$ rpki-client -vvf rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/55BC5674573F11EAA8901D3EC4F9AE02.roa File: 55BC5674573F11EAA8901D3EC4F9AE02.roa (raw, json) Hash identifier: jnfVdDyG/gAAbTwrDOOWxQtaj+CmTfAz9fmqwOAZ664= Subject key identifier: D3:2E:FC:B9:50:4B:8B:58:91:5B:CA:6A:AB:47:2E:34:4D:D7:60:DE Certificate issuer: /CN=A91190B4/serialNumber=A5E69DA3BBFB8E5DD39648E6A43E00FA723DE658 Certificate serial: 0B49 Authority key identifier: A5:E6:9D:A3:BB:FB:8E:5D:D3:96:48:E6:A4:3E:00:FA:72:3D:E6:58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/55BC5674573F11EAA8901D3EC4F9AE02.roa Signing time: Tue 24 Mar 2026 19:24:57 +0000 ROA not before: Tue 24 Mar 2026 19:24:57 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 4049 IP address blocks: 103.16.20.0/22 maxlen: 24 2405:e840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.crl rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:25:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2889 (0xb49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91190B4, serialNumber=A5E69DA3BBFB8E5DD39648E6A43E00FA723DE658 Validity Not Before: Mar 24 19:24:57 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69c2e509-ac23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f7:30:86:d3:81:69:59:eb:68:13:bb:26:89: af:2e:43:fb:97:94:51:4f:b6:9c:70:28:6e:ac:2c: 36:66:b1:05:9e:6b:81:8f:3f:0c:57:eb:eb:3e:4c: e4:84:1b:f2:2a:f2:b2:17:84:a8:a4:aa:d2:03:37: 50:6c:1b:8b:d4:a1:db:91:45:73:ab:11:39:6d:9a: d0:10:ff:8f:9a:62:63:78:d3:ca:8c:49:a3:65:59: 64:67:a8:e5:79:de:aa:7f:8c:71:9d:c0:7b:81:f3: e9:83:53:a0:bf:5f:77:2c:e1:ab:33:16:71:ca:17: 3a:32:08:05:5b:08:06:12:fe:d0:d3:85:5e:ee:3b: fb:90:d3:ae:45:e7:84:6c:b1:a5:e5:b4:38:2a:45: fd:f9:49:7d:08:d4:6d:0d:09:0a:3b:fb:af:44:28: 39:a9:ca:0a:71:87:14:5c:b8:61:d5:79:b2:50:a7: c4:0d:4b:61:34:e7:5b:3f:93:67:26:10:eb:22:42: 5b:2f:cd:9e:83:36:1c:3e:70:f7:ab:56:01:e8:37: 93:30:2e:99:d3:84:9d:f7:12:90:b9:f6:c2:63:f6: a1:a7:ab:35:05:c5:fe:64:21:02:45:bf:b5:2e:bf: 74:c6:b5:79:48:99:38:2d:14:f6:8a:41:40:68:19: 11:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2E:FC:B9:50:4B:8B:58:91:5B:CA:6A:AB:47:2E:34:4D:D7:60:DE X509v3 Authority Key Identifier: keyid:A5:E6:9D:A3:BB:FB:8E:5D:D3:96:48:E6:A4:3E:00:FA:72:3D:E6:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/55BC5674573F11EAA8901D3EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.16.20.0/22 IPv6: 2405:e840::/32 Signature Algorithm: sha256WithRSAEncryption 