$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/763018B4D29811ED8CDDB83AC4F9AE02.roa File: 763018B4D29811ED8CDDB83AC4F9AE02.roa (raw, json) Hash identifier: UX+qMbeQlpG5kStqpP1sWnIxIJJC0M5XDnMSMifAxlc= Subject key identifier: E6:2F:E4:8C:0E:D6:10:4D:A7:A3:7B:74:95:9E:87:DB:27:82:29:EA Certificate issuer: /CN=A91EDADE/serialNumber=A60F8DA478BD772F4F2B3E4C79D5C181DDE56893 Certificate serial: 0227 Authority key identifier: A6:0F:8D:A4:78:BD:77:2F:4F:2B:3E:4C:79:D5:C1:81:DD:E5:68:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/763018B4D29811ED8CDDB83AC4F9AE02.roa Signing time: Sun 01 Mar 2026 10:12:47 +0000 ROA not before: Thu 13 Nov 2025 01:18:17 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 45352 IP address blocks: 58.84.40.0/22 maxlen: 22 58.84.40.0/24 maxlen: 24 58.84.41.0/24 maxlen: 24 58.84.42.0/24 maxlen: 24 58.84.43.0/24 maxlen: 24 103.197.56.0/22 maxlen: 22 103.197.56.0/24 maxlen: 24 103.197.57.0/24 maxlen: 24 103.197.58.0/24 maxlen: 24 103.197.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.crl rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDADE, serialNumber=A60F8DA478BD772F4F2B3E4C79D5C181DDE56893 Validity Not Before: Nov 13 01:18:17 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a4111f-b5a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f9:98:8c:1a:68:0f:0d:d8:c3:d3:7b:cb:10: 34:c5:51:44:21:56:bc:69:1c:fc:e0:31:20:a7:89: 6d:7f:f6:f6:b7:68:ba:0e:23:8b:50:8c:44:22:6c: b9:24:dc:a6:57:86:1d:c9:69:d6:d4:e0:ef:b6:de: 60:99:e0:99:ed:ed:8b:3c:b6:b3:ce:46:8e:55:bd: 33:22:50:d9:de:90:dd:ec:0c:b3:d4:96:fc:e3:55: a1:5d:f3:f3:1f:67:d3:ef:f5:90:9d:63:39:a2:02: a6:47:f8:4d:0e:13:25:9d:dc:96:77:3b:88:fc:38: 0f:43:a3:fe:28:12:7a:71:d2:6f:94:06:eb:84:2b: 2c:05:8a:25:33:d6:c9:67:3b:39:43:4b:0a:2e:0f: 58:d9:94:78:c0:c5:92:d5:41:b1:b2:76:7e:eb:e9: a3:2a:4b:b1:8c:84:23:1e:94:e7:a0:e9:18:ce:dc: 84:45:09:c2:5c:cc:08:3c:df:8f:68:7d:33:a2:6a: 32:e5:50:aa:24:b0:3f:bf:ee:35:48:53:df:42:8e: e8:b5:17:7f:b6:2a:ad:8f:3c:3c:74:2f:b6:6d:42: f8:a9:f2:3d:6a:9c:5e:87:d9:b6:25:13:25:64:d1: ef:8f:94:6b:82:d5:66:0c:4d:c9:13:d0:91:e0:4d: a6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:2F:E4:8C:0E:D6:10:4D:A7:A3:7B:74:95:9E:87:DB:27:82:29:EA X509v3 Authority Key Identifier: keyid:A6:0F:8D:A4:78:BD:77:2F:4F:2B:3E:4C:79:D5:C1:81:DD:E5:68:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/763018B4D29811ED8CDDB83AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 58.84.40.0/22 103.197.56.0/22 