$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/44A5887E974011EF8FD14F42C4F9AE02.roa File: 44A5887E974011EF8FD14F42C4F9AE02.roa (raw, json) Hash identifier: 1FvqcPFNxP5aJfOWJT4ukUS3AH7RPWYI9Od/FbL+7ho= Subject key identifier: 0E:D1:22:FA:75:53:88:27:7F:50:4C:17:3D:DA:6A:62:0F:E1:F7:DF Certificate issuer: /CN=A91F6FC3/serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7 Certificate serial: 3563 Authority key identifier: 66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/44A5887E974011EF8FD14F42C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:26:18 +0000 ROA not before: Wed 26 Nov 2025 15:00:44 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 10083 IP address blocks: 122.200.172.0/24 maxlen: 24 122.200.175.0/24 maxlen: 24 203.5.127.0/24 maxlen: 24 203.33.71.0/24 maxlen: 24 203.55.18.0/24 maxlen: 24 203.57.78.0/24 maxlen: 24 2402:5600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13667 (0x3563) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6FC3, serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7 Validity Not Before: Nov 26 15:00:44 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a45a9a-81fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4c:62:93:77:56:8a:cd:d3:58:23:74:c6:cb: 18:b0:41:b2:ef:2d:84:19:e8:21:30:f8:fb:98:ce: 3d:78:2d:43:00:32:ce:8a:1e:5f:59:9c:3e:bb:7c: e5:07:81:e4:74:8d:1b:91:e0:7a:b4:89:89:93:bf: 61:02:a3:23:f9:b3:60:73:22:40:c3:e1:50:f7:cf: 5d:e4:52:dc:93:60:44:11:29:cb:ad:1c:9a:ce:9b: 46:de:b1:7e:d4:9f:a3:ad:90:e0:e3:4f:41:81:31: 30:9e:3e:23:d7:05:02:00:c4:6f:3b:c6:b7:94:db: de:0f:cb:68:4a:8a:68:cb:62:57:d2:3b:05:1a:f3: d1:fd:51:07:56:b0:24:5f:4c:76:2a:9e:b5:82:d7: a1:a5:75:e7:e5:11:60:77:2d:6b:e9:ea:cf:61:1e: ce:b6:bf:ad:33:ca:45:2d:a7:ae:61:27:8c:b1:fb: 25:66:83:5f:27:5c:e2:d2:99:4f:9f:80:26:28:3c: 0b:64:a3:f2:e7:34:71:c0:64:08:1f:2b:db:cf:30: 86:af:88:b1:ed:89:a6:c5:2a:0d:b6:31:2f:c5:d5: ae:e7:fd:b3:c2:f1:de:90:51:de:db:8d:9e:0d:90: cf:90:3d:20:78:c4:be:43:df:a9:c5:9b:50:fb:49: 3e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D1:22:FA:75:53:88:27:7F:50:4C:17:3D:DA:6A:62:0F:E1:F7:DF X509v3 Authority Key Identifier: keyid:66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/44A5887E974011EF8FD14F42C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 122.200.172.0/24 122.200.175.0/24 203.5.127.0/24 203.33.71.0/24 203.55.18.0/24 203.57.78.0/24 IPv6: 2402:5600::/32 Signature Algorithm: sha256WithRSAEncryption 29:38:7b:18:52:52:18:5a:fc:93:dc:fa:cc:14:d5:82:91:0f: 