$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42A8B35A753911ED9FF88D3DC4F9AE02.roa File: 42A8B35A753911ED9FF88D3DC4F9AE02.roa (raw, json) Hash identifier: Tg2xY1AM8ZevtcStl39Q+/BTO/yRnvaaWqFY0JOv1+c= Subject key identifier: 25:87:EC:2B:41:7D:2B:65:97:E8:59:43:D9:E4:47:6B:77:29:DB:DB Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 5F0C Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42A8B35A753911ED9FF88D3DC4F9AE02.roa Signing time: Mon 02 Mar 2026 22:20:50 +0000 ROA not before: Thu 28 Aug 2025 14:57:39 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 56141 IP address blocks: 49.156.52.0/22 maxlen: 24 103.101.76.0/22 maxlen: 24 2001:df2:9b00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24332 (0x5f0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:57:39 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a60d42-b83c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7d:bf:d3:ee:79:9b:f4:bd:37:a7:c1:3e:98: 1b:2c:01:dd:4e:14:31:2d:34:62:1a:f8:6b:8d:5a: 27:12:1b:d7:75:b4:63:7f:35:7e:23:da:f8:69:93: 25:8c:98:1f:4a:96:0a:6f:36:20:dc:77:24:90:0c: 42:c6:c7:a7:eb:f5:85:2a:d1:82:fe:4f:b2:ba:a6: a2:94:c1:b0:30:26:fd:1a:ee:1e:00:d0:62:b0:11: dc:be:be:c9:fc:b5:64:49:63:4c:cc:c8:f5:8a:42: 05:f6:0a:c8:b9:22:f8:bb:bc:f7:12:5c:00:49:65: 26:75:55:e4:94:10:e8:4c:d1:33:28:f7:23:d9:90: 4e:c8:1c:d1:03:a5:0f:42:e8:41:d6:14:4a:af:ce: 9b:0b:e4:98:a9:57:c3:35:b1:40:1e:14:7a:8d:17: c2:65:13:86:68:ca:91:fd:3a:78:20:62:d6:18:aa: 63:e1:ba:23:c4:3e:16:92:0d:06:db:e4:7a:78:ff: ff:b0:a6:19:cb:08:be:72:dd:a7:6c:d2:6d:2b:ae: d4:6d:de:a1:cd:3a:17:f8:fa:ee:da:cc:da:e5:1a: a3:1b:15:65:4f:7d:e7:18:1f:87:d6:a9:dd:a5:9e: a5:75:95:92:a5:cc:ef:a5:b7:a9:2f:ef:f5:a9:c7: 11:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:87:EC:2B:41:7D:2B:65:97:E8:59:43:D9:E4:47:6B:77:29:DB:DB X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42A8B35A753911ED9FF88D3DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 49.156.52.0/22 103.101.76.0/22 IPv6: 2001:df2:9b00::/48 Signature Algorithm: sha256WithRSAEncryption 19:3e:5f:67:1a:bb:57:52:f0:bc:65:41:22:55:e3:ec:33:17: b7:b0:2f:1d:79:99:fc:82:36:b1:87:b3:b8:0c:d6:ff:27:64: f5:4a:47:68:ae:46:05:56:94:60:fb:ee:55:9d:e6:fc:67:ed: a1:46:24:05:f3:50:71:9a:fa:15:3d:9e:08:f2:29:8a:06:69: c1:db:40:71:77:5c:12:17:24:43:f4:85:94:cf:67:c2:1c:49: dd:65:4f:d3:97:ae:a1:d9:45:4a:55:2d:ff:25:06:07:d1:e6: 23:c3:6d:01:5a:b5:77:7e:0e:16:86:3a:c8:2f:8b:86:c3:0c: 10:3a:e1:68:fd:d3:66:0c:18:9b:7f:57:59:78:b9:72:d4:04: d5:1c:95:ec:ba:c4:0b:e1:cb:7b:9f:35:fb:c7:94:14:d0:fc: f3:31:c2:49:ba:0e:33:f2:3b:6f:51:10:2e:1c:fb:4d:28:68: e2:43:a8:32:7a:2d:45:51:b3:8c:10:3a:99:53:c8:1a:a1:41: 30:13:85:03:58:4c:42:7f:1f:0e:fa:96:94:36:c6:7b:de:67: 2d:03:ca:3d:f7:64:86:91:7d:30:64:f2:58:84:46:46:fa:26: 11:b2:c0:f6:31:75:6a:f6:d7:7e:71:98:25:2b:e8:f5:80:b4: b6:20:c5:b3 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICXwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NzM5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MGQ0Mi1iODNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhX2/0+55m/S9N6fBPpgbLAHdThQxLTRiGvhrjVonEhvXdbRjfzV+I9r4aZMl jJgfSpYKbzYg3HckkAxCxsen6/WFKtGC/k+yuqailMGwMCb9Gu4eANBisBHcvr7J /LVkSWNMzMj1ikIF9grIuSL4u7z3ElwASWUmdVXklBDoTNEzKPcj2ZBOyBzRA6UP QuhB1hRKr86bC+SYqVfDNbFAHhR6jRfCZROGaMqR/Tp4IGLWGKpj4bojxD4Wkg0G 2+R6eP//sKYZywi+ct2nbNJtK67Ubd6hzToX+Pru2sza5RqjGxVlT33nGB+H1qnd pZ6ldZWSpczvpbepL+/1qccRkwIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFCWH7CtB fStll+hZQ9nkR2t3KdvbMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNDJBOEIzNUE3 NTM5MTFFRDlGRjg4RDNEQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQCMZw0AwQCZ2VMMA8EAgACMAkDBwAgAQ3ymwAwDQYJKoZIhvcNAQEL BQADggEBABk+X2cau1dS8LxlQSJV4+wzF7ewLx15mfyCNrGHs7gM1v8nZPVKR2iu RgVWlGD77lWd5vxn7aFGJAXzUHGa+hU9ngjyKYoGacHbQHF3XBIXJEP0hZTPZ8Ic Sd1lT9OXrqHZRUpVLf8lBgfR5iPDbQFatXd+DhaGOsgvi4bDDBA64Wj902YMGJt/ V1l4uXLUBNUcley6xAvhy3ufNfvHlBTQ/PMxwkm6DjPyO29REC4c+00oaOJDqDJ6 LUVRs4wQOplTyBqhQTAThQNYTEJ/Hw76lpQ2xnveZy0Dyj33ZIaRfTBk8liERkb6 JhGywPYxdWr2135xmCUr6PWAtLYgxbM= -----END CERTIFICATE-----Generated at Sat Mar 7 22:47:07 2026 by rpki-client