$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D59EA6F4F5C611E6A4FFEF0AC4F9AE02.roa File: D59EA6F4F5C611E6A4FFEF0AC4F9AE02.roa (raw, json) Hash identifier: 5NO1VG8ffGg8ouNISZKDorz5L4A29bF5w+6XJMA45m0= Subject key identifier: 0C:53:E9:C4:9A:13:4F:61:08:B5:10:A7:E9:FA:D2:BE:28:1A:45:7A Certificate issuer: /CN=A91FAF20/serialNumber=0F8DBDA7D0C9A1ECA1945C61B72920F5AA0E9467 Certificate serial: 1C7E Authority key identifier: 0F:8D:BD:A7:D0:C9:A1:EC:A1:94:5C:61:B7:29:20:F5:AA:0E:94:67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D59EA6F4F5C611E6A4FFEF0AC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:33:50 +0000 ROA not before: Mon 24 Nov 2025 12:27:30 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 20546 IP address blocks: 45.112.84.0/24 maxlen: 24 45.112.85.0/24 maxlen: 24 45.112.86.0/24 maxlen: 24 45.112.87.0/24 maxlen: 24 103.51.164.0/24 maxlen: 24 103.51.165.0/24 maxlen: 24 103.51.166.0/24 maxlen: 24 103.51.167.0/24 maxlen: 24 2402:1880::/32 maxlen: 32 2402:1880:1000::/48 maxlen: 48 2402:1880:1001::/48 maxlen: 48 2402:1881::/32 maxlen: 32 2402:1882::/32 maxlen: 32 2402:1883::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.crl rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:03:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7294 (0x1c7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAF20, serialNumber=0F8DBDA7D0C9A1ECA1945C61B72920F5AA0E9467 Validity Not Before: Nov 24 12:27:30 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a44e4e-7b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e9:10:3a:52:d5:2f:34:48:30:37:2d:b7:1d: a2:36:9f:cf:df:1f:8a:57:e8:3c:1d:b6:0f:8d:a3: 9b:19:46:18:0d:73:3d:5c:1d:4e:55:8f:e2:b3:af: d7:4a:ee:62:7f:ed:29:69:d9:05:9f:c7:cc:39:d6: bd:be:1d:e3:66:73:ce:a8:6d:99:e6:13:86:5d:f3: ef:25:fe:67:da:a4:9d:26:47:0f:96:ff:a5:12:38: 69:98:d4:30:e7:21:31:e6:fa:91:85:80:74:63:6f: 23:18:fb:e3:80:4b:18:21:a5:11:44:57:8d:be:d6: 37:bd:a0:de:4b:12:3c:f1:04:05:59:6f:f1:4a:16: 4b:6c:60:0c:0a:2b:b8:cb:5a:63:a0:57:61:e5:11: 4b:31:84:2d:48:bd:0d:d4:3c:07:3a:67:5f:6d:1c: 4a:2d:e6:da:af:90:e6:7f:8b:b4:64:ba:5c:68:f3: ec:1f:e5:5f:2d:1d:1e:f5:41:88:24:5f:90:a7:e9: 1c:34:9e:3e:2e:ad:e5:fa:01:71:a8:0e:a9:b4:85: 2e:7c:66:52:51:c8:a9:e0:45:41:36:0b:39:c7:30: 53:c9:a3:8b:58:78:83:f9:a5:65:cd:db:3c:3b:9c: 80:ec:3a:75:b4:44:fb:d7:bc:bc:5b:11:31:0d:be: 1d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:53:E9:C4:9A:13:4F:61:08:B5:10:A7:E9:FA:D2:BE:28:1A:45:7A X509v3 Authority Key Identifier: keyid:0F:8D:BD:A7:D0:C9:A1:EC:A1:94:5C:61:B7:29:20:F5:AA:0E:94:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D59EA6F4F5C611E6A4FFEF0AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.112.84.0/22 