$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/DA0B639E89E711F08DD17A55C4F9AE02.roa File: DA0B639E89E711F08DD17A55C4F9AE02.roa (raw, json) Hash identifier: oDVejNljbDL/11huUe+XaNuZxfU7WrqBrupnQVfzggU= Subject key identifier: 31:34:BE:94:AA:7E:F2:79:4F:DF:C8:82:CB:C2:BF:AA:1B:75:E6:3F Certificate issuer: /CN=A91FDC78/serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59 Certificate serial: 0991 Authority key identifier: CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/DA0B639E89E711F08DD17A55C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:33:18 +0000 ROA not before: Fri 05 Sep 2025 08:04:30 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 135126 IP address blocks: 43.252.112.0/22 maxlen: 22 43.252.112.0/24 maxlen: 24 43.252.113.0/24 maxlen: 24 43.252.114.0/24 maxlen: 24 43.252.115.0/24 maxlen: 24 103.210.24.0/22 maxlen: 22 103.210.24.0/23 maxlen: 23 103.210.24.0/24 maxlen: 24 103.210.25.0/24 maxlen: 24 103.210.26.0/24 maxlen: 24 103.210.27.0/24 maxlen: 24 180.233.124.0/22 maxlen: 22 180.233.124.0/24 maxlen: 24 180.233.125.0/24 maxlen: 24 180.233.126.0/24 maxlen: 24 180.233.127.0/24 maxlen: 24 2404:78c0::/40 maxlen: 48 2404:78c0:100::/40 maxlen: 48 2404:78c0:200::/40 maxlen: 48 2404:78c0:300::/40 maxlen: 48 2404:78c0:400::/40 maxlen: 48 2404:78c0:500::/40 maxlen: 48 2404:78c0:600::/40 maxlen: 48 2404:78c0:700::/40 maxlen: 48 2404:78c0:800::/40 maxlen: 48 2404:78c0:900::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:34:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2449 (0x991) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDC78, serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59 Validity Not Before: Sep 5 08:04:30 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a407de-bc7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ba:2e:e1:94:61:0f:f4:e1:09:d2:cf:26:2e: b0:c4:4a:c3:8d:82:35:19:eb:1f:80:96:b7:47:94: dc:3c:bc:0f:ea:59:be:0b:ce:b2:8a:2a:b2:35:1f: 06:69:78:34:75:62:c1:8e:1a:52:5d:94:ce:7e:0e: cb:4b:f6:40:8b:60:2a:30:d9:11:41:fa:97:a4:68: a4:95:7a:d0:af:cf:85:50:f3:c8:25:96:3d:59:c9: 77:1e:ae:77:55:13:6c:3b:59:8c:6f:b7:a4:d0:00: 7c:e7:7f:ba:0a:3d:c5:d8:24:ec:57:80:4e:de:9c: 19:ea:82:47:fd:e8:7a:8c:1d:f3:39:c2:76:cf:a7: f9:fe:91:51:88:ce:36:bb:0a:d2:17:10:4c:07:e3: 0b:0a:eb:af:6d:92:3e:a8:1b:d2:3f:a3:50:6a:08: f4:df:3c:9a:dc:99:de:15:f8:94:11:c8:f5:4d:73: 09:ca:00:09:aa:16:a7:8f:17:f3:1c:44:dd:86:21: 2f:3a:82:af:18:30:26:dd:23:31:85:f4:c9:34:eb: 8e:cf:ad:04:22:76:42:b2:75:79:dd:78:11:23:d8: ec:b4:16:43:20:32:5d:1f:27:62:e0:c6:df:c3:16: 1e:24:1b:8c:24:e4:00:d1:da:f1:c6:bd:a8:7b:c3: b1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:34:BE:94:AA:7E:F2:79:4F:DF:C8:82:CB:C2:BF:AA:1B:75:E6:3F X509v3 Authority Key Identifier: