$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/699CD772C2B911EBBB4C8928C4F9AE02.roa File: 699CD772C2B911EBBB4C8928C4F9AE02.roa (raw, json) Hash identifier: 2i8qGpQRreTsgSwr4uVW47W52ezT0jaL1HVor/4n178= Subject key identifier: 7D:E6:1C:1B:C3:FB:99:67:43:57:21:A5:BB:58:8B:F3:52:E2:39:0D Certificate issuer: /CN=A91E9580/serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802 Certificate serial: 0A98 Authority key identifier: FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/699CD772C2B911EBBB4C8928C4F9AE02.roa Signing time: Mon 02 Mar 2026 11:29:37 +0000 ROA not before: Wed 04 Feb 2026 19:16:49 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 46015 IP address blocks: 42.1.60.0/22 maxlen: 22 43.252.212.0/22 maxlen: 24 103.6.196.0/22 maxlen: 24 110.4.40.0/21 maxlen: 21 110.4.40.0/24 maxlen: 24 110.4.41.0/24 maxlen: 24 110.4.42.0/24 maxlen: 24 110.4.43.0/24 maxlen: 24 110.4.44.0/24 maxlen: 24 110.4.45.0/24 maxlen: 24 110.4.46.0/24 maxlen: 24 110.4.47.0/24 maxlen: 24 117.53.152.0/22 maxlen: 22 123.100.224.0/24 maxlen: 24 203.142.4.0/24 maxlen: 24 2402:6c00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2712 (0xa98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9580, serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802 Validity Not Before: Feb 4 19:16:49 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a574a1-0a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:53:89:6d:eb:4c:9f:92:98:ed:31:7e:05:29: a1:40:7b:4d:d2:3d:8e:65:79:b8:c7:96:c4:bc:95: ac:62:55:72:11:42:59:73:4d:3c:94:37:c0:91:3a: 42:55:32:ca:a7:09:67:37:d7:b0:0f:b9:45:cc:2d: 0e:05:f8:32:9c:ab:52:58:6b:b6:a3:7b:aa:50:a5: d9:5d:d7:6f:cf:5b:ec:03:8d:39:97:01:20:eb:42: a1:b3:c7:c8:00:82:65:2a:0a:6e:1b:a0:a6:2c:ce: 6c:c3:de:4c:15:df:c5:75:23:8a:94:c5:0d:ec:77: 95:f4:f4:b4:24:b3:8b:92:3e:a0:d8:e5:f6:42:6b: 2f:3d:6b:cc:ca:fa:3d:dd:fb:c6:ae:28:aa:e6:0c: c9:cc:bc:16:02:44:11:ef:19:1b:26:5f:74:0e:c9: 98:9c:59:ef:50:b5:ef:94:8e:e1:fc:5a:7f:a7:f9: 28:60:e4:d4:f5:08:35:99:ca:86:b6:c0:bf:d4:98: f1:09:25:44:e1:93:18:38:f6:69:32:35:96:a6:57: 6f:f6:38:bc:4f:b7:4f:e7:80:75:c8:2e:f6:93:a1: 26:3e:03:60:88:ae:a1:23:63:5c:82:b1:0c:af:cf: a5:d1:dd:59:93:83:80:43:af:9e:b0:6d:cd:4d:ea: 46:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E6:1C:1B:C3:FB:99:67:43:57:21:A5:BB:58:8B:F3:52:E2:39:0D X509v3 Authority Key Identifier: keyid:FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/699CD772C2B911EBBB4C8928C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 42.1.60.0/22 43.252.212.0/22 103.6.196.0/22 110.4.40.0/21 117.53.152.0/22 123.100.224.0/24 203.142.4.0/24 