$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/F26505A6A7EA11EF8CBCCF2CC4F9AE02.roa File: F26505A6A7EA11EF8CBCCF2CC4F9AE02.roa (raw, json) Hash identifier: gFpOQJ7daM5uiSgk6tlT5tpNz4O4jsVXIh/45TS6lk4= Subject key identifier: 87:2C:37:A1:F3:60:9F:48:E5:B1:87:02:0F:E2:2C:6F:E3:5E:D1:3B Certificate issuer: /CN=A91D3834/serialNumber=1A0D0BFA191911F855B5BABDFA03B9C07FDD2282 Certificate serial: 07CC Authority key identifier: 1A:0D:0B:FA:19:19:11:F8:55:B5:BA:BD:FA:03:B9:C0:7F:DD:22:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/F26505A6A7EA11EF8CBCCF2CC4F9AE02.roa Signing time: Mon 02 Mar 2026 13:46:54 +0000 ROA not before: Wed 26 Nov 2025 20:42:45 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 24323 IP address blocks: 45.64.132.0/22 maxlen: 24 103.4.64.0/22 maxlen: 22 103.4.64.0/24 maxlen: 24 103.4.65.0/24 maxlen: 24 103.4.66.0/24 maxlen: 24 103.4.67.0/24 maxlen: 24 182.160.96.0/19 maxlen: 24 202.74.240.0/21 maxlen: 24 203.202.240.0/20 maxlen: 24 2401:c000::/32 maxlen: 40 2401:c000::/41 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.crl rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1996 (0x7cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3834, serialNumber=1A0D0BFA191911F855B5BABDFA03B9C07FDD2282 Validity Not Before: Nov 26 20:42:45 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a594ce-6c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5b:51:c0:ce:76:a2:54:48:b9:83:a3:49:f3: c1:f2:94:96:9f:76:ce:6d:bd:5a:36:a9:46:32:80: 68:6c:17:64:1b:6e:91:7a:89:b0:15:5a:97:d4:be: 12:ff:ed:15:2b:55:56:1d:b1:1d:3d:29:dd:cc:a4: 71:3b:d6:31:52:18:ee:dd:0e:46:f2:00:78:cd:a6: 2e:d2:cb:b8:b4:5b:a3:f5:1d:30:1f:0a:cf:0e:98: 83:5a:01:b7:69:bb:0c:82:f3:2b:cb:5b:4d:84:53: 50:aa:90:c2:5b:95:8e:c3:21:8d:0f:31:1e:ab:b4: 94:33:eb:20:de:19:15:96:07:45:5d:59:f2:a1:df: 9c:f0:61:e4:ac:72:90:bc:1b:45:9f:bd:64:0a:54: e5:c2:2f:34:02:f5:cc:7c:7e:39:77:fa:54:29:bb: a3:e1:61:d1:c6:4f:99:53:b1:f3:e9:53:9b:b2:f0: 81:fd:7e:d6:e8:cd:47:3e:dc:0c:57:a3:a3:58:31: 72:13:48:1e:4a:d4:b9:cf:7e:19:4c:c7:91:1e:56: 81:23:07:90:37:55:34:cb:80:80:1b:58:21:3c:ea: 0b:58:e9:9b:d0:4e:32:6a:18:57:59:da:4f:f3:00: 9e:54:92:8d:b5:9d:56:90:de:2d:57:9e:97:97:a6: 07:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:2C:37:A1:F3:60:9F:48:E5:B1:87:02:0F:E2:2C:6F:E3:5E:D1:3B X509v3 Authority Key Identifier: keyid:1A:0D:0B:FA:19:19:11:F8:55:B5:BA:BD:FA:03:B9:C0:7F:DD:22:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/F26505A6A7EA11EF8CBCCF2CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.64.132.0/22 103.4.64.0/22 182.160.96.0/19 202.74.240.0/21 203.202.240.0/20 