$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/4235F184DACE11EE8E67437CC4F9AE02.roa File: 4235F184DACE11EE8E67437CC4F9AE02.roa (raw, json) Hash identifier: EfDz89hDHQjs+uQsC8Y0nq5yvsfIhexZTqTaaIHEkzs= Subject key identifier: 02:0E:AE:36:55:1E:4B:3D:C6:B8:DA:37:64:69:42:34:43:78:C4:B9 Certificate issuer: /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04 Certificate serial: 082F Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/4235F184DACE11EE8E67437CC4F9AE02.roa Signing time: Wed 29 Apr 2026 03:45:47 +0000 ROA not before: Wed 29 Apr 2026 03:45:47 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 45629 IP address blocks: 14.207.0.0/16 maxlen: 17 27.130.0.0/16 maxlen: 17 43.245.144.0/22 maxlen: 23 49.48.0.0/15 maxlen: 17 103.16.204.0/22 maxlen: 23 110.164.0.0/16 maxlen: 17 110.164.4.0/24 maxlen: 24 110.164.6.0/24 maxlen: 24 110.164.11.0/24 maxlen: 24 110.164.14.0/24 maxlen: 24 110.164.17.0/24 maxlen: 24 110.164.21.0/24 maxlen: 24 110.164.28.0/24 maxlen: 24 110.164.40.0/24 maxlen: 24 110.164.41.0/24 maxlen: 24 171.4.0.0/14 maxlen: 17 180.183.0.0/16 maxlen: 17 183.88.0.0/15 maxlen: 17 223.204.0.0/14 maxlen: 17 2403:6200::/33 maxlen: 33 2403:6200:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 23:09:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2095 (0x82f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7561, serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04 Validity Not Before: Apr 29 03:45:47 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69f17eeb-2544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5e:00:0c:d0:b3:ec:e0:4d:18:99:06:46:07: 41:76:ac:75:ca:7c:d5:3e:57:5e:86:35:25:3b:33: 98:83:67:ad:77:83:d8:c3:d9:c6:49:1b:c1:0f:80: 1c:5a:fc:81:0a:2a:2c:38:d5:d9:20:de:4c:cf:08: 5e:87:1b:27:45:d6:dd:7f:74:d4:b8:54:49:ee:de: 85:9c:4f:40:eb:c7:bf:5d:fd:ce:1b:3a:40:cc:5d: 65:3a:0f:d1:8d:9c:cb:a3:14:65:33:ef:e0:8a:a8: 85:f7:75:3f:28:87:b1:41:17:98:78:33:45:54:49: a8:7c:e5:65:dd:79:11:ff:42:fb:64:ea:3c:17:46: 47:34:7a:02:8e:ba:1a:a8:28:62:e6:42:2c:d7:cf: dd:83:23:e8:69:ff:94:16:23:4a:0c:88:fd:26:38: c1:37:3d:f1:1a:86:7b:fe:c6:08:36:12:2d:fa:6b: b7:bc:75:43:dc:07:65:33:f0:93:aa:23:4c:e1:31: b5:d3:42:3d:99:9f:ed:79:18:02:13:e5:8c:b3:97: 11:7d:11:0e:31:1e:19:70:40:c7:8f:78:f8:43:55: 87:92:d6:06:7a:ea:4a:aa:8e:5d:6c:63:2b:f9:7d: bd:d4:c9:6d:2f:29:84:fd:2d:2c:c3:7f:04:cd:93: 58:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0E:AE:36:55:1E:4B:3D:C6:B8:DA:37:64:69:42:34:43:78:C4:B9 X509v3 Authority Key Identifier: keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/4235F184DACE11EE8E67437CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 14.207.0.0/16 27.130.0.0/16 43.245.144.0/22 