$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/DF502EECD44511E984021644C4F9AE02.roa File: DF502EECD44511E984021644C4F9AE02.roa (raw, json) Hash identifier: YwG+qutV+wb6qZeQ91P9SRLPdlN0yaMLYD6l5IyWl2s= Subject key identifier: B5:13:AC:31:AD:B5:77:A8:18:B4:ED:57:DE:F8:93:04:64:7D:49:19 Certificate issuer: /CN=A91FB924/serialNumber=B2AA3E3A5B29E0F41CDD5A617F7FB6A37A1B9011 Certificate serial: 3507 Authority key identifier: B2:AA:3E:3A:5B:29:E0:F4:1C:DD:5A:61:7F:7F:B6:A3:7A:1B:90:11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/DF502EECD44511E984021644C4F9AE02.roa Signing time: Tue 06 Jan 2026 15:10:57 +0000 ROA not before: Tue 06 Jan 2026 15:10:57 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 56055 IP address blocks: 103.17.44.0/22 maxlen: 22 118.179.224.0/19 maxlen: 19 163.47.248.0/22 maxlen: 22 202.22.224.0/20 maxlen: 20 203.80.48.0/21 maxlen: 21 2407:4a00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.crl rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Feb 2026 14:34:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13575 (0x3507) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB924, serialNumber=B2AA3E3A5B29E0F41CDD5A617F7FB6A37A1B9011 Validity Not Before: Jan 6 15:10:57 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=695d2601-8607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:82:24:8b:0f:b1:d3:14:f4:7d:4f:51:e1:71: 72:88:b2:0a:0a:78:8b:07:5c:9f:17:c5:02:9b:64: e5:f4:3b:61:4a:78:42:2a:b8:82:19:b4:de:d2:98: ec:6c:e8:5e:d1:75:ad:93:74:70:6c:93:e6:7d:9b: db:ed:8b:3a:59:71:bb:1b:f7:60:84:94:55:ef:3f: 38:93:c6:1b:a6:cf:f1:2e:83:13:d4:45:5e:49:fd: ed:f5:c2:25:c5:62:36:3d:f9:59:51:b2:12:56:5e: 08:4e:72:1b:58:df:46:6b:92:71:c3:bd:6d:aa:23: 6e:17:0c:a1:22:6b:4b:4f:ec:2b:d9:df:04:6f:a2: a8:4f:b9:60:53:54:21:85:63:17:84:8c:39:fb:2d: 2e:04:88:ed:a4:d8:44:35:34:44:5b:a6:2f:e8:c8: 87:f5:e2:83:60:59:81:5e:f4:55:27:5a:07:09:fe: 1a:34:e2:a4:ec:98:28:9d:96:dc:79:28:f0:cb:91: bd:34:f6:df:d4:de:01:6f:47:58:09:de:a2:ae:2a: eb:8c:af:f7:65:b1:92:97:32:da:75:35:f5:ef:62: ee:35:ef:ed:79:90:9f:23:a3:29:18:ba:35:d3:7c: 5b:05:e0:3b:dc:62:48:92:6d:7b:08:38:c0:29:32: 2a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:13:AC:31:AD:B5:77:A8:18:B4:ED:57:DE:F8:93:04:64:7D:49:19 X509v3 Authority Key Identifier: keyid:B2:AA:3E:3A:5B:29:E0:F4:1C:DD:5A:61:7F:7F:B6:A3:7A:1B:90:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/DF502EECD44511E984021644C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.17.44.0/22 118.179.224.0/19 163.47.248.0/22 202.22.224.0/20 203.80.48.0/21 IPv6: 