$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/E6EB68347F4F11EDBD813D85C4F9AE02.roa File: E6EB68347F4F11EDBD813D85C4F9AE02.roa (raw, json) Hash identifier: l8Cn707HnZZXGvH6lMNg8CFMv+Nat+iUyjqMlGj3kZg= Subject key identifier: 97:44:13:9E:42:7E:53:84:47:01:16:DE:85:72:8E:FE:D4:C4:69:16 Certificate issuer: /CN=A91A3E3F/serialNumber=59DDC3969B9863CFB5A15528AA4A391AF2337F43 Certificate serial: 0285 Authority key identifier: 59:DD:C3:96:9B:98:63:CF:B5:A1:55:28:AA:4A:39:1A:F2:33:7F:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/E6EB68347F4F11EDBD813D85C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:16:07 +0000 ROA not before: Wed 17 Dec 2025 02:21:21 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 8075 IP address blocks: 111.221.16.0/21 maxlen: 21 111.221.24.0/22 maxlen: 22 111.221.29.0/24 maxlen: 24 111.221.30.0/23 maxlen: 23 111.221.64.0/18 maxlen: 24 202.89.224.0/21 maxlen: 24 2001:df0:7::/48 maxlen: 48 2001:df0:d7::/48 maxlen: 48 2001:df0:d8::/48 maxlen: 48 2001:df0:d9::/48 maxlen: 48 2404:f800::/32 maxlen: 32 2404:f801:8030::/48 maxlen: 48 2404:f802::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 645 (0x285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3E3F, serialNumber=59DDC3969B9863CFB5A15528AA4A391AF2337F43 Validity Not Before: Dec 17 02:21:21 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a46647-bf94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d2:c9:17:ed:71:41:5b:bb:1d:f2:3a:63:c9: 0d:e5:69:e6:36:2f:85:d5:ed:b5:7a:1c:cd:17:4c: 4a:79:20:b4:ae:d5:af:85:95:d8:fe:e4:00:9d:2c: 86:53:92:4d:4e:ca:52:16:21:1f:61:b9:ae:5b:0a: 6a:5b:c3:3f:73:d9:e6:5a:a4:c6:da:18:b8:28:cf: 4b:07:c8:91:71:64:1b:0c:bb:31:20:ce:ab:3a:85: fb:20:15:8d:89:4a:e8:da:27:4b:b2:7a:8e:b9:b7: e0:e0:1d:3a:4b:d1:c5:c0:f8:0b:ff:6f:d4:de:69: 93:64:ae:3c:f2:3e:f6:64:fb:ac:f4:61:0a:c5:24: e7:ae:59:a4:1f:08:5f:0f:20:2b:64:b5:b4:3c:49: 99:71:e5:ac:a5:c5:e7:91:f6:58:b6:7b:5d:d8:69: 9b:8c:6a:dc:9d:ed:c9:61:99:98:b9:f8:ad:b3:9b: 12:b7:68:40:41:dc:cb:e4:f4:e4:65:f0:ef:66:e9: ca:50:ea:d5:75:06:5d:0d:fa:fa:51:b8:84:52:70: bf:c5:ac:08:b2:92:4d:eb:e8:7f:35:28:d2:72:5e: ef:d2:4d:67:1e:4d:f3:48:e4:89:9c:db:31:6d:d0: 10:3b:ff:31:a2:ba:e2:51:c9:3a:f0:1e:c0:8b:57: fe:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:44:13:9E:42:7E:53:84:47:01:16:DE:85:72:8E:FE:D4:C4:69:16 X509v3 Authority Key Identifier: keyid:59:DD:C3:96:9B:98:63:CF:B5:A1:55:28:AA:4A:39:1A:F2:33:7F:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/E6EB68347F4F11EDBD813D85C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 111.221.16.0-111.221.27.255 111.221.29.0-111.221.31.255 111.221.64.0/18 202.89.224.0/21 IPv6: 2001:df0:7::/48 