$ rpki-client -vvf rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/5FB89FD4DA8511EEBD7AF854C4F9AE02.roa File: 5FB89FD4DA8511EEBD7AF854C4F9AE02.roa (raw, json) Hash identifier: 6/f5oPm92mNwNxB9v1VjUFLZtf6mGWOjGvqICqoOvKQ= Subject key identifier: 61:3C:8E:7F:01:FA:4A:11:89:6F:56:74:CF:09:1A:9B:E4:71:79:46 Certificate issuer: /CN=A91477C3/serialNumber=B20E9FE64AF3CE8C982725D012A142927263CEF0 Certificate serial: 0890 Authority key identifier: B2:0E:9F:E6:4A:F3:CE:8C:98:27:25:D0:12:A1:42:92:72:63:CE:F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/5FB89FD4DA8511EEBD7AF854C4F9AE02.roa Signing time: Fri 06 Feb 2026 02:31:36 +0000 ROA not before: Fri 06 Feb 2026 02:31:36 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 45270 IP address blocks: 43.252.0.0/22 maxlen: 22 101.234.192.0/24 maxlen: 24 101.234.193.0/24 maxlen: 24 101.234.194.0/24 maxlen: 24 101.234.195.0/24 maxlen: 24 101.234.196.0/24 maxlen: 24 101.234.200.0/24 maxlen: 24 101.234.201.0/24 maxlen: 24 101.234.202.0/24 maxlen: 24 103.233.16.0/22 maxlen: 22 223.25.228.0/23 maxlen: 23 223.25.231.0/24 maxlen: 24 2407:ab00::/48 maxlen: 48 2407:ab00:1::/48 maxlen: 48 2407:ab00:2::/48 maxlen: 48 2407:ab00:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.crl rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Feb 2026 20:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2192 (0x890) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91477C3, serialNumber=B20E9FE64AF3CE8C982725D012A142927263CEF0 Validity Not Before: Feb 6 02:31:36 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69855288-572f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2f:14:f3:2d:81:6a:a7:28:60:4c:3d:3c:c5: e2:a3:99:9e:0a:74:90:bb:d9:60:ab:09:c1:af:1e: 37:87:97:1b:dd:f0:41:80:4a:fd:f5:07:5d:5a:e8: f8:b5:ec:e7:31:57:b5:35:ad:93:88:97:94:37:ce: b4:25:57:c4:11:92:db:cb:74:09:b1:80:4d:0d:ea: 71:3c:ae:b9:df:c7:01:a7:c5:96:a6:5b:f2:06:20: 44:6b:b2:29:d9:34:38:90:70:ce:e8:07:ac:e0:b8: d1:28:92:d1:4c:9e:d0:9e:f1:ed:d2:14:75:3b:d3: 30:f8:43:a8:3a:9f:4a:17:f8:67:0c:04:a8:62:e2: 14:41:03:78:e8:dc:85:76:4e:77:30:f8:74:77:12: ba:7e:99:b2:1a:67:2c:f4:d8:99:d0:56:42:c6:8c: f4:8a:ca:19:cf:3d:57:bf:e2:71:0f:9c:33:dd:36: 14:a4:40:8c:82:c3:34:f9:15:47:6b:c5:f8:1e:ec: 23:35:79:9d:e4:43:c0:1f:b5:72:fb:33:38:f3:2c: a0:c2:69:05:16:6f:1e:da:f0:df:b7:dc:79:5c:72: 3f:d0:b3:31:07:5f:7d:ee:f0:bd:15:e6:bb:4d:58: 9e:28:a4:2c:d8:71:9b:69:5f:99:d9:59:0f:4f:a2: 0d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:3C:8E:7F:01:FA:4A:11:89:6F:56:74:CF:09:1A:9B:E4:71:79:46 X509v3 Authority Key Identifier: keyid:B2:0E:9F:E6:4A:F3:CE:8C:98:27:25:D0:12:A1:42:92:72:63:CE:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/5FB89FD4DA8511EEBD7AF854C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.252.0.0/22 