$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/F760C48ACE0111EB980FBD53C4F9AE02.roa File: F760C48ACE0111EB980FBD53C4F9AE02.roa (raw, json) Hash identifier: r0lCb8PmrHuRVFml8CXtx2AwxypyCR8m21BT5Lcfkrs= Subject key identifier: 71:B0:20:DD:38:8B:0C:E4:07:6D:D7:E5:4E:81:02:65:4C:DF:22:50 Certificate issuer: /CN=A91ECD98/serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73 Certificate serial: 0AF5 Authority key identifier: 41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/F760C48ACE0111EB980FBD53C4F9AE02.roa Signing time: Sun 22 Mar 2026 19:25:22 +0000 ROA not before: Sun 22 Mar 2026 19:25:22 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 135125 IP address blocks: 45.250.20.0/22 maxlen: 22 45.250.20.0/23 maxlen: 23 45.250.20.0/24 maxlen: 24 45.250.21.0/24 maxlen: 24 45.250.22.0/23 maxlen: 23 45.250.22.0/24 maxlen: 24 45.250.23.0/24 maxlen: 24 103.210.16.0/22 maxlen: 22 103.210.16.0/23 maxlen: 23 103.210.16.0/24 maxlen: 24 103.210.17.0/24 maxlen: 24 103.210.18.0/23 maxlen: 23 103.210.18.0/24 maxlen: 24 103.210.19.0/24 maxlen: 24 2401:940::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.crl rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2805 (0xaf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECD98, serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73 Validity Not Before: Mar 22 19:25:22 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69c04222-f679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:01:fc:83:06:40:2f:ba:29:9b:c9:be:c5:ff: b4:5c:b9:fc:4f:35:24:e0:d6:60:04:2a:e7:04:a2: e6:88:96:4f:5f:f9:c1:f7:87:a4:c4:5c:87:09:7f: 68:de:3b:51:45:a6:9f:92:1b:7d:8c:b2:4d:78:0a: 60:48:d8:0f:dd:4a:20:e2:75:b9:a8:b0:7e:e1:89: dd:f0:b6:ba:b2:9c:a6:45:4b:07:14:b9:71:1b:68: c4:81:db:f2:c1:ec:ad:85:8f:25:9d:a2:26:46:e2: 55:79:2b:81:92:34:be:cb:3f:c8:a1:d6:a5:ec:a9: a0:13:f7:51:ca:56:c8:f8:0d:38:f1:bd:19:67:eb: ca:61:4e:c4:aa:7a:7e:68:df:31:7e:91:0d:55:98: df:52:14:11:5c:21:06:54:0b:f2:d0:2e:77:b0:08: cf:ec:13:3a:2e:c9:64:4a:88:ae:3d:e1:6e:70:b6: 3f:7e:e2:7b:6e:13:0d:7f:cf:e4:9c:4b:c3:7f:10: 3f:8c:16:61:44:53:8c:51:53:59:52:cd:a1:61:5a: 71:8e:dd:49:f8:f4:54:9b:03:ac:66:2c:ab:f9:57: 31:dc:78:3e:77:de:4c:55:e7:ab:ad:be:3e:3f:1b: de:f4:26:b4:2c:92:74:2d:fa:5c:d8:b5:e8:2b:dd: 1b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B0:20:DD:38:8B:0C:E4:07:6D:D7:E5:4E:81:02:65:4C:DF:22:50 X509v3 Authority Key Identifier: keyid:41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/F760C48ACE0111EB980FBD53C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.250.20.0/22 