70:65:55:33:aa:f1:62:a6:45:16:e8:62:13:af:3c:ae:f0:fd: 9b:65:45:0c:f7:8a:fb:02:b5:e6:cc:9e:51:00:b6:5e:2d:41: 92:a9:a1:0b:43:2b:03:18:d7:9a:bb:32:07:66:fa:f4:48:fe: 73:26:b7:d0:62:a9:1b:5e:e9:79:7a:61:b5:1e:21:40:66:0a: 5a:81:e0:d4:46:c8:e8:bc:74:af:0e:7c:f9:9b:98:ce:b6:74: af:5c:24:ef:90:ae:59:ed:6f:4c:fe:96:bc:14:cc:87:79:e4: 63:05:b7:a6:8c:d4:5b:f8:d8:9e:07:60:ad:56:85:73:5f:42: 87:06:2d:32:79:83:55:8c:97:f7:29:20:1a:a8:1b:f2:62:32: be:1c:15:03:28:09:77:8d:eb:de:3a:13:58:f4:d5:5e:72:7a: 7d:5c:91:9d:19:d4:50:46:87:74:3e:2c:4c:6b:9b:9c:69:01: 2d:5f:c9:01:12:33:a5:4d:63:91:80:0a:ed:96:7b:96:96:49: 76:52:4b:6e:83:63:bc:24:ee:9a:4f:21:ff:8e:41:4c:06:40: ca:00:b1:95:91:60:18:62:63:18:a5:e0:51:97:0d:95:2d:31: a7:0e:11:82:04:6c:d7:f9:c4:63:55:ff:7a:9e:70:e2:33:cb: 54:09:28:81 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICC0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkwQjQxMTAvBgNVBAUTKEE1RTY5REEzQkJGQjhFNUREMzk2NDhFNkE0M0UwMEZB NzIzREU2NTgwHhcNMjYwMzI0MTkyNDU3WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWMyZTUwOS1hYzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqPcwhtOBaVnraBO7JomvLkP7l5RRT7accChurCw2ZrEFnmuBjz8MV+vrPkzk hBvyKvKyF4SopKrSAzdQbBuL1KHbkUVzqxE5bZrQEP+PmmJjeNPKjEmjZVlkZ6jl ed6qf4xxncB7gfPpg1Ogv193LOGrMxZxyhc6MggFWwgGEv7Q04Ve7jv7kNOuReeE bLGl5bQ4KkX9+Ul9CNRtDQkKO/uvRCg5qcoKcYcUXLhh1XmyUKfEDUthNOdbP5Nn JhDrIkJbL82egzYcPnD3q1YB6DeTMC6Z04Sd9xKQufbCY/ahp6s1BcX+ZCECRb+1 Lr90xrV5SJk4LRT2ikFAaBkRFwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFNMu/LlQ S4tYkVvKaqtHLjRN12DeMB8GA1UdIwQYMBaAFKXmnaO7+45d05ZI5qQ+APpyPeZY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTBCNC9CQzhDMTBBRTU3 M0MxMUVBQjBBNEUzMzVDNEY5QUUwMi9wZWFkbzd2N2psM1Rsa2ptcEQ0QS1uSTk1 bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BlYWRvN3Y3amwzVGxram1wRDRBLW5JOTVsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTkwQjQvQkM4QzEwQUU1NzNDMTFFQUIwQTRFMzM1QzRGOUFFMDIvNTVCQzU2NzQ1 NzNGMTFFQUE4OTAxRDNFQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZxAUMA0EAgACMAcDBQAkBehAMA0GCSqGSIb3DQEBCwUAA4IBAQBw ZVUzqvFipkUW6GITrzyu8P2bZUUM94r7ArXmzJ5RALZeLUGSqaELQysDGNeauzIH Zvr0SP5zJrfQYqkbXul5emG1HiFAZgpageDURsjovHSvDnz5m5jOtnSvXCTvkK5Z 7W9M/pa8FMyHeeRjBbemjNRb+NieB2CtVoVzX0KHBi0yeYNVjJf3KSAaqBvyYjK+ HBUDKAl3jeveOhNY9NVecnp9XJGdGdRQRod0PixMa5ucaQEtX8kBEjOlTWORgArt lnuWlkl2Uktug2O8JO6aTyH/jkFMBkDKALGVkWAYYmMYpeBRlw2VLTGnDhGCBGzX +cRjVf96nnDiM8tUCSiB -----END CERTIFICATE-----Generated at Thu Mar 26 10:13:13 2026 by rpki-client