$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/9AF37E96D71B11EA9532F30CC4F9AE02.roa File: 9AF37E96D71B11EA9532F30CC4F9AE02.roa (raw, json) Hash identifier: 548W6O4jy2t4m978fP7/vkFNV7StaszXL5cUkqOrlsQ= Subject key identifier: 52:13:06:02:C1:41:B2:1A:0C:1E:8F:2E:3C:63:7F:E5:AC:5D:CF:74 Certificate issuer: /CN=A91964B3/serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625 Certificate serial: 37F3 Authority key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/9AF37E96D71B11EA9532F30CC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:18:07 +0000 ROA not before: Tue 30 Dec 2025 15:10:47 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 9730 IP address blocks: 59.144.97.0/24 maxlen: 24 59.145.72.0/23 maxlen: 24 61.246.50.0/24 maxlen: 24 122.185.26.0/24 maxlen: 24 125.20.15.0/24 maxlen: 24 125.22.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 14:24:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14323 (0x37f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91964B3, serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625 Validity Not Before: Dec 30 15:10:47 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a490ef-72b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:df:8b:c5:15:cd:de:12:9a:f0:74:af:06:25: da:ab:5c:53:d3:84:05:63:c3:1d:6e:26:71:03:24: b0:a7:f6:22:b4:b7:b7:27:54:d6:aa:03:f7:0d:bf: 0a:d6:08:5c:6f:95:84:4d:01:cf:bd:57:58:1e:08: 58:1a:b9:dd:75:35:dd:70:3a:5c:ad:60:26:d0:9e: 71:36:8a:0f:42:8c:58:97:3f:f2:d3:70:86:f5:cb: d4:0f:0b:72:0e:b4:12:2c:5f:26:60:1f:91:18:42: c6:d0:07:ff:fd:39:2e:19:20:54:c2:9d:99:69:98: 5d:c2:fa:97:81:e5:56:35:4f:3a:c2:e3:c0:39:ca: 0a:cb:e8:f6:e1:4f:1d:67:2b:c1:81:b2:0a:c1:d6: 54:b3:a7:36:f6:ae:03:3b:22:74:a0:f6:e3:5e:90: dc:d1:6a:fd:c3:2b:54:dd:54:d6:21:53:7a:3b:d7: 7b:e3:2a:48:ce:7b:fd:54:c2:a0:c3:36:29:6b:39: e5:aa:c6:b9:e7:68:cf:0d:17:d2:53:49:d4:73:ad: 7f:1e:26:5b:78:37:24:39:fc:9a:8d:8f:75:c8:64: b5:ee:76:9c:43:f9:50:75:a0:96:e4:2f:a7:68:39: 3b:65:7a:d8:f7:25:9f:94:d7:0f:be:12:a3:86:10: 75:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:13:06:02:C1:41:B2:1A:0C:1E:8F:2E:3C:63:7F:E5:AC:5D:CF:74 X509v3 Authority Key Identifier: keyid:B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/9AF37E96D71B11EA9532F30CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 59.144.97.0/24 59.145.72.0/23 61.246.50.0/24 122.185.26.0/24 125.20.15.0/24 125.22.113.0/24 Signature Algorithm: sha256WithRSAEncryption 