$ rpki-client -vvf rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/2131145E9E4C11EABF30421BC4F9AE02.roa File: 2131145E9E4C11EABF30421BC4F9AE02.roa (raw, json) Hash identifier: 3zmhoqDN3914HCGCg2WBUkiHp98MLEWrF9AHJiv1VWs= Subject key identifier: E1:A8:68:10:E2:5D:42:A8:D5:41:C8:68:C4:A9:78:AA:EE:6D:C5:DC Certificate issuer: /CN=A91E734C/serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3 Certificate serial: 0AF4 Authority key identifier: 6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/2131145E9E4C11EABF30421BC4F9AE02.roa Signing time: Mon 02 Mar 2026 05:07:52 +0000 ROA not before: Wed 06 Aug 2025 20:31:26 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 24570 IP address blocks: 58.181.65.0/24 maxlen: 24 58.181.69.0/24 maxlen: 24 58.181.72.0/24 maxlen: 24 58.181.73.0/24 maxlen: 24 58.181.75.0/24 maxlen: 24 58.181.77.0/24 maxlen: 24 58.181.77.240/29 maxlen: 29 58.181.80.0/24 maxlen: 24 58.181.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:17:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2804 (0xaf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E734C, serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3 Validity Not Before: Aug 6 20:31:26 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a51b28-6fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:89:4b:b8:75:ec:1b:1a:7c:a8:d5:2d:53:62: bb:8b:af:43:9d:51:05:fb:99:2f:e4:34:72:46:aa: 6e:a8:4d:b6:29:ad:74:29:a0:02:e6:f7:80:68:71: a8:22:dc:69:fc:07:f1:c7:a9:97:70:db:81:56:9a: 58:90:21:d5:a9:b7:6e:4a:4c:ad:2e:43:9b:31:9d: 49:fa:66:7f:09:76:96:f7:6b:4f:e1:72:74:ea:39: e6:ba:0b:ea:88:ed:8a:d4:d3:c7:e6:3e:45:46:a8: 5b:e8:28:1e:a7:e6:f2:90:d8:4d:32:f2:bd:3b:5a: b2:a4:bf:43:2f:cd:f4:a8:3f:9a:78:bc:cd:ab:d1: f1:13:4e:a2:b3:74:c8:64:2f:88:98:ff:e5:a6:cc: 89:77:48:05:d8:49:9a:d6:bd:33:c5:10:8e:cb:a0: 26:fe:d8:e9:ec:7e:a8:9c:75:e3:53:6c:47:ee:30: 60:2b:91:7c:f0:74:04:38:74:5b:04:5c:bc:88:1c: a1:9c:da:c4:e0:55:37:43:b2:4e:94:1a:56:8e:98: d8:5f:53:05:b9:cf:02:5c:f3:93:f1:24:10:2c:7d: e0:b9:87:13:c8:55:26:de:1b:b1:8e:ef:10:f9:66: 7e:78:a4:c1:49:54:dc:30:4f:5c:00:45:8b:cf:20: 8f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A8:68:10:E2:5D:42:A8:D5:41:C8:68:C4:A9:78:AA:EE:6D:C5:DC X509v3 Authority Key Identifier: keyid:6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/2131145E9E4C11EABF30421BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 58.181.65.0/24 58.181.69.0/24 58.181.72.0/23 58.181.75.0/24 58.181.77.0/24 58.181.80.0/24 58.181.95.0/24 Signature Algorithm: