$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/13C88472A8C311EC8F560C42C4F9AE02.roa File: 13C88472A8C311EC8F560C42C4F9AE02.roa (raw, json) Hash identifier: S49OQoZnEonzogwXg0apsDdCYyrGEjINNeKEXXNhZoE= Subject key identifier: D7:81:D3:57:E8:B3:83:F5:47:4D:F9:34:F2:C5:1B:7D:47:1E:1C:E3 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 5DAD Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/13C88472A8C311EC8F560C42C4F9AE02.roa Signing time: Mon 02 Mar 2026 22:14:58 +0000 ROA not before: Thu 28 Aug 2025 14:52:26 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 131367 IP address blocks: 45.118.148.0/22 maxlen: 24 103.20.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23981 (0x5dad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:52:26 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a60be2-08dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:34:57:ba:0f:46:12:98:77:51:f2:44:44:d6: 57:0f:0c:ce:d8:9c:6e:a3:5a:c9:b5:84:8a:9e:4f: b8:0e:a3:e7:c1:1f:12:8d:39:6a:0a:c5:fe:fd:bf: 73:99:62:b3:6f:eb:5a:0c:cd:47:f3:8d:b3:7f:f6: 3c:ad:ea:a0:97:1e:71:82:90:53:74:e1:40:79:72: b1:85:32:c2:69:86:3a:93:bd:e5:e0:e3:ce:a3:17: 75:1a:55:ca:9b:7f:22:b5:11:1e:e0:81:f0:59:43: 8b:5d:18:f8:15:bc:da:29:e7:d4:88:38:b8:a9:f9: b6:2c:a3:1b:af:b6:5b:6b:50:24:e9:0f:c6:ed:49: 18:59:07:58:fc:13:0a:f8:9e:a6:ee:f7:2b:6b:d4: 10:5d:8b:62:e1:cd:b4:f6:65:be:a1:75:c5:13:93: 03:1a:39:5a:16:bc:8f:aa:1b:1a:4f:63:2a:74:9b: 2b:18:57:6a:3a:4d:27:6f:56:65:39:ef:4c:d6:aa: 08:fe:97:f9:42:f2:7b:a1:9d:b6:bf:07:6f:78:e3: 79:25:8b:65:2d:c9:ba:e2:90:16:51:59:a2:1e:14: 49:80:30:94:36:67:2e:df:48:d0:aa:4c:86:53:70: fe:19:db:7a:cd:83:07:03:c7:50:c2:cb:9b:ec:52: 35:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:81:D3:57:E8:B3:83:F5:47:4D:F9:34:F2:C5:1B:7D:47:1E:1C:E3 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/13C88472A8C311EC8F560C42C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.118.148.0/22 103.20.148.0/22 Signature Algorithm: sha256WithRSAEncryption 07:b0:6e:db:22:86:f9:91:9d:cf:33:ba:53:a6:09:e0:1f:06: 28:f3:66:22:c0:33:ce:8a:94:d4:e3:a2:d8:e5:08:6c:48:c0: cc:f0:9c:79:11:3e:9f:14:52:e5:90:cb:26:cd:56:b3:7a:af: 6d:07:52:a0:72:67:37:f8:58:95:19:21:b9:2c:d8:bb:9f:b1: 27:89:d9:9b:aa:b5:e9:3c:d8:ae:00:8f:c1:8a:f4:28:24:a9: 33:88:56:f6:db:91:77:46:9a:17:05:2d:a0:01:81:e8:56:46: 4f:14:f0:d9:3a:bd:84:b6:3c:a3:03:7f:14:31:2f:87:45:79: 95:98:99:61:08:fc:2b:f5:1e:7c:3c:55:70:ac:79:22:7f:d9: c6:2f:94:08:4d:13:70:89:00:d0:7a:bf:8e:b7:ea:06:40:ca: 1a:e6:96:d1:c8:b3:cd:bd:79:b4:03:b4:aa:b2:d6:24:d8:df: 6c:85:20:60:61:40:77:15:82:04:f9:54:e3:0e:c4:40:ac:84: 89:29:40:21:0e:ef:7c:a7:90:00:02:6e:ba:99:4e:86:4c:b6: 57:a4:c7:0f:da:c9:be:36:6a:5d:59:2f:2d:16:9f:a8:b5:c4: 5d:cb:ce:71:10:22:43:98:42:53:b3:f2:27:f1:dc:eb:ed:a2: 6c:17:cc:fd -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICXa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1MjI2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MGJlMi0wOGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAljRXug9GEph3UfJERNZXDwzO2Jxuo1rJtYSKnk+4DqPnwR8SjTlqCsX+/b9z mWKzb+taDM1H842zf/Y8reqglx5xgpBTdOFAeXKxhTLCaYY6k73l4OPOoxd1GlXK m38itREe4IHwWUOLXRj4FbzaKefUiDi4qfm2LKMbr7Zba1Ak6Q/G7UkYWQdY/BMK +J6m7vcra9QQXYti4c209mW+oXXFE5MDGjlaFryPqhsaT2MqdJsrGFdqOk0nb1Zl Oe9M1qoI/pf5QvJ7oZ22vwdveON5JYtlLcm64pAWUVmiHhRJgDCUNmcu30jQqkyG U3D+Gdt6zYMHA8dQwsub7FI1XwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFNeB01fo s4P1R035NPLFG31HHhzjMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMTNDODg0NzJB OEMzMTFFQzhGNTYwQzQyQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCLXaUAwQCZxSUMA0GCSqGSIb3DQEBCwUAA4IBAQAHsG7bIob5kZ3P M7pTpgngHwYo82YiwDPOipTU46LY5QhsSMDM8Jx5ET6fFFLlkMsmzVazeq9tB1Kg cmc3+FiVGSG5LNi7n7EnidmbqrXpPNiuAI/BivQoJKkziFb225F3RpoXBS2gAYHo VkZPFPDZOr2EtjyjA38UMS+HRXmVmJlhCPwr9R58PFVwrHkif9nGL5QITRNwiQDQ er+Ot+oGQMoa5pbRyLPNvXm0A7SqstYk2N9shSBgYUB3FYIE+VTjDsRArISJKUAh Du98p5AAAm66mU6GTLZXpMcP2sm+NmpdWS8tFp+otcRdy85xECJDmEJTs/In8dzr 7aJsF8z9 -----END CERTIFICATE-----Generated at Sat Mar 7 22:47:39 2026 by rpki-client