8c:0f:14:2f:29:e7:6b:92:64:7c:f2:de:d8:3d:b0:c8:a0:e5: 55:90:42:a3:44:43:ac:62:d9:c4:72:fc:21:e9:5e:d7:51:00: 11:3a:f8:3d:3d:43:c3:0f:0d:28:b1:22:cf:a9:c3:31:7f:9b: e0:24:3a:93:92:dd:8b:fb:34:72:e3:50:79:0d:a4:1a:f5:05: 21:a2:c8:ae:0c:02:9f:38:a1:71:c1:ef:01:6b:44:26:30:b2: 6d:68:e7:53:87:bc:c2:9a:2b:a3:e8:0f:3d:6f:de:da:05:da: f9:3e:a3:b9:99:ba:8f:4f:25:42:63:2c:d3:37:1c:71:92:57: a7:08:4f:34:49:87:6d:08:81:60:d3:f2:be:dd:b4:b6:06:bd: f2:ba:ea:a2:8c:fb:c3:b9:d1:32:4a:df:bd:75:ed:3d:66:1a: 9c:2e:b1:dc:bf:37:db:cd:30:2e:08:cb:c3:de:cf:a6:00:85: ac:c9:66:6c:45:56:cd:61:80:4f:16:ee:fe:a1:74:f5:fd:ed: 7a:f0:18:1b:52:40:f0:3a:51:ba:22:7b:40:8c:e5:08:3e:95: 61:5d:d3:a4:81:55:57:f3:5e:26:ac:c5:ff:04:3a:a8:b1:ca: 9c:83:dc:7a -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgICNWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZGQzMxMTAvBgNVBAUTKDY2MDI1OTc2Qjc1RjVDMjlGNDJDMUQ4MENGNDg4OEY3 RDQ2MDU4RDcwHhcNMjUxMTI2MTUwMDQ0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWE5YS04MWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmUxik3dWis3TWCN0xssYsEGy7y2EGeghMPj7mM49eC1DADLOih5fWZw+u3zl B4HkdI0bkeB6tImJk79hAqMj+bNgcyJAw+FQ989d5FLck2BEESnLrRyazptG3rF+ 1J+jrZDg409BgTEwnj4j1wUCAMRvO8a3lNveD8toSopoy2JX0jsFGvPR/VEHVrAk X0x2Kp61gtehpXXn5RFgdy1r6erPYR7Otr+tM8pFLaeuYSeMsfslZoNfJ1zi0plP n4AmKDwLZKPy5zRxwGQIHyvbzzCGr4ix7YmmxSoNtjEvxdWu5/2zwvHekFHe242e DZDPkD0geMS+Q9+pxZtQ+0k+fwIDAQABo4ICjTCCAokwHQYDVR0OBBYEFA7RIvp1 U4gnf1BMFz3aamIP4fffMB8GA1UdIwQYMBaAFGYCWXa3X1wp9CwdgM9IiPfUYFjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkZDMy9GQzkwNzgwMjFE OTIxMUUyQjNCQzJDRjYwOEIwMkNEMi9aZ0paZHJkZlhDbjBMQjJBejBpSTk5UmdX TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnSlpkcmRmWENuMExCMkF6MGlJOTlSZ1dOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjZGQzMvRkM5MDc4MDIxRDkyMTFFMkIzQkMyQ0Y2MDhCMDJDRDIvNDRBNTg4N0U5 NzQwMTFFRjhGRDE0RjQyQzRGOUFFMDIucm9hMEwGCCsGAQUFBwEHAQH/BD0wOzAq BAIAATAkAwQAesisAwQAesivAwQAywV/AwQAyyFHAwQAyzcSAwQAyzlOMA0EAgAC MAcDBQAkAlYAMA0GCSqGSIb3DQEBCwUAA4IBAQApOHsYUlIYWvyT3PrMFNWCkQ+M DxQvKedrkmR88t7YPbDIoOVVkEKjREOsYtnEcvwh6V7XUQAROvg9PUPDDw0osSLP qcMxf5vgJDqTkt2L+zRy41B5DaQa9QUhosiuDAKfOKFxwe8Ba0QmMLJtaOdTh7zC miuj6A89b97aBdr5PqO5mbqPTyVCYyzTNxxxklenCE80SYdtCIFg0/K+3bS2Br3y uuqijPvDudEySt+9de09ZhqcLrHcvzfbzTAuCMvD3s+mAIWsyWZsRVbNYYBPFu7+ oXT1/e168BgbUkDwOlG6IntAjOUIPpVhXdOkgVVX814mrMX/BDqoscqcg9x6 -----END CERTIFICATE-----Generated at Thu Mar 26 08:23:21 2026 by rpki-client