$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9FE80B2898F711EE87DF6E1FC4F9AE02.roa File: 9FE80B2898F711EE87DF6E1FC4F9AE02.roa (raw, json) Hash identifier: arCyI6WOk9LgFnQELoYxClkR3V434NgEayNtabuOGMQ= Subject key identifier: D3:A9:F1:95:A9:72:A2:2A:E0:5D:67:9B:45:E3:A4:24:B3:93:42:31 Certificate issuer: /CN=A91FA5A2/serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Certificate serial: 01BC Authority key identifier: F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9FE80B2898F711EE87DF6E1FC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:21:32 +0000 ROA not before: Sat 17 May 2025 05:04:46 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 140577 IP address blocks: 61.16.24.0/22 maxlen: 24 103.150.140.0/23 maxlen: 23 103.150.140.0/24 maxlen: 24 103.150.141.0/24 maxlen: 24 202.8.40.0/22 maxlen: 24 202.94.84.0/23 maxlen: 24 2001:df3:7c80::/48 maxlen: 48 2401:59a0::/32 maxlen: 32 2401:59a0::/48 maxlen: 48 2401:59a0:1::/48 maxlen: 48 2401:59a0:2::/48 maxlen: 48 2401:59a0:3::/48 maxlen: 48 2401:59a0:4::/48 maxlen: 48 2401:59a0:5::/48 maxlen: 48 2401:59a0:6::/48 maxlen: 48 2401:59a0:7::/48 maxlen: 48 2401:59a0:8::/46 maxlen: 46 2401:59a0:c::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA5A2, serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Validity Not Before: May 17 05:04:46 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a4213c-eac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9b:34:ca:df:0e:f0:37:1f:4f:5f:c4:8c:c0: 63:93:d0:29:27:68:52:f5:f6:f2:0c:71:82:14:b0: b2:c5:43:2f:a0:78:ec:43:04:7a:69:b7:dd:07:9f: ff:a4:49:7d:79:00:63:81:1b:0f:4f:ce:c3:9f:11: 29:2a:e9:7c:15:81:e6:bb:ec:52:cf:5e:84:16:85: ea:85:c2:a7:9e:8c:fa:e5:7c:ff:b3:39:9e:9f:de: c3:91:65:d5:ec:25:d5:b1:68:5a:a0:d4:5d:58:1d: cc:d3:6f:72:52:c5:c4:0d:3f:f0:ec:c1:68:bf:bc: a9:ab:74:b2:d6:1e:e0:eb:b8:05:d4:0d:af:3b:b8: fe:43:a7:f1:9b:17:0e:c4:be:f7:af:ea:f6:27:ea: a5:ed:32:f1:ca:ca:3c:04:37:99:61:30:60:ff:21: 65:c5:2d:a6:e9:c3:58:47:1d:37:cc:4e:aa:d5:88: 9e:aa:18:47:03:f6:2f:c6:c8:c1:63:be:25:9d:bc: 9e:7e:9d:b0:cf:b5:97:3b:b3:d8:35:52:fe:f4:5f: bf:e3:52:e9:bc:a2:c4:d8:eb:fc:5f:36:47:4b:d5: 3b:85:b2:65:1d:04:d4:2b:e2:f0:83:45:1d:e7:b2: 8e:6c:b0:22:3f:83:a2:34:f0:5f:49:da:e7:b6:c4: 78:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A9:F1:95:A9:72:A2:2A:E0:5D:67:9B:45:E3:A4:24:B3:93:42:31 X509v3 Authority Key Identifier: keyid:F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9FE80B2898F711EE87DF6E1FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 61.16.24.0/22 103.150.140.0/23 202.8.40.0/22 