$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/855AECF29B3A11EB9B73EB7BC4F9AE02.roa File: 855AECF29B3A11EB9B73EB7BC4F9AE02.roa (raw, json) Hash identifier: V0PmmwgVntdjWwqgOyfzApLR6YpbY/HvQB4HeE20/PU= Subject key identifier: 38:35:CB:4F:6C:A1:C0:93:2E:A3:2A:7A:9F:BD:0C:B0:7B:89:33:F9 Certificate issuer: /CN=A91F7DCD/serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86 Certificate serial: 0AC7 Authority key identifier: 3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/855AECF29B3A11EB9B73EB7BC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:31:13 +0000 ROA not before: Thu 04 Sep 2025 20:00:28 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 141768 IP address blocks: 39.109.92.0/22 maxlen: 22 39.109.92.0/24 maxlen: 24 39.109.93.0/24 maxlen: 24 39.109.94.0/24 maxlen: 24 39.109.95.0/24 maxlen: 24 103.120.228.0/23 maxlen: 23 103.120.228.0/24 maxlen: 24 103.120.229.0/24 maxlen: 24 103.227.128.0/24 maxlen: 24 103.227.129.0/24 maxlen: 24 103.227.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2759 (0xac7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7DCD, serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86 Validity Not Before: Sep 4 20:00:28 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a469d1-19d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:84:73:74:12:2e:fc:9f:44:c7:67:92:f0:2b: dd:72:bc:82:52:8b:f0:59:9b:0d:25:70:3e:ad:4d: 39:35:fd:6f:2f:90:2e:44:a2:5a:3c:f4:39:0d:85: 3f:21:f5:a0:28:2b:47:41:58:d2:a5:e4:11:ca:f9: eb:4d:22:dc:93:1b:36:ad:27:f6:9b:de:fe:63:e8: 95:48:42:04:bf:81:05:b5:d6:b7:e0:61:77:78:55: b8:44:60:61:bb:94:30:6e:c0:10:7e:ed:a0:f1:32: f4:88:f2:75:1d:22:96:e4:19:7d:18:7e:4b:4d:1f: c4:a8:1c:a3:49:1e:94:d4:47:d6:5e:bc:65:42:6e: 83:ce:cf:4e:f5:f1:5a:d6:eb:31:26:64:e2:20:bd: 52:ae:51:59:91:cd:cc:85:b7:58:7e:c4:01:c9:d0: 0a:3b:cc:2d:cf:97:23:9f:f2:9b:39:ff:87:69:87: 5a:92:2e:d9:4f:4a:40:ac:f4:6d:bd:19:f2:dd:ed: 20:59:e5:00:3c:ca:c2:37:46:ea:45:42:00:28:b3: 1f:50:85:1b:6e:07:54:48:b1:1b:16:b9:ef:be:b9: 6b:ae:3f:aa:51:c3:7a:38:6c:c8:67:37:cb:5b:a4: f1:99:ff:ee:74:e5:26:95:1f:5b:9b:20:d0:2d:98: 0b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:35:CB:4F:6C:A1:C0:93:2E:A3:2A:7A:9F:BD:0C:B0:7B:89:33:F9 X509v3 Authority Key Identifier: keyid:3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/855AECF29B3A11EB9B73EB7BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 39.109.92.0/22 103.120.228.0/23 103.227.128.0/23 103.227.131.0/24 Signature Algorithm: sha256WithRSAEncryption 