$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/C98708BE477711EBB4044E31C4F9AE02.roa File: C98708BE477711EBB4044E31C4F9AE02.roa (raw, json) Hash identifier: Bq4dDyNuryVKgCHn3kt6G7S6oGEDro1j46GJUBDoNaA= Subject key identifier: 15:B4:B8:A2:C9:F7:58:27:AE:B6:F4:8F:44:A2:9E:12:2C:4C:AD:01 Certificate issuer: /CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234 Certificate serial: 1C2A Authority key identifier: AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/C98708BE477711EBB4044E31C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:54:59 +0000 ROA not before: Mon 02 Feb 2026 16:13:53 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 24220 IP address blocks: 116.66.160.0/20 maxlen: 20 116.66.160.0/20 maxlen: 24 116.66.160.0/23 maxlen: 24 116.66.162.0/23 maxlen: 24 116.66.164.0/22 maxlen: 24 116.66.168.0/23 maxlen: 24 116.66.170.0/23 maxlen: 24 116.66.172.0/23 maxlen: 24 116.66.174.0/23 maxlen: 24 2402:d800::/32 maxlen: 33 2402:d800::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7210 (0x1c2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAEDC, serialNumber=AD059592223E816AC53C433B965846F79D305234 Validity Not Before: Feb 2 16:13:53 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a46152-17e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c8:3c:95:b1:44:e8:8c:f0:fe:f8:78:0b:92: 35:4e:75:77:aa:22:58:93:7c:6c:45:9f:d0:72:ef: c8:83:5b:6c:13:b5:07:e9:8d:e0:99:a6:f7:fb:a8: f6:aa:5f:0c:30:13:ea:1b:ac:6f:b6:dc:cd:eb:ff: 4d:68:46:69:dd:63:d4:1a:26:f1:5d:e7:29:cd:ce: cb:51:4d:ca:7c:a3:b9:b9:de:f9:83:74:86:e0:38: f4:1f:78:64:ae:97:12:86:13:06:27:fb:6c:a1:b6: fd:5b:cf:0d:2a:b1:be:c3:fc:bc:a6:fb:53:a8:af: 80:c4:4c:75:35:25:18:2b:26:28:f8:fc:a1:62:c8: b5:5f:e1:ac:94:af:cb:e9:7c:9f:49:ed:c8:2f:62: d2:c3:33:1b:ab:1b:d3:84:32:8e:22:db:b7:f7:d9: c0:23:52:e9:8c:8a:e0:32:0d:33:8e:4e:01:3d:d7: e1:6a:7d:63:63:d1:b2:7c:4c:d9:d0:0c:78:18:f1: 9f:ff:c0:f2:37:b1:23:d7:a3:ef:f8:30:a2:86:e2: 8d:e1:93:64:90:ac:e1:62:a5:ab:91:8f:d6:75:4e: a0:12:f3:6c:8f:5a:42:44:41:a1:7e:0c:e2:9c:08: e0:ea:2d:87:b6:de:5f:2a:ae:a3:1a:31:58:c9:f4: 2e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B4:B8:A2:C9:F7:58:27:AE:B6:F4:8F:44:A2:9E:12:2C:4C:AD:01 X509v3 Authority Key Identifier: keyid:AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/C98708BE477711EBB4044E31C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 116.66.160.0/20 IPv6: 2402:d800::/32 Signature Algorithm: sha256WithRSAEncryption 