49.48.0.0/15 103.16.204.0/22 110.164.0.0/16 171.4.0.0/14 180.183.0.0/16 183.88.0.0/15 223.204.0.0/14 IPv6: 2403:6200::/32 Signature Algorithm: sha256WithRSAEncryption 77:12:5c:b3:a2:d5:c4:09:a9:3a:8c:a4:74:21:f4:8c:0c:34: 38:69:39:fe:ed:25:ff:ae:64:a3:14:04:11:72:02:7d:66:b1: f8:e3:08:cb:d8:95:e7:cf:51:51:da:04:e8:a1:d6:b3:4b:39: 3a:9c:ce:d4:da:b3:5e:f7:38:13:ef:94:ca:ab:44:ad:07:77: 78:c8:f1:a0:d1:ef:e5:15:c1:3e:71:20:e4:0d:b6:80:ae:79: d0:59:c7:73:c2:f5:81:c4:76:fb:3b:f9:a6:5d:b0:33:20:35: 65:27:a4:db:8f:2e:98:1f:e9:41:48:a7:5b:16:66:2a:13:2f: 08:17:fc:e5:2d:4e:9c:6e:7e:d9:fa:fa:08:23:92:d7:2c:5d: c6:b6:6f:32:14:aa:61:93:34:d0:9a:4c:a6:de:3a:e1:7d:7f: 43:05:50:34:d5:ee:fc:6c:28:0c:9b:82:b0:3f:3c:d9:99:81: ef:76:df:34:0e:46:24:ee:5d:dc:87:2e:a2:1f:ae:ad:32:d8: 7f:fc:06:9d:67:28:a3:4f:9d:76:d2:d0:8f:05:23:e0:a4:c3: f5:3a:37:50:94:3f:d8:f3:98:9b:a9:b5:34:80:2d:f0:63:58: 61:f5:84:75:a4:1f:82:af:22:2a:1e:67:78:de:7c:05:61:f5: f7:0d:1a:f1 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICCC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc1NjExMTAvBgNVBAUTKDI1QkM3RDRERTc3QkQwMUIzRDE5MTU4NzY5NkU1QUZE RDhDRUNEMDQwHhcNMjYwNDI5MDM0NTQ3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWYxN2VlYi0yNTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv14ADNCz7OBNGJkGRgdBdqx1ynzVPldehjUlOzOYg2etd4PYw9nGSRvBD4Ac WvyBCiosONXZIN5MzwhehxsnRdbdf3TUuFRJ7t6FnE9A68e/Xf3OGzpAzF1lOg/R jZzLoxRlM+/giqiF93U/KIexQReYeDNFVEmofOVl3XkR/0L7ZOo8F0ZHNHoCjroa qChi5kIs18/dgyPoaf+UFiNKDIj9JjjBNz3xGoZ7/sYINhIt+mu3vHVD3AdlM/CT qiNM4TG100I9mZ/teRgCE+WMs5cRfREOMR4ZcEDHj3j4Q1WHktYGeupKqo5dbGMr +X291MltLymE/S0sw38EzZNY2wIDAQABo4ICnTCCApkwHQYDVR0OBBYEFAIOrjZV Hks9xrjaN2RpQjRDeMS5MB8GA1UdIwQYMBaAFCW8fU3ne9AbPRkVh2luWv3Yzs0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzU2MS9BMjZFMDZFMDA1 NEMxMUVDQkRCNEZFNDZDNEY5QUUwMi9KYng5VGVkNzBCczlHUldIYVc1YV9kak96 UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pieDlUZWQ3MEJzOUdSV0hhVzVhX2RqT3pRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTc1NjEvQTI2RTA2RTAwNTRDMTFFQ0JEQjRGRTQ2QzRGOUFFMDIvNDIzNUYxODRE QUNFMTFFRThFNjc0MzdDQzRGOUFFMDIucm9hMFwGCCsGAQUFBwEHAQH/BE0wSzA6 BAIAATA0AwMADs8DAwAbggMEAiv1kAMDATEwAwQCZxDMAwMAbqQDAwKrBAMDALS3 AwMBt1gDAwLfzDANBAIAAjAHAwUAJANiADANBgkqhkiG9w0BAQsFAAOCAQEAdxJc s6LVxAmpOoykdCH0jAw0OGk5/u0l/65koxQEEXICfWax+OMIy9iV589RUdoE6KHW s0s5OpzO1NqzXvc4E++UyqtErQd3eMjxoNHv5RXBPnEg5A22gK550FnHc8L1gcR2 +zv5pl2wMyA1ZSek248umB/pQUinWxZmKhMvCBf85S1OnG5+2fr6CCOS1yxdxrZv MhSqYZM00JpMpt464X1/QwVQNNXu/GwoDJuCsD882ZmB73bfNA5GJO5d3Icuoh+u rTLYf/wGnWcoo0+ddtLQjwUj4KTD9To3UJQ/2POYm6m1NIAt8GNYYfWEdaQfgq8i Kh5neN58BWH19w0a8Q== -----END CERTIFICATE-----Generated at Wed May 13 08:16:26 2026 by rpki-client