$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/DA0B639E89E711F08DD17A55C4F9AE02.roa File: DA0B639E89E711F08DD17A55C4F9AE02.roa (raw, json) Hash identifier: WShAID2RQGXvLt6YUD1Hwx0ZMGyvGXCWr68bcuwRc4Y= Subject key identifier: 3E:C9:33:DA:AA:50:01:AB:30:E8:25:B8:15:38:FC:EF:44:D1:7C:63 Certificate issuer: /CN=A91FDC78/serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59 Certificate serial: 09AF Authority key identifier: CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/DA0B639E89E711F08DD17A55C4F9AE02.roa Signing time: Mon 20 Apr 2026 20:25:43 +0000 ROA not before: Mon 20 Apr 2026 20:25:43 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 135126 IP address blocks: 43.252.112.0/22 maxlen: 22 43.252.112.0/24 maxlen: 24 43.252.113.0/24 maxlen: 24 43.252.114.0/24 maxlen: 24 43.252.115.0/24 maxlen: 24 103.210.24.0/22 maxlen: 22 103.210.24.0/23 maxlen: 23 103.210.24.0/24 maxlen: 24 103.210.25.0/24 maxlen: 24 103.210.26.0/24 maxlen: 24 103.210.27.0/24 maxlen: 24 180.233.124.0/22 maxlen: 22 180.233.124.0/24 maxlen: 24 180.233.125.0/24 maxlen: 24 180.233.126.0/24 maxlen: 24 180.233.127.0/24 maxlen: 24 2404:78c0::/40 maxlen: 48 2404:78c0:100::/40 maxlen: 48 2404:78c0:200::/40 maxlen: 48 2404:78c0:300::/40 maxlen: 48 2404:78c0:400::/40 maxlen: 48 2404:78c0:500::/40 maxlen: 48 2404:78c0:600::/40 maxlen: 48 2404:78c0:700::/40 maxlen: 48 2404:78c0:800::/40 maxlen: 48 2404:78c0:900::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2479 (0x9af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDC78, serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59 Validity Not Before: Apr 20 20:25:43 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69e68bc7-6647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:33:37:33:3f:8f:ac:b3:bf:43:5b:e9:78:17: 83:ac:a0:05:fd:71:ca:4f:f0:c5:fd:a7:65:7c:1f: a4:7e:dd:9a:89:8d:a7:82:bb:22:66:78:c5:d4:1f: 8d:bc:5f:61:af:f1:f6:15:aa:3d:c9:d8:df:0d:f0: 51:ab:0c:88:7b:fc:f8:b2:e1:99:36:25:4f:ce:53: ed:cd:ee:3d:f5:70:f2:0b:11:79:a7:16:46:4c:64: 7a:05:b6:1b:5a:30:7e:08:a1:9a:2f:54:46:a9:62: ee:17:1c:e0:df:7c:1d:71:4c:1c:14:6f:42:20:b5: 91:24:87:53:49:fc:21:d2:d8:55:10:cd:62:34:2f: 1c:5c:a0:36:9b:ac:24:fb:0d:62:52:d8:e3:f8:97: 18:a7:ce:77:18:79:5c:03:0b:11:75:10:b6:95:99: c7:94:7f:26:90:60:3f:50:b5:95:9c:c3:bc:ec:1e: 1a:09:11:8a:2c:e8:3b:89:53:09:f0:e8:e0:46:38: 0b:04:14:a7:56:99:ed:2e:69:57:bd:54:30:47:8a: 8f:dc:ce:2c:6f:50:e5:4f:70:07:67:78:b2:7d:72: 76:3e:70:db:8d:2e:49:7c:5f:c0:a1:fe:45:cb:01: e4:82:c0:32:48:81:b9:bb:39:b6:93:ae:95:c8:fa: 62:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C9:33:DA:AA:50:01:AB:30:E8:25:B8:15:38:FC:EF:44:D1:7C:63 X509v3 Authority Key Identifier: keyid:CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/DA0B639E89E711F08DD17A55C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.252.112.0/22 103.210.24.0/22 180.233.124.0/22 IPv6: 2404:78c0::-2404:78c0:9ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 7c:be:78:e3:95:9f:f3:ac:b3:ac:2f:11:ac:68:40:8b:51:85: d5:5c:69:64:ee:9f:46:93:c4:aa:ee:df:f9:0c:e7:0b:98:4c: 1b:60:01:30:f4:3b:ef:1d:c7:82:cc:cf:d4:dd:69:35:0a:00: f9:58:7e:0e:ac:86:ac:0b:25:a0:34:23:b2:8b:b1:18:49:9b: 6e:49:5d:13:2b:a5:28:fc:03:38:28:52:64:29:f6:d5:24:c4: 06:6c:aa:e9:51:6b:fb:d3:fd:fa:c9:ca:d5:3e:3d:ec:98:77: ac:d5:61:43:bf:fa:20:3f:d5:cc:2f:9c:4a:ca:a7:8c:69:bb: d4:2b:07:16:95:32:18:1b:9b:e3:b5:64:1d:48:8f:80:5a:dc: d8:bf:a7:9a:97:d1:d5:d0:d3:a4:18:17:9e:67:23:52:a0:b5: 84:11:50:b9:59:d4:0d:87:69:7d:4a:6e:80:1c:89:61:21:77: 5a:45:c8:c5:55:c2:c4:a8:96:98:bd:d7:b7:57:51:bb:93:8d: 55:a9:cc:f9:11:11:ac:f1:1c:0c:80:d7:d4:24:e1:1e:c0:ca: 97:af:e3:51:19:06:4d:e2:42:ae:7c:ac:d3:4c:fe:19:0d:d2: 93:fd:42:4e:00:f5:ab:54:5e:c3:e5:68:cf:37:ae:27:18:2d: 96:16:68:c8 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgICCa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDNzgxMTAvBgNVBAUTKENDNTdFMDM2NDMxQTVFQTNDMTcyQUE3MjgzNDAxQUYz QzRBRDVDNTkwHhcNMjYwNDIwMjAyNTQzWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWU2OGJjNy02NjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTM3Mz+PrLO/Q1vpeBeDrKAF/XHKT/DF/adlfB+kft2aiY2ngrsiZnjF1B+N vF9hr/H2Fao9ydjfDfBRqwyIe/z4suGZNiVPzlPtze499XDyCxF5pxZGTGR6BbYb WjB+CKGaL1RGqWLuFxzg33wdcUwcFG9CILWRJIdTSfwh0thVEM1iNC8cXKA2m6wk +w1iUtjj+JcYp853GHlcAwsRdRC2lZnHlH8mkGA/ULWVnMO87B4aCRGKLOg7iVMJ 8OjgRjgLBBSnVpntLmlXvVQwR4qP3M4sb1DlT3AHZ3iyfXJ2PnDbjS5JfF/Aof5F ywHkgsAySIG5uzm2k66VyPpiTQIDAQABo4IChTCCAoEwHQYDVR0OBBYEFD7JM9qq UAGrMOgluBU4/O9E0XxjMB8GA1UdIwQYMBaAFMxX4DZDGl6jwXKqcoNAGvPErVxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREM3OC8xNTQ3NDAwOEFF QUMxMUVBQTZDMUQ3NjFDNEY5QUUwMi96RmZnTmtNYVhxUEJjcXB5ZzBBYTg4U3RY RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGZmdOa01hWHFQQmNxcHlnMEFhODhTdFhGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkRDNzgvMTU0NzQwMDhBRUFDMTFFQUE2QzFENzYxQzRGOUFFMDIvREEwQjYzOUU4 OUU3MTFGMDhERDE3QTU1QzRGOUFFMDIucm9hMEQGCCsGAQUFBwEHAQH/BDUwMzAY BAIAATASAwQCK/xwAwQCZ9IYAwQCtOl8MBcEAgACMBEwDwMFBiQEeMADBgEkBHjA CDANBgkqhkiG9w0BAQsFAAOCAQEAfL5445Wf86yzrC8RrGhAi1GF1VxpZO6fRpPE qu7f+QznC5hMG2ABMPQ77x3HgszP1N1pNQoA+Vh+DqyGrAsloDQjsouxGEmbbkld EyulKPwDOChSZCn21STEBmyq6VFr+9P9+snK1T497Jh3rNVhQ7/6ID/VzC+cSsqn jGm71CsHFpUyGBub47VkHUiPgFrc2L+nmpfR1dDTpBgXnmcjUqC1hBFQuVnUDYdp fUpugByJYSF3WkXIxVXCxKiWmL3Xt1dRu5ONVanM+RERrPEcDIDX1CThHsDKl6/j URkGTeJCrnys00z+GQ3Sk/1CTgD1q1Rew+VozzeuJxgtlhZoyA== -----END CERTIFICATE-----Generated at Wed May 13 07:07:33 2026 by rpki-client