2001:df0:d7::-2001:df0:d9:ffff:ffff:ffff:ffff:ffff 2404:f800::/32 2404:f801:8030::/48 2404:f802::/31 Signature Algorithm: sha256WithRSAEncryption 04:37:77:5a:8f:fb:12:c2:a3:77:19:05:93:aa:20:47:f9:66: fb:32:26:cd:a0:66:b7:81:00:bc:ca:9f:55:45:4b:58:a0:a8: f1:73:ed:ad:c1:c3:8d:56:65:f2:2e:07:0b:f5:7c:46:ad:d7: e3:10:fa:81:d2:eb:55:e3:ce:3a:91:5d:26:79:1d:d9:18:3f: e4:f9:98:a4:d4:a6:c0:53:ee:22:47:a5:1f:59:eb:31:76:57: 6a:b5:72:7d:b9:21:55:ff:c7:6c:7b:bd:46:70:fd:8b:2e:2b: 97:c3:bf:b3:8c:09:0c:e3:50:89:8e:36:1e:ba:47:76:de:80: d0:cd:35:e0:02:dd:7c:be:90:f4:21:38:9d:e4:e8:05:8b:3c: c5:f0:65:0a:ed:c3:61:c2:e3:eb:b8:8f:07:4c:b2:96:6e:0a: eb:f9:99:e1:38:bf:66:33:90:0e:e0:22:c7:58:0c:a9:09:f7: 6e:4d:dd:e8:d1:dd:79:82:4e:4e:fc:02:48:31:7f:93:86:43: 97:31:f3:64:c0:c7:37:68:2e:fa:1b:f9:f1:5f:d5:96:1d:36: db:5e:26:1e:74:a4:77:82:42:5d:b6:8f:7f:18:61:cb:7a:41: 78:76:7a:62:f4:de:e4:77:6d:10:66:33:38:97:98:6b:d2:ea: d3:8a:a8:2e -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNFM0YxMTAvBgNVBAUTKDU5RERDMzk2OUI5ODYzQ0ZCNUExNTUyOEFBNEEzOTFB RjIzMzdGNDMwHhcNMjUxMjE3MDIyMTIxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjY0Ny1iZjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9LJF+1xQVu7HfI6Y8kN5WnmNi+F1e21ehzNF0xKeSC0rtWvhZXY/uQAnSyG U5JNTspSFiEfYbmuWwpqW8M/c9nmWqTG2hi4KM9LB8iRcWQbDLsxIM6rOoX7IBWN iUro2idLsnqOubfg4B06S9HFwPgL/2/U3mmTZK488j72ZPus9GEKxSTnrlmkHwhf DyArZLW0PEmZceWspcXnkfZYtntd2GmbjGrcne3JYZmYufits5sSt2hAQdzL5PTk ZfDvZunKUOrVdQZdDfr6UbiEUnC/xawIspJN6+h/NSjScl7v0k1nHk3zSOSJnNsx bdAQO/8xorriUck68B7Ai1f+WQIDAQABo4ICvjCCArowHQYDVR0OBBYEFJdEE55C flOERwEW3oVyjv7UxGkWMB8GA1UdIwQYMBaAFFndw5abmGPPtaFVKKpKORryM39D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0UzRi9GQkRGRkVDMDc2 ODYxMUVEQTZDQjNGNDFDNEY5QUUwMi9XZDNEbHB1WVk4LTFvVlVvcWtvNUd2SXpm ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dkM0RscHVZWTgtMW9WVW9xa281R3ZJemYwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTNFM0YvRkJERkZFQzA3Njg2MTFFREE2Q0IzRjQxQzRGOUFFMDIvRTZFQjY4MzQ3 RjRGMTFFREJEODEzRDg1QzRGOUFFMDIucm9hMH0GCCsGAQUFBwEHAQH/BG4wbDAu BAIAATAoMAwDBARv3RADBAJv3RgwDAMEAG/dHQMEBW/dAAMEBm/dQAMEA8pZ4DA6 BAIAAjA0AwcAIAEN8AAHMBIDBwAgAQ3wANcDBwEgAQ3wANgDBQAkBPgAAwcAJAT4 AYAwAwUBJAT4AjANBgkqhkiG9w0BAQsFAAOCAQEABDd3Wo/7EsKjdxkFk6ogR/lm +zImzaBmt4EAvMqfVUVLWKCo8XPtrcHDjVZl8i4HC/V8Rq3X4xD6gdLrVePOOpFd Jnkd2Rg/5PmYpNSmwFPuIkelH1nrMXZXarVyfbkhVf/HbHu9RnD9iy4rl8O/s4wJ DONQiY42HrpHdt6A0M014ALdfL6Q9CE4neToBYs8xfBlCu3DYcLj67iPB0yylm4K 6/mZ4Ti/ZjOQDuAix1gMqQn3bk3d6NHdeYJOTvwCSDF/k4ZDlzHzZMDHN2gu+hv5 8V/Vlh02214mHnSkd4JCXbaPfxhhy3pBeHZ6YvTe5HdtEGYzOJeYa9Lq04qoLg== -----END CERTIFICATE-----Generated at Thu Mar 26 10:12:43 2026 by rpki-client