$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/E4DCE562284911F19931E6E894833773.roa File: E4DCE562284911F19931E6E894833773.roa (raw, json) Hash identifier: UFO6O8AEvJofNNNFu8sTkaWfgzATbWTj3vDCjDswrr8= Subject key identifier: 58:9B:19:28:43:D4:52:8A:80:B4:05:F1:76:92:87:DA:DC:56:F5:14 Certificate issuer: /CN=A91DD11A/serialNumber=64AB5EDB511262B736AF81741D4D731414D34A57 Certificate serial: 4C Authority key identifier: 64:AB:5E:DB:51:12:62:B7:36:AF:81:74:1D:4D:73:14:14:D3:4A:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/E4DCE562284911F19931E6E894833773.roa Signing time: Tue 31 Mar 2026 14:20:02 +0000 ROA not before: Tue 31 Mar 2026 14:20:02 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 24033 IP address blocks: 116.250.0.0/16 maxlen: 24 116.251.0.0/18 maxlen: 20 119.77.64.0/19 maxlen: 20 123.100.32.0/19 maxlen: 20 202.171.96.0/20 maxlen: 24 203.213.224.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.crl rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:47:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD11A, serialNumber=64AB5EDB511262B736AF81741D4D731414D34A57 Validity Not Before: Mar 31 14:20:02 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69cbd812-bdb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:25:93:a8:f2:ff:33:b6:c0:5e:31:4f:dc:21: 15:ce:b6:d9:42:77:ac:d7:68:f2:a7:cd:ed:c0:5e: c3:f4:99:8a:15:5f:4c:5a:a6:fe:65:3f:68:de:27: ea:f9:36:e1:46:a9:2e:8b:2c:9a:15:84:d5:f3:f1: c4:ec:fd:f8:62:f7:97:5d:f9:70:7c:ad:98:85:2f: fc:84:78:f8:bc:96:cc:89:18:ba:6e:00:c7:66:c1: 52:a8:3f:7e:62:7d:2a:2d:98:31:a1:df:00:3f:cd: 2a:f0:71:81:45:1b:c7:75:f9:49:20:ff:6d:19:03: f6:bf:3d:a4:61:0f:f2:f5:d4:ee:98:2f:91:be:f8: ce:a9:f6:10:e3:3f:fa:c6:8a:8c:e3:cf:ec:d8:39: 39:1e:ad:2a:a2:5e:62:e2:95:eb:5c:b8:8d:1d:11: d3:ff:45:f8:fa:47:00:dc:43:44:5a:0c:c9:ce:be: 31:33:7f:13:ff:f3:c4:a3:84:8b:18:fa:39:58:61: 77:2c:52:fa:d9:d8:b0:01:6b:3b:8b:05:dd:18:b7: 4b:b0:15:d2:25:e1:bb:de:cc:ad:d6:7b:8c:dc:62: 0d:9e:9b:00:90:5a:6e:03:a5:2e:36:76:5b:3d:d6: e9:7b:96:86:37:9f:0e:4a:0d:f5:a4:9f:d7:6f:26: 03:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9B:19:28:43:D4:52:8A:80:B4:05:F1:76:92:87:DA:DC:56:F5:14 X509v3 Authority Key Identifier: keyid:64:AB:5E:DB:51:12:62:B7:36:AF:81:74:1D:4D:73:14:14:D3:4A:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/E4DCE562284911F19931E6E894833773.roa sbgp-ipAddrBlock: critical IPv4: 116.250.0.0-116.251.63.255 119.77.64.0/19 123.100.32.0/19 202.171.96.0/20 203.213.224.0/19 