$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/140A3D0CEECC11EF9AF7B312C4F9AE02.roa File: 140A3D0CEECC11EF9AF7B312C4F9AE02.roa (raw, json) Hash identifier: iGulr4A6Fp6flltB+Fp6YRYx5qoR/G6atojHUZmLQUg= Subject key identifier: 25:63:2B:29:79:DB:1C:58:33:D3:C9:8B:0E:E7:93:83:54:87:34:5A Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6C62 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/140A3D0CEECC11EF9AF7B312C4F9AE02.roa Signing time: Fri 24 Apr 2026 04:55:21 +0000 ROA not before: Fri 24 Apr 2026 04:55:21 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 131423 IP address blocks: 42.96.16.0/20 maxlen: 24 45.119.212.0/22 maxlen: 24 103.2.224.0/22 maxlen: 24 103.48.84.0/22 maxlen: 24 103.48.192.0/22 maxlen: 24 2403:bf40:100::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:34:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27746 (0x6c62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Apr 24 04:55:21 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69eaf7b9-e49b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a3:5d:5f:9b:2f:4b:e4:fd:01:bb:cf:cb:8f: 74:84:09:f7:63:51:e9:7d:fa:7c:d3:32:a7:70:d3: b8:c7:b2:ca:c7:ee:ed:e7:99:f0:9f:bf:35:49:03: d2:ca:a9:a1:64:51:ea:9f:2f:67:9c:72:ca:df:5f: 63:fd:6e:cc:ee:97:02:f4:07:e9:6c:cd:28:af:40: 72:89:71:a0:34:a8:6d:d2:a7:6a:6d:59:1c:33:6d: 65:7d:ba:ea:d9:d9:55:b6:63:73:f6:8f:a9:f4:5c: da:f8:bc:8e:16:a2:44:a2:60:4a:c3:51:34:f1:73: 67:53:f8:d5:16:3f:e6:2e:d6:16:38:c1:ba:fa:b0: 57:f0:d9:20:d8:f4:fc:5c:af:25:8e:8f:40:02:d9: 62:40:ba:cd:5e:76:72:8c:54:11:47:a9:00:4c:7c: 83:bd:38:4b:76:ee:00:46:73:91:be:35:11:45:7c: ca:c6:ef:89:8a:ff:5a:5f:92:15:31:7c:de:ab:e3: 23:bd:28:ea:dc:ff:61:28:a6:5a:97:18:d0:fc:2d: a8:0d:ac:19:7a:d1:da:fd:94:c6:0b:0e:fe:04:ca: 7d:d4:d9:1e:71:60:a7:a7:2a:92:8d:08:3f:ab:06: f3:6e:de:07:60:ac:e2:66:f8:f5:c8:b1:38:db:04: 45:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:63:2B:29:79:DB:1C:58:33:D3:C9:8B:0E:E7:93:83:54:87:34:5A X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/140A3D0CEECC11EF9AF7B312C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 42.96.16.0/20 45.119.212.0/22 103.2.224.0/22 103.48.84.0/22 103.48.192.0/22 IPv6: 2403:bf40:100::/42 Signature Algorithm: sha256WithRSAEncryption 5c:ab:08:f2:80:36:5e:32:1d:90:19:dc:9c:f4:cd:53:4a:12: 9a:37:19:a5:52:25:74:ef:ad:97:44:2e:f9:16:a5:09:36:79: ff:df:dc:8a:c6:67:65:9d:1f:fb:d3:8b:83:8b:d4:1f:17:9e: ce:6c:4a:fe:d8:c5:eb:14:45:65:28:5a:83:28:2c:a2:60:38: 3d:cb:34:c3:17:67:70:17:6f:a7:c9:3e:79:16:51:7a:74:34: 0a:04:8e:97:6a:57:4e:ea:f2:3f:25:7a:58:74:a3:5e:5b:83: 08:83:57:5c:c7:f4:1a:f6:72:ff:c9:b9:00:d7:2a:0a:26:c5: 1d:6c:c1:f4:1a:26:06:43:4c:01:bf:65:a6:bf:a3:76:4d:a8: 09:40:fa:7e:23:3d:e2:79:9f:54:89:96:01:d3:ae:c1:31:65: 9d:70:f7:74:70:27:2c:79:53:aa:3f:92:69:d1:22:71:c0:f3: 77:be:b6:b1:f0:92:1a:8b:1b:76:b6:c1:aa:fe:d1:7f:94:fd: 22:a0:14:b8:10:79:26:80:81:71:ff:89:f3:47:12:98:6c:45: 6a:b8:85:65:b7:25:d0:9b:7b:a2:b5:c5:a1:92:69:88:8d:c9: e6:31:9c:5e:54:3a:7b:d9:43:9d:91:bc:5b:e7:f0:e3:d5:ad: 8b:45:7e:33 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgICbGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYwNDI0MDQ1NTIxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWVhZjdiOS1lNDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmqNdX5svS+T9AbvPy490hAn3Y1Hpffp80zKncNO4x7LKx+7t55nwn781SQPS yqmhZFHqny9nnHLK319j/W7M7pcC9AfpbM0or0ByiXGgNKht0qdqbVkcM21lfbrq 2dlVtmNz9o+p9Fza+LyOFqJEomBKw1E08XNnU/jVFj/mLtYWOMG6+rBX8Nkg2PT8 XK8ljo9AAtliQLrNXnZyjFQRR6kATHyDvThLdu4ARnORvjURRXzKxu+Jiv9aX5IV MXzeq+MjvSjq3P9hKKZalxjQ/C2oDawZetHa/ZTGCw7+BMp91NkecWCnpyqSjQg/ qwbzbt4HYKziZvj1yLE42wRFuwIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFCVjKyl5 2xxYM9PJiw7nk4NUhzRaMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMTQwQTNEMENF RUNDMTFFRjlBRjdCMzEyQzRGOUFFMDIucm9hMEgGCCsGAQUFBwEHAQH/BDkwNzAk BAIAATAeAwQEKmAQAwQCLXfUAwQCZwLgAwQCZzBUAwQCZzDAMA8EAgACMAkDBwYk A79AAQAwDQYJKoZIhvcNAQELBQADggEBAFyrCPKANl4yHZAZ3Jz0zVNKEpo3GaVS JXTvrZdELvkWpQk2ef/f3IrGZ2WdH/vTi4OL1B8Xns5sSv7YxesURWUoWoMoLKJg OD3LNMMXZ3AXb6fJPnkWUXp0NAoEjpdqV07q8j8lelh0o15bgwiDV1zH9Br2cv/J uQDXKgomxR1swfQaJgZDTAG/Zaa/o3ZNqAlA+n4jPeJ5n1SJlgHTrsExZZ1w93Rw Jyx5U6o/kmnRInHA83e+trHwkhqLG3a2war+0X+U/SKgFLgQeSaAgXH/ifNHEphs RWq4hWW3JdCbe6K1xaGSaYiNyeYxnF5UOnvZQ52RvFvn8OPVrYtFfjM= -----END CERTIFICATE-----Generated at Wed May 13 09:46:10 2026 by rpki-client