IPv6: 2401:c000::/32 Signature Algorithm: sha256WithRSAEncryption ac:04:13:fd:77:bb:59:63:f1:5b:51:4a:53:cc:af:5f:5c:21: b7:93:c2:b0:76:52:7a:da:9f:8c:92:d2:00:18:58:71:70:c1: b8:95:a5:c4:b8:54:d0:0f:f7:4c:70:47:6c:d7:f4:f5:81:ce: f1:56:e4:4c:d2:86:91:2a:83:be:d4:62:7a:48:00:c9:d5:df: 17:8c:99:5d:cf:16:8c:15:bc:5c:ed:14:05:5b:5b:13:cb:1b: 69:8f:2f:8c:2d:ab:c9:45:e8:84:7c:bc:ca:63:e3:af:dc:bd: eb:f1:bd:46:c4:24:85:3a:1c:43:e5:7d:bc:7b:bd:23:18:18: 07:3a:55:08:f1:36:f5:98:2d:ec:6a:07:41:17:81:5e:f7:43: 4f:81:92:75:e2:d6:7a:df:1d:b6:7a:98:11:da:39:84:b2:83: 7c:fd:b6:7f:55:25:80:2b:a7:43:4e:07:00:cd:62:05:7b:18: 90:a9:70:5f:9d:02:2d:66:5b:cd:cf:de:1c:5a:4f:73:ff:cf: 5e:52:06:1c:8c:d2:8d:29:c2:c1:d0:04:5e:25:2b:6e:2b:ba: db:ba:81:87:be:49:82:ad:9d:34:83:ca:d1:19:87:a1:ac:7c: 93:b5:2d:89:c2:10:dc:b6:61:65:4c:72:bc:36:94:c7:f2:ab: a0:70:b6:18 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgICB8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM4MzQxMTAvBgNVBAUTKDFBMEQwQkZBMTkxOTExRjg1NUI1QkFCREZBMDNCOUMw N0ZERDIyODIwHhcNMjUxMTI2MjA0MjQ1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTRjZS02YzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkltRwM52olRIuYOjSfPB8pSWn3bObb1aNqlGMoBobBdkG26ReomwFVqX1L4S /+0VK1VWHbEdPSndzKRxO9YxUhju3Q5G8gB4zaYu0su4tFuj9R0wHwrPDpiDWgG3 absMgvMry1tNhFNQqpDCW5WOwyGNDzEeq7SUM+sg3hkVlgdFXVnyod+c8GHkrHKQ vBtFn71kClTlwi80AvXMfH45d/pUKbuj4WHRxk+ZU7Hz6VObsvCB/X7W6M1HPtwM V6OjWDFyE0geStS5z34ZTMeRHlaBIweQN1U0y4CAG1ghPOoLWOmb0E4yahhXWdpP 8wCeVJKNtZ1WkN4tV56Xl6YHOQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFIcsN6Hz YJ9I5bGHAg/iLG/jXtE7MB8GA1UdIwQYMBaAFBoNC/oZGRH4VbW6vfoDucB/3SKC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzgzNC84QkMyRURCMDNB NDExMUVCODNCNTdGMTRDNEY5QUUwMi9HZzBMLWhrWkVmaFZ0YnE5LWdPNXdIX2RJ b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dnMEwtaGtaRWZoVnRicTktZ081d0hfZElvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDM4MzQvOEJDMkVEQjAzQTQxMTFFQjgzQjU3RjE0QzRGOUFFMDIvRjI2NTA1QTZB N0VBMTFFRjhDQkNDRjJDQzRGOUFFMDIucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAk BAIAATAeAwQCLUCEAwQCZwRAAwQFtqBgAwQDykrwAwQEy8rwMA0EAgACMAcDBQAk AcAAMA0GCSqGSIb3DQEBCwUAA4IBAQCsBBP9d7tZY/FbUUpTzK9fXCG3k8KwdlJ6 2p+MktIAGFhxcMG4laXEuFTQD/dMcEds1/T1gc7xVuRM0oaRKoO+1GJ6SADJ1d8X jJldzxaMFbxc7RQFW1sTyxtpjy+MLavJReiEfLzKY+Ov3L3r8b1GxCSFOhxD5X28 e70jGBgHOlUI8Tb1mC3sagdBF4Fe90NPgZJ14tZ63x22epgR2jmEsoN8/bZ/VSWA K6dDTgcAzWIFexiQqXBfnQItZlvNz94cWk9z/89eUgYcjNKNKcLB0AReJStuK7rb uoGHvkmCrZ00g8rRGYehrHyTtS2JwhDctmFlTHK8NpTH8qugcLYY -----END CERTIFICATE-----Generated at Thu Mar 26 04:04:44 2026 by rpki-client