$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/E9DE96C44C3611EEA9D59630C4F9AE02.roa File: E9DE96C44C3611EEA9D59630C4F9AE02.roa (raw, json) Hash identifier: v4lm1t03b9gy+zkyAg0MsXuQLEziIg1Uau5peZt74RY= Subject key identifier: D5:07:40:F4:4B:48:D2:AE:33:D6:D2:2C:E7:66:A0:05:39:E1:63:18 Certificate issuer: /CN=A91FDD4D/serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60 Certificate serial: 225C Authority key identifier: 72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/E9DE96C44C3611EEA9D59630C4F9AE02.roa Signing time: Wed 04 Mar 2026 16:19:42 +0000 ROA not before: Wed 04 Mar 2026 16:19:42 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 55811 IP address blocks: 27.124.96.0/20 maxlen: 20 45.113.196.0/22 maxlen: 22 103.53.116.0/22 maxlen: 22 103.53.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8796 (0x225c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD4D, serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60 Validity Not Before: Mar 4 16:19:42 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a85b9e-1517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4b:93:18:de:dd:13:3b:be:2b:a8:67:74:02: 42:9c:38:e6:1e:93:4f:9e:01:1d:39:65:4c:8b:bb: ca:66:61:06:a1:a8:f8:4f:9d:e4:6c:24:73:7e:9e: 56:6b:51:4e:ac:6f:ba:68:90:84:67:6e:a8:dc:02: e4:cb:40:bd:37:d6:e4:10:8c:ed:66:fc:84:8e:20: 31:6a:30:60:fc:26:3b:34:fd:7a:fc:8a:06:78:67: df:d7:96:a2:db:65:3d:6e:ce:49:c7:6f:e3:16:af: 7f:89:7d:aa:ec:2f:f8:e4:48:1a:fa:a3:d5:0c:af: 83:59:e5:17:82:76:2e:52:b4:c6:9d:1c:b5:c2:18: bb:2c:5c:db:54:68:35:b5:69:ec:59:bd:c5:5e:b4: 83:4c:56:69:5f:f2:cd:00:bd:f9:7c:1f:8d:3d:fe: db:fb:37:42:47:56:a9:ab:19:fc:51:b2:dd:20:71: fa:52:30:a6:88:bd:61:21:65:c2:ff:6f:63:0a:0a: 6b:6c:da:87:37:98:f4:66:93:9f:5d:f1:b1:83:ea: a5:58:6f:55:9c:a4:81:ec:26:81:4a:d7:53:b0:77: d0:11:05:77:ef:f2:38:0a:b3:1f:6b:79:a5:69:5b: 25:54:14:fb:01:d8:93:07:df:da:57:aa:9c:96:9c: f6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:07:40:F4:4B:48:D2:AE:33:D6:D2:2C:E7:66:A0:05:39:E1:63:18 X509v3 Authority Key Identifier: keyid:72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/E9DE96C44C3611EEA9D59630C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.124.96.0/20 45.113.196.0/22 103.53.116.0/22 Signature Algorithm: sha256WithRSAEncryption 88:e0:b7:fc:97:2f:3f:29:66:86:b6:9a:f1:ca:2f:d9:7d:68: 5f:2c:ce:4d:2d:0d:37:d1:e2:34:d6:34:32:ac:28:65:7f:fa: c4:95:95:e2:b9:d1:90:08:17:65:2a:65:82:36:cd:1b:42:41: 0f:64:2d:aa:4f:3b:bb:83:b8:3f:22:86:14:b1:4e:b4:6e:c5: b6:ee:df:02:82:3a:46:88:db:14:bd:52:4a:e2:5e:3c:b6:42: 28:bd:4a:d0:4b:5d:43:29:ff:ca:02:62:0b:28:7f:b3:b6:ff: 36:bc:fa:5a:f9:c0:bb:53:d2:ee:d9:36:75:83:ce:a6:50:10: e9:ad:db:25:52:7d:b2:79:4b:9f:96:36:e0:cb:d4:2c:62:7f: 1a:56:76:11:d2:00:25:c6:f7:93:d3:bc:8a:b5:ad:d0:8a:2c: 38:38:91:78:7c:9a:e2:3e:07:de:35:e9:1c:33:3b:29:21:17: 24:98:20:a4:d6:54:a8:c8:58:85:8e:72:e0:e7:64:4e:ec:f8: b5:e8:fe:ad:d2:c1:c9:78:9d:48:d4:f9:56:af:f3:8c:9b:6a: 37:26:a5:4e:23:1b:37:43:2d:65:e5:57:96:61:71:36:1d:f6: a1:a5:20:de:fc:72:60:38:48:45:29:30:88:05:9e:27:9c:fa: 4f:fa:aa:00 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICIlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRENEQxMTAvBgNVBAUTKDcyQUZCQUVCQzlFQ0REQTJFRUQyRDQ5QjEzRTYwNDhF QTNFNDFFNjAwHhcNMjYwMzA0MTYxOTQyWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE4NWI5ZS0xNTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0uTGN7dEzu+K6hndAJCnDjmHpNPngEdOWVMi7vKZmEGoaj4T53kbCRzfp5W a1FOrG+6aJCEZ26o3ALky0C9N9bkEIztZvyEjiAxajBg/CY7NP16/IoGeGff15ai 22U9bs5Jx2/jFq9/iX2q7C/45Ega+qPVDK+DWeUXgnYuUrTGnRy1whi7LFzbVGg1 tWnsWb3FXrSDTFZpX/LNAL35fB+NPf7b+zdCR1apqxn8UbLdIHH6UjCmiL1hIWXC /29jCgprbNqHN5j0ZpOfXfGxg+qlWG9VnKSB7CaBStdTsHfQEQV37/I4CrMfa3ml aVslVBT7AdiTB9/aV6qclpz2EwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFNUHQPRL SNKuM9bSLOdmoAU54WMYMB8GA1UdIwQYMBaAFHKvuuvJ7N2i7tLUmxPmBI6j5B5g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC9CQUUxMDhDNEVB NjAxMUU1ODgxNTc3MENDNEY5QUUwMi9jcS02NjhuczNhTHUwdFNiRS1ZRWpxUGtI bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NxLTY2OG5zM2FMdTB0U2JFLVlFanFQa0htQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkRENEQvQkFFMTA4QzRFQTYwMTFFNTg4MTU3NzBDQzRGOUFFMDIvRTlERTk2QzQ0 QzM2MTFFRUE5RDU5NjMwQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQEG3xgAwQCLXHEAwQCZzV0MA0GCSqGSIb3DQEBCwUAA4IBAQCI4Lf8 ly8/KWaGtprxyi/ZfWhfLM5NLQ030eI01jQyrChlf/rElZXiudGQCBdlKmWCNs0b QkEPZC2qTzu7g7g/IoYUsU60bsW27t8CgjpGiNsUvVJK4l48tkIovUrQS11DKf/K AmILKH+ztv82vPpa+cC7U9Lu2TZ1g86mUBDprdslUn2yeUufljbgy9QsYn8aVnYR 0gAlxveT07yKta3Qiiw4OJF4fJriPgfeNekcMzspIRckmCCk1lSoyFiFjnLg52RO 7Pi16P6t0sHJeJ1I1PlWr/OMm2o3JqVOIxs3Qy1l5VeWYXE2HfahpSDe/HJgOEhF KTCIBZ4nnPpP+qoA -----END CERTIFICATE-----Generated at Thu Mar 26 12:03:45 2026 by rpki-client