keyid:CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/DA0B639E89E711F08DD17A55C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.252.112.0/22 103.210.24.0/22 180.233.124.0/22 IPv6: 2404:78c0::-2404:78c0:9ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 31:d9:aa:51:ae:ba:44:85:6c:6e:ff:84:56:f8:8b:f0:24:45: d4:94:7d:c7:a4:39:95:6a:78:03:23:5c:af:d5:18:cb:7a:de: 07:64:0d:4d:c1:df:25:c3:14:a6:af:0f:c8:75:c3:b4:3b:d0: 77:e8:ea:36:1b:62:82:9a:e1:b8:bb:05:2c:3e:0d:7f:d7:59: 16:2c:e4:f9:33:a5:56:16:2b:3d:28:1c:85:34:49:8c:40:13: a8:c2:73:44:63:40:5c:6a:66:fd:2d:6a:ab:82:d2:d2:56:22: 25:1d:9f:e6:6e:49:66:4b:11:6e:63:8b:83:5b:d0:7b:cf:8e: e2:37:29:69:4b:b4:ca:be:54:b8:f2:4f:1c:8f:0f:77:ca:ce: 15:5e:b2:fd:1f:02:a4:b2:f3:de:bb:5b:62:24:1f:07:dd:0a: e1:58:ad:13:e2:39:da:8b:4e:93:da:a3:0a:a5:20:af:a5:bb: a9:95:f7:2f:a8:bc:30:7c:9e:e9:87:af:c0:7d:fb:f1:32:ae: 4e:dc:e9:f9:f4:c5:e4:d0:aa:bc:30:ed:66:dd:8f:ce:60:0a: 03:5b:df:62:f2:c4:23:ea:35:74:00:b1:9a:f8:bf:73:b8:22: ef:8e:57:4e:27:6d:a3:79:9c:b2:2a:e2:cd:4b:70:c9:5d:42: d2:95:57:ed -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgICCZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDNzgxMTAvBgNVBAUTKENDNTdFMDM2NDMxQTVFQTNDMTcyQUE3MjgzNDAxQUYz QzRBRDVDNTkwHhcNMjUwOTA1MDgwNDMwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDdkZS1iYzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6rou4ZRhD/ThCdLPJi6wxErDjYI1GesfgJa3R5TcPLwP6lm+C86yiiqyNR8G aXg0dWLBjhpSXZTOfg7LS/ZAi2AqMNkRQfqXpGiklXrQr8+FUPPIJZY9Wcl3Hq53 VRNsO1mMb7ek0AB853+6Cj3F2CTsV4BO3pwZ6oJH/eh6jB3zOcJ2z6f5/pFRiM42 uwrSFxBMB+MLCuuvbZI+qBvSP6NQagj03zya3JneFfiUEcj1TXMJygAJqhanjxfz HETdhiEvOoKvGDAm3SMxhfTJNOuOz60EInZCsnV53XgRI9jstBZDIDJdHydi4Mbf wxYeJBuMJOQA0drxxr2oe8OxQwIDAQABo4IChTCCAoEwHQYDVR0OBBYEFDE0vpSq fvJ5T9/IgsvCv6obdeY/MB8GA1UdIwQYMBaAFMxX4DZDGl6jwXKqcoNAGvPErVxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREM3OC8xNTQ3NDAwOEFF QUMxMUVBQTZDMUQ3NjFDNEY5QUUwMi96RmZnTmtNYVhxUEJjcXB5ZzBBYTg4U3RY RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGZmdOa01hWHFQQmNxcHlnMEFhODhTdFhGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkRDNzgvMTU0NzQwMDhBRUFDMTFFQUE2QzFENzYxQzRGOUFFMDIvREEwQjYzOUU4 OUU3MTFGMDhERDE3QTU1QzRGOUFFMDIucm9hMEQGCCsGAQUFBwEHAQH/BDUwMzAY BAIAATASAwQCK/xwAwQCZ9IYAwQCtOl8MBcEAgACMBEwDwMFBiQEeMADBgEkBHjA CDANBgkqhkiG9w0BAQsFAAOCAQEAMdmqUa66RIVsbv+EVviL8CRF1JR9x6Q5lWp4 AyNcr9UYy3reB2QNTcHfJcMUpq8PyHXDtDvQd+jqNhtigprhuLsFLD4Nf9dZFizk +TOlVhYrPSgchTRJjEATqMJzRGNAXGpm/S1qq4LS0lYiJR2f5m5JZksRbmOLg1vQ e8+O4jcpaUu0yr5UuPJPHI8Pd8rOFV6y/R8CpLLz3rtbYiQfB90K4VitE+I52otO k9qjCqUgr6W7qZX3L6i8MHye6YevwH378TKuTtzp+fTF5NCqvDDtZt2PzmAKA1vf YvLEI+o1dACxmvi/c7gi745XTidto3mcsirizUtwyV1C0pVX7Q== -----END CERTIFICATE-----Generated at Mon Mar 2 05:00:05 2026 by rpki-client