$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/0A16B10E8EE011F09A1AE72BC4F9AE02.roa File: 0A16B10E8EE011F09A1AE72BC4F9AE02.roa (raw, json) Hash identifier: oQE4lKjrb9uBnPjONyf7ZrBM9Hns2uL/UwtMTK49Mk4= Subject key identifier: A1:9A:9E:F1:84:32:3B:9D:7E:B1:1D:E0:75:51:79:A0:C9:BA:9E:95 Certificate issuer: /CN=A91D3037/serialNumber=B64B81042AB411607D86076FEFC9E59626BB8816 Certificate serial: 64 Authority key identifier: B6:4B:81:04:2A:B4:11:60:7D:86:07:6F:EF:C9:E5:96:26:BB:88:16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkuBBCq0EWB9hgdv78nllia7iBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/0A16B10E8EE011F09A1AE72BC4F9AE02.roa Signing time: Mon 02 Mar 2026 13:34:02 +0000 ROA not before: Thu 11 Sep 2025 07:39:53 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 55843 IP address blocks: 49.128.8.0/22 maxlen: 22 49.128.8.0/23 maxlen: 23 49.128.8.0/24 maxlen: 24 49.128.9.0/24 maxlen: 24 49.128.10.0/23 maxlen: 23 49.128.10.0/24 maxlen: 24 49.128.11.0/24 maxlen: 24 103.13.128.0/22 maxlen: 22 103.13.128.0/23 maxlen: 23 103.13.128.0/24 maxlen: 24 103.13.129.0/24 maxlen: 24 103.13.130.0/23 maxlen: 23 103.13.130.0/24 maxlen: 24 103.13.131.0/24 maxlen: 24 103.29.108.0/22 maxlen: 22 103.29.108.0/23 maxlen: 23 103.29.108.0/24 maxlen: 24 103.29.109.0/24 maxlen: 24 103.29.110.0/23 maxlen: 23 103.29.110.0/24 maxlen: 24 103.29.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.crl rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkuBBCq0EWB9hgdv78nllia7iBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3037, serialNumber=B64B81042AB411607D86076FEFC9E59626BB8816 Validity Not Before: Sep 11 07:39:53 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a591ca-e5ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5c:76:a9:eb:5f:a8:9f:f9:72:11:aa:fb:05: 1c:17:9d:67:02:29:df:97:48:f9:88:50:e0:26:6a: e9:5d:2b:81:92:3d:05:2f:e3:3a:83:21:df:91:9f: 17:cd:80:e5:64:cb:a2:13:fc:66:9d:3f:14:20:5f: 09:3e:05:2b:4c:26:c0:42:f6:86:27:a3:19:dc:c0: 83:5f:15:28:ee:e0:8c:c0:bb:18:8b:84:8a:92:e2: be:e9:75:9a:f5:49:09:02:de:a6:c5:b0:11:91:7d: ef:c2:f3:d9:62:22:3d:4c:eb:da:65:44:97:1d:75: c8:73:f2:57:ea:91:ef:78:27:6f:8e:a0:d7:bd:d8: b4:5c:76:1a:b9:1f:f6:b8:d6:89:df:9b:50:52:56: b3:8c:0d:53:1c:f9:d6:1b:e7:77:5f:87:6c:aa:64: 06:ab:1e:a2:ad:6c:32:90:bd:ac:9d:4c:91:b6:77: c2:52:30:84:c3:ea:62:e1:fd:a0:30:f1:d1:a9:8b: 3b:94:e4:85:8b:9b:ce:01:a9:b7:87:45:dc:65:86: b2:6a:30:e4:00:74:ae:47:55:61:cb:5c:bb:e7:bf: 5a:58:39:7e:fd:45:35:92:a5:a9:6c:14:3a:b1:e7: 85:b0:9a:75:db:33:69:4b:a7:39:e3:65:94:3c:a8: 97:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9A:9E:F1:84:32:3B:9D:7E:B1:1D:E0:75:51:79:A0:C9:BA:9E:95 X509v3 Authority Key Identifier: