$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/991B38BC44E811F0968D8B30C4F9AE02.roa File: 991B38BC44E811F0968D8B30C4F9AE02.roa (raw, json) Hash identifier: Ey46KUiipWBFHMSvJf1iTaWHEkjjgiOERViTlngdL/g= Subject key identifier: D8:36:77:55:66:C9:82:42:DC:7F:8E:14:CF:C4:CE:6D:46:64:B4:96 Certificate issuer: /CN=A91DE2B2/serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2 Certificate serial: 352D Authority key identifier: 73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/991B38BC44E811F0968D8B30C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:11:15 +0000 ROA not before: Mon 09 Jun 2025 04:17:04 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 45754 IP address blocks: 27.109.64.0/19 maxlen: 24 103.67.228.0/22 maxlen: 24 110.93.64.0/19 maxlen: 24 2402:fe00::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 15:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13613 (0x352d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2B2, serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2 Validity Not Before: Jun 9 04:17:04 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a402b3-3552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e9:50:83:ee:6b:1d:9a:61:37:54:84:bd:9b: c9:e6:2b:8c:dc:15:aa:0e:ab:e9:81:0c:b6:aa:05: 21:c7:eb:b6:dd:2e:d0:de:46:b1:68:1b:c1:c7:00: ed:1f:99:d6:6c:ff:16:6b:31:de:a6:4d:ce:af:be: 7c:ee:aa:59:cb:dd:4a:a8:83:7c:55:e4:ac:77:d4: fd:47:d1:53:e4:45:7b:22:2b:cb:93:0c:6e:86:44: c3:f5:f9:0d:e3:7b:53:7f:db:1b:f5:88:e5:90:ed: 62:70:ee:14:c0:cc:a3:4f:33:1d:86:f6:4d:a0:f7: 3d:b2:34:3c:e9:32:59:7b:e6:6a:ba:74:1d:57:96: 25:0c:6e:c4:45:d5:03:2d:de:b8:89:5c:53:2c:e6: 8f:5f:57:a9:34:54:77:60:a4:bf:cb:a6:fb:3b:0a: 1c:b0:2b:13:81:08:4c:87:69:b3:0a:e3:45:a0:94: 87:b9:03:8a:c9:36:ed:09:0d:a9:17:a4:62:86:df: e3:e9:fc:f3:0b:0f:bc:ca:48:e0:45:c6:3f:46:23: 19:9e:ef:54:70:11:ae:45:3e:c3:ce:d6:6d:78:8b: 3a:a0:dd:fe:c1:c9:85:88:78:8c:2e:96:8b:05:f7: b2:d3:a5:5d:e7:74:9a:5c:1d:85:53:82:71:33:35: 31:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:36:77:55:66:C9:82:42:DC:7F:8E:14:CF:C4:CE:6D:46:64:B4:96 X509v3 Authority Key Identifier: keyid:73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/991B38BC44E811F0968D8B30C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.109.64.0/19 103.67.228.0/22 110.93.64.0/19 IPv6: 2402:fe00::/32 Signature Algorithm: sha256WithRSAEncryption 93:65:14:35:2d:16:ca:04:e2:e8:09:56:9a:e6:86:f8:41:e3: 83:2c:e3:41:78:f0:74:51:5b:6f:ce:95:97:0d:c5:8c:d0:08: 7f:b3:df:92:61:07:62:4e:a2:d2:e6:7a:f0:37:dc:7a:29:a5: 4c:75:89:69:59:e5:80:37:1c:46:2b:8f:d6:fc:f6:c1:a2:0b: ae:3f:93:95:de:cd:25:76:e1:8e:44:1c:35:7f:c4:74:89:bb: 10:b2:55:84:31:7d:28:a8:ad:00:bb:41:50:e2:9b:3e:0e:63: e0:e0:39:17:07:61:d8:d9:34:95:d5:a0:03:5c:98:33:2c:d3: 94:58:21:8d:34:be:b3:c8:88:de:b9:3b:0c:db:f8:2a:9f:51: 5b:c0:a1:18:f1:ee:6e:99:13:5e:a2:3b:8b:fa:d2:1c:fa:09: 59:e5:b7:ce:77:38:cd:58:eb:2c:f1:1f:dc:a2:94:aa:cd:e8: bc:6d:20:61:f6:42:87:e0:23:80:cb:30:9b:64:89:6f:3a:ae: ef:05:58:6c:e6:6e:b0:3c:bd:5e:4a:b0:c3:f9:31:fe:5d:4b: 98:f3:95:84:2b:4e:62:e0:6f:56:11:97:aa:c2:c9:83:62:fe: f1:f7:14:88:56:a7:da:72:ba:51:7c:80:43:44:20:c4:be:c9: 0c:0f:89:ff -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICNS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQjIxMTAvBgNVBAUTKDczQ0UxMjc0Q0RERjE3QzMwREEzQUJDRkY4MUZEOUYx MkZEMUI0RjIwHhcNMjUwNjA5MDQxNzA0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDJiMy0zNTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuulQg+5rHZphN1SEvZvJ5iuM3BWqDqvpgQy2qgUhx+u23S7Q3kaxaBvBxwDt H5nWbP8WazHepk3Or7587qpZy91KqIN8VeSsd9T9R9FT5EV7IivLkwxuhkTD9fkN 43tTf9sb9YjlkO1icO4UwMyjTzMdhvZNoPc9sjQ86TJZe+ZqunQdV5YlDG7ERdUD Ld64iVxTLOaPX1epNFR3YKS/y6b7OwocsCsTgQhMh2mzCuNFoJSHuQOKyTbtCQ2p F6Riht/j6fzzCw+8ykjgRcY/RiMZnu9UcBGuRT7DztZteIs6oN3+wcmFiHiMLpaL Bfey06Vd53SaXB2FU4JxMzUxDwIDAQABo4ICezCCAncwHQYDVR0OBBYEFNg2d1Vm yYJC3H+OFM/Ezm1GZLSWMB8GA1UdIwQYMBaAFHPOEnTN3xfDDaOrz/gf2fEv0bTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJCMi81M0NBNDYyQTFE OUQxMUUyQUY0NTZEOEMwOEIwMkNEMi9jODRTZE0zZkY4TU5vNnZQLUJfWjhTX1J0 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M4NFNkTTNmRjhNTm82dlAtQl9aOFNfUnRQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REUyQjIvNTNDQTQ2MkExRDlEMTFFMkFGNDU2RDhDMDhCMDJDRDIvOTkxQjM4QkM0 NEU4MTFGMDk2OEQ4QjMwQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQFG21AAwQCZ0PkAwQFbl1AMA0EAgACMAcDBQAkAv4AMA0GCSqGSIb3 DQEBCwUAA4IBAQCTZRQ1LRbKBOLoCVaa5ob4QeODLONBePB0UVtvzpWXDcWM0Ah/ s9+SYQdiTqLS5nrwN9x6KaVMdYlpWeWANxxGK4/W/PbBoguuP5OV3s0lduGORBw1 f8R0ibsQslWEMX0oqK0Au0FQ4ps+DmPg4DkXB2HY2TSV1aADXJgzLNOUWCGNNL6z yIjeuTsM2/gqn1FbwKEY8e5umRNeojuL+tIc+glZ5bfOdzjNWOss8R/copSqzei8 bSBh9kKH4COAyzCbZIlvOq7vBVhs5m6wPL1eSrDD+TH+XUuY85WEK05i4G9WEZeq wsmDYv7x9xSIVqfacrpRfIBDRCDEvskMD4n/ -----END CERTIFICATE-----Generated at Sat Mar 28 12:11:09 2026 by rpki-client