$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/2A52AB54138811F0BA2C056DC4F9AE02.roa File: 2A52AB54138811F0BA2C056DC4F9AE02.roa (raw, json) Hash identifier: t3RMvYjcVGXyzN5WAAZON1PoVN/r4lCdJDuyQ3DhERY= Subject key identifier: E5:29:11:BB:B6:5A:6C:2A:30:2D:52:B4:92:92:29:1E:E9:F2:1A:4D Certificate issuer: /CN=A91C5323/serialNumber=143788D235FD69DB2F25B777225F7AB769DA350B Certificate serial: 05F7 Authority key identifier: 14:37:88:D2:35:FD:69:DB:2F:25:B7:77:22:5F:7A:B7:69:DA:35:0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDeI0jX9adsvJbd3Il96t2naNQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/2A52AB54138811F0BA2C056DC4F9AE02.roa Signing time: Wed 28 Jan 2026 22:19:34 +0000 ROA not before: Wed 28 Jan 2026 22:19:34 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 135031 IP address blocks: 103.206.160.0/23 maxlen: 23 103.206.160.0/24 maxlen: 24 103.206.161.0/24 maxlen: 24 103.206.163.0/24 maxlen: 24 106.0.56.0/22 maxlen: 24 2404:7f80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.crl rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDeI0jX9adsvJbd3Il96t2naNQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Feb 2026 22:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1527 (0x5f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5323, serialNumber=143788D235FD69DB2F25B777225F7AB769DA350B Validity Not Before: Jan 28 22:19:34 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=697a8b76-b3e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4c:f3:79:fb:2b:83:02:c2:db:a5:2b:d3:37: 00:c7:e0:ff:ae:21:17:9c:79:11:f2:90:07:4e:d6: fc:d6:e8:df:e6:b4:27:e5:a1:f6:00:82:ed:ab:4e: 4d:31:81:8a:63:ab:1f:f4:fe:75:16:06:dd:42:72: f8:7d:63:53:ed:ae:80:83:4e:e3:ae:5a:44:4a:90: 6d:6a:14:39:77:88:f9:c6:ba:85:aa:44:ea:67:03: d2:57:39:68:e0:18:50:5e:d3:86:9c:d9:00:5a:5a: 43:10:49:3f:be:29:27:b1:ee:5f:eb:b0:27:08:e8: 4f:d7:41:0e:a6:6c:71:b6:8d:95:90:e9:8e:19:56: 23:96:24:2d:2d:4e:b9:92:33:e2:c9:be:10:93:60: 30:2e:46:bd:e4:8e:0a:f0:f1:ec:da:8f:2a:d0:a1: 92:6b:9c:dd:bc:98:3d:1e:04:b0:2b:6f:f4:50:80: a3:5d:08:42:33:46:fa:94:47:ff:62:71:dd:b7:9e: 06:44:be:85:ff:b1:23:1b:e4:28:7a:6c:6b:f6:65: 61:ca:d6:c7:17:0c:9e:0b:50:24:c5:18:ea:a7:0b: 1f:ee:ef:17:12:9a:db:c1:f2:f4:9c:fa:b2:e2:a9: b8:ff:ad:bf:15:61:2a:7b:5f:8b:9a:cd:e2:d2:5f: 3a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:29:11:BB:B6:5A:6C:2A:30:2D:52:B4:92:92:29:1E:E9:F2:1A:4D X509v3 Authority Key Identifier: keyid:14:37:88:D2:35:FD:69:DB:2F:25:B7:77:22:5F:7A:B7:69:DA:35:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDeI0jX9adsvJbd3Il96t2naNQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/2A52AB54138811F0BA2C056DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.206.160.0/23 