$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/426D5CEAD12111ECBBAC1B7DC4F9AE02.roa File: 426D5CEAD12111ECBBAC1B7DC4F9AE02.roa (raw, json) Hash identifier: Cjy/SWLQH86e7gQzB7H8gnQKLtLg5bLdlkR56jFW4Ls= Subject key identifier: A5:1C:4F:E6:C5:90:D7:89:C6:B3:CC:45:78:5A:38:40:8A:2B:E2:16 Certificate issuer: /CN=A91FC01A/serialNumber=605BDA3D7ADCC02DAC7386AE39147A646593A89D Certificate serial: 03A7 Authority key identifier: 60:5B:DA:3D:7A:DC:C0:2D:AC:73:86:AE:39:14:7A:64:65:93:A8:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/426D5CEAD12111ECBBAC1B7DC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:25:54 +0000 ROA not before: Fri 09 Jan 2026 00:20:21 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 55329 IP address blocks: 103.232.192.0/22 maxlen: 24 175.28.0.0/22 maxlen: 24 223.223.168.0/21 maxlen: 24 2403:6600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.crl rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 935 (0x3a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC01A, serialNumber=605BDA3D7ADCC02DAC7386AE39147A646593A89D Validity Not Before: Jan 9 00:20:21 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a44c72-0030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ef:c4:20:e1:2b:f2:c8:ad:6d:ff:b6:c9:72: 14:6e:ef:27:1b:0e:4f:4f:b1:9e:66:cd:39:dc:94: 7f:30:63:b1:1a:83:ea:32:d7:17:8e:38:19:97:63: a0:ff:be:6c:51:fb:9a:0d:c2:c4:ce:12:63:36:a0: bc:61:ff:69:91:26:f0:b6:2d:ec:af:28:3c:be:67: 3e:66:1d:a4:fa:1f:2b:8c:f6:bd:4b:b5:bc:7a:72: 3b:55:50:65:50:41:3a:7d:86:1e:64:18:80:23:76: 23:04:43:87:86:ca:6d:91:12:b0:5b:58:41:5a:c0: b4:9d:5c:09:98:15:08:3d:97:31:88:5c:76:0d:c5: c8:55:17:93:54:cb:f5:14:bf:8c:0b:e4:21:8e:f0: 9c:1d:05:8f:c2:66:51:b7:90:ea:1d:13:d6:b4:2d: 3f:ed:85:9d:e2:69:ae:1f:5a:50:5b:d0:72:58:27: 55:f3:92:2b:fc:b6:3d:f6:73:e3:99:08:51:39:5e: 7c:8f:f7:09:ef:5e:33:f5:f9:c8:1b:4d:6f:7a:78: 4e:32:5d:50:4f:d5:52:22:08:9e:c6:bd:de:08:96: cd:8a:2a:bf:f3:b4:e9:66:6a:49:6c:c1:99:29:7b: 8d:48:e2:79:3a:25:53:28:05:ae:29:d3:7f:f9:c9: 80:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:1C:4F:E6:C5:90:D7:89:C6:B3:CC:45:78:5A:38:40:8A:2B:E2:16 X509v3 Authority Key Identifier: keyid:60:5B:DA:3D:7A:DC:C0:2D:AC:73:86:AE:39:14:7A:64:65:93:A8:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/426D5CEAD12111ECBBAC1B7DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.232.192.0/22 175.28.0.0/22 223.223.168.0/21 IPv6: 2403:6600::/32 Signature Algorithm: sha256WithRSAEncryption 