$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/0A9DA996655311EF8D61E41CC4F9AE02.roa File: 0A9DA996655311EF8D61E41CC4F9AE02.roa (raw, json) Hash identifier: qmSYFXBCxcqxkM5XH4uaUEDVYEJ9yUrEsaElHySAxKw= Subject key identifier: 9C:2B:B8:3A:E2:F0:17:E1:7D:83:B8:2D:95:78:0E:0C:A5:EA:47:81 Certificate issuer: /CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE Certificate serial: 034B Authority key identifier: 03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/0A9DA996655311EF8D61E41CC4F9AE02.roa Signing time: Mon 02 Mar 2026 22:45:41 +0000 ROA not before: Wed 09 Jul 2025 02:38:30 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 135341 IP address blocks: 45.117.62.0/23 maxlen: 23 45.117.62.0/24 maxlen: 24 45.117.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:45:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 843 (0x34b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BB2, serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE Validity Not Before: Jul 9 02:38:30 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a61315-6ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:15:54:e1:bb:a7:03:b2:31:95:b3:82:fb:99: a4:4f:72:9d:04:38:e9:0f:d9:da:c7:51:d4:ff:19: a0:23:a1:ff:32:ff:df:95:fb:a2:30:c1:d8:00:78: 45:82:20:7c:47:48:f5:27:2b:7f:2a:17:78:34:f3: 37:59:78:e1:73:6a:85:20:9a:12:26:ea:46:74:1f: a8:1f:5a:f9:bb:68:a0:f8:52:cd:a6:fe:64:9c:53: 42:00:11:ab:e2:ef:cd:3c:e4:91:f7:dd:b3:23:c3: 59:ac:c1:97:61:7f:76:dc:48:c0:1e:bf:da:e3:1b: 7f:9f:47:3f:2e:db:1e:68:54:96:ad:a0:9b:e1:b1: 7f:e2:ce:b0:e9:14:c1:e1:ee:b9:1f:a0:84:2c:71: 74:77:4c:83:8d:8d:48:2b:2e:ff:a3:c4:8b:8d:d6: b0:5c:a3:2f:97:8f:65:9b:d0:07:1c:47:4a:04:dc: e5:ab:65:fc:09:66:bc:df:50:3b:42:ac:f1:77:b9: 8f:11:ec:e4:1b:01:08:a7:fa:19:c8:d1:91:5a:18: d7:d7:52:a7:df:30:e4:15:0f:56:44:5e:58:08:6b: 31:45:e8:6d:a2:7b:3f:3d:7e:2e:3d:74:4c:17:93: d9:11:7b:04:28:ce:51:9b:1b:94:0e:f5:54:bb:2e: cc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:2B:B8:3A:E2:F0:17:E1:7D:83:B8:2D:95:78:0E:0C:A5:EA:47:81 X509v3 Authority Key Identifier: keyid:03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/0A9DA996655311EF8D61E41CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.117.62.0/23 Signature Algorithm: sha256WithRSAEncryption 18:0d:0e:fb:b1:b2:5e:16:5d:24:09:0b:bd:2e:18:c5:37:63: 88:34:68:98:42:9a:af:58:b6:45:a4:d8:fd:af:26:54:83:4a: e2:2e:b0:03:f2:7e:f6:02:4f:aa:33:36:28:5e:27:e0:7c:95: 0d:d0:ff:b5:7d:e0:44:83:2f:89:c2:69:72:c0:9d:29:fd:94: f0:2c:89:4b:37:13:5d:c8:29:70:3f:b4:a6:e4:bd:9e:4c:1c: a0:f1:5d:27:98:e4:21:81:c1:0d:8c:29:a2:fe:d6:9c:89:55: 7d:6d:2e:c5:4e:76:a6:ed:d4:30:95:a9:03:9d:16:13:30:6e: 5f:22:00:dc:e4:0d:8c:29:ae:2f:bb:01:0e:31:1a:c4:21:ff: 2f:5d:e1:2e:0b:34:dc:b7:bc:51:b5:6b:71:b8:e3:04:73:8e: 60:9e:07:15:37:7e:a2:9f:fd:72:b6:0d:27:05:f3:58:87:b6: 95:97:60:0d:4f:fc:d7:f5:af:bd:65:90:12:db:06:79:9c:00: 86:d0:98:25:37:05:9b:85:27:ae:5b:7a:13:b4:c9:0e:41:10: 4f:ad:53:b8:5c:46:3e:4a:b1:2f:f5:91:e3:c4:ef:ce:7f:96: 7b:ed:10:01:73:9b:ac:89:fb:a7:6e:c1:06:91:ff:1a:93:b9: 7f:c4:1d:e5 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICA0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCQjIxMTAvBgNVBAUTKDAzQkM3NDlBQzE2ODJDNEI0NkRBMjU5QUI3RUI2NjJB QTIyNUIwRUUwHhcNMjUwNzA5MDIzODMwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MTMxNS02ZWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1RVU4bunA7IxlbOC+5mkT3KdBDjpD9nax1HU/xmgI6H/Mv/flfuiMMHYAHhF giB8R0j1Jyt/Khd4NPM3WXjhc2qFIJoSJupGdB+oH1r5u2ig+FLNpv5knFNCABGr 4u/NPOSR992zI8NZrMGXYX923EjAHr/a4xt/n0c/LtseaFSWraCb4bF/4s6w6RTB 4e65H6CELHF0d0yDjY1IKy7/o8SLjdawXKMvl49lm9AHHEdKBNzlq2X8CWa831A7 Qqzxd7mPEezkGwEIp/oZyNGRWhjX11Kn3zDkFQ9WRF5YCGsxRehtons/PX4uPXRM F5PZEXsEKM5RmxuUDvVUuy7MRQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJwruDri 8BfhfYO4LZV4Dgyl6keBMB8GA1UdIwQYMBaAFAO8dJrBaCxLRtolmrfrZiqiJbDu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJCMi81RDRDQzJGNjA4 QzgxMUVEOTQ0RjI1NjZDNEY5QUUwMi9BN3gwbXNGb0xFdEcyaVdhdC10bUtxSWxz TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E3eDBtc0ZvTEV0RzJpV2F0LXRtS3FJbHNPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzZCQjIvNUQ0Q0MyRjYwOEM4MTFFRDk0NEYyNTY2QzRGOUFFMDIvMEE5REE5OTY2 NTUzMTFFRjhENjFFNDFDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBLXU+MA0GCSqGSIb3DQEBCwUAA4IBAQAYDQ77sbJeFl0kCQu9LhjF N2OINGiYQpqvWLZFpNj9ryZUg0riLrAD8n72Ak+qMzYoXifgfJUN0P+1feBEgy+J wmlywJ0p/ZTwLIlLNxNdyClwP7Sm5L2eTByg8V0nmOQhgcENjCmi/taciVV9bS7F Tnam7dQwlakDnRYTMG5fIgDc5A2MKa4vuwEOMRrEIf8vXeEuCzTct7xRtWtxuOME c45gngcVN36in/1ytg0nBfNYh7aVl2ANT/zX9a+9ZZAS2wZ5nACG0JglNwWbhSeu W3oTtMkOQRBPrVO4XEY+SrEv9ZHjxO/Of5Z77RABc5usifunbsEGkf8ak7l/xB3l -----END CERTIFICATE-----Generated at Thu Mar 26 02:27:15 2026 by rpki-client