IPv6: 2402:6c00::/32 Signature Algorithm: sha256WithRSAEncryption 09:39:75:f9:c7:e4:27:6a:bb:19:39:8c:f0:5d:7d:8b:a0:4d: 3b:91:ea:25:50:50:20:57:75:fc:a6:61:8d:be:d4:c5:a5:6a: fb:8a:df:6d:ee:48:69:2d:1e:71:5f:cf:db:71:48:83:5a:4c: 37:ab:c3:b3:9d:c1:9f:9b:e5:ed:dc:83:74:0f:3e:38:e8:ce: 63:70:1b:2f:55:0a:51:a3:19:aa:d3:8b:e0:97:fd:07:e1:aa: a4:08:85:13:66:e5:a9:10:ab:e3:bb:ae:e9:7e:a4:10:4f:cb: aa:15:2c:59:c4:a4:7b:b7:ba:5d:5b:5d:7d:cb:67:fd:a7:df: 83:55:1e:1e:52:9a:de:18:a5:65:a4:6f:3c:df:2a:d4:34:33: e8:8a:d5:20:8c:91:7b:f4:5a:66:1b:b9:2e:aa:e3:5a:70:1b: c5:3b:20:3b:da:37:e3:a9:58:d2:ec:fa:ac:0e:a9:c7:59:4f: 47:52:7b:0f:db:f4:33:7c:ed:80:7c:8b:a9:b5:62:3f:91:9e: 57:3a:be:4a:c7:7a:d3:e4:de:a3:5c:ea:ff:b1:00:0c:77:a0: 82:bb:ba:73:7d:4e:e2:7b:7a:9b:4f:8a:77:b6:cf:f6:3b:34: 41:63:73:85:85:0c:a8:ac:72:a7:e4:ab:b6:5c:0f:5b:37:8f: f4:f5:51:ef -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgICCpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk1ODAxMTAvBgNVBAUTKEZFNEZEQTM5NjcwMTZDMTEzQUM4MDdCODQ5MzQwQUM2 NTIwRjA4MDIwHhcNMjYwMjA0MTkxNjQ5WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1NzRhMS0wYTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhFOJbetMn5KY7TF+BSmhQHtN0j2OZXm4x5bEvJWsYlVyEUJZc008lDfAkTpC VTLKpwlnN9ewD7lFzC0OBfgynKtSWGu2o3uqUKXZXddvz1vsA405lwEg60Khs8fI AIJlKgpuG6CmLM5sw95MFd/FdSOKlMUN7HeV9PS0JLOLkj6g2OX2QmsvPWvMyvo9 3fvGriiq5gzJzLwWAkQR7xkbJl90DsmYnFnvULXvlI7h/Fp/p/koYOTU9Qg1mcqG tsC/1JjxCSVE4ZMYOPZpMjWWpldv9ji8T7dP54B1yC72k6EmPgNgiK6hI2NcgrEM r8+l0d1Zk4OAQ6+esG3NTepGvQIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFH3mHBvD +5lnQ1chpbtYi/NS4jkNMB8GA1UdIwQYMBaAFP5P2jlnAWwROsgHuEk0CsZSDwgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTU4MC9DN0NFMkUxMDdG OEQxMUVBQUQ4Q0Q1MUVDNEY5QUUwMi9fa19hT1djQmJCRTZ5QWU0U1RRS3hsSVBD QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19rX2FPV2NCYkJFNnlBZTRTVFFLeGxJUENBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTk1ODAvQzdDRTJFMTA3RjhEMTFFQUFEOENENTFFQzRGOUFFMDIvNjk5Q0Q3NzJD MkI5MTFFQkJCNEM4OTI4QzRGOUFFMDIucm9hMFIGCCsGAQUFBwEHAQH/BEMwQTAw BAIAATAqAwQCKgE8AwQCK/zUAwQCZwbEAwQDbgQoAwQCdTWYAwQAe2TgAwQAy44E MA0EAgACMAcDBQAkAmwAMA0GCSqGSIb3DQEBCwUAA4IBAQAJOXX5x+QnarsZOYzw XX2LoE07keolUFAgV3X8pmGNvtTFpWr7it9t7khpLR5xX8/bcUiDWkw3q8OzncGf m+Xt3IN0Dz446M5jcBsvVQpRoxmq04vgl/0H4aqkCIUTZuWpEKvju67pfqQQT8uq FSxZxKR7t7pdW119y2f9p9+DVR4eUpreGKVlpG883yrUNDPoitUgjJF79FpmG7ku quNacBvFOyA72jfjqVjS7PqsDqnHWU9HUnsP2/QzfO2AfIuptWI/kZ5XOr5Kx3rT 5N6jXOr/sQAMd6CCu7pzfU7ie3qbT4p3ts/2OzRBY3OFhQyorHKn5Ku2XA9bN4/0 9VHv -----END CERTIFICATE-----Generated at Thu Mar 26 06:54:30 2026 by rpki-client