$ rpki-client -vvf rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/1A824A0E993511EF9BB0A677C4F9AE02.roa File: 1A824A0E993511EF9BB0A677C4F9AE02.roa (raw, json) Hash identifier: bdzoKNZt8/XWHS83YkqdwCHBasuCUkb2vXGrsks4FPo= Subject key identifier: 9B:8B:22:C4:8E:8E:48:F1:11:C9:E5:D9:73:E2:01:D6:17:04:3B:F3 Certificate issuer: /CN=A91338F0/serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2 Certificate serial: 0110 Authority key identifier: 83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/1A824A0E993511EF9BB0A677C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:46:26 +0000 ROA not before: Tue 19 Aug 2025 07:14:59 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 45327 IP address blocks: 116.90.64.0/21 maxlen: 21 116.90.64.0/24 maxlen: 24 116.90.65.0/24 maxlen: 24 116.90.66.0/24 maxlen: 24 116.90.67.0/24 maxlen: 24 116.90.70.0/24 maxlen: 24 116.90.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:14:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91338F0, serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2 Validity Not Before: Aug 19 07:14:59 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a41902-dacb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:5e:c7:e8:30:1e:b0:67:3a:cd:0c:c2:9c:f5: c4:7a:0d:b5:2a:54:1e:47:d8:c3:5f:42:96:68:9d: 74:e0:3e:1e:ce:26:22:ec:34:3a:76:b7:51:c5:b8: 9f:4b:41:44:df:67:cf:f1:f3:d6:14:8e:64:d1:0f: 6f:2a:6e:3e:22:9f:97:4f:45:6e:05:d4:0a:f7:3b: 8e:63:a7:89:9d:0f:f4:e3:17:42:61:49:f5:74:4a: 39:db:10:0a:4a:d4:d3:df:07:1c:a7:ac:17:2c:68: 11:21:69:5a:a8:a9:36:5e:f0:5b:c1:4e:64:5d:d2: cb:41:bf:6c:2f:73:09:65:49:3c:ed:64:6d:07:32: 17:62:2e:10:e6:4c:fc:7f:0c:9d:ad:a5:1e:38:06: 9f:0a:88:f6:a1:5f:7a:9f:57:30:06:ea:00:85:93: c5:34:e9:dd:fe:b8:d1:6b:bb:01:17:51:e0:73:5b: 65:63:ca:55:1a:67:35:cb:15:bc:cd:d5:72:56:f1: b8:b5:8d:d9:ce:88:fd:ec:60:bc:b8:f7:d2:a0:5d: 24:9e:88:f4:18:4a:cc:6d:03:b9:43:e1:db:79:68: e0:3f:ab:7d:5c:e0:65:75:e5:55:56:e3:e3:70:c1: cf:ac:e0:23:a0:e1:35:6c:0f:4b:5d:8b:6e:a2:ef: 67:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8B:22:C4:8E:8E:48:F1:11:C9:E5:D9:73:E2:01:D6:17:04:3B:F3 X509v3 Authority Key Identifier: keyid:83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/1A824A0E993511EF9BB0A677C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 116.90.64.0/21 Signature Algorithm: sha256WithRSAEncryption 3c:d9:49:7c:02:3b:60:d3:20:0b:8c:4e:96:f2:d0:85:cf:0d: 42:d9:3a:78:cb:8e:07:98:57:7e:2a:d4:9b:36:a0:21:c4:0a: e9:00:34:1c:57:0d:00:f6:77:a3:a9:62:99:e5:78:d1:cd:be: 8c:3e:6c:0b:89:8b:f1:6f:3d:dd:34:59:2b:5a:70:26:3f:87: a9:c3:8f:9d:89:ee:a3:b7:18:96:41:64:3e:2d:5c:ec:91:18: 5c:02:c5:17:77:06:0c:b2:e0:16:11:e8:1a:0c:34:1d:af:10: 4a:7b:92:8a:bf:aa:a3:44:f3:03:39:b9:39:36:32:a2:e7:eb: 17:bd:5b:d1:78:77:c9:a4:6e:50:4d:3b:c9:3e:b8:92:eb:fd: a1:e8:46:0a:4d:c3:64:2e:65:77:59:5c:66:df:0d:12:49:92: 3d:a4:2f:8b:96:c9:db:c6:a5:59:90:9f:af:ac:22:1b:bb:c6: f1:10:ca:fd:3e:9b:f0:c7:39:6d:9d:20:a5:d7:36:80:b5:da: 9c:62:ad:80:bb:4e:bc:76:56:c4:b2:fa:8a:ff:c3:8d:34:3b: 35:52:64:02:41:4a:d2:96:44:e5:4b:19:53:da:0c:d2:9e:c9: d5:78:58:67:e7:f6:0e:a0:74:5e:3c:6b:d9:2c:09:03:06:1a: cd:c6:48:af -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM4RjAxMTAvBgNVBAUTKDgzMTdGQzdBODJCMEVFODY1MjBERjE4RkZENTcyOTUx MTZEQTVERjIwHhcNMjUwODE5MDcxNDU5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTkwMi1kYWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA517H6DAesGc6zQzCnPXEeg21KlQeR9jDX0KWaJ104D4eziYi7DQ6drdRxbif S0FE32fP8fPWFI5k0Q9vKm4+Ip+XT0VuBdQK9zuOY6eJnQ/04xdCYUn1dEo52xAK StTT3wccp6wXLGgRIWlaqKk2XvBbwU5kXdLLQb9sL3MJZUk87WRtBzIXYi4Q5kz8 fwydraUeOAafCoj2oV96n1cwBuoAhZPFNOnd/rjRa7sBF1Hgc1tlY8pVGmc1yxW8 zdVyVvG4tY3Zzoj97GC8uPfSoF0knoj0GErMbQO5Q+HbeWjgP6t9XOBldeVVVuPj cMHPrOAjoOE1bA9LXYtuou9nvwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJuLIsSO jkjxEcnl2XPiAdYXBDvzMB8GA1UdIwQYMBaAFIMX/HqCsO6GUg3xj/1XKVEW2l3y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzhGMC8wQTc3MUEzNjkz QUUxMUVGOEY0OEFCNDNDNEY5QUUwMi9neGY4ZW9LdzdvWlNEZkdQX1ZjcFVSYmFY ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d4Zjhlb0t3N29aU0RmR1BfVmNwVVJiYVhmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzM4RjAvMEE3NzFBMzY5M0FFMTFFRjhGNDhBQjQzQzRGOUFFMDIvMUE4MjRBMEU5 OTM1MTFFRjlCQjBBNjc3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDdFpAMA0GCSqGSIb3DQEBCwUAA4IBAQA82Ul8Ajtg0yALjE6W8tCF zw1C2Tp4y44HmFd+KtSbNqAhxArpADQcVw0A9nejqWKZ5XjRzb6MPmwLiYvxbz3d NFkrWnAmP4epw4+die6jtxiWQWQ+LVzskRhcAsUXdwYMsuAWEegaDDQdrxBKe5KK v6qjRPMDObk5NjKi5+sXvVvReHfJpG5QTTvJPriS6/2h6EYKTcNkLmV3WVxm3w0S SZI9pC+LlsnbxqVZkJ+vrCIbu8bxEMr9PpvwxzltnSCl1zaAtdqcYq2Au068dlbE svqK/8ONNDs1UmQCQUrSlkTlSxlT2gzSnsnVeFhn5/YOoHRePGvZLAkDBhrNxkiv -----END CERTIFICATE-----Generated at Thu Mar 26 13:42:30 2026 by rpki-client