$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/F63AA888900F11ED8B4CB41DC4F9AE02.roa File: F63AA888900F11ED8B4CB41DC4F9AE02.roa (raw, json) Hash identifier: MEZBYUD5FqO/c2lwUKhY6AyLEguQGUqvgydiauMWIwc= Subject key identifier: 35:63:7F:C9:84:0D:61:FC:15:28:FA:76:B7:E6:CB:1E:39:B4:0F:92 Certificate issuer: /CN=A91E9467/serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Certificate serial: 0544 Authority key identifier: 52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/F63AA888900F11ED8B4CB41DC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:48:01 +0000 ROA not before: Sun 01 Jun 2025 00:34:14 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 133660 IP address blocks: 45.112.200.0/22 maxlen: 22 45.112.200.0/23 maxlen: 23 45.112.200.0/24 maxlen: 24 45.112.201.0/24 maxlen: 24 45.112.202.0/23 maxlen: 23 45.112.202.0/24 maxlen: 24 45.112.203.0/24 maxlen: 24 103.42.84.0/22 maxlen: 22 103.42.84.0/23 maxlen: 23 103.42.84.0/24 maxlen: 24 103.42.85.0/24 maxlen: 24 103.42.86.0/23 maxlen: 23 103.42.86.0/24 maxlen: 24 103.42.87.0/24 maxlen: 24 2406:640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1348 (0x544) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9467, serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Validity Not Before: Jun 1 00:34:14 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a45fb1-9f96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d4:ba:3f:9f:6b:e3:d1:8b:81:58:16:0a:d1: c9:e1:7f:a2:91:2c:20:67:81:f1:3e:a6:96:45:6a: 27:2a:94:04:28:94:09:ed:44:a6:a0:cd:2f:c2:3d: 7d:af:d5:47:1b:28:9c:db:f5:df:b8:9f:6b:1f:3f: 31:db:f2:04:4f:99:e7:67:85:13:e1:f5:56:b3:56: ff:8c:85:05:0b:a8:eb:20:98:5d:eb:b3:2f:bb:67: e0:ad:b4:d5:d7:4a:15:8a:48:98:94:e9:dd:55:8d: 7a:ad:2a:61:f2:df:20:20:16:7c:ca:9a:3f:fc:95: b9:8c:cf:01:fe:c0:b7:b9:76:f7:c1:cf:07:3c:1b: 16:88:30:d7:ec:64:3e:6b:c0:56:e5:e8:4f:da:20: 2b:45:48:6c:98:85:ee:39:92:0c:b1:4f:b2:9c:ca: 2e:42:85:2f:1f:31:e4:b6:9e:c3:37:f6:b7:6d:79: 89:c1:5d:28:12:96:15:1a:be:92:40:37:4b:ca:6e: f6:21:60:83:37:b2:90:ed:c1:42:b4:37:66:a2:34: 9a:5a:a0:69:71:b2:95:d2:86:9a:35:3c:cf:7b:a9: e9:af:ba:0d:5e:8b:20:47:73:8d:5f:84:de:a0:a9: 2a:c5:3a:01:b1:29:38:19:9f:3a:63:5f:64:97:55: 0c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:63:7F:C9:84:0D:61:FC:15:28:FA:76:B7:E6:CB:1E:39:B4:0F:92 X509v3 Authority Key Identifier: keyid:52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/F63AA888900F11ED8B4CB41DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.112.200.0/22 103.42.84.0/22 IPv6: 2406:640::/32 