$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D59EA6F4F5C611E6A4FFEF0AC4F9AE02.roa File: D59EA6F4F5C611E6A4FFEF0AC4F9AE02.roa (raw, json) Hash identifier: Mltlh2bx7WYK1xzaK+H07Yqp+mKuF+w3gv8nIlWhSn8= Subject key identifier: 75:56:55:60:AB:A0:0C:47:48:9A:7E:59:25:6E:4F:18:20:4C:39:DF Certificate issuer: /CN=A91FAF20/serialNumber=0F8DBDA7D0C9A1ECA1945C61B72920F5AA0E9467 Certificate serial: 1C93 Authority key identifier: 0F:8D:BD:A7:D0:C9:A1:EC:A1:94:5C:61:B7:29:20:F5:AA:0E:94:67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D59EA6F4F5C611E6A4FFEF0AC4F9AE02.roa Signing time: Thu 02 Apr 2026 16:19:38 +0000 ROA not before: Thu 02 Apr 2026 16:19:38 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 20546 IP address blocks: 45.112.84.0/24 maxlen: 24 45.112.85.0/24 maxlen: 24 45.112.86.0/24 maxlen: 24 45.112.87.0/24 maxlen: 24 103.51.164.0/24 maxlen: 24 103.51.165.0/24 maxlen: 24 103.51.166.0/24 maxlen: 24 103.51.167.0/24 maxlen: 24 2402:1880::/32 maxlen: 32 2402:1880:1000::/48 maxlen: 48 2402:1880:1001::/48 maxlen: 48 2402:1881::/32 maxlen: 32 2402:1882::/32 maxlen: 32 2402:1883::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.crl rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:07:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7315 (0x1c93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAF20, serialNumber=0F8DBDA7D0C9A1ECA1945C61B72920F5AA0E9467 Validity Not Before: Apr 2 16:19:38 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69ce971a-dc65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:81:a5:77:92:0f:e4:3e:6c:b4:3a:a3:a0:3f: 84:39:34:8f:e6:00:f4:6e:56:96:11:4d:f5:c0:f7: 12:5f:06:d9:a4:fa:64:5f:f6:5e:7d:a6:0d:50:71: 13:92:d8:94:d7:02:c1:0b:b4:24:ed:88:de:0e:c4: 22:23:5a:85:06:f0:6b:7d:65:7a:c7:39:06:2d:6d: de:01:51:6a:5e:7a:85:6e:1b:15:11:60:48:12:30: 81:77:6e:13:96:74:90:f6:b0:6e:34:6f:44:72:4d: be:f3:48:97:06:cf:06:05:fd:c3:ff:ff:f6:cc:86: 64:c5:ac:3a:36:db:61:d8:f7:95:43:d8:c5:2f:6a: ff:36:53:9e:5a:08:9f:24:42:fe:e2:2a:ed:45:ef: a7:91:90:b2:2d:d2:4e:c2:f0:ea:27:8b:d5:3e:a1: bc:91:ca:aa:3e:f4:fe:a7:d3:1d:48:3b:b6:44:ba: 8f:da:32:1b:3e:3d:fc:81:3d:ec:a2:5a:80:ac:63: a4:1d:c3:f9:1b:95:09:8c:bf:48:76:31:52:9f:3d: 77:b0:9b:a3:fd:60:32:4d:97:c1:45:6d:b5:19:48: bc:4b:59:1d:d7:df:17:f1:32:cd:d8:38:96:bd:67: 69:56:ed:11:fa:47:c0:34:2c:b4:cf:94:5e:ef:fc: 27:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:56:55:60:AB:A0:0C:47:48:9A:7E:59:25:6E:4F:18:20:4C:39:DF X509v3 Authority Key Identifier: keyid:0F:8D:BD:A7:D0:C9:A1:EC:A1:94:5C:61:B7:29:20:F5:AA:0E:94:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D59EA6F4F5C611E6A4FFEF0AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.112.84.0/22 