3d:1b:01:84:fe:d8:b0:af:6c:e7:7b:14:ae:2d:4d:d1:22:9a: e1:7f:4e:58:76:26:e0:57:1d:d2:59:3f:6a:5f:36:67:14:63: 86:b8:db:cc:96:ac:09:38:31:86:e3:1e:f7:ce:92:81:d0:b1: 24:d4:1a:92:36:9b:c3:68:fe:9e:23:95:4b:d3:04:e7:2f:3f: 87:a7:15:58:0e:76:ca:e0:cc:de:1e:73:3d:94:97:5b:f7:e2: f9:8c:20:d5:54:56:3c:68:d4:e0:c8:a1:e6:e0:39:a5:cf:31: 04:d7:7b:75:bb:cd:fe:eb:a0:b3:08:55:47:af:2e:c4:aa:c0: 6c:d7:73:a4:0f:6e:59:44:ed:7d:39:1c:c5:1c:d0:a2:96:f9: 4a:66:ab:d0:ad:49:04:83:9c:fa:15:60:7c:a2:a2:e9:12:d1: d2:33:ba:4b:a9:e9:bc:11:68:c5:05:4a:e0:59:67:35:03:8e: f9:55:b4:ac:53:7f:3f:4b:0c:02:2c:a6:2a:eb:7a:55:ee:e2: 29:ff:f8:a9:42:40:90:54:ca:d7:62:04:13:82:9e:28:e6:0a: f0:a9:ee:bd:f2:d6:de:33:a5:5e:e8:69:6c:ce:86:0c:9b:96: df:a9:0e:64:57:6e:25:b8:96:b6:f7:7f:d0:54:08:27:4e:70: 9a:7d:db:ce -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICA6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkMwMUExMTAvBgNVBAUTKDYwNUJEQTNEN0FEQ0MwMkRBQzczODZBRTM5MTQ3QTY0 NjU5M0E4OUQwHhcNMjYwMTA5MDAyMDIxWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGM3Mi0wMDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0u/EIOEr8sitbf+2yXIUbu8nGw5PT7GeZs053JR/MGOxGoPqMtcXjjgZl2Og /75sUfuaDcLEzhJjNqC8Yf9pkSbwti3sryg8vmc+Zh2k+h8rjPa9S7W8enI7VVBl UEE6fYYeZBiAI3YjBEOHhsptkRKwW1hBWsC0nVwJmBUIPZcxiFx2DcXIVReTVMv1 FL+MC+QhjvCcHQWPwmZRt5DqHRPWtC0/7YWd4mmuH1pQW9ByWCdV85Ir/LY99nPj mQhROV58j/cJ714z9fnIG01venhOMl1QT9VSIgiexr3eCJbNiiq/87TpZmpJbMGZ KXuNSOJ5OiVTKAWuKdN/+cmAHwIDAQABo4ICezCCAncwHQYDVR0OBBYEFKUcT+bF kNeJxrPMRXhaOECKK+IWMB8GA1UdIwQYMBaAFGBb2j163MAtrHOGrjkUemRlk6id MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzAxQS8wRjg1MDE0Q0Qx MUQxMUVDODE2OTYzNjNDNEY5QUUwMi9ZRnZhUFhyY3dDMnNjNGF1T1JSNlpHV1Rx SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lGdmFQWHJjd0Myc2M0YXVPUlI2WkdXVHFKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkMwMUEvMEY4NTAxNENEMTFEMTFFQzgxNjk2MzYzQzRGOUFFMDIvNDI2RDVDRUFE MTIxMTFFQ0JCQUMxQjdEQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCZ+jAAwQCrxwAAwQD39+oMA0EAgACMAcDBQAkA2YAMA0GCSqGSIb3 DQEBCwUAA4IBAQA9GwGE/tiwr2znexSuLU3RIprhf05YdibgVx3SWT9qXzZnFGOG uNvMlqwJODGG4x73zpKB0LEk1BqSNpvDaP6eI5VL0wTnLz+HpxVYDnbK4MzeHnM9 lJdb9+L5jCDVVFY8aNTgyKHm4DmlzzEE13t1u83+66CzCFVHry7EqsBs13OkD25Z RO19ORzFHNCilvlKZqvQrUkEg5z6FWB8oqLpEtHSM7pLqem8EWjFBUrgWWc1A475 VbSsU38/SwwCLKYq63pV7uIp//ipQkCQVMrXYgQTgp4o5grwqe698tbeM6Ve6Gls zoYMm5bfqQ5kV24luJa293/QVAgnTnCafdvO -----END CERTIFICATE-----Generated at Thu Mar 26 07:10:27 2026 by rpki-client