101.234.192.0-101.234.196.255 101.234.200.0-101.234.202.255 103.233.16.0/22 223.25.228.0/23 223.25.231.0/24 IPv6: 2407:ab00::/46 Signature Algorithm: sha256WithRSAEncryption 7a:29:49:b6:c4:25:57:bf:da:d8:49:d6:84:e6:65:95:24:5b: 76:09:fe:2b:bd:c0:f1:41:ca:3f:2f:35:4a:0a:98:32:c0:fb: 4d:cd:1e:e4:6f:99:28:73:2f:d5:d2:18:e2:05:bc:40:22:f8: 83:24:b3:65:49:dc:bf:51:09:5c:94:ea:83:3e:ce:2d:96:52: 50:a5:b0:18:f5:d1:eb:53:bb:63:00:26:93:d6:f5:2e:79:a7: 21:02:4e:c3:c9:58:53:ca:21:f1:ab:17:47:2d:32:91:5a:4d: 8c:d4:0d:29:50:65:d7:69:50:8e:06:dd:9d:7b:72:7a:d6:bd: 0e:6e:2e:64:ab:88:d6:ea:ea:b0:b6:b0:e8:d5:eb:55:79:34: dc:0e:63:e4:e9:b2:2b:36:6a:fc:de:a7:5e:d0:c9:f5:0c:14: 35:46:49:d5:25:40:bc:ec:d8:ec:47:10:e2:27:75:40:60:ff: 37:61:e8:1e:5d:0c:04:5c:8e:fa:97:dd:3f:dc:a5:2b:43:a9: eb:e4:eb:10:32:b4:9e:da:a0:65:85:aa:ef:40:90:9f:3d:ce: 4c:47:6c:30:97:d5:f8:84:c5:05:e2:e1:9a:8a:7f:b8:81:99: 52:26:db:58:0c:b0:5b:6e:f6:5c:c6:af:c4:b3:41:32:e8:63: da:06:52:cf -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgICCJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc3QzMxMTAvBgNVBAUTKEIyMEU5RkU2NEFGM0NFOEM5ODI3MjVEMDEyQTE0Mjky NzI2M0NFRjAwHhcNMjYwMjA2MDIzMTM2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTg1NTI4OC01NzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvC8U8y2BaqcoYEw9PMXio5meCnSQu9lgqwnBrx43h5cb3fBBgEr99QddWuj4 teznMVe1Na2TiJeUN860JVfEEZLby3QJsYBNDepxPK6538cBp8WWplvyBiBEa7Ip 2TQ4kHDO6Aes4LjRKJLRTJ7QnvHt0hR1O9Mw+EOoOp9KF/hnDASoYuIUQQN46NyF dk53MPh0dxK6fpmyGmcs9NiZ0FZCxoz0isoZzz1Xv+JxD5wz3TYUpECMgsM0+RVH a8X4HuwjNXmd5EPAH7Vy+zM48yygwmkFFm8e2vDft9x5XHI/0LMxB1997vC9Fea7 TVieKKQs2HGbaV+Z2VkPT6INIQIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFGE8jn8B +koRiW9WdM8JGpvkcXlGMB8GA1UdIwQYMBaAFLIOn+ZK886MmCcl0BKhQpJyY87w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzdDMy81REE0OEMyMEU3 NkUxMUVBODE0MkE4MzlDNEY5QUUwMi9zZzZmNWtyenpveVlKeVhRRXFGQ2tuSmp6 dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NnNmY1a3J6em95WUp5WFFFcUZDa25Kanp2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc3QzMvNURBNDhDMjBFNzZFMTFFQTgxNDJBODM5QzRGOUFFMDIvNUZCODlGRDRE QTg1MTFFRUJEN0FGODU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwXgYIKwYBBQUHAQcBAf8E TzBNMDoEAgABMDQDBAIr/AAwDAMEBmXqwAMEAGXqxDAMAwQDZerIAwQAZerKAwQC Z+kQAwQB3xnkAwQA3xnnMA8EAgACMAkDBwIkB6sAAAAwDQYJKoZIhvcNAQELBQAD ggEBAHopSbbEJVe/2thJ1oTmZZUkW3YJ/iu9wPFByj8vNUoKmDLA+03NHuRvmShz L9XSGOIFvEAi+IMks2VJ3L9RCVyU6oM+zi2WUlClsBj10etTu2MAJpPW9S55pyEC TsPJWFPKIfGrF0ctMpFaTYzUDSlQZddpUI4G3Z17cnrWvQ5uLmSriNbq6rC2sOjV 61V5NNwOY+Tpsis2avzep17QyfUMFDVGSdUlQLzs2OxHEOIndUBg/zdh6B5dDARc jvqX3T/cpStDqevk6xAytJ7aoGWFqu9AkJ89zkxHbDCX1fiExQXi4ZqKf7iBmVIm 21gMsFtu9lzGr8SzQTLoY9oGUs8= -----END CERTIFICATE-----Generated at Fri Feb 20 00:46:06 2026 by rpki-client