01:a9:39:68:52:3f:5c:28:86:4a:7b:5d:ee:b5:1d:a6:95:a4: 06:e8:76:78:c8:8e:0f:89:97:72:ef:2b:9a:b3:76:bd:13:22: 66:36:58:b1:6e:d5:d2:fe:35:31:f3:fb:0f:ee:8e:54:a2:80: 09:ea:2d:84:06:71:d4:ab:52:11:e6:5b:39:8d:f7:ce:e2:52: 7d:ae:83:c0:4b:a3:94:df:fe:78:9a:4b:a2:24:e8:90:dd:b6: 9a:70:9f:47:91:24:20:07:46:d5:68:0b:51:15:cc:62:9b:f6: e7:63:08:ff:04:4a:e7:8c:2a:4d:12:51:be:8e:92:cc:f0:55: dc:08:12:b7:a0:22:97:57:ce:9b:ae:ac:72:26:b5:02:21:e4: 56:54:ff:57:7b:1f:ac:10:30:db:ae:4d:f5:63:d2:fd:e1:4a: 0f:6b:4c:2e:11:d8:65:5b:76:5c:08:fe:9a:98:f2:9d:d3:09: a7:10:7f:c6:36:9d:9a:49:e5:b9:4d:a7:40:d4:4e:74:88:38: 15:34:f6:fd:19:77:b0:b9:35:8e:ba:f4:df:10:e6:8e:7d:4d: 6f:1a:6e:a5:78:c1:37:b0:89:c7:a3:b5:a6:c8:60:b2:d4:50: 6b:e7:4c:3d:df:68:59:27:25:2c:f7:bf:64:a7:2b:ca:85:9e: f9:9d:20:ab -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICHCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFREMxMTAvBgNVBAUTKEFEMDU5NTkyMjIzRTgxNkFDNTNDNDMzQjk2NTg0NkY3 OUQzMDUyMzQwHhcNMjYwMjAyMTYxMzUzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjE1Mi0xN2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8g8lbFE6Izw/vh4C5I1TnV3qiJYk3xsRZ/Qcu/Ig1tsE7UH6Y3gmab3+6j2 ql8MMBPqG6xvttzN6/9NaEZp3WPUGibxXecpzc7LUU3KfKO5ud75g3SG4Dj0H3hk rpcShhMGJ/tsobb9W88NKrG+w/y8pvtTqK+AxEx1NSUYKyYo+PyhYsi1X+GslK/L 6XyfSe3IL2LSwzMbqxvThDKOItu399nAI1LpjIrgMg0zjk4BPdfhan1jY9GyfEzZ 0Ax4GPGf/8DyN7Ej16Pv+DCihuKN4ZNkkKzhYqWrkY/WdU6gEvNsj1pCREGhfgzi nAjg6i2Htt5fKq6jGjFYyfQu0wIDAQABo4ICbzCCAmswHQYDVR0OBBYEFBW0uKLJ 91gnrrb0j0SinhIsTK0BMB8GA1UdIwQYMBaAFK0FlZIiPoFqxTxDO5ZYRvedMFI0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUVEQy8yREMxQkFGMjA5 ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdXckZQRU03bGxoRzk1MHdV alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JRV1ZraUktZ1dyRlBFTTdsbGhHOTUwd1VqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkFFREMvMkRDMUJBRjIwOTg1MTFFN0IxRkZDMjNGQzRGOUFFMDIvQzk4NzA4QkU0 Nzc3MTFFQkI0MDQ0RTMxQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQEdEKgMA0EAgACMAcDBQAkAtgAMA0GCSqGSIb3DQEBCwUAA4IBAQAB qTloUj9cKIZKe13utR2mlaQG6HZ4yI4PiZdy7yuas3a9EyJmNlixbtXS/jUx8/sP 7o5UooAJ6i2EBnHUq1IR5ls5jffO4lJ9roPAS6OU3/54mkuiJOiQ3baacJ9HkSQg B0bVaAtRFcxim/bnYwj/BErnjCpNElG+jpLM8FXcCBK3oCKXV86brqxyJrUCIeRW VP9Xex+sEDDbrk31Y9L94UoPa0wuEdhlW3ZcCP6amPKd0wmnEH/GNp2aSeW5TadA 1E50iDgVNPb9GXewuTWOuvTfEOaOfU1vGm6leME3sInHo7WmyGCy1FBr50w932hZ JyUs979kpyvKhZ75nSCr -----END CERTIFICATE-----Generated at Thu Mar 26 04:05:28 2026 by rpki-client