.crl rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/limscQ0-IdWZGSjVmk22VBGpa_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3269 (0xcc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE6E8, serialNumber=9629AC710D3E21D5991928D59A4DB65411A96BFF Validity Not Before: Jan 10 18:37:51 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a405a0-3260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:97:16:38:83:15:0b:58:05:b3:95:4f:84:0d: ea:f5:dd:7d:fe:ec:cb:e3:53:18:23:78:c9:70:92: b7:a9:f8:59:bb:9f:6d:73:a3:1e:62:0a:65:b1:74: 99:01:ba:05:3b:6f:73:11:8b:c7:0a:1e:39:a5:6b: ea:43:9f:cd:f0:50:01:3d:48:76:af:48:61:16:e0: 93:f0:07:99:63:9a:70:55:31:1b:83:8d:d2:37:2d: c4:09:df:cf:78:c2:bd:21:7a:01:54:64:f1:8e:96: 80:4b:95:fa:6f:93:20:94:f8:14:a3:25:27:2f:1d: 2b:ec:20:37:fb:c3:1b:06:d4:ff:f6:39:d6:c7:7b: 85:e5:a2:7b:26:50:a9:87:5d:0b:14:99:b2:7d:51: 6e:21:af:e6:49:1a:d4:75:8a:8c:26:f0:bc:02:c9: 0e:24:2c:2d:a4:e4:b6:47:3c:43:94:75:14:97:f4: 19:a4:82:de:46:d5:15:0c:fb:2a:d3:c2:02:0e:9d: a0:96:a6:ae:d0:1a:9e:15:46:bc:57:30:1b:93:5d: 36:6b:cf:25:e1:9d:49:0d:14:6a:c4:f1:2b:34:21: ea:d3:42:f9:2a:3e:56:eb:86:bb:93:ce:38:6f:1d: 45:8e:24:24:86:4f:cb:66:af:87:f7:1f:9a:3b:1d: e6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:97:8F:53:F5:F8:B6:AD:DF:80:D6:A4:FC:5F:CF:7D:00:AE:8D:89 X509v3 Authority Key Identifier: keyid:96:29:AC:71:0D:3E:21:D5:99:19:28:D5:9A:4D:B6:54:11:A9:6B:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/limscQ0-IdWZGSjVmk22VBGpa_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/9CDAADC2091E11EAB375615BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.251.56.0/22 103.20.52.0/22 103.254.84.0/22 182.16.156.0/22 IPv6: 2405:f200::/32 Signature Algorithm: sha256WithRSAEncryption 83:f6:88:6f:ed:6f:7e:a3:99:38:d0:c7:b1:29:21:2f:d6:21: 64:77:93:9f:2c:e5:a2:41:6d:2d:60:e4:ed:e0:2f:1a:0a:03: 76:b6:20:5b:22:e5:86:03:77:da:ef:f6:79:fb:2e:9f:48:65: 5d:45:24:b3:18:24:12:63:30:f6:49:ce:0e:fa:d1:30:90:eb: f2:f9:92:44:4b:4a:ea:ef:e2:80:ab:93:ed:55:59:64:45:2d: 5f:1f:19:b1:47:61:03:86:c9:0c:19:68:ea:ca:26:ba:b4:61: a1:56:7a:fc:ca:96:7c:bf:9b:df:c3:9f:3f:33:26:e1:19:74: 52:07:a1:c3:eb:30:37:85:8d:78:a6:29:2b:19:6f:e2:36:c8: f3:25:d1:74:c9:49:c9:db:2e:34:bd:01:d1:4e:62:b7:0e:b4: b6:40:c8:a4:86:5a:e3:e1:27:44:7c:83:af:cb:e4:19:a3:4b: 69:7b:5f:5f:b7:b5:89:fc:b2:5c:99:00:82:a7:a4:4b:33:81: 6e:4a:3b:e7:fe:1a:cb:41:ba:43:f2:2b:f4:40:b7:08:dc:c9: 21:6e:4a:30:70:3d:1f:ec:58:2e:28:bb:14:94:25:32:d1:e7: 39:c3:99:9f:93:de:0e:f1:93:13:87:b9:d5:58:92:7c:ff:26: df:85:6f:a0 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICDMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU2RTgxMTAvBgNVBAUTKDk2MjlBQzcxMEQzRTIxRDU5OTE5MjhENTlBNERCNjU0 MTFBOTZCRkYwHhcNMjUwMTEwMTgzNzUxWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDVhMC0zMjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkpcWOIMVC1gFs5VPhA3q9d19/uzL41MYI3jJcJK3qfhZu59tc6MeYgplsXSZ AboFO29zEYvHCh45pWvqQ5/N8FABPUh2r0hhFuCT8AeZY5pwVTEbg43SNy3ECd/P eMK9IXoBVGTxjpaAS5X6b5MglPgUoyUnLx0r7CA3+8MbBtT/9jnWx3uF5aJ7JlCp h10LFJmyfVFuIa/mSRrUdYqMJvC8AskOJCwtpOS2RzxDlHUUl/QZpILeRtUVDPsq 08ICDp2glqau0BqeFUa8VzAbk102a88l4Z1JDRRqxPErNCHq00L5Kj5W64a7k844 bx1FjiQkhk/LZq+H9x+aOx3mJQIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFOeXj1P1 +Lat34DWpPxfz30Aro2JMB8GA1UdIwQYMBaAFJYprHENPiHVmRko1ZpNtlQRqWv/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTZFOC83QkNBRkYwMjA5 MUQxMUVBOTNCRDlFNTZDNEY5QUUwMi9saW1zY1EwLUlkV1pHU2pWbWsyMlZCR3Bh XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xpbXNjUTAtSWRXWkdTalZtazIyVkJHcGFfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUU2RTgvN0JDQUZGMDIwOTFEMTFFQTkzQkQ5RTU2QzRGOUFFMDIvOUNEQUFEQzIw OTFFMTFFQUIzNzU2MTVCQzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQCLfs4AwQCZxQ0AwQCZ/5UAwQCthCcMA0EAgACMAcDBQAkBfIAMA0G CSqGSIb3DQEBCwUAA4IBAQCD9ohv7W9+o5k40MexKSEv1iFkd5OfLOWiQW0tYOTt 4C8aCgN2tiBbIuWGA3fa7/Z5+y6fSGVdRSSzGCQSYzD2Sc4O+tEwkOvy+ZJES0rq 7+KAq5PtVVlkRS1fHxmxR2EDhskMGWjqyia6tGGhVnr8ypZ8v5vfw58/MybhGXRS B6HD6zA3hY14pikrGW/iNsjzJdF0yUnJ2y40vQHRTmK3DrS2QMikhlrj4SdEfIOv y+QZo0tpe19ft7WJ/LJcmQCCp6RLM4FuSjvn/hrLQbpD8iv0QLcI3MkhbkowcD0f 7FguKLsUlCUy0ec5w5mfk94O8ZMTh7nVWJJ8/ybfhW+g -----END CERTIFICATE-----Generated at Mon Mar 2 10:02:14 2026 by rpki-client