103.51.164.0/22 IPv6: 2402:1880::/30 Signature Algorithm: sha256WithRSAEncryption 3d:2f:b2:42:12:60:e4:86:7e:f3:e8:44:f9:a1:1c:63:2f:84: 57:0a:39:b0:f2:64:5f:57:a1:8f:d1:61:e9:5b:2e:51:5e:cc: 43:bc:0f:6e:2e:2f:8d:53:2d:ba:7e:95:80:f1:be:09:91:40: a8:d0:2c:b0:fd:eb:65:0f:63:fc:4e:42:ff:f4:b9:26:17:15: 86:ea:3f:a0:c4:68:5a:65:42:ec:28:81:bd:88:32:20:6e:c2: 16:a3:a9:81:1c:03:eb:cd:f2:d6:5f:85:45:23:8c:76:3a:97: f4:51:30:02:cf:50:02:41:a8:ed:ed:bd:22:91:86:90:2b:e3: 35:d6:ec:e0:6e:41:38:81:dc:15:3f:4d:12:8c:ed:a7:1b:cc: ef:e2:4e:20:d6:29:92:07:4a:6f:c7:d8:e4:3b:ac:c3:95:72: 0b:7e:d8:fe:72:b3:78:c4:28:f3:a4:bb:ad:8c:5b:a4:ea:ed: d8:c7:24:04:66:98:ba:c1:e6:11:36:e5:15:23:cd:81:c2:23: f9:47:43:ca:79:b7:54:83:22:e9:60:6e:19:4d:72:d0:8d:1d: d3:2b:31:38:ca:3c:46:72:8b:40:92:8b:8f:6a:ef:f4:c9:5f: 2e:b0:de:ce:48:df:cc:88:c5:17:28:5e:d6:2d:18:12:27:79: 18:04:34:2a -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICHJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFGMjAxMTAvBgNVBAUTKDBGOERCREE3RDBDOUExRUNBMTk0NUM2MUI3MjkyMEY1 QUEwRTk0NjcwHhcNMjYwNDAyMTYxOTM4WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWNlOTcxYS1kYzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi4Gld5IP5D5stDqjoD+EOTSP5gD0blaWEU31wPcSXwbZpPpkX/ZefaYNUHET ktiU1wLBC7Qk7YjeDsQiI1qFBvBrfWV6xzkGLW3eAVFqXnqFbhsVEWBIEjCBd24T lnSQ9rBuNG9Eck2+80iXBs8GBf3D///2zIZkxaw6Ntth2PeVQ9jFL2r/NlOeWgif JEL+4irtRe+nkZCyLdJOwvDqJ4vVPqG8kcqqPvT+p9MdSDu2RLqP2jIbPj38gT3s olqArGOkHcP5G5UJjL9IdjFSnz13sJuj/WAyTZfBRW21GUi8S1kd198X8TLN2DiW vWdpVu0R+kfANCy0z5Re7/wndQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFHVWVWCr oAxHSJp+WSVuTxggTDnfMB8GA1UdIwQYMBaAFA+NvafQyaHsoZRcYbcpIPWqDpRn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUYyMC82NUE5QTI0MkY1 QzQxMUU2OEFBQTAwODVDNEY5QUUwMi9ENDI5cDlESm9leWhsRnhodHlrZzlhb09s R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q0MjlwOURKb2V5aGxGeGh0eWtnOWFvT2xHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkFGMjAvNjVBOUEyNDJGNUM0MTFFNjhBQUEwMDg1QzRGOUFFMDIvRDU5RUE2RjRG NUM2MTFFNkE0RkZFRjBBQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCLXBUAwQCZzOkMA0EAgACMAcDBQIkAhiAMA0GCSqGSIb3DQEBCwUA A4IBAQA9L7JCEmDkhn7z6ET5oRxjL4RXCjmw8mRfV6GP0WHpWy5RXsxDvA9uLi+N Uy26fpWA8b4JkUCo0Cyw/etlD2P8TkL/9LkmFxWG6j+gxGhaZULsKIG9iDIgbsIW o6mBHAPrzfLWX4VFI4x2Opf0UTACz1ACQajt7b0ikYaQK+M11uzgbkE4gdwVP00S jO2nG8zv4k4g1imSB0pvx9jkO6zDlXILftj+crN4xCjzpLutjFuk6u3YxyQEZpi6 weYRNuUVI82BwiP5R0PKebdUgyLpYG4ZTXLQjR3TKzE4yjxGcotAkouPau/0yV8u sN7OSN/MiMUXKF7WLRgSJ3kYBDQq -----END CERTIFICATE-----Generated at Fri Apr 17 19:56:02 2026 by rpki-client