Signature Algorithm: sha256WithRSAEncryption a6:be:af:4f:b3:f2:5b:d2:19:52:80:2e:4f:d4:c5:5d:23:e2: 9a:ac:0d:47:77:b0:b8:1c:e3:cf:87:a5:23:4c:5a:10:82:64: 6a:81:b2:30:90:ce:9f:88:14:81:81:d6:4f:27:73:b3:72:08: f4:e1:2c:bf:8b:40:6a:ee:5e:7f:6c:50:a1:d5:b7:73:f1:43: fb:df:f2:08:81:70:49:bc:e6:26:52:cb:88:3f:ba:a9:b0:51: 30:e9:b8:bf:cc:0e:fa:d6:82:dc:f1:05:9d:cc:b2:04:ae:5e: 4f:1f:e4:7f:1f:0f:a9:b1:c7:ae:93:02:f4:20:46:42:0a:ed: f2:6c:de:fd:36:1a:79:9d:e4:c5:9a:0f:d4:00:4d:51:5f:f4: 1b:b2:0c:34:30:1c:5a:1b:0b:67:b1:df:c8:5d:74:b7:a4:ce: 62:ba:32:78:92:1c:53:f3:c0:4f:95:5f:9d:23:d8:76:84:3d: 8d:e7:a6:8c:71:fc:d5:eb:9f:4f:ce:5c:f6:76:27:9d:bb:ca: 3b:2a:cd:3b:fd:52:34:c1:8e:da:5d:c9:b1:82:18:86:67:87: 6f:cb:46:43:bf:6e:21:f2:cd:25:4c:2b:15:5b:2c:9a:af:7b: 25:c8:d9:4b:1c:10:ff:d2:3f:82:09:71:83:77:b0:1f:74:5f: 22:d5:fe:93 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICBUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0NjcxMTAvBgNVBAUTKDUyQkU5RERFOTU2OEZFNEFEQ0EwRjM0NUIzNjE3QTYz QzMwNzU4NDUwHhcNMjUwNjAxMDAzNDE0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWZiMS05Zjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtS6P59r49GLgVgWCtHJ4X+ikSwgZ4HxPqaWRWonKpQEKJQJ7USmoM0vwj19 r9VHGyic2/XfuJ9rHz8x2/IET5nnZ4UT4fVWs1b/jIUFC6jrIJhd67Mvu2fgrbTV 10oVikiYlOndVY16rSph8t8gIBZ8ypo//JW5jM8B/sC3uXb3wc8HPBsWiDDX7GQ+ a8BW5ehP2iArRUhsmIXuOZIMsU+ynMouQoUvHzHktp7DN/a3bXmJwV0oEpYVGr6S QDdLym72IWCDN7KQ7cFCtDdmojSaWqBpcbKV0oaaNTzPe6npr7oNXosgR3ONX4Te oKkqxToBsSk4GZ86Y19kl1UMyQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFDVjf8mE DWH8FSj6drfmyx45tA+SMB8GA1UdIwQYMBaAFFK+nd6VaP5K3KDzRbNhemPDB1hF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTQ2Ny83NzBCNEYxQTUy NkYxMUVDQkM1MEVCMTdDNEY5QUUwMi9VcjZkM3BWb19rcmNvUE5GczJGNlk4TUhX RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyNmQzcFZvX2tyY29QTkZzMkY2WThNSFdFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTk0NjcvNzcwQjRGMUE1MjZGMTFFQ0JDNTBFQjE3QzRGOUFFMDIvRjYzQUE4ODg5 MDBGMTFFRDhCNENCNDFEQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCLXDIAwQCZypUMA0EAgACMAcDBQAkBgZAMA0GCSqGSIb3DQEBCwUA A4IBAQCmvq9Ps/Jb0hlSgC5P1MVdI+KarA1Hd7C4HOPPh6UjTFoQgmRqgbIwkM6f iBSBgdZPJ3Ozcgj04Sy/i0Bq7l5/bFCh1bdz8UP73/IIgXBJvOYmUsuIP7qpsFEw 6bi/zA761oLc8QWdzLIErl5PH+R/Hw+psceukwL0IEZCCu3ybN79Nhp5neTFmg/U AE1RX/Qbsgw0MBxaGwtnsd/IXXS3pM5iujJ4khxT88BPlV+dI9h2hD2N56aMcfzV 659Pzlz2diedu8o7Ks07/VI0wY7aXcmxghiGZ4dvy0ZDv24h8s0lTCsVWyyar3sl yNlLHBD/0j+CCXGDd7AfdF8i1f6T -----END CERTIFICATE-----Generated at Thu Mar 26 11:12:02 2026 by rpki-client