keyid:B6:4B:81:04:2A:B4:11:60:7D:86:07:6F:EF:C9:E5:96:26:BB:88:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkuBBCq0EWB9hgdv78nllia7iBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/0A16B10E8EE011F09A1AE72BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 49.128.8.0/22 103.13.128.0/22 103.29.108.0/22 Signature Algorithm: sha256WithRSAEncryption 4b:12:b8:65:35:fd:79:b1:cd:a9:c6:3b:1c:8f:9d:21:37:7a: 40:50:70:85:8d:fd:f3:c4:2a:38:94:10:25:06:75:16:2a:a4: b1:bc:43:6e:d5:5c:1a:32:47:a7:37:ed:60:1c:fd:39:65:57: 5a:9d:61:67:0b:0c:80:c5:6e:6d:61:05:3c:93:3f:da:e3:79: 32:2a:26:3a:85:27:21:3b:66:5f:19:01:7c:2f:08:be:40:b7: 34:5a:7c:99:87:1d:da:73:f2:c0:7c:82:67:f0:ff:5e:4e:2d: 8b:45:ac:6e:02:29:d2:70:b8:99:a4:54:80:4a:a3:ad:bf:a2: 53:63:75:41:dd:fd:93:ce:57:86:bd:5f:89:35:14:cd:34:74: 82:92:8c:88:5b:b7:4e:d1:f6:72:d0:04:a8:df:ed:19:2d:08: 91:05:a5:ec:3a:a9:43:e6:2c:7e:73:f2:a3:0d:62:d5:0f:da: 5e:1f:9d:c0:92:5f:14:f5:6f:79:02:d7:e1:c2:d0:34:a5:ab: 63:94:0a:0f:1f:e3:be:48:d3:cf:e4:28:7c:14:1c:c3:cb:99: 88:30:b4:ec:d4:46:81:20:2d:c0:24:76:07:44:3f:da:4f:c8: 52:5f:80:39:d9:8e:16:88:12:c0:66:e3:92:b3:59:bc:1a:2c: 63:76:e1:fc -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MzAzNzExMC8GA1UEBRMoQjY0QjgxMDQyQUI0MTE2MDdEODYwNzZGRUZDOUU1OTYy NkJCODgxNjAeFw0yNTA5MTEwNzM5NTNaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTU5MWNhLWU1ZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+XHap61+on/lyEar7BRwXnWcCKd+XSPmIUOAmauldK4GSPQUv4zqDId+RnxfN gOVky6IT/GadPxQgXwk+BStMJsBC9oYnoxncwINfFSju4IzAuxiLhIqS4r7pdZr1 SQkC3qbFsBGRfe/C89liIj1M69plRJcddchz8lfqke94J2+OoNe92LRcdhq5H/a4 1onfm1BSVrOMDVMc+dYb53dfh2yqZAarHqKtbDKQvaydTJG2d8JSMITD6mLh/aAw 8dGpizuU5IWLm84BqbeHRdxlhrJqMOQAdK5HVWHLXLvnv1pYOX79RTWSpalsFDqx 54WwmnXbM2lLpznjZZQ8qJfFAgMBAAGjggJsMIICaDAdBgNVHQ4EFgQUoZqe8YQy O51+sR3gdVF5oMm6npUwHwYDVR0jBBgwFoAUtkuBBCq0EWB9hgdv78nllia7iBYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQzMDM3LzhCOERFMjdFOEVE QzExRjA5ODgwQzQ3OEM0RjlBRTAyL3RrdUJCQ3EwRVdCOWhnZHY3OG5sbGlhN2lC WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdGt1QkJDcTBFV0I5aGdkdjc4bmxsaWE3aUJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzAzNy84QjhERTI3RThFREMxMUYwOTg4MEM0NzhDNEY5QUUwMi8wQTE2QjEwRThF RTAxMUYwOUExQUU3MkJDNEY5QUUwMi5yb2EwKwYIKwYBBQUHAQcBAf8EHDAaMBgE AgABMBIDBAIxgAgDBAJnDYADBAJnHWwwDQYJKoZIhvcNAQELBQADggEBAEsSuGU1 /XmxzanGOxyPnSE3ekBQcIWN/fPEKjiUECUGdRYqpLG8Q27VXBoyR6c37WAc/Tll V1qdYWcLDIDFbm1hBTyTP9rjeTIqJjqFJyE7Zl8ZAXwvCL5AtzRafJmHHdpz8sB8 gmfw/15OLYtFrG4CKdJwuJmkVIBKo62/olNjdUHd/ZPOV4a9X4k1FM00dIKSjIhb t07R9nLQBKjf7RktCJEFpew6qUPmLH5z8qMNYtUP2l4fncCSXxT1b3kC1+HC0DSl q2OUCg8f475I08/kKHwUHMPLmYgwtOzURoEgLcAkdgdEP9pPyFJfgDnZjhaIEsBm 45KzWbwaLGN24fw= -----END CERTIFICATE-----Generated at Fri Mar 27 06:22:54 2026 by rpki-client