Signature Algorithm: sha256WithRSAEncryption a0:f2:70:e1:c9:97:14:fb:40:1e:60:1a:df:2d:93:dc:47:b0: 45:19:2e:d5:8e:5a:65:d6:75:30:34:d2:bc:dc:6b:60:38:0a: da:40:4c:2a:35:1a:b8:22:b7:23:f7:fc:19:34:64:8d:89:19: 2f:f4:2d:ab:47:30:a0:f0:08:d5:d2:11:0e:27:1d:f8:74:21: c2:96:cb:b4:4e:d1:af:9f:c0:4c:d4:5d:51:44:47:22:07:a4: 0d:83:d2:d7:e1:6c:e8:51:07:6b:cf:71:e5:ce:68:05:db:44: 15:f3:f3:14:99:e2:ea:dc:b4:aa:63:70:6a:09:11:88:9a:8b: 10:e7:d6:89:6b:ba:58:9b:fa:f6:ba:5b:01:c5:80:f1:d5:79: 65:af:7d:35:b7:0e:6d:f2:31:ba:e0:3f:1e:ac:b6:a4:84:28: 01:68:6e:e2:49:ce:5e:53:db:53:f0:e2:c3:69:e9:d7:6c:59: 5b:da:30:87:46:24:b9:d3:57:0e:8c:45:02:3c:aa:ab:57:ab: 25:17:ac:25:6d:b8:5c:8e:ff:05:d0:32:99:6f:43:08:6a:33: 5c:4c:e9:00:a4:42:c2:c9:90:db:ae:87:b5:81:32:db:e8:66: f4:f4:e9:d2:1e:59:9e:96:cf:9b:e0:7d:43:4b:f4:e0:4d:33: e9:1d:54:ca -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURBREUxMTAvBgNVBAUTKEE2MEY4REE0NzhCRDc3MkY0RjJCM0U0Qzc5RDVDMTgx RERFNTY4OTMwHhcNMjUxMTEzMDExODE3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTExZi1iNWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPmYjBpoDw3Yw9N7yxA0xVFEIVa8aRz84DEgp4ltf/b2t2i6DiOLUIxEImy5 JNymV4YdyWnW1ODvtt5gmeCZ7e2LPLazzkaOVb0zIlDZ3pDd7Ayz1Jb841WhXfPz H2fT7/WQnWM5ogKmR/hNDhMlndyWdzuI/DgPQ6P+KBJ6cdJvlAbrhCssBYolM9bJ Zzs5Q0sKLg9Y2ZR4wMWS1UGxsnZ+6+mjKkuxjIQjHpTnoOkYztyERQnCXMwIPN+P aH0zomoy5VCqJLA/v+41SFPfQo7otRd/tiqtjzw8dC+2bUL4qfI9apxeh9m2JRMl ZNHvj5RrgtVmDE3JE9CR4E2mSQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFOYv5IwO 1hBNp6N7dJWeh9snginqMB8GA1UdIwQYMBaAFKYPjaR4vXcvTys+THnVwYHd5WiT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREFERS83MDk4RjREQ0Qy OTUxMUVEQTI0MTg0MzlDNEY5QUUwMi9wZy1OcEhpOWR5OVBLejVNZWRYQmdkM2xh Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BnLU5wSGk5ZHk5UEt6NU1lZFhCZ2QzbGFKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RURBREUvNzA5OEY0RENEMjk1MTFFREEyNDE4NDM5QzRGOUFFMDIvNzYzMDE4QjRE Mjk4MTFFRDhDRERCODNBQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCOlQoAwQCZ8U4MA0GCSqGSIb3DQEBCwUAA4IBAQCg8nDhyZcU+0Ae YBrfLZPcR7BFGS7Vjlpl1nUwNNK83GtgOAraQEwqNRq4Ircj9/wZNGSNiRkv9C2r RzCg8AjV0hEOJx34dCHClsu0TtGvn8BM1F1RREciB6QNg9LX4WzoUQdrz3HlzmgF 20QV8/MUmeLq3LSqY3BqCRGImosQ59aJa7pYm/r2ulsBxYDx1Xllr301tw5t8jG6 4D8erLakhCgBaG7iSc5eU9tT8OLDaenXbFlb2jCHRiS501cOjEUCPKqrV6slF6wl bbhcjv8F0DKZb0MIajNcTOkApELCyZDbroe1gTLb6Gb09OnSHlmels+b4H1DS/Tg TTPpHVTK -----END CERTIFICATE-----Generated at Thu Mar 26 23:22:42 2026 by rpki-client