$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/A6A53FA2D67E11EEAA2CA218C4F9AE02.roa File: A6A53FA2D67E11EEAA2CA218C4F9AE02.roa (raw, json) Hash identifier: BRmPmtc5QBOF2VogbiXT+Z/yISNL/WKoFANPMdmFsXw= Subject key identifier: 6E:65:B6:A2:3C:5D:5D:FC:A8:F8:45:B6:45:F9:5C:96:71:F0:6F:DB Certificate issuer: /CN=A91BC966/serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Certificate serial: 0CBA Authority key identifier: B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/A6A53FA2D67E11EEAA2CA218C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:34:38 +0000 ROA not before: Wed 28 Jan 2026 19:15:45 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 38565 IP address blocks: 36.252.0.0/15 maxlen: 23 36.253.19.0/24 maxlen: 24 36.253.24.0/24 maxlen: 24 36.253.26.0/24 maxlen: 24 43.243.96.0/22 maxlen: 24 49.126.0.0/16 maxlen: 20 103.38.196.0/22 maxlen: 24 116.68.208.0/21 maxlen: 24 2400:9500::/32 maxlen: 32 2400:9500:4000::/36 maxlen: 44 2400:9500:6000::/36 maxlen: 44 2400:9500:8000::/36 maxlen: 44 2400:9500:c000::/36 maxlen: 44 2400:9500:e000::/36 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3258 (0xcba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC966, serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Validity Not Before: Jan 28 19:15:45 2026 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a478ae-a8c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5b:6a:f5:17:0b:3b:75:c9:18:7e:ba:72:a8: 4e:9f:2f:b4:da:e6:14:d6:1c:46:48:b5:41:d6:ff: 60:e5:50:ca:82:14:18:87:91:a4:de:32:98:e5:19: 0e:4c:78:d1:24:ab:ea:a4:11:24:26:4a:dc:c0:bf: 65:dd:51:e7:7f:c0:72:c7:cf:c1:a8:b4:f8:4c:b6: 13:f3:fd:9a:fa:98:50:5e:67:c6:bd:c2:4c:28:d4: 21:2e:de:a6:44:f8:3b:ba:94:0b:36:63:8f:5a:65: 38:dc:3a:a7:3a:4e:09:72:64:21:2c:fd:23:80:55: 6c:04:9f:52:08:4d:69:27:73:67:83:cd:44:d8:a5: 45:2b:78:09:11:63:c6:c2:82:cb:43:81:f0:2c:3d: da:9b:d1:ec:93:95:14:d2:46:dc:20:c8:19:66:51: 3a:64:3a:4f:92:1f:d9:80:28:97:1f:be:48:01:2c: 8b:4e:51:1b:ff:2d:1e:38:dc:62:c1:bb:96:31:55: b2:68:b1:91:aa:06:2d:55:76:5a:6e:ad:d3:90:35: c0:e9:26:1a:27:a8:7f:91:3a:6c:b2:e1:f5:a5:3c: fe:a1:72:35:33:5f:52:c6:c7:0f:ae:18:fc:1f:2f: aa:dd:29:89:fb:37:68:92:ab:5a:8a:6c:41:57:3d: 78:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:65:B6:A2:3C:5D:5D:FC:A8:F8:45:B6:45:F9:5C:96:71:F0:6F:DB X509v3 Authority Key Identifier: keyid:B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/A6A53FA2D67E11EEAA2CA218C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.252.0.0/15 43.243.96.0/22 49.126.0.0/16 103.38.196.0/22 116.68.208.0/21 IPv6: 