$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/65D82706BACE11F0AAEC4611C4F9AE02.roa File: 65D82706BACE11F0AAEC4611C4F9AE02.roa (raw, json) Hash identifier: sqvmzo0nBMsekrGisDm87YPLKEUsc2Q0u1zWWfR7WgE= Subject key identifier: A8:C8:FF:96:B4:AD:8F:AB:7A:AD:26:42:49:E8:61:9C:17:B6:4D:79 Certificate issuer: /CN=A91C23FE/serialNumber=E2F0742AD80A9DBB2875184EE0DD5E94DD75784B Certificate serial: 1C7A Authority key identifier: E2:F0:74:2A:D8:0A:9D:BB:28:75:18:4E:E0:DD:5E:94:DD:75:78:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/65D82706BACE11F0AAEC4611C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:39:02 +0000 ROA not before: Fri 28 Nov 2025 09:05:53 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 134674 IP address blocks: 45.127.47.0/24 maxlen: 24 58.84.60.0/22 maxlen: 24 103.59.72.0/22 maxlen: 22 103.59.72.0/24 maxlen: 24 103.59.73.0/24 maxlen: 24 103.59.74.0/24 maxlen: 24 103.59.75.0/24 maxlen: 24 103.76.100.0/22 maxlen: 24 103.80.160.0/22 maxlen: 24 103.113.140.0/24 maxlen: 24 103.113.141.0/24 maxlen: 24 103.113.142.0/24 maxlen: 24 103.113.143.0/24 maxlen: 24 103.197.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.crl rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:06:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7290 (0x1c7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C23FE, serialNumber=E2F0742AD80A9DBB2875184EE0DD5E94DD75784B Validity Not Before: Nov 28 09:05:53 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a479b6-5ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:5d:68:1d:85:3c:ab:e5:0a:86:fd:94:5c:34: e2:82:0c:12:29:75:27:49:44:df:e9:c1:75:82:25: 2a:8a:86:33:7d:d0:3e:20:14:81:81:f9:6c:e5:d3: 1c:ad:91:3f:d8:1b:8e:26:29:3f:b6:e3:1a:1e:f4: d8:13:2e:b9:f7:48:be:3b:6f:bf:bb:b5:cc:b4:04: b1:28:f2:9d:b5:dc:16:31:0d:62:31:92:6e:c2:64: 60:6f:21:c8:4e:69:4f:af:23:dc:97:c3:ef:a2:14: cd:60:a5:e1:95:c5:1a:86:0c:65:41:08:19:3d:f3: 15:dc:2c:01:42:04:d4:2a:82:66:f0:1c:13:e6:b5: a9:9a:56:64:91:8c:75:a1:a9:b3:f7:8e:6a:7c:58: 19:65:84:8d:96:00:72:1a:6d:11:73:3c:ec:55:69: e0:77:61:2e:dd:3b:71:55:19:2a:63:67:5d:47:b1: 2e:c4:e0:6a:0d:33:9f:b0:d8:88:11:09:65:4e:68: 0a:84:f5:e4:63:4f:64:0f:53:cd:ee:ac:41:71:c6: 06:da:c5:f8:7b:1f:58:5d:7d:11:f7:cb:16:bf:8f: ba:24:a8:47:ae:9a:bf:fe:c6:d5:55:eb:ab:ea:25: a2:f3:38:5b:df:26:27:0e:ad:83:59:1d:c6:87:72: 87:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C8:FF:96:B4:AD:8F:AB:7A:AD:26:42:49:E8:61:9C:17:B6:4D:79 X509v3 Authority Key Identifier: keyid:E2:F0:74:2A:D8:0A:9D:BB:28:75:18:4E:E0:DD:5E:94:DD:75:78:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/65D82706BACE11F0AAEC4611C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.127.47.0/24 58.84.60.0/22 103.59.72.0/22 103.76.100.0/22 103.80.160.0/22 103.113.140.0/22 103.197.72.