2407:4a00::/32 Signature Algorithm: sha256WithRSAEncryption 28:e9:f7:00:e0:4a:f8:08:83:45:0a:43:35:f2:c0:2b:0b:13: c6:58:47:5f:c3:17:a2:22:a7:cb:1f:4b:74:e1:1a:57:f3:59: 61:45:fb:fb:da:8c:8b:a9:2e:10:30:9d:57:5f:73:c5:d0:68: 88:f7:d9:24:09:34:a5:92:b3:e0:20:32:dc:2a:a8:dc:1a:01: 98:59:ad:39:d2:ca:70:a1:48:f7:36:3b:bc:13:2c:0c:4d:f0: 0e:d7:03:5b:13:07:4d:01:1b:e9:fc:7e:4c:22:7c:79:1a:4b: 03:6a:42:90:75:a4:b2:e7:0e:0a:3a:6a:85:a7:3f:65:b0:19: 9d:18:9e:d3:8f:41:81:d9:52:59:03:a7:99:4c:1d:51:17:a8: 2c:f3:46:e9:ab:c3:a3:f2:f4:d4:2f:f1:ed:b1:4d:e6:5f:2d: 2f:46:be:2f:11:17:31:12:b4:86:df:30:95:b3:dc:4c:80:9d: fb:f0:8e:ea:05:aa:9f:08:83:48:5c:8c:92:21:1c:6b:d6:f2: 91:13:0c:a0:60:31:05:ea:ee:ea:7d:c2:6c:91:6f:a5:d8:b2: 1e:99:f4:4d:8d:d9:22:52:3b:37:e4:8e:24:af:3c:31:6c:9f: 78:de:a3:6e:a8:81:a9:e8:b1:4a:4a:77:4c:4c:4c:1b:78:4e: 90:0c:26:33 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgICNQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RkI5MjQxMTAvBgNVBAUTKEIyQUEzRTNBNUIyOUUwRjQxQ0RENUE2MTdGN0ZCNkEz N0ExQjkwMTEwHhcNMjYwMTA2MTUxMDU3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTVkMjYwMS04NjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8YIkiw+x0xT0fU9R4XFyiLIKCniLB1yfF8UCm2Tl9DthSnhCKriCGbTe0pjs bOhe0XWtk3RwbJPmfZvb7Ys6WXG7G/dghJRV7z84k8Ybps/xLoMT1EVeSf3t9cIl xWI2PflZUbISVl4ITnIbWN9Ga5Jxw71tqiNuFwyhImtLT+wr2d8Eb6KoT7lgU1Qh hWMXhIw5+y0uBIjtpNhENTREW6Yv6MiH9eKDYFmBXvRVJ1oHCf4aNOKk7JgonZbc eSjwy5G9NPbf1N4Bb0dYCd6irirrjK/3ZbGSlzLadTX172LuNe/teZCfI6MpGLo1 03xbBeA73GJIkm17CDjAKTIqbQIDAQABo4ICvDCCArgwHQYDVR0OBBYEFLUTrDGt tXeoGLTtV974kwRkfUkZMB8GA1UdIwQYMBaAFLKqPjpbKeD0HN1aYX9/tqN6G5AR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjkyNC9GRUQyM0Q4MjFE OEIxMUUyODZBMkU1RTYwOEIwMkNEMi9zcW8tT2xzcDRQUWMzVnBoZjMtMm8zb2Jr QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Nxby1PbHNwNFBRYzNWcGhmMy0ybzNvYmtCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkI5MjQvRkVEMjNEODIxRDhCMTFFMjg2QTJFNUU2MDhCMDJDRDIvREY1MDJFRUNE NDQ1MTFFOTg0MDIxNjQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E NzA1MCQEAgABMB4DBAJnESwDBAV2s+ADBAKjL/gDBATKFuADBAPLUDAwDQQCAAIw BwMFACQHSgAwDQYJKoZIhvcNAQELBQADggEBACjp9wDgSvgIg0UKQzXywCsLE8ZY R1/DF6Iip8sfS3ThGlfzWWFF+/vajIupLhAwnVdfc8XQaIj32SQJNKWSs+AgMtwq qNwaAZhZrTnSynChSPc2O7wTLAxN8A7XA1sTB00BG+n8fkwifHkaSwNqQpB1pLLn Dgo6aoWnP2WwGZ0YntOPQYHZUlkDp5lMHVEXqCzzRumrw6Py9NQv8e2xTeZfLS9G vi8RFzEStIbfMJWz3EyAnfvwjuoFqp8Ig0hcjJIhHGvW8pETDKBgMQXq7up9wmyR b6XYsh6Z9E2N2SJSOzfkjiSvPDFsn3jeo26oganosUpKd0xMTBt4TpAMJjM= -----END CERTIFICATE-----Generated at Thu Feb 19 23:05:00 2026 by rpki-client