sha256WithRSAEncryption 27:73:b1:1d:6a:b7:f4:38:4c:18:80:31:59:ad:cd:c4:4b:e2: 27:95:e4:fb:a2:a2:13:ca:0e:bf:a7:d7:bc:1a:8e:22:43:e8: ac:bb:f8:0f:19:ec:2f:d2:d0:49:b4:c7:ee:20:17:91:35:3b: 15:56:84:d2:02:3f:2e:b0:c0:77:c6:b0:12:f6:6d:1d:ce:d5: a8:55:ef:c8:ee:ee:0c:bd:a2:55:9a:58:1f:cf:24:9a:5a:da: 77:05:83:fa:0d:20:c7:1b:fa:cc:b6:3b:f9:02:71:07:fb:28: 06:c7:7d:04:5c:e0:28:3f:80:f0:02:cd:3c:72:f5:59:a1:83: 01:5d:ba:8a:18:b6:b9:0d:9f:aa:e3:b2:06:79:d8:b1:71:1a: fd:e9:0e:ea:ec:60:39:51:e2:56:98:9f:da:31:14:82:2b:f7: 3f:19:2b:f3:16:6e:fb:78:0c:bd:23:e8:19:b6:5b:88:14:0a: a2:a3:40:56:6f:b0:fd:53:af:37:de:ad:18:bd:29:10:36:01: 05:29:94:3b:b9:d1:12:dc:92:79:ab:bb:a4:e9:a1:b9:eb:c1: 4f:d5:1e:30:4c:32:55:a0:d3:1c:27:a2:19:97:ce:e7:f9:d9: 5e:47:c1:5b:aa:ee:a4:83:58:3e:5f:44:08:29:14:28:00:a4: 4c:dd:c4:53 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgICCvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTczNEMxMTAvBgNVBAUTKDZDNjgwODQwMzgxQzFFRjMyRDNDOERCQkYzQUNDNDA4 MkNGNkE1QjMwHhcNMjUwODA2MjAzMTI2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1MWIyOC02ZmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4lLuHXsGxp8qNUtU2K7i69DnVEF+5kv5DRyRqpuqE22Ka10KaAC5veAaHGo Itxp/Afxx6mXcNuBVppYkCHVqbduSkytLkObMZ1J+mZ/CXaW92tP4XJ06jnmugvq iO2K1NPH5j5FRqhb6Cgep+bykNhNMvK9O1qypL9DL830qD+aeLzNq9HxE06is3TI ZC+ImP/lpsyJd0gF2Ema1r0zxRCOy6Am/tjp7H6onHXjU2xH7jBgK5F88HQEOHRb BFy8iByhnNrE4FU3Q7JOlBpWjpjYX1MFuc8CXPOT8SQQLH3guYcTyFUm3huxju8Q +WZ+eKTBSVTcME9cAEWLzyCPCQIDAQABo4IChDCCAoAwHQYDVR0OBBYEFOGoaBDi XUKo1UHIaMSpeKrubcXcMB8GA1UdIwQYMBaAFGxoCEA4HB7zLTyNu/OsxAgs9qWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzM0Qy9BNzMyMzVFQzcz QzIxMUVBOUQ0MEI4ODVDNEY5QUUwMi9iR2dJUURnY0h2TXRQSTI3ODZ6RUNDejJw Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JHZ0lRRGdjSHZNdFBJMjc4NnpFQ0N6MnBiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTczNEMvQTczMjM1RUM3M0MyMTFFQTlENDBCODg1QzRGOUFFMDIvMjEzMTE0NUU5 RTRDMTFFQUJGMzA0MjFCQzRGOUFFMDIucm9hMEMGCCsGAQUFBwEHAQH/BDQwMjAw BAIAATAqAwQAOrVBAwQAOrVFAwQBOrVIAwQAOrVLAwQAOrVNAwQAOrVQAwQAOrVf MA0GCSqGSIb3DQEBCwUAA4IBAQAnc7Edarf0OEwYgDFZrc3ES+InleT7oqITyg6/ p9e8Go4iQ+isu/gPGewv0tBJtMfuIBeRNTsVVoTSAj8usMB3xrAS9m0dztWoVe/I 7u4MvaJVmlgfzySaWtp3BYP6DSDHG/rMtjv5AnEH+ygGx30EXOAoP4DwAs08cvVZ oYMBXbqKGLa5DZ+q47IGedixcRr96Q7q7GA5UeJWmJ/aMRSCK/c/GSvzFm77eAy9 I+gZtluIFAqio0BWb7D9U6833q0YvSkQNgEFKZQ7udES3JJ5q7uk6aG568FP1R4w TDJVoNMcJ6IZl87n+dleR8Fbqu6kg1g+X0QIKRQoAKRM3cRT -----END CERTIFICATE-----Generated at Thu Mar 26 17:58:28 2026 by rpki-client