103.51.164.0/22 IPv6: 2402:1880::/30 Signature Algorithm: sha256WithRSAEncryption 07:d3:41:65:eb:4c:e9:28:f8:cf:d5:ab:43:06:e9:b2:ab:34: 5c:ad:0e:41:e2:8f:a1:bc:6d:e9:bf:e9:7d:3a:ca:71:3d:11: 2a:c4:36:a1:1a:c2:31:c9:60:38:89:2f:af:ad:7e:69:c3:ba: b1:bf:c8:9c:91:68:ec:46:4b:81:af:71:71:3a:08:bd:f4:ed: 1f:af:1b:65:b2:65:b0:cd:85:2b:b5:f1:c4:8d:a3:86:05:c6: 80:1e:98:56:51:01:39:6c:cd:7a:28:17:9a:82:b0:2a:46:d9: 95:27:8d:0f:db:1d:34:c8:0b:90:f7:1d:b3:b2:ba:8a:7c:49: 7e:dd:09:9d:7f:d8:99:14:3b:b3:9a:08:54:a4:18:e8:2e:7c: 4d:27:ac:35:f3:26:54:2c:68:9e:d5:98:ca:62:f7:5b:08:9c: e6:32:95:5a:4f:b7:f3:fd:66:92:5b:ca:e8:df:61:e2:22:41: 47:1f:e7:e1:86:09:fa:6c:db:f5:d3:32:76:87:10:0a:8b:de: 47:ed:cc:d2:e8:24:f8:6c:56:d3:f4:0c:bc:16:7a:3f:8b:50: f8:0b:85:2d:c2:d1:d8:bb:85:ba:e2:d1:1f:54:ed:be:05:fe: 1b:8a:45:9e:c1:a1:37:cd:cd:de:ec:69:0b:2d:fa:06:e5:3c: f9:1a:d4:85 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICHH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFGMjAxMTAvBgNVBAUTKDBGOERCREE3RDBDOUExRUNBMTk0NUM2MUI3MjkyMEY1 QUEwRTk0NjcwHhcNMjUxMTI0MTIyNzMwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGU0ZS03YjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmOkQOlLVLzRIMDcttx2iNp/P3x+KV+g8HbYPjaObGUYYDXM9XB1OVY/is6/X Su5if+0padkFn8fMOda9vh3jZnPOqG2Z5hOGXfPvJf5n2qSdJkcPlv+lEjhpmNQw 5yEx5vqRhYB0Y28jGPvjgEsYIaURRFeNvtY3vaDeSxI88QQFWW/xShZLbGAMCiu4 y1pjoFdh5RFLMYQtSL0N1DwHOmdfbRxKLebar5Dmf4u0ZLpcaPPsH+VfLR0e9UGI JF+Qp+kcNJ4+Lq3l+gFxqA6ptIUufGZSUcip4EVBNgs5xzBTyaOLWHiD+aVlzds8 O5yA7Dp1tET717y8WxExDb4dcwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFAxT6cSa E09hCLUQp+n60r4oGkV6MB8GA1UdIwQYMBaAFA+NvafQyaHsoZRcYbcpIPWqDpRn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUYyMC82NUE5QTI0MkY1 QzQxMUU2OEFBQTAwODVDNEY5QUUwMi9ENDI5cDlESm9leWhsRnhodHlrZzlhb09s R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q0MjlwOURKb2V5aGxGeGh0eWtnOWFvT2xHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkFGMjAvNjVBOUEyNDJGNUM0MTFFNjhBQUEwMDg1QzRGOUFFMDIvRDU5RUE2RjRG NUM2MTFFNkE0RkZFRjBBQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCLXBUAwQCZzOkMA0EAgACMAcDBQIkAhiAMA0GCSqGSIb3DQEBCwUA A4IBAQAH00Fl60zpKPjP1atDBumyqzRcrQ5B4o+hvG3pv+l9OspxPREqxDahGsIx yWA4iS+vrX5pw7qxv8ickWjsRkuBr3FxOgi99O0frxtlsmWwzYUrtfHEjaOGBcaA HphWUQE5bM16KBeagrAqRtmVJ40P2x00yAuQ9x2zsrqKfEl+3Qmdf9iZFDuzmghU pBjoLnxNJ6w18yZULGie1ZjKYvdbCJzmMpVaT7fz/WaSW8ro32HiIkFHH+fhhgn6 bNv10zJ2hxAKi95H7czS6CT4bFbT9Ay8Fno/i1D4C4UtwtHYu4W64tEfVO2+Bf4b ikWewaE3zc3e7GkLLfoG5Tz5GtSF -----END CERTIFICATE-----Generated at Mon Mar 2 11:17:05 2026 by rpki-client