$ rpki-client -vvf rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/5A0804A4152E11EC94BCB264C4F9AE02.roa File: 5A0804A4152E11EC94BCB264C4F9AE02.roa (raw, json) Hash identifier: 49abEkg0KhXLphiSvkFxFB5/cBrDujbbgSy2255f/a8= Subject key identifier: A3:83:12:EB:84:76:EA:00:60:48:9E:AB:5B:0A:3C:F4:4A:89:97:4F Certificate issuer: /CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Certificate serial: 0595 Authority key identifier: 1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/5A0804A4152E11EC94BCB264C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:59:55 +0000 ROA not before: Thu 04 Dec 2025 22:06:12 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 138354 IP address blocks: 45.120.36.0/24 maxlen: 24 103.60.22.0/24 maxlen: 24 103.60.23.0/24 maxlen: 24 103.60.96.0/24 maxlen: 24 103.131.40.0/24 maxlen: 24 103.131.41.0/24 maxlen: 24 103.238.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1429 (0x595) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C643, serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Validity Not Before: Dec 4 22:06:12 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a4546b-d79e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:30:7f:7a:46:01:d3:b7:47:98:d2:1a:2e:5f: df:98:92:65:16:66:8f:98:c7:18:e4:71:60:1b:a9: 56:04:bb:0d:1a:33:71:45:a6:33:c4:99:35:22:eb: d8:40:17:8f:d0:5a:7b:61:f0:fe:c6:07:c1:7b:be: 6a:a7:59:3e:73:03:fa:1c:9f:af:b5:64:0f:f7:ee: 59:64:88:77:74:92:a3:b3:0f:91:2a:01:6f:f9:f7: b9:17:2f:b7:0b:25:42:c3:3d:74:c3:cb:dd:9a:52: d6:a9:4b:2c:d9:9d:a8:d9:b7:7a:d3:93:d6:37:89: 33:20:e9:f9:94:c8:ec:e9:ee:3f:d8:c0:ce:5f:b6: 2f:95:51:1d:27:8c:ba:18:16:11:82:23:ac:92:1c: 7e:e2:e3:35:c0:b4:59:5b:58:ca:80:21:79:c5:cf: be:c9:e7:fa:19:c5:21:8b:6d:21:1a:67:29:68:12: 19:09:36:34:16:7a:cb:41:55:5b:34:34:88:4c:0d: 26:ee:00:5d:90:52:7b:4d:3f:44:e1:7a:48:02:db: 95:9f:1e:cd:58:68:1d:37:ef:8c:8a:6a:46:e9:46: 3b:32:43:76:6a:c6:f5:af:18:57:60:6e:9c:e4:44: 12:52:85:19:24:1f:b2:2d:c1:32:a0:32:26:54:16: b4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:83:12:EB:84:76:EA:00:60:48:9E:AB:5B:0A:3C:F4:4A:89:97:4F X509v3 Authority Key Identifier: keyid:1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/5A0804A4152E11EC94BCB264C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.120.36.0/24 103.60.22.0/23 103.60.96.0/24 103.131.40.0/23 103.238.62.0/24 Signature Algorithm: sha256WithRSAEncryption 35:46:96:96:b3:99:4f:4d:64:47:c2:53:27:04:4a:cb:d1:28: 0c:91:44:b8:14:1c:bc:23:5b:12:cd:c8:5a:82:a7:d3:77:36: 02:0a:39:bc:4f:a4:27:f5:3b:38:d5:f0:30:f8:45:ab:d4:db: 11:d0:6f:5f:72:98:48:e1:bc:08:b4:77:b2:00:b0:3d:37:01: 0a:d5:4d:c1:9f:e1:58:ef:1e:b3:b6:50:f0:10:76:ea:33:3c: 19:c9:1d:f3:80:ba:20:7e:8b:f1:f6:89:da:0f:2b:1b:10:43: 73:75:47:55:4f:b0:9c:3c:dd:78:d9:1d:fc:72:9b:5d:e5:c4: 24:d1:53:f9:6a:7d:c5:50:87:bb:5d:85:38:0b:6f:04:14:8e: 21:6b:52:02:17:7f:c7:9a:6f:1f:40:0c:c7:dd:bb:28:0d:47: a4:8b:37:b4:77:e6:17:42:89:cd:dc:b8:9b:65:29:5b:5d:49: f5:f0:18:47:ab:3b:84:f4:bc:94:e5:d5:f6:a2:69:4f:4a:52: 7b:40:45:c3:51:c0:e5:9b:26:43:c7:e9:2a:d1:b3:be:d8:4f: ef:dc:92:cb:5a:71:53:c5:c9:f5:fe:b9:6a:e2:fd:f5:30:76: c7:80:f2:d4:96:b7:48:50:73:af:b8:c1:2a:65:bc:f3:54:b7: 84:ad:e6:c5 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICBZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM2NDMxMTAvBgNVBAUTKDFCNjJGRDVFMDNEMzMzN0FBMkRDNEUxNTA3OTQxNDQw NDdCMUI2M0EwHhcNMjUxMjA0MjIwNjEyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTQ2Yi1kNzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAljB/ekYB07dHmNIaLl/fmJJlFmaPmMcY5HFgG6lWBLsNGjNxRaYzxJk1IuvY QBeP0Fp7YfD+xgfBe75qp1k+cwP6HJ+vtWQP9+5ZZIh3dJKjsw+RKgFv+fe5Fy+3 CyVCwz10w8vdmlLWqUss2Z2o2bd605PWN4kzIOn5lMjs6e4/2MDOX7YvlVEdJ4y6 GBYRgiOskhx+4uM1wLRZW1jKgCF5xc++yef6GcUhi20hGmcpaBIZCTY0FnrLQVVb NDSITA0m7gBdkFJ7TT9E4XpIAtuVnx7NWGgdN++MimpG6UY7MkN2asb1rxhXYG6c 5EQSUoUZJB+yLcEyoDImVBa0yQIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFKODEuuE duoAYEieq1sKPPRKiZdPMB8GA1UdIwQYMBaAFBti/V4D0zN6otxOFQeUFEBHsbY6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzY0My9BNUQ4ODRDNDE1 MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0zcWkzRTRWQjVRVVFFZXh0 am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cyTDlYZ1BUTTNxaTNFNFZCNVFVUUVleHRqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkM2NDMvQTVEODg0QzQxNTJCMTFFQ0E1M0U0QzYzQzRGOUFFMDIvNUEwODA0QTQx NTJFMTFFQzk0QkNCMjY0QzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQALXgkAwQBZzwWAwQAZzxgAwQBZ4MoAwQAZ+4+MA0GCSqGSIb3DQEB CwUAA4IBAQA1RpaWs5lPTWRHwlMnBErL0SgMkUS4FBy8I1sSzchagqfTdzYCCjm8 T6Qn9Ts41fAw+EWr1NsR0G9fcphI4bwItHeyALA9NwEK1U3Bn+FY7x6ztlDwEHbq MzwZyR3zgLogfovx9onaDysbEENzdUdVT7CcPN142R38cptd5cQk0VP5an3FUIe7 XYU4C28EFI4ha1ICF3/Hmm8fQAzH3bsoDUekize0d+YXQonN3LibZSlbXUn18BhH qzuE9LyU5dX2omlPSlJ7QEXDUcDlmyZDx+kq0bO+2E/v3JLLWnFTxcn1/rlq4v31 MHbHgPLUlrdIUHOvuMEqZbzzVLeErebF -----END CERTIFICATE-----Generated at Thu Mar 26 08:55:04 2026 by rpki-client