$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/BEDF72A076B911EF95DBF27CC4F9AE02.roa File: BEDF72A076B911EF95DBF27CC4F9AE02.roa (raw, json) Hash identifier: EQOEyE+SLA+wjk3YozLTT2h5jMfekQ3SJQwsf3YqYKQ= Subject key identifier: F8:D3:72:2F:2D:49:B6:5D:68:34:BB:36:1B:BC:58:02:14:9C:79:04 Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Certificate serial: 05F0 Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/BEDF72A076B911EF95DBF27CC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:36:44 +0000 ROA not before: Mon 02 Feb 2026 23:19:44 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 55429 IP address blocks: 45.113.116.0/22 maxlen: 24 103.53.12.0/22 maxlen: 24 111.119.0.0/23 maxlen: 24 111.119.12.0/22 maxlen: 22 111.119.12.0/24 maxlen: 24 111.119.13.0/24 maxlen: 24 111.119.14.0/24 maxlen: 24 111.119.15.0/24 maxlen: 24 203.9.179.0/24 maxlen: 24 203.9.180.0/24 maxlen: 24 203.9.182.0/24 maxlen: 24 203.9.183.0/24 maxlen: 24 2402:6800:3::/48 maxlen: 48 2402:6800:4::/48 maxlen: 48 2402:6800:5::/48 maxlen: 48 2402:6800:760::/48 maxlen: 48 2402:6800:763::/48 maxlen: 48 2402:6800:764::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:37:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1520 (0x5f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4268, serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Validity Not Before: Feb 2 23:19:44 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a4792c-c4aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4d:96:e9:54:3f:27:77:e9:3e:5c:ed:04:04: 45:44:18:11:e7:51:3c:e8:63:9a:fe:5f:bb:88:76: 63:8f:97:4a:47:53:e3:96:6b:66:70:27:a7:b5:b3: 45:69:06:2e:66:5d:36:b5:29:03:3b:29:83:6e:5b: 31:0e:8d:70:1b:c2:59:d4:a3:6f:05:2a:a5:7b:8d: a1:02:2d:d0:ba:92:fc:7d:8a:08:43:db:9c:98:d7: 16:51:64:3e:b0:55:67:1f:6c:2d:95:9b:18:ac:8d: 78:08:26:56:93:09:95:5d:bd:ee:31:0b:02:b5:9e: c6:b5:76:8c:b1:c1:3f:33:e9:3f:22:88:bc:90:d5: ce:1b:e2:59:9f:c2:5a:e8:41:83:37:d5:81:17:e2: 20:38:8b:12:50:ad:d1:53:92:3c:a3:60:15:59:4d: 32:2b:5f:97:c5:e3:2b:12:2f:b9:1c:77:2d:8c:f2: 3b:e6:ea:a5:b3:70:df:06:c4:0f:3b:8d:00:39:da: c9:51:4e:0e:e6:b9:66:13:c4:fd:70:4f:95:2f:30: 04:e5:67:fe:2d:2a:9c:f5:7b:95:b7:a4:6b:b4:58: b2:4e:7d:1f:f6:7f:02:2c:cd:44:a7:7b:42:0b:1d: 36:d6:4a:3a:92:2d:49:2c:b9:84:99:09:c9:27:54: 4e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D3:72:2F:2D:49:B6:5D:68:34:BB:36:1B:BC:58:02:14:9C:79:04 X509v3 Authority Key Identifier: keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/BEDF72A076B911EF95DBF27CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.113.116.0/22 103.53.12.0/22 111.119.0.0/23 111.119.12.0/22 203.9.179.0-203.9.180.255 203.9.182.0/23 IPv6: 2402:6800:3::-2402:6800:5:ffff:ffff:ffff:ffff:ffff 