$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/5480D316764D11EA8CB5C039C4F9AE02.roa File: 5480D316764D11EA8CB5C039C4F9AE02.roa (raw, json) Hash identifier: mJF9eHW945FqOhcOebNZDCr93WVmTQPVaMtl9lfF/sA= Subject key identifier: 5C:C1:F4:D7:B1:2B:49:45:9C:B4:AF:B0:C0:38:2D:06:3E:F4:71:12 Certificate issuer: /CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Certificate serial: 2286 Authority key identifier: 3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/5480D316764D11EA8CB5C039C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:19:03 +0000 ROA not before: Sun 16 Nov 2025 05:58:17 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 56308 IP address blocks: 43.255.124.0/22 maxlen: 22 45.125.196.0/22 maxlen: 22 103.16.19.0/24 maxlen: 24 2407:8100:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:27:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8838 (0x2286) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0EBF, serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Validity Not Before: Nov 16 05:58:17 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a48317-cc70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:be:dd:b6:dd:5c:28:09:24:f3:26:f6:c4:ad: af:60:36:2c:76:8c:3c:7c:e6:e1:c3:cc:d5:1b:01: 53:4f:37:2b:ed:0f:ff:0e:ec:21:35:b8:51:3c:3c: 02:c1:9a:2f:25:74:87:36:c8:90:11:44:4c:d7:b0: e0:f6:31:60:18:f3:9d:88:b2:ac:fb:eb:84:96:fe: 51:cb:4e:9d:66:1c:8e:17:63:a8:5c:c6:c8:44:74: e1:d9:58:94:02:c4:dd:e3:23:5f:b8:74:2f:a2:61: cf:bd:06:da:a4:34:cb:33:95:bb:df:63:d4:5c:c2: 36:7d:19:8e:bf:80:20:96:49:70:46:fe:5a:02:58: 88:b4:96:7b:fa:cc:b8:89:ab:53:56:c6:a0:b2:22: ff:24:4f:ae:fb:cd:a6:e2:12:17:99:b4:9b:ec:83: bd:9f:39:af:16:89:93:1a:68:d2:ee:a4:51:12:8b: e4:0c:7d:0e:42:a8:96:e2:12:c2:d6:b9:35:1c:db: 47:54:3c:72:ac:63:05:93:18:6e:da:82:84:7a:5e: 3b:88:58:4b:24:4e:0c:e0:05:e0:6c:11:b3:46:3f: b9:b7:19:2f:72:63:15:79:ca:27:f3:6d:90:61:9a: c1:69:6f:1f:a1:15:fc:39:d0:28:8c:30:c4:59:86: 4a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C1:F4:D7:B1:2B:49:45:9C:B4:AF:B0:C0:38:2D:06:3E:F4:71:12 X509v3 Authority Key Identifier: keyid:3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/5480D316764D11EA8CB5C039C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.255.124.0/22 45.125.196.0/22 103.16.19.0/24 IPv6: 2407:8100:5::/48 Signature Algorithm: sha256WithRSAEncryption 65:c5:43:2d:72:43:69:1c:32:87:3e:44:94:e8:3a:f5:a8:35: c5:68:39:ed:57:42:eb:29:00:35:8b:f9:15:46:98:7e:1f:01: 3d:04:1a:4b:e3:25:e5:8d:5c:dd:ba:c0:e3:0e:9f:64:91:4e: b6:4c:76:73:4a:06:3b:b6:49:0d:d9:4b:90:3d:25:df:cb:54: c5:0d:b2:e6:91:d5:bc:2e:c7:53:2b:28:7b:c6:73:bd:af:86: 73:f5:a1:87:99:9f:09:42:90:8e:28:c9:6b:96:0f:11:78:d7: d2:cc:e5:00:1b:fc:6c:90:92:65:0b:3f:4a:cf:69:23:e5:88: e1:18:95:a0:f4:f8:7d:e4:69:27:6d:a4:6f:a3:4a:7d:b5:72: ec:02:2f:f0:01:83:9c:af:e7:92:15:e1:84:f8:bc:1e:9d:a6: 30:27:60:56:24:2e:83:35:9c:51:41:d1:5b:ee:79:89:ef:24: f8:9f:03:46:2d:0d:e2:e8:a3:09:f1:52:81:78:41:25:2d:fb: 28:8a:76:6f:af:21:b0:1b:b2:84:5f:1e:c7:d9:fe:dd:d9:60: 55:49:d1:a9:ed:f7:43:b9:e4:2f:a1:7b:ea:8b:39:2f:0d:2d: d2:0d:a2:b2:36:9e:58:86:ed:a5:98:0a:cc:8e:58:9b:47:02: 75:a1:2e:60 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgICIoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBFQkYxMTAvBgNVBAUTKDNBQ0NCNjk1MzlBQzlGNDI4OEJDRDBGMEE1NDI1MEQ1 OTJGNTQwRDQwHhcNMjUxMTE2MDU1ODE3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODMxNy1jYzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnr7dtt1cKAkk8yb2xK2vYDYsdow8fObhw8zVGwFTTzcr7Q//DuwhNbhRPDwC wZovJXSHNsiQEURM17Dg9jFgGPOdiLKs++uElv5Ry06dZhyOF2OoXMbIRHTh2ViU AsTd4yNfuHQvomHPvQbapDTLM5W732PUXMI2fRmOv4AglklwRv5aAliItJZ7+sy4 iatTVsagsiL/JE+u+82m4hIXmbSb7IO9nzmvFomTGmjS7qRREovkDH0OQqiW4hLC 1rk1HNtHVDxyrGMFkxhu2oKEel47iFhLJE4M4AXgbBGzRj+5txkvcmMVecon822Q YZrBaW8foRX8OdAojDDEWYZK8wIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFFzB9Nex K0lFnLSvsMA4LQY+9HESMB8GA1UdIwQYMBaAFDrMtpU5rJ9CiLzQ8KVCUNWS9UDU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEVCRi81Rjg0RDdEOERC ODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24wS0l2TkR3cFVKUTFaTDFR TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09zeTJsVG1zbjBLSXZORHdwVUpRMVpMMVFOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjBFQkYvNUY4NEQ3RDhEQjgwMTFFNTlBQjdFRDFFQzRGOUFFMDIvNTQ4MEQzMTY3 NjREMTFFQThDQjVDMDM5QzRGOUFFMDIucm9hMDwGCCsGAQUFBwEHAQH/BC0wKzAY BAIAATASAwQCK/98AwQCLX3EAwQAZxATMA8EAgACMAkDBwAkB4EAAAUwDQYJKoZI hvcNAQELBQADggEBAGXFQy1yQ2kcMoc+RJToOvWoNcVoOe1XQuspADWL+RVGmH4f AT0EGkvjJeWNXN26wOMOn2SRTrZMdnNKBju2SQ3ZS5A9Jd/LVMUNsuaR1bwux1Mr KHvGc72vhnP1oYeZnwlCkI4oyWuWDxF419LM5QAb/GyQkmULP0rPaSPliOEYlaD0 +H3kaSdtpG+jSn21cuwCL/ABg5yv55IV4YT4vB6dpjAnYFYkLoM1nFFB0VvueYnv JPifA0YtDeLoownxUoF4QSUt+yiKdm+vIbAbsoRfHsfZ/t3ZYFVJ0ant90O55C+h e+qLOS8NLdINorI2nliG7aWYCsyOWJtHAnWhLmA= -----END CERTIFICATE-----Generated at Mon Mar 2 04:00:46 2026 by rpki-client