$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/E3AAE94243B511EB8DA3F473C4F9AE02.roa File: E3AAE94243B511EB8DA3F473C4F9AE02.roa (raw, json) Hash identifier: i7X6zewMmXOfmuZsHLNceM/lQghxWwQZ7AxU0vSWV0M= Subject key identifier: F0:68:51:66:1D:3E:CB:C3:76:21:0A:75:70:05:86:94:4A:BF:90:7E Certificate issuer: /CN=A91AB20B/serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808 Certificate serial: 0883 Authority key identifier: 5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/E3AAE94243B511EB8DA3F473C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:28:52 +0000 ROA not before: Tue 02 Sep 2025 21:42:10 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 138655 IP address blocks: 110.93.226.0/24 maxlen: 24 110.93.227.0/24 maxlen: 24 119.63.138.0/24 maxlen: 24 119.63.139.0/24 maxlen: 24 221.132.118.0/24 maxlen: 24 221.132.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:46:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2179 (0x883) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB20B, serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808 Validity Not Before: Sep 2 21:42:10 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a47754-f0e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:34:4a:86:53:76:b1:c5:0f:df:6d:b0:ea:b9: 63:d8:93:bc:20:14:a5:19:5b:a2:23:5d:30:f9:26: d7:d8:6a:73:9f:26:54:45:82:18:31:d8:11:f4:92: b7:52:a8:e0:63:ba:cf:09:c3:e8:38:ad:77:8c:8a: 3d:59:67:42:e8:31:10:ac:9e:df:36:60:83:65:d9: 6a:ab:9a:b8:9d:ce:0f:5c:43:a7:ef:23:f0:40:ed: db:e3:78:dc:4d:31:07:82:58:f8:5c:0d:ac:23:2b: c4:a2:79:ec:9e:e6:3d:46:7c:9b:2b:84:dc:15:bc: 3b:7b:e1:b4:bd:2c:74:75:be:9f:c5:dc:9b:61:e8: f1:a8:39:f4:a4:93:8b:10:4b:6c:71:e1:d1:e7:26: ee:a2:8f:59:03:93:a5:a9:fe:68:8a:86:7f:21:cb: ca:c9:92:95:10:14:fa:3c:cd:74:89:9b:6d:8c:06: f9:2d:7b:e0:0e:46:2f:93:cd:9d:02:d4:97:5b:5b: 08:d6:cf:f9:87:73:0d:c9:77:75:2d:7a:94:4e:fe: fa:9e:84:3e:e5:d7:a0:a4:8f:d7:aa:37:19:b0:2d: 3d:56:b8:26:5e:01:82:10:60:e3:fd:08:31:65:94: 4f:81:0e:64:8b:f8:50:af:e6:8a:b4:5c:7e:e5:82: 0e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:68:51:66:1D:3E:CB:C3:76:21:0A:75:70:05:86:94:4A:BF:90:7E X509v3 Authority Key Identifier: keyid:5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/E3AAE94243B511EB8DA3F473C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 110.93.226.0/23 119.63.138.0/23 221.132.118.0/23 Signature Algorithm: sha256WithRSAEncryption 99:36:26:43:dc:38:42:82:33:b2:0d:1d:30:32:48:53:3d:a0: 5e:22:06:dd:b8:29:16:a4:d1:1e:a4:d0:f8:5f:ec:54:e6:41: f4:0a:c5:6f:8a:b0:f7:a4:c2:88:b9:4b:ce:e4:22:ef:54:d0: d4:72:2e:ec:94:6f:4d:95:76:df:0f:cd:2f:10:67:af:d9:40: af:ab:4e:67:15:63:bf:c9:e3:2a:31:0f:c2:6d:ae:af:d6:a7: e1:ed:1d:d8:4b:88:6c:00:22:44:a6:61:3d:2f:3f:58:f7:18: c2:d2:52:3b:71:ae:c9:db:f5:96:9d:7b:3d:93:af:40:18:e1: b3:09:04:ad:30:fb:46:bb:0c:20:02:4c:c1:6c:8b:4e:ba:36: 95:0d:2b:19:08:b7:db:7e:5b:ae:88:24:88:c1:e8:ce:48:99: 70:75:6e:af:b6:4e:1e:fb:76:21:55:98:3a:ec:93:3a:07:12: 2a:a0:ef:a5:8a:d9:d6:73:d5:38:4e:c5:b1:24:a9:34:0b:69: 54:87:41:12:95:55:c1:ae:26:ac:a8:60:9c:fa:70:3c:dd:07: 5a:af:83:87:44:45:e4:ae:8f:48:4f:d1:4a:cb:8d:27:67:c6: 9b:13:cf:0e:05:21:99:5b:99:e2:ac:7e:4c:77:17:c2:84:65: 48:78:cc:72 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICCIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIyMEIxMTAvBgNVBAUTKDVFQzFBNkFENzZBM0FCRkRDMUUxMzI5RUIyNjM3QzAx ODY0QjQ4MDgwHhcNMjUwOTAyMjE0MjEwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Nzc1NC1mMGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjDRKhlN2scUP322w6rlj2JO8IBSlGVuiI10w+SbX2GpznyZURYIYMdgR9JK3 UqjgY7rPCcPoOK13jIo9WWdC6DEQrJ7fNmCDZdlqq5q4nc4PXEOn7yPwQO3b43jc TTEHglj4XA2sIyvEonnsnuY9RnybK4TcFbw7e+G0vSx0db6fxdybYejxqDn0pJOL EEtsceHR5ybuoo9ZA5Olqf5oioZ/IcvKyZKVEBT6PM10iZttjAb5LXvgDkYvk82d AtSXW1sI1s/5h3MNyXd1LXqUTv76noQ+5degpI/XqjcZsC09VrgmXgGCEGDj/Qgx ZZRPgQ5ki/hQr+aKtFx+5YIOXQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFPBoUWYd PsvDdiEKdXAFhpRKv5B+MB8GA1UdIwQYMBaAFF7Bpq12o6v9weEynrJjfAGGS0gI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjIwQi9CQTcxQjY0ODEy MDMxMUVCQkFBMTk0MTRDNEY5QUUwMi9Yc0dtclhhanFfM0I0VEtlc21OOEFZWkxT QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hzR21yWGFqcV8zQjRUS2VzbU44QVlaTFNBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUIyMEIvQkE3MUI2NDgxMjAzMTFFQkJBQTE5NDE0QzRGOUFFMDIvRTNBQUU5NDI0 M0I1MTFFQjhEQTNGNDczQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQBbl3iAwQBdz+KAwQB3YR2MA0GCSqGSIb3DQEBCwUAA4IBAQCZNiZD 3DhCgjOyDR0wMkhTPaBeIgbduCkWpNEepND4X+xU5kH0CsVvirD3pMKIuUvO5CLv VNDUci7slG9NlXbfD80vEGev2UCvq05nFWO/yeMqMQ/Cba6v1qfh7R3YS4hsACJE pmE9Lz9Y9xjC0lI7ca7J2/WWnXs9k69AGOGzCQStMPtGuwwgAkzBbItOujaVDSsZ CLfbfluuiCSIwejOSJlwdW6vtk4e+3YhVZg67JM6BxIqoO+litnWc9U4TsWxJKk0 C2lUh0ESlVXBriasqGCc+nA83Qdar4OHREXkro9IT9FKy40nZ8abE88OBSGZW5ni rH5MdxfChGVIeMxy -----END CERTIFICATE-----Generated at Thu Mar 26 04:08:55 2026 by rpki-client