45:16:e7:39:a6:c8:18:a4:14:64:82:e0:c6:00:f9:d8:b2:b0: 5f:96:6d:d3:86:1e:c5:28:79:dc:e6:7b:6f:3f:dc:78:fa:c5: 20:55:45:fe:b5:d2:a2:6a:cd:46:d8:82:26:5f:1a:b1:c0:0d: 63:6f:cb:9f:a8:38:55:bd:02:93:76:bd:cb:eb:7a:38:60:90: 26:8c:7e:40:15:b5:c1:2e:3a:d7:ac:38:b7:fc:17:48:db:6f: 78:7a:5e:03:7d:27:40:81:27:1e:8f:b9:9a:a4:5b:03:9a:05: ec:d9:35:dc:c0:3a:0b:a8:86:70:59:07:9a:78:e3:ba:21:c5: 8a:6f:79:f2:2d:58:2e:98:e5:69:21:84:a7:1c:c4:6f:a2:2a: dc:18:14:21:c5:2b:d0:9f:63:bd:49:f3:45:80:c9:54:9e:11: ef:74:a0:12:ba:40:1f:4c:8e:ad:15:a4:a6:72:7b:90:ad:d8: ae:0c:90:4e:41:ae:49:f0:f5:e3:57:c2:c5:9a:75:d7:f2:61: 96:a0:d0:7e:01:66:b8:ba:86:09:9d:e0:da:af:86:44:a1:ad: 9f:81:8f:03:56:c7:ed:85:a8:00:f0:d9:02:17:be:27:d6:36: 8a:2d:41:6f:f5:61:ea:9c:5d:41:b6:f7:bc:69:69:ab:fa:f4: 95:f6:53:e0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICCscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdEQ0QxMTAvBgNVBAUTKDNCRDMwMkZBN0EyRTg2NkE2NzlCMUI2MDk2REI2NzQ1 M0EwM0FCODYwHhcNMjUwOTA0MjAwMDI4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjlkMS0xOWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYRzdBIu/J9Ex2eS8CvdcryCUovwWZsNJXA+rU05Nf1vL5AuRKJaPPQ5DYU/ IfWgKCtHQVjSpeQRyvnrTSLckxs2rSf2m97+Y+iVSEIEv4EFtda34GF3eFW4RGBh u5QwbsAQfu2g8TL0iPJ1HSKW5Bl9GH5LTR/EqByjSR6U1EfWXrxlQm6Dzs9O9fFa 1usxJmTiIL1SrlFZkc3MhbdYfsQBydAKO8wtz5cjn/KbOf+HaYdaki7ZT0pArPRt vRny3e0gWeUAPMrCN0bqRUIAKLMfUIUbbgdUSLEbFrnvvrlrrj+qUcN6OGzIZzfL W6Txmf/udOUmlR9bmyDQLZgLpQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFDg1y09s ocCTLqMqep+9DLB7iTP5MB8GA1UdIwQYMBaAFDvTAvp6LoZqZ5sbYJbbZ0U6A6uG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0RDRC84NDQyOEIwRTcz RDExMUVBOUNERUM1MzRDNEY5QUUwMi9POU1DLW5vdWhtcG5teHRnbHR0blJUb0Rx NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL085TUMtbm91aG1wbm14dGdsdHRuUlRvRHE0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjdEQ0QvODQ0MjhCMEU3M0QxMTFFQTlDREVDNTM0QzRGOUFFMDIvODU1QUVDRjI5 QjNBMTFFQjlCNzNFQjdCQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQCJ21cAwQBZ3jkAwQBZ+OAAwQAZ+ODMA0GCSqGSIb3DQEBCwUAA4IB AQBFFuc5psgYpBRkguDGAPnYsrBflm3Thh7FKHnc5ntvP9x4+sUgVUX+tdKias1G 2IImXxqxwA1jb8ufqDhVvQKTdr3L63o4YJAmjH5AFbXBLjrXrDi3/BdI2294el4D fSdAgScej7mapFsDmgXs2TXcwDoLqIZwWQeaeOO6IcWKb3nyLVgumOVpIYSnHMRv oircGBQhxSvQn2O9SfNFgMlUnhHvdKASukAfTI6tFaSmcnuQrdiuDJBOQa5J8PXj V8LFmnXX8mGWoNB+AWa4uoYJneDar4ZEoa2fgY8DVsfthagA8NkCF74n1jaKLUFv 9WHqnF1Btve8aWmr+vSV9lPg -----END CERTIFICATE-----Generated at Mon Mar 2 17:40:02 2026 by rpki-client