2400:9500::/32 Signature Algorithm: sha256WithRSAEncryption 80:bf:1a:87:91:cc:8d:e1:92:64:53:9e:55:f7:fd:5c:f8:be: 3a:ab:1f:11:73:a6:b3:74:d6:da:ca:7e:d5:e0:e1:85:ee:69: e4:ed:a9:3a:29:f4:cc:61:5d:70:8c:db:f1:de:f7:ca:9f:1b: 39:57:ec:78:a4:75:36:f4:81:8b:14:ad:f7:76:3b:bf:0d:96: be:79:06:b6:16:d3:34:9b:1b:40:20:fc:07:17:a2:84:07:37: 96:05:5f:3c:14:bf:18:eb:22:4e:6f:61:a4:7a:71:6b:9a:52: 7b:ee:fa:6f:e2:4f:11:0d:d0:01:0c:f2:76:c8:41:cb:27:6f: 60:2a:d9:9d:e6:c9:9c:00:b0:ee:4e:4f:db:3b:d9:54:e7:ca: 18:99:d0:bb:80:50:0a:af:f6:e3:a3:02:0e:cf:b6:fe:4f:1e: ef:f2:61:b1:32:87:80:69:02:7e:94:6f:ad:83:47:d4:19:40: ed:b8:d9:ea:97:90:a2:1f:73:20:c1:d2:29:c8:8b:e7:25:ae: ed:fc:56:a0:90:84:9d:94:1d:31:1d:5f:0f:02:57:ed:f6:81: 68:2a:07:ee:7a:76:20:9d:7b:23:d0:48:5b:b6:79:63:c8:a6: 8f:ac:94:1a:d4:ca:21:89:94:c5:cf:ec:1f:3c:f1:6d:7b:37: 6d:d1:7c:3c -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgICDLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM5NjYxMTAvBgNVBAUTKEIyQTI1RERFMUE5RUM5MUI1OTk4NkE1MzJGNzg4MzU0 MzYxODMyNDgwHhcNMjYwMTI4MTkxNTQ1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzhhZS1hOGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlltq9RcLO3XJGH66cqhOny+02uYU1hxGSLVB1v9g5VDKghQYh5Gk3jKY5RkO THjRJKvqpBEkJkrcwL9l3VHnf8Byx8/BqLT4TLYT8/2a+phQXmfGvcJMKNQhLt6m RPg7upQLNmOPWmU43DqnOk4JcmQhLP0jgFVsBJ9SCE1pJ3Nng81E2KVFK3gJEWPG woLLQ4HwLD3am9Hsk5UU0kbcIMgZZlE6ZDpPkh/ZgCiXH75IASyLTlEb/y0eONxi wbuWMVWyaLGRqgYtVXZabq3TkDXA6SYaJ6h/kTpssuH1pTz+oXI1M19SxscPrhj8 Hy+q3SmJ+zdokqtaimxBVz14jwIDAQABo4IChTCCAoEwHQYDVR0OBBYEFG5ltqI8 XV38qPhFtkX5XJZx8G/bMB8GA1UdIwQYMBaAFLKiXd4anskbWZhqUy94g1Q2GDJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzk2Ni9BMTk1MkJBMjFD MTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlSdFptR3BUTDNpRFZEWVlN a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxSmQzaHFleVJ0Wm1HcFRMM2lEVkRZWU1rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkM5NjYvQTE5NTJCQTIxQzExMTFFQUI2QzNDNzZEQzRGOUFFMDIvQTZBNTNGQTJE NjdFMTFFRUFBMkNBMjE4QzRGOUFFMDIucm9hMEQGCCsGAQUFBwEHAQH/BDUwMzAi BAIAATAcAwMBJPwDBAIr82ADAwAxfgMEAmcmxAMEA3RE0DANBAIAAjAHAwUAJACV ADANBgkqhkiG9w0BAQsFAAOCAQEAgL8ah5HMjeGSZFOeVff9XPi+OqsfEXOms3TW 2sp+1eDhhe5p5O2pOin0zGFdcIzb8d73yp8bOVfseKR1NvSBixSt93Y7vw2WvnkG thbTNJsbQCD8BxeihAc3lgVfPBS/GOsiTm9hpHpxa5pSe+76b+JPEQ3QAQzydshB yydvYCrZnebJnACw7k5P2zvZVOfKGJnQu4BQCq/246MCDs+2/k8e7/JhsTKHgGkC fpRvrYNH1BlA7bjZ6peQoh9zIMHSKciL5yWu7fxWoJCEnZQdMR1fDwJX7faBaCoH 7np2IJ17I9BIW7Z5Y8imj6yUGtTKIYmUxc/sHzzxbXs3bdF8PA== -----END CERTIFICATE-----Generated at Thu Mar 26 09:03:12 2026 by rpki-client