Signature Algorithm: sha256WithRSAEncryption b1:b4:a5:41:b1:8e:b8:aa:40:26:eb:ec:bb:86:b3:e7:3d:ed: d1:1a:2c:ad:93:50:4a:2f:48:36:aa:af:fe:1d:9f:4b:6c:88: 58:4d:5a:fb:53:0e:3e:24:98:ee:92:c0:bd:07:22:70:d8:07: 88:46:e6:5c:13:2e:cb:ae:55:96:bb:f7:f2:7d:86:a3:d3:7c: 8d:b7:c2:7b:d4:08:f6:cc:82:18:fe:bc:2e:f6:11:bb:c5:c2: be:a7:d8:12:ca:32:96:2b:34:25:dd:1e:7b:a3:91:c5:85:5c: 7f:32:07:9a:dd:e4:64:71:65:a1:11:08:71:00:63:a8:07:55: dc:a7:bf:e5:7f:13:a7:4a:ab:1b:69:10:c0:fa:7c:9f:2a:d9: 28:4c:98:50:ce:01:ad:50:f5:a7:67:68:54:3c:71:49:5b:a1: 6f:dd:53:b1:01:5e:e3:d0:e6:3e:58:8d:78:81:eb:4d:07:de: 19:af:91:c2:39:75:54:75:4d:4b:10:aa:aa:2b:cc:f7:b5:2c: 62:3f:87:90:ad:42:a9:ae:7e:0d:83:5f:27:f5:eb:06:06:f7: 2a:ff:2d:99:b0:d2:e7:30:0c:7e:b0:b3:39:e8:53:70:7a:4f: 3f:80:2c:a8:5d:36:03:b1:33:3a:42:db:df:d7:1c:25:bd:70: 9d:7f:67:45 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDExQTExMC8GA1UEBRMoNjRBQjVFREI1MTEyNjJCNzM2QUY4MTc0MUQ0RDczMTQx NEQzNEE1NzAeFw0yNjAzMzExNDIwMDJaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5Y2JkODEyLWJkYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKJZOo8v8ztsBeMU/cIRXOttlCd6zXaPKnze3AXsP0mYoVX0xapv5lP2jeJ+r5 NuFGqS6LLJoVhNXz8cTs/fhi95dd+XB8rZiFL/yEePi8lsyJGLpuAMdmwVKoP35i fSotmDGh3wA/zSrwcYFFG8d1+Ukg/20ZA/a/PaRhD/L11O6YL5G++M6p9hDjP/rG iozjz+zYOTkerSqiXmLiletcuI0dEdP/Rfj6RwDcQ0RaDMnOvjEzfxP/88SjhIsY +jlYYXcsUvrZ2LABazuLBd0Yt0uwFdIl4bvezK3We4zcYg2emwCQWm4DpS42dls9 1ul7loY3nw5KDfWkn9dvJgM9AgMBAAGjggJ/MIICezAdBgNVHQ4EFgQUWJsZKEPU UoqAtAXxdpKH2txW9RQwHwYDVR0jBBgwFoAUZKte21ESYrc2r4F0HU1zFBTTSlcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMTFBL0EyM0YyM0I4RDBD MDExRjA4MTVBRjA2NEM0RjlBRTAyL1pLdGUyMUVTWXJjMnI0RjBIVTF6RkJUVFNs Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkt0ZTIxRVNZcmMycjRGMEhVMXpGQlRUU2xjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDExQS9BMjNGMjNCOEQwQzAxMUYwODE1QUYwNjRDNEY5QUUwMi9FNERDRTU2MjI4 NDkxMUYxOTkzMUU2RTg5NDgzMzc3My5yb2EwPgYIKwYBBQUHAQcBAf8ELzAtMCsE AgABMCUwCwMDAXT6AwQGdPsAAwQFd01AAwQFe2QgAwQEyqtgAwQFy9XgMA0GCSqG SIb3DQEBCwUAA4IBAQCxtKVBsY64qkAm6+y7hrPnPe3RGiytk1BKL0g2qq/+HZ9L bIhYTVr7Uw4+JJjuksC9ByJw2AeIRuZcEy7LrlWWu/fyfYaj03yNt8J71Aj2zIIY /rwu9hG7xcK+p9gSyjKWKzQl3R57o5HFhVx/Mgea3eRkcWWhEQhxAGOoB1Xcp7/l fxOnSqsbaRDA+nyfKtkoTJhQzgGtUPWnZ2hUPHFJW6Fv3VOxAV7j0OY+WI14getN B94Zr5HCOXVUdU1LEKqqK8z3tSxiP4eQrUKprn4Ng18n9esGBvcq/y2ZsNLnMAx+ sLM56FNwek8/gCyoXTYDsTM6Qtvf1xwlvXCdf2dF -----END CERTIFICATE-----Generated at Sun Apr 5 20:57:25 2026 by rpki-client