$ rpki-client -vvf rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/538866F6E44B11EAA31DD984C4F9AE02.roa File: 538866F6E44B11EAA31DD984C4F9AE02.roa (raw, json) Hash identifier: a1CNS+aw2qVdCSuRRm//a5IPz4YXPjTaG+Ec6by8sVk= Subject key identifier: CA:6C:0D:28:31:1F:76:9F:ED:DF:A2:21:B3:3E:68:29:56:03:CD:0D Certificate issuer: /CN=A91936BE/serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A Certificate serial: 08AB Authority key identifier: 80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/538866F6E44B11EAA31DD984C4F9AE02.roa Signing time: Mon 02 Mar 2026 04:42:27 +0000 ROA not before: Tue 04 Nov 2025 21:10:15 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 24183 IP address blocks: 45.125.168.0/22 maxlen: 22 103.226.32.0/22 maxlen: 22 103.226.32.0/23 maxlen: 23 103.226.34.0/24 maxlen: 24 103.226.35.0/24 maxlen: 24 202.20.0.0/21 maxlen: 21 202.68.80.0/20 maxlen: 20 202.174.176.0/20 maxlen: 20 202.174.176.0/23 maxlen: 23 2402:9e00::/32 maxlen: 32 2402:9e00:400::/48 maxlen: 48 2402:9e00:401::/48 maxlen: 48 2402:9e00:402::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:19:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2219 (0x8ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91936BE, serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A Validity Not Before: Nov 4 21:10:15 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a51533-5f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b9:a6:93:a6:f4:0d:62:ad:4a:b4:39:bf:0e: a9:a3:da:e4:22:f5:da:a1:50:25:d7:4e:36:6c:c3: 38:e8:48:94:d3:bf:8a:44:7e:9d:f6:6f:03:29:6c: d4:4e:1b:23:e2:9f:c7:68:2a:a2:62:2f:30:2b:9e: 92:c6:af:86:6f:78:1e:5d:1f:de:19:de:24:9a:e3: 67:ab:78:00:88:3a:99:8d:f9:55:10:fb:53:c7:51: 91:79:b6:3d:4c:a0:6b:28:19:0f:a3:dd:9f:60:65: 0e:cf:d9:68:f8:e9:61:97:7e:78:d1:f5:06:40:4c: dc:d7:8a:ee:5a:0c:ce:59:7a:de:d8:fa:9a:47:d1: 92:bc:3c:84:88:74:1b:25:92:90:d3:72:1f:ca:1b: 63:ac:9d:54:60:16:ce:b8:95:e5:f0:d2:ee:02:7b: ed:f7:a1:50:3d:44:2f:39:0c:70:2a:7e:87:63:a6: 44:0b:e6:de:4a:58:65:87:9d:64:cf:16:2a:14:5f: aa:52:2e:fb:d5:1d:3e:72:9a:28:ee:8e:f1:5a:fc: c8:75:c6:9c:5d:7e:a8:55:0b:02:65:40:24:8c:af: 31:07:12:4b:86:fa:85:71:0e:cb:07:bb:3e:fb:1b: 85:5a:dc:ea:28:70:33:68:ec:71:b9:26:5d:a2:13: 5d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:6C:0D:28:31:1F:76:9F:ED:DF:A2:21:B3:3E:68:29:56:03:CD:0D X509v3 Authority Key Identifier: keyid:80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/538866F6E44B11EAA31DD984C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.125.168.0/22 103.226.32.0/22 202.20.0.0/21 202.68.80.0/20 202.174.176.0/20 