03:ea:e4:ae:f4:2c:50:08:93:70:7c:a0:b8:66:91:65:4e:a1: 0b:22:d2:63:16:b8:6e:f5:cc:cb:27:da:f2:6c:68:2c:f9:d5: 38:6f:9b:88:b6:de:ce:98:83:62:b5:a8:8e:7b:4b:13:44:69: f7:57:79:14:fa:1a:92:49:11:b8:16:19:0d:61:47:ec:a3:af: 8f:52:39:7f:2f:f8:15:ca:e1:b7:a4:05:ce:d4:20:bc:3c:c9: 18:67:da:11:22:8b:bc:ee:dc:6f:d6:f6:0d:f9:4d:7f:5d:0d: 9a:8b:1c:d8:f3:fa:47:05:12:13:94:58:df:68:57:81:b8:53: 51:5f:c8:ae:af:83:de:41:b2:b7:96:b9:a3:71:93:24:c8:8f: 88:02:c9:fa:e5:00:76:5c:b2:a9:96:e6:11:70:39:1b:17:35: 65:a4:88:9f:4a:22:11:b2:db:0a:99:52:dd:a2:45:d3:60:21: bc:f8:b9:62:5c:a9:23:62:33:d8:f9:64:10:ad:1e:7c:76:58: bf:51:16:42:f1:a7:9c:3b:a8:99:af:b1:2f:18:c9:a5:10:6d: d6:a1:62:69:ac:b4:87:ec:46:ef:a2:94:5c:84:08:09:a5:69: a7:5f:aa:88:92:d5:73:2a:79:0e:1e:95:ae:48:96:3f:94:69: 7c:2f:b6:37 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICN/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0QjMxMTAvBgNVBAUTKEIzOTg2NkE5OUQxQ0Q5RjRFN0U4RjUzQzg4QUQxNERB ODlBMTg2MjUwHhcNMjUxMjMwMTUxMDQ3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTBlZi03MmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA49+LxRXN3hKa8HSvBiXaq1xT04QFY8MdbiZxAySwp/YitLe3J1TWqgP3Db8K 1ghcb5WETQHPvVdYHghYGrnddTXdcDpcrWAm0J5xNooPQoxYlz/y03CG9cvUDwty DrQSLF8mYB+RGELG0Af//TkuGSBUwp2ZaZhdwvqXgeVWNU86wuPAOcoKy+j24U8d ZyvBgbIKwdZUs6c29q4DOyJ0oPbjXpDc0Wr9wytU3VTWIVN6O9d74ypIznv9VMKg wzYpaznlqsa552jPDRfSU0nUc61/HiZbeDckOfyajY91yGS17nacQ/lQdaCW5C+n aDk7ZXrY9yWflNcPvhKjhhB11wIDAQABo4ICfjCCAnowHQYDVR0OBBYEFFITBgLB QbIaDB6PLjxjf+WsXc90MB8GA1UdIwQYMBaAFLOYZqmdHNn05+j1PIitFNqJoYYl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjRCMy9FNjU4NTExMjFE ODQxMUUyQTFCQTMwREIwOEIwMkNEMi9zNWhtcVowYzJmVG42UFU4aUswVTJvbWho aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M1aG1xWjBjMmZUbjZQVThpSzBVMm9taGhpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTY0QjMvRTY1ODUxMTIxRDg0MTFFMkExQkEzMERCMDhCMDJDRDIvOUFGMzdFOTZE NzFCMTFFQTk1MzJGMzBDQzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAq BAIAATAkAwQAO5BhAwQBO5FIAwQAPfYyAwQAerkaAwQAfRQPAwQAfRZxMA0GCSqG SIb3DQEBCwUAA4IBAQAD6uSu9CxQCJNwfKC4ZpFlTqELItJjFrhu9czLJ9rybGgs +dU4b5uItt7OmINitaiOe0sTRGn3V3kU+hqSSRG4FhkNYUfso6+PUjl/L/gVyuG3 pAXO1CC8PMkYZ9oRIou87txv1vYN+U1/XQ2aixzY8/pHBRITlFjfaFeBuFNRX8iu r4PeQbK3lrmjcZMkyI+IAsn65QB2XLKpluYRcDkbFzVlpIifSiIRstsKmVLdokXT YCG8+LliXKkjYjPY+WQQrR58dli/URZC8aecO6iZr7EvGMmlEG3WoWJprLSH7Ebv opRchAgJpWmnX6qIktVzKnkOHpWuSJY/lGl8L7Y3 -----END CERTIFICATE-----Generated at Sat Mar 14 23:17:06 2026 by rpki-client