103.206.163.0/24 106.0.56.0/22 IPv6: 2404:7f80::/32 Signature Algorithm: sha256WithRSAEncryption 93:9b:e0:47:7f:c0:e6:3c:b6:16:25:64:7f:a1:2d:32:fc:98: 4b:f2:0b:c1:4c:45:fe:0a:90:06:e6:03:44:f3:92:fa:3f:36: 43:a0:34:9f:0c:9c:ac:d0:84:23:c1:d0:3b:7b:d0:ec:d9:e7: 00:69:ad:4a:28:5d:f1:d7:5b:69:4d:35:33:41:b8:7e:4c:23: b2:db:e3:f8:76:f4:83:31:aa:90:d2:7e:26:c8:9e:ff:f7:51: ca:b3:de:34:d9:4b:be:9c:03:48:b1:92:56:00:67:94:93:9f: 96:1a:79:4a:64:92:13:22:05:fa:ef:8b:eb:5e:1b:21:30:77: de:77:1a:4c:aa:b2:6d:5c:0c:7a:af:59:c0:d8:a9:b3:fa:11: 6e:e5:6a:84:a0:13:da:03:a9:ee:4c:08:ff:ef:17:72:46:6e: 9e:cd:48:8d:c7:8b:2b:bc:c7:89:53:a2:b3:47:55:04:bb:61: d8:35:bd:90:3f:77:6e:4c:b7:3f:01:a2:7b:3b:68:9a:25:cc: 3b:27:52:d3:3b:14:28:f8:a5:62:8d:7b:53:44:8f:d5:75:a2: 22:93:fd:b4:7e:ed:95:19:86:77:a3:62:b8:b4:e3:4a:e1:13: 1a:9f:de:26:af:e9:1b:af:60:4e:88:cb:60:2f:60:74:7a:01: ab:47:6a:82 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICBfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QzUzMjMxMTAvBgNVBAUTKDE0Mzc4OEQyMzVGRDY5REIyRjI1Qjc3NzIyNUY3QUI3 NjlEQTM1MEIwHhcNMjYwMTI4MjIxOTM0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTdhOGI3Ni1iM2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqUzzefsrgwLC26Ur0zcAx+D/riEXnHkR8pAHTtb81ujf5rQn5aH2AILtq05N MYGKY6sf9P51FgbdQnL4fWNT7a6Ag07jrlpESpBtahQ5d4j5xrqFqkTqZwPSVzlo 4BhQXtOGnNkAWlpDEEk/viknse5f67AnCOhP10EOpmxxto2VkOmOGVYjliQtLU65 kjPiyb4Qk2AwLka95I4K8PHs2o8q0KGSa5zdvJg9HgSwK2/0UICjXQhCM0b6lEf/ YnHdt54GRL6F/7EjG+Qoemxr9mVhytbHFwyeC1AkxRjqpwsf7u8XEprbwfL0nPqy 4qm4/62/FWEqe1+Lms3i0l86RQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFOUpEbu2 WmwqMC1StJKSKR7p8hpNMB8GA1UdIwQYMBaAFBQ3iNI1/WnbLyW3dyJferdp2jUL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTMyMy9ERjY2REUyNEU1 NjExMUVCODRCRkU4MjBDNEY5QUUwMi9GRGVJMGpYOWFkc3ZKYmQzSWw5NnQybmFO UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZEZUkwalg5YWRzdkpiZDNJbDk2dDJuYU5Rcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzUzMjMvREY2NkRFMjRFNTYxMTFFQjg0QkZFODIwQzRGOUFFMDIvMkE1MkFCNTQx Mzg4MTFGMEJBMkMwNTZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAFnzqADBABnzqMDBAJqADgwDQQCAAIwBwMFACQEf4AwDQYJ KoZIhvcNAQELBQADggEBAJOb4Ed/wOY8thYlZH+hLTL8mEvyC8FMRf4KkAbmA0Tz kvo/NkOgNJ8MnKzQhCPB0Dt70OzZ5wBprUooXfHXW2lNNTNBuH5MI7Lb4/h29IMx qpDSfibInv/3Ucqz3jTZS76cA0ixklYAZ5STn5YaeUpkkhMiBfrvi+teGyEwd953 Gkyqsm1cDHqvWcDYqbP6EW7laoSgE9oDqe5MCP/vF3JGbp7NSI3Hiyu8x4lTorNH VQS7Ydg1vZA/d25Mtz8Bons7aJolzDsnUtM7FCj4pWKNe1NEj9V1oiKT/bR+7ZUZ hnejYri040rhExqf3iav6RuvYE6Iy2AvYHR6AatHaoI= -----END CERTIFICATE-----Generated at Thu Feb 19 23:27:16 2026 by rpki-client