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:0e:9c:d0:9e:4a:a2:0d:35:13:37:04:92:c9:25:7a:92:cc: e7:ba:99:c7:1c:cf:1a:28:31:89:be:87:db:fc:d4:81:0b:cc: 63:d0:61:db:a7:67:e5:e7:38:e8:d4:73:27:8f:4e:18:40:a2: 24:2f:23:92:0d:2a:5c:f2:8c:62:30:07:f2:d0:ea:bf:83:cf: ef:4f:34:e3:98:70:53:23:55:c3:3b:37:6e:05:4e:9e:4c:7f: af:15:d3:6f:1f:6e:74:7a:90:a3:28:98:6c:cc:b3:bc:5e:33: 0f:cd:75:99:49:21:b4:97:ab:d2:ba:98:c8:c3:52:fd:d6:66: 7d:8d:f9:57:39:f9:82:d7:73:bb:27:65:49:ff:b4:76:91:a0: fc:93:31:92:ea:5b:bf:ef:2f:7d:14:cd:67:6d:19:e3:ff:ab: bf:65:be:50:74:46:c1:64:2b:be:b4:8a:ee:83:96:c3:c3:4a: dc:94:74:09:2b:92:0c:e1:32:e4:db:69:5e:6e:fd:f8:35:d2: 2f:dd:42:c1:ec:b5:14:25:01:df:75:8e:39:37:b5:75:b1:f1: 89:b8:32:94:c0:f6:bd:26:2f:bf:48:75:24:48:5a:48:7a:6e: 59:87:5c:86:9f:b1:37:2a:93:64:cc:88:81:9f:33:02:c5:8d: 9f:e2:a9:6b -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgICHHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIzRkUxMTAvBgNVBAUTKEUyRjA3NDJBRDgwQTlEQkIyODc1MTg0RUUwREQ1RTk0 REQ3NTc4NEIwHhcNMjUxMTI4MDkwNTUzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzliNi01YWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6l1oHYU8q+UKhv2UXDTiggwSKXUnSUTf6cF1giUqioYzfdA+IBSBgfls5dMc rZE/2BuOJik/tuMaHvTYEy6590i+O2+/u7XMtASxKPKdtdwWMQ1iMZJuwmRgbyHI TmlPryPcl8PvohTNYKXhlcUahgxlQQgZPfMV3CwBQgTUKoJm8BwT5rWpmlZkkYx1 oamz945qfFgZZYSNlgByGm0RczzsVWngd2Eu3TtxVRkqY2ddR7EuxOBqDTOfsNiI EQllTmgKhPXkY09kD1PN7qxBccYG2sX4ex9YXX0R98sWv4+6JKhHrpq//sbVVeur 6iWi8zhb3yYnDq2DWR3Gh3KHvwIDAQABo4IChDCCAoAwHQYDVR0OBBYEFKjI/5a0 rY+req0mQknoYZwXtk15MB8GA1UdIwQYMBaAFOLwdCrYCp27KHUYTuDdXpTddXhL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjNGRS84MjVDRTlBQUY5 RUIxMUU2QkRFN0E5NjhDNEY5QUUwMi80dkIwS3RnS25ic29kUmhPNE4xZWxOMTFl RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR2QjBLdGdLbmJzb2RSaE80TjFlbE4xMWVFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzIzRkUvODI1Q0U5QUFGOUVCMTFFNkJERTdBOTY4QzRGOUFFMDIvNjVEODI3MDZC QUNFMTFGMEFBRUM0NjExQzRGOUFFMDIucm9hMEMGCCsGAQUFBwEHAQH/BDQwMjAw BAIAATAqAwQALX8vAwQCOlQ8AwQCZztIAwQCZ0xkAwQCZ1CgAwQCZ3GMAwQCZ8VI MA0GCSqGSIb3DQEBCwUAA4IBAQAsDpzQnkqiDTUTNwSSySV6ksznupnHHM8aKDGJ vofb/NSBC8xj0GHbp2fl5zjo1HMnj04YQKIkLyOSDSpc8oxiMAfy0Oq/g8/vTzTj mHBTI1XDOzduBU6eTH+vFdNvH250epCjKJhszLO8XjMPzXWZSSG0l6vSupjIw1L9 1mZ9jflXOfmC13O7J2VJ/7R2kaD8kzGS6lu/7y99FM1nbRnj/6u/Zb5QdEbBZCu+ tIrug5bDw0rclHQJK5IM4TLk22lebv34NdIv3ULB7LUUJQHfdY45N7V1sfGJuDKU wPa9Ji+/SHUkSFpIem5Zh1yGn7E3KpNkzIiBnzMCxY2f4qlr -----END CERTIFICATE-----Generated at Thu Mar 26 02:25:52 2026 by rpki-client