$ rpki-client -vvf rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/A264F35C8BAC11E7AFBAB71AC4F9AE02.roa File: A264F35C8BAC11E7AFBAB71AC4F9AE02.roa (raw, json) Hash identifier: SlJiezfKVA682d59XvPf2AbS2jgh+2UE1l8E3xESDCc= Subject key identifier: 57:C8:BE:14:62:0E:5B:A4:CB:64:DA:C9:A9:AF:F9:83:4D:BB:B6:42 Certificate issuer: /CN=A91C16B5/serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57 Certificate serial: 1E06 Authority key identifier: 47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/A264F35C8BAC11E7AFBAB71AC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:54:29 +0000 ROA not before: Sat 18 Oct 2025 16:54:12 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 41690 IP address blocks: 45.126.164.0/22 maxlen: 24 103.195.32.0/22 maxlen: 24 2401:af40::/32 maxlen: 32 2401:af40::/48 maxlen: 48 2401:af40:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7686 (0x1e06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C16B5, serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57 Validity Not Before: Oct 18 16:54:12 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a46135-ffcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:48:fb:2a:9c:79:36:d0:bc:15:11:03:14:41: 88:bc:89:10:90:2d:a9:f8:19:00:7e:89:7b:41:9e: f5:95:60:14:cf:cd:aa:fd:86:1d:b1:70:1d:f9:36: 46:8a:6a:e0:7e:72:d0:33:f3:53:c5:83:d6:42:45: 33:69:9e:ec:f9:a8:a0:de:26:67:1d:8a:a7:09:a8: f6:69:32:6d:49:77:85:0f:fb:85:47:2a:ad:be:fd: 2c:fd:a1:98:47:25:01:72:35:e7:21:21:af:90:2f: 84:5d:96:22:a6:31:34:2b:c4:a5:11:bd:dc:ed:77: 7a:0a:84:30:04:0a:5e:c8:8d:c2:bb:fc:b2:80:4f: 09:c8:5c:1d:36:12:25:da:42:6c:01:b7:f0:47:5c: 69:55:03:f2:23:60:e8:16:1b:ca:58:b1:41:35:00: c7:8b:00:d1:3c:8c:a4:28:18:05:d5:e1:7a:c9:1c: 82:94:09:18:ae:20:85:a9:a8:98:79:5c:7f:db:1c: 91:2d:c1:c8:ab:42:bf:5b:fc:3a:c3:02:a2:75:d7: 0b:ba:16:b0:90:f5:b5:e7:0a:f1:ee:fd:2e:60:77: 13:82:d8:af:bd:7d:ca:87:9c:e3:71:7f:60:ec:ba: eb:ca:6e:fa:1a:ee:33:e6:47:4b:24:6e:65:36:90: 09:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C8:BE:14:62:0E:5B:A4:CB:64:DA:C9:A9:AF:F9:83:4D:BB:B6:42 X509v3 Authority Key Identifier: keyid:47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/A264F35C8BAC11E7AFBAB71AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.126.164.0/22 103.195.32.0/22 IPv6: 2401:af40::/32 Signature Algorithm: sha256WithRSAEncryption 00:27:2d:d7:8a:83:8c:f8:b3:8d:09:07:03:65:22:67:81:a4: 09:2d:f1:71:03:d5:21:da:18:f6:54:3e:4b:12:66:a0:1b:ab: 13:33:e9:8c:51:f2:f4:23:1e:72:ab:0c:9c:e5:47:3d:ec:2d: bc:a9:bf:4f:92:07:f2:2c:33:c5:66:2f:c7:34:20:5d:b5:b1: a7:bc:8e:34:e0:7e:a2:ab:08:f0:fc:f9:81:e2:0f:fd:8d:0e: d2:03:08:ed:cd:a6:01:ed:ba:3d:4b:54:fc:e3:f6:11:af:9a: 33:e6:79:98:f5:c5:05:a1:41:75:42:05:b6:19:a5:52:2f:ed: 1b:db:55:d9:91:f0:a2:14:74:de:f0:f4:84:c6:44:08:3f:7f: 40:dc:e9:50:be:7f:01:55:be:35:f7:49:e7:70:51:58:f2:bc: f3:d4:9a:9a:3c:e1:eb:03:1a:6c:a4:db:aa:38:02:80:6f:7f: 1d:f2:66:0b:01:0e:fe:e2:2a:a6:39:ae:c5:58:3c:7b:72:15: f4:05:4e:8c:d9:45:07:b0:e9:da:7d:38:c9:a1:76:f2:5d:02: f0:fd:4a:de:e5:b4:61:7d:bc:9b:6b:46:b8:ed:d3:ba:4e:c4: 1a:2b:35:0a:58:ba:6e:5f:ed:b7:b3:91:66:ef:cd:48:db:e7: c9:a2:6f:28 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICHgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2QjUxMTAvBgNVBAUTKDQ3QTcxMTRFMjg3RUIxREM4MzVEMDdFOTgwNDVFRjQ2 RjUzRTdDNTcwHhcNMjUxMDE4MTY1NDEyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjEzNS1mZmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskj7Kpx5NtC8FREDFEGIvIkQkC2p+BkAfol7QZ71lWAUz82q/YYdsXAd+TZG imrgfnLQM/NTxYPWQkUzaZ7s+aig3iZnHYqnCaj2aTJtSXeFD/uFRyqtvv0s/aGY RyUBcjXnISGvkC+EXZYipjE0K8SlEb3c7Xd6CoQwBApeyI3Cu/yygE8JyFwdNhIl 2kJsAbfwR1xpVQPyI2DoFhvKWLFBNQDHiwDRPIykKBgF1eF6yRyClAkYriCFqaiY eVx/2xyRLcHIq0K/W/w6wwKiddcLuhawkPW15wrx7v0uYHcTgtivvX3Kh5zjcX9g 7Lrrym76Gu4z5kdLJG5lNpAJnQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFFfIvhRi Dluky2Tayamv+YNNu7ZCMB8GA1UdIwQYMBaAFEenEU4ofrHcg10H6YBF70b1PnxX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTZCNS9DQTZBNTVFQ0FB NUExMUU2QkRDNkI3N0ZDNEY5QUUwMi9SNmNSVGloLXNkeURYUWZwZ0VYdlJ2VS1m RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I2Y1JUaWgtc2R5RFhRZnBnRVh2UnZVLWZGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzE2QjUvQ0E2QTU1RUNBQTVBMTFFNkJEQzZCNzdGQzRGOUFFMDIvQTI2NEYzNUM4 QkFDMTFFN0FGQkFCNzFBQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCLX6kAwQCZ8MgMA0EAgACMAcDBQAkAa9AMA0GCSqGSIb3DQEBCwUA A4IBAQAAJy3XioOM+LONCQcDZSJngaQJLfFxA9Uh2hj2VD5LEmagG6sTM+mMUfL0 Ix5yqwyc5Uc97C28qb9PkgfyLDPFZi/HNCBdtbGnvI404H6iqwjw/PmB4g/9jQ7S AwjtzaYB7bo9S1T84/YRr5oz5nmY9cUFoUF1QgW2GaVSL+0b21XZkfCiFHTe8PSE xkQIP39A3OlQvn8BVb4190nncFFY8rzz1JqaPOHrAxpspNuqOAKAb38d8mYLAQ7+ 4iqmOa7FWDx7chX0BU6M2UUHsOnafTjJoXbyXQLw/Ure5bRhfbyba0a47dO6TsQa KzUKWLpuX+23s5Fm781I2+fJom8o -----END CERTIFICATE-----Generated at Thu Mar 26 06:50:46 2026 by rpki-client