202.94.84.0/23 IPv6: 2001:df3:7c80::/48 2401:59a0::/32 Signature Algorithm: sha256WithRSAEncryption 1d:8d:41:50:32:a2:98:43:51:1f:ff:c5:6b:9a:9c:d6:e8:fb: c3:d5:89:01:b3:db:6f:07:d7:b5:3c:7f:0d:6a:6e:d8:45:7a: e9:23:c7:40:37:2f:62:24:0b:4f:62:0d:21:9f:54:c5:a2:43: 9f:22:29:6b:8e:03:4c:9f:21:ee:df:34:f4:be:a6:78:e5:05: a9:a8:82:11:b9:d0:0e:b2:d0:f1:f0:77:6a:b2:d7:72:cc:67: 5e:9e:06:86:e5:63:55:59:38:82:5c:75:07:2f:c6:a8:aa:a9: ab:29:80:99:ad:d6:d2:8c:88:1a:24:a5:a6:34:c9:24:9f:34: f2:f8:33:b8:27:a0:e0:e3:16:89:bb:b1:de:10:7f:ad:70:f6: 79:c1:68:e2:60:a0:a5:7e:89:4e:bc:f0:2e:5b:01:a6:0e:72: fa:15:7c:af:42:68:8c:bc:e2:2c:e7:41:4c:18:ed:be:de:4f: 1e:86:30:5d:45:5d:c9:53:ee:78:a8:94:04:5f:ac:78:8d:05: 4d:c3:1f:e0:7f:cf:fe:95:e7:83:cf:65:86:f7:b2:6d:4e:3d: 59:1d:a0:63:2c:f1:ad:79:48:8f:50:d8:42:8f:da:68:f0:da: 89:f1:c3:15:84:85:5a:ea:52:c0:f4:d4:b8:ff:f9:95:24:81: 8a:53:61:59 -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1QTIxMTAvBgNVBAUTKEY1QjExNzA1NEFGNTA5QzJDMzMzNjlEQTk2MUY0NDZE RENBQjgzNDIwHhcNMjUwNTE3MDUwNDQ2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjEzYy1lYWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJs0yt8O8DcfT1/EjMBjk9ApJ2hS9fbyDHGCFLCyxUMvoHjsQwR6abfdB5// pEl9eQBjgRsPT87DnxEpKul8FYHmu+xSz16EFoXqhcKnnoz65Xz/szmen97DkWXV 7CXVsWhaoNRdWB3M029yUsXEDT/w7MFov7ypq3Sy1h7g67gF1A2vO7j+Q6fxmxcO xL73r+r2J+ql7TLxyso8BDeZYTBg/yFlxS2m6cNYRx03zE6q1YieqhhHA/YvxsjB Y74lnbyefp2wz7WXO7PYNVL+9F+/41LpvKLE2Ov8XzZHS9U7hbJlHQTUK+Lwg0Ud 57KObLAiP4OiNPBfSdrntsR4MQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFNOp8ZWp cqIq4F1nm0XjpCSzk0IxMB8GA1UdIwQYMBaAFPWxFwVK9QnCwzNp2pYfRG3cq4NC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTVBMi80NjcwRUFBQzk4 RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNjTERNMm5hbGg5RWJkeXJn MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzliRVhCVXIxQ2NMRE0ybmFsaDlFYmR5cmcwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkE1QTIvNDY3MEVBQUM5OEY2MTFFRUJCRjFGNDE3QzRGOUFFMDIvOUZFODBCMjg5 OEY3MTFFRTg3REY2RTFGQzRGOUFFMDIucm9hMEkGCCsGAQUFBwEHAQH/BDowODAe BAIAATAYAwQCPRAYAwQBZ5aMAwQCyggoAwQByl5UMBYEAgACMBADBwAgAQ3zfIAD BQAkAVmgMA0GCSqGSIb3DQEBCwUAA4IBAQAdjUFQMqKYQ1Ef/8VrmpzW6PvD1YkB s9tvB9e1PH8Nam7YRXrpI8dANy9iJAtPYg0hn1TFokOfIilrjgNMnyHu3zT0vqZ4 5QWpqIIRudAOstDx8HdqstdyzGdengaG5WNVWTiCXHUHL8aoqqmrKYCZrdbSjIga JKWmNMkknzTy+DO4J6Dg4xaJu7HeEH+tcPZ5wWjiYKClfolOvPAuWwGmDnL6FXyv QmiMvOIs50FMGO2+3k8ehjBdRV3JU+54qJQEX6x4jQVNwx/gf8/+leeDz2WG97Jt Tj1ZHaBjLPGteUiPUNhCj9po8NqJ8cMVhIVa6lLA9NS4//mVJIGKU2FZ -----END CERTIFICATE-----Generated at Thu Mar 26 06:14:38 2026 by rpki-client