103.210.16.0/22 IPv6: 2401:940::/32 Signature Algorithm: sha256WithRSAEncryption d8:48:ea:a9:fc:4a:56:98:4b:9e:9a:5d:d3:7d:30:c6:73:93: 12:05:c3:b3:b4:ad:d0:89:30:82:8a:4c:6a:46:5d:73:46:18: 83:af:71:97:67:05:2f:99:c9:da:20:e5:4d:a0:9b:2d:19:c8: 26:65:c2:d8:80:b1:c9:15:5a:b6:d8:df:6c:5c:29:6b:da:8e: f8:e6:63:a4:33:28:87:34:09:5b:fc:2e:9d:31:ea:55:7f:44: 21:de:36:c4:27:20:00:5c:3a:be:73:7b:9b:13:b0:2e:a9:dd: af:fb:c6:5c:27:da:e1:7f:9a:9f:ba:f8:77:e4:3e:5e:e5:c6: 0c:ad:22:42:1a:2a:de:7a:41:ea:cf:2d:ed:5e:db:6f:55:c4: df:4e:63:4b:23:e1:5b:fd:c6:f3:e7:20:81:74:d7:25:36:85: b6:5c:86:90:56:5e:5b:75:23:a2:82:e8:7e:6c:40:7c:00:cf: a5:88:04:80:1c:f1:c6:aa:ab:3f:e2:2f:31:34:70:f9:e0:68: ef:33:42:fb:5a:0f:b5:72:35:93:c8:ba:e3:06:fc:67:ed:9d: e1:c6:30:f8:33:fe:c0:54:52:49:f5:7a:e2:ed:57:37:81:77: a1:7a:33:b7:00:45:81:1b:15:ff:cd:1c:f9:92:b6:53:d4:25: 59:8b:50:7c -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNEOTgxMTAvBgNVBAUTKDQxQzY1QzAwRjBBNkIwN0QzQzBGNkIxMjkwNTY0RkJG ODM4MkRBNzMwHhcNMjYwMzIyMTkyNTIyWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWMwNDIyMi1mNjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5QH8gwZAL7opm8m+xf+0XLn8TzUk4NZgBCrnBKLmiJZPX/nB94ekxFyHCX9o 3jtRRaafkht9jLJNeApgSNgP3Uog4nW5qLB+4Ynd8La6spymRUsHFLlxG2jEgdvy weythY8lnaImRuJVeSuBkjS+yz/Iodal7KmgE/dRylbI+A048b0ZZ+vKYU7Eqnp+ aN8xfpENVZjfUhQRXCEGVAvy0C53sAjP7BM6LslkSoiuPeFucLY/fuJ7bhMNf8/k nEvDfxA/jBZhRFOMUVNZUs2hYVpxjt1J+PRUmwOsZiyr+Vcx3Hg+d95MVeerrb4+ Pxve9Ca0LJJ0Lfpc2LXoK90bCQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFHGwIN04 iwzkB23X5U6BAmVM3yJQMB8GA1UdIwQYMBaAFEHGXADwprB9PA9rEpBWT7+Dgtpz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0Q5OC83ODAyMDQ4QTY2 QTQxMUVBOEZDQjJCNkZDNEY5QUUwMi9RY1pjQVBDbXNIMDhEMnNTa0ZaUHY0T0My bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FjWmNBUENtc0gwOEQyc1NrRlpQdjRPQzJuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUNEOTgvNzgwMjA0OEE2NkE0MTFFQThGQ0IyQjZGQzRGOUFFMDIvRjc2MEM0OEFD RTAxMTFFQjk4MEZCRDUzQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCLfoUAwQCZ9IQMA0EAgACMAcDBQAkAQlAMA0GCSqGSIb3DQEBCwUA A4IBAQDYSOqp/EpWmEueml3TfTDGc5MSBcOztK3QiTCCikxqRl1zRhiDr3GXZwUv mcnaIOVNoJstGcgmZcLYgLHJFVq22N9sXClr2o745mOkMyiHNAlb/C6dMepVf0Qh 3jbEJyAAXDq+c3ubE7Auqd2v+8ZcJ9rhf5qfuvh35D5e5cYMrSJCGireekHqzy3t XttvVcTfTmNLI+Fb/cbz5yCBdNclNoW2XIaQVl5bdSOiguh+bEB8AM+liASAHPHG qqs/4i8xNHD54GjvM0L7Wg+1cjWTyLrjBvxn7Z3hxjD4M/7AVFJJ9Xri7Vc3gXeh ejO3AEWBGxX/zRz5krZT1CVZi1B8 -----END CERTIFICATE-----Generated at Thu Mar 26 12:41:21 2026 by rpki-client