IPv6: 2402:9e00::/32 Signature Algorithm: sha256WithRSAEncryption b7:cf:9d:71:32:c4:55:8a:49:8a:64:b9:56:73:a7:a9:bb:c6: 30:d9:69:55:05:95:7a:9f:5c:69:17:5a:56:f8:d4:45:5b:73: 78:c5:12:ef:19:1c:77:93:9a:42:f1:fb:b9:63:2c:06:a4:29: e5:37:5a:f8:6a:e7:12:16:6c:d7:45:c1:a8:7d:0a:fd:e4:ac: a4:65:f5:d9:fb:98:6e:ea:37:64:50:aa:4c:e2:c0:4f:03:09: b8:f3:1d:0e:c1:1a:2a:d6:9f:ee:36:a1:d3:d4:eb:d5:57:71: 63:97:62:2c:32:1f:be:a0:e6:32:b7:7c:b1:21:cb:36:ef:45: a6:ae:15:cd:66:ad:6c:38:02:00:e4:ff:fe:b5:bb:50:ce:e5: fd:44:bd:b5:15:50:53:4b:36:9b:43:9b:2c:75:fe:df:69:fe: db:c4:f7:08:1f:ba:68:16:79:ae:d7:21:49:bb:12:0a:0f:66: 8c:df:7a:9a:bd:11:96:85:15:e4:a8:19:de:31:b5:b0:a6:35: b9:bc:55:ce:42:ab:dc:3b:f4:de:c1:05:1e:92:e5:cd:07:54: 7b:7c:33:03:02:5f:30:0d:3e:7b:10:d4:3f:4b:c9:62:f6:a5: d5:e3:8c:1d:1c:c9:92:44:0b:ad:b4:bf:7d:b0:1a:7a:d0:64: ba:ed:0f:f6 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgICCKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM2QkUxMTAvBgNVBAUTKDgwMjFCMTZCOTI0MjFGNzdCNzI2MEU5N0U2QUQ4QzFE MjRCRDI5OUEwHhcNMjUxMTA0MjExMDE1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1MTUzMy01ZjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurmmk6b0DWKtSrQ5vw6po9rkIvXaoVAl1042bMM46EiU07+KRH6d9m8DKWzU Thsj4p/HaCqiYi8wK56Sxq+Gb3geXR/eGd4kmuNnq3gAiDqZjflVEPtTx1GRebY9 TKBrKBkPo92fYGUOz9lo+Olhl3540fUGQEzc14ruWgzOWXre2PqaR9GSvDyEiHQb JZKQ03IfyhtjrJ1UYBbOuJXl8NLuAnvt96FQPUQvOQxwKn6HY6ZEC+beSlhlh51k zxYqFF+qUi771R0+cpoo7o7xWvzIdcacXX6oVQsCZUAkjK8xBxJLhvqFcQ7LB7s+ +xuFWtzqKHAzaOxxuSZdohNd8wIDAQABo4IChzCCAoMwHQYDVR0OBBYEFMpsDSgx H3af7d+iIbM+aClWA80NMB8GA1UdIwQYMBaAFIAhsWuSQh93tyYOl+atjB0kvSma MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzZCRS9DQTA2NjY4Q0U0 NDgxMUVBODEwQjAzODBDNEY5QUUwMi9nQ0d4YTVKQ0gzZTNKZzZYNXEyTUhTUzlL Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDR3hhNUpDSDNlM0pnNlg1cTJNSFNTOUtaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTM2QkUvQ0EwNjY2OENFNDQ4MTFFQTgxMEIwMzgwQzRGOUFFMDIvNTM4ODY2RjZF NDRCMTFFQUEzMUREOTg0QzRGOUFFMDIucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAk BAIAATAeAwQCLX2oAwQCZ+IgAwQDyhQAAwQEykRQAwQEyq6wMA0EAgACMAcDBQAk Ap4AMA0GCSqGSIb3DQEBCwUAA4IBAQC3z51xMsRVikmKZLlWc6epu8Yw2WlVBZV6 n1xpF1pW+NRFW3N4xRLvGRx3k5pC8fu5YywGpCnlN1r4aucSFmzXRcGofQr95Kyk ZfXZ+5hu6jdkUKpM4sBPAwm48x0OwRoq1p/uNqHT1OvVV3Fjl2IsMh++oOYyt3yx Ics270WmrhXNZq1sOAIA5P/+tbtQzuX9RL21FVBTSzabQ5ssdf7faf7bxPcIH7po Fnmu1yFJuxIKD2aM33qavRGWhRXkqBneMbWwpjW5vFXOQqvcO/TewQUekuXNB1R7 fDMDAl8wDT57ENQ/S8li9qXV44wdHMmSRAuttL99sBp60GS67Q/2 -----END CERTIFICATE-----Generated at Thu Mar 26 15:08:00 2026 by rpki-client