2402:6800:760::/48 2402:6800:763::-2402:6800:764:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 7e:f4:59:8c:11:fc:46:70:c0:e4:3e:a6:5a:5a:c3:d8:7f:45: a1:63:1d:30:e9:da:15:0c:47:d7:38:e4:4e:dc:dc:2a:d1:c5: bc:cd:f3:4f:5d:9a:75:18:d5:1c:b1:83:c8:b5:56:b2:d5:22: da:f5:bd:80:be:9b:cc:78:eb:a3:72:3c:c3:21:fd:54:5c:8e: d7:cf:87:8a:45:45:1c:75:2c:d0:31:f2:d9:94:3d:4e:5e:84: 89:34:78:5a:ae:b7:a6:66:4c:3b:66:85:8c:7b:95:d7:c8:38: 06:90:23:80:1f:c3:9d:ee:ae:37:65:91:d0:32:9f:57:ab:2d: 67:d8:fb:d7:cf:0e:f3:72:bd:29:12:14:b0:0b:e7:07:58:0a: 77:4e:a9:c9:d2:65:1a:fc:6f:03:09:bd:bc:36:aa:d5:d8:d4: ef:62:23:10:a9:f8:e9:62:dc:e0:b4:d9:df:9d:0b:68:c2:9e: 64:97:a9:f9:f0:cf:e7:8c:c9:cb:94:20:7c:be:03:4d:fa:11: 5d:5b:72:b6:82:38:34:01:b6:69:6d:d5:0b:6a:d4:d1:6e:42: 2f:77:6c:10:cc:90:f0:74:df:d8:00:a9:bd:cf:bd:85:6e:1c: 2a:41:98:ce:5f:2a:ad:40:c9:c9:03:9c:fe:e6:d0:20:11:b3: 32:ba:99:8e -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgICBfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyNjgxMTAvBgNVBAUTKDkzNzMyRjNGQzMxMzU5QkJCRjhCMzc5NjI0QkY5MTM1 MUNDQUQ4NTcwHhcNMjYwMjAyMjMxOTQ0WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzkyYy1jNGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtU2W6VQ/J3fpPlztBARFRBgR51E86GOa/l+7iHZjj5dKR1PjlmtmcCentbNF aQYuZl02tSkDOymDblsxDo1wG8JZ1KNvBSqle42hAi3QupL8fYoIQ9ucmNcWUWQ+ sFVnH2wtlZsYrI14CCZWkwmVXb3uMQsCtZ7GtXaMscE/M+k/Ioi8kNXOG+JZn8Ja 6EGDN9WBF+IgOIsSUK3RU5I8o2AVWU0yK1+XxeMrEi+5HHctjPI75uqls3DfBsQP O40AOdrJUU4O5rlmE8T9cE+VLzAE5Wf+LSqc9XuVt6RrtFiyTn0f9n8CLM1Ep3tC Cx021ko6ki1JLLmEmQnJJ1ROswIDAQABo4ICvzCCArswHQYDVR0OBBYEFPjTci8t SbZdaDS7Nhu8WAIUnHkEMB8GA1UdIwQYMBaAFJNzLz/DE1m7v4s3liS/kTUcythX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI2OC9DNzhFQkNFQTIx OTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdidV9pemVXSkwtUk5Seksy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szTXZQOE1UV2J1X2l6ZVdKTC1STlJ6SzJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjQyNjgvQzc4RUJDRUEyMTkzMTFFQzkwMEM1NjUzQzRGOUFFMDIvQkVERjcyQTA3 NkI5MTFFRjk1REJGMjdDQzRGOUFFMDIucm9hMH4GCCsGAQUFBwEHAQH/BG8wbTAy BAIAATAsAwQCLXF0AwQCZzUMAwQBb3cAAwQCb3cMMAwDBADLCbMDBADLCbQDBAHL CbYwNwQCAAIwMTASAwcAJAJoAAADAwcBJAJoAAAEAwcAJAJoAAdgMBIDBwAkAmgA B2MDBwAkAmgAB2QwDQYJKoZIhvcNAQELBQADggEBAH70WYwR/EZwwOQ+plpaw9h/ RaFjHTDp2hUMR9c45E7c3CrRxbzN809dmnUY1Ryxg8i1VrLVItr1vYC+m8x466Ny PMMh/VRcjtfPh4pFRRx1LNAx8tmUPU5ehIk0eFqut6ZmTDtmhYx7ldfIOAaQI4Af w53urjdlkdAyn1erLWfY+9fPDvNyvSkSFLAL5wdYCndOqcnSZRr8bwMJvbw2qtXY 1O9iIxCp+Oli3OC02d+dC2jCnmSXqfnwz+eMycuUIHy+A036EV1bcraCODQBtmlt 1Qtq1NFuQi93bBDMkPB039gAqb3PvYVuHCpBmM5fKq1AyckDnP7m0CARszK6mY4= -----END CERTIFICATE-----Generated at Mon Mar 2 05:40:18 2026 by rpki-client