$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42CE2AF4CE3D11EFB64C2D1BC4F9AE02.roa File: 42CE2AF4CE3D11EFB64C2D1BC4F9AE02.roa (raw, json) Hash identifier: uh+rRIOYiUG90jjaGoSYnFjOGmwLlaKXGdrA4l0aAHo= Subject key identifier: F4:35:49:DB:CD:74:68:85:29:3A:77:49:97:23:18:DB:7D:A7:12:60 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 5F4F Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42CE2AF4CE3D11EFB64C2D1BC4F9AE02.roa Signing time: Mon 02 Mar 2026 22:21:56 +0000 ROA not before: Wed 26 Nov 2025 04:33:30 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 131386 IP address blocks: 45.119.80.0/22 maxlen: 24 45.119.84.0/22 maxlen: 24 103.2.228.0/22 maxlen: 24 103.27.236.0/22 maxlen: 24 103.87.220.0/22 maxlen: 24 103.89.92.0/22 maxlen: 24 103.95.156.0/22 maxlen: 24 103.200.24.0/22 maxlen: 24 2403:bf40::/48 maxlen: 48 2403:bf40:2::/48 maxlen: 48 2403:bf40:6::/48 maxlen: 48 2403:bf40:240::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24399 (0x5f4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Nov 26 04:33:30 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a60d84-2ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:35:a2:ed:74:6c:16:83:40:5a:bc:aa:0a:c1: b2:58:70:b7:b8:4a:0e:56:24:09:0c:b4:0d:e8:7c: 55:b7:a5:b2:73:bd:2a:83:61:da:d9:9a:a5:1f:cd: 71:a8:75:50:ee:2b:54:5b:ae:83:c0:65:76:e2:c8: 74:de:ca:14:24:e2:c3:c5:5a:40:79:83:6c:cb:51: 4d:95:ab:fc:55:d5:58:aa:8c:bd:16:02:4a:73:cb: 10:73:f4:51:57:bb:ed:b7:be:cd:dc:55:df:e3:98: 48:5e:a8:f4:40:c4:7d:ec:c6:62:bd:e3:28:04:ae: cd:fe:a1:94:ae:ac:39:b0:90:8a:0f:56:d7:c5:a5: 70:d6:6c:b0:c0:99:55:04:f7:17:72:6c:80:5e:e6: fc:bf:02:d0:2c:38:5a:3b:e9:b8:72:99:4a:13:da: dc:19:3d:3e:27:3f:3a:69:f5:8d:ae:59:8d:75:66: 83:a4:44:90:6d:35:82:8b:8f:28:65:33:74:a5:3c: a9:28:1f:31:09:29:e7:77:52:7e:29:2f:15:62:83: a3:b4:82:06:e7:e5:01:d1:ac:e6:8a:90:d1:31:28: b8:ed:2a:b2:ef:fc:01:53:e6:a3:54:dd:74:f2:f5: 8d:67:30:dc:3b:40:0a:08:38:d2:cb:4b:5e:97:b1: 04:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:35:49:DB:CD:74:68:85:29:3A:77:49:97:23:18:DB:7D:A7:12:60 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42CE2AF4CE3D11EFB64C2D1BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.119.80.0/21 103.2.228.0/22 103.27.236.0/22 103.87.220.0/22 103.89.92.0/22 103.95.156.0/22 103.200.24.0/22 IPv6: 2403:bf40::/48 2403:bf40:2::/48 2403:bf40:6::/48 2403:bf40:240::/42 Signature Algorithm: sha256WithRSAEncryption 3e:c5:ef:6b:59:d2:07:46:61:4b:6c:03:c9:21:de:e7:81:70: 86:33:fa:c0:c3:24:58:27:d9:1b:07:82:a2:de:86:80:11:d4: 87:53:6c:3c:db:7f:7f:7b:59:31:e7:8f:fd:d0:98:ca:06:a7: 94:80:15:d1:f6:5c:5b:60:dc:be:e3:bb:7f:cb:4d:ec:56:16: 98:95:91:f8:40:07:cd:65:d3:67:89:b0:e0:34:63:8b:13:d8: 1e:ef:c3:b6:01:3e:25:dc:f7:76:57:18:39:ca:c1:86:40:73: dd:31:a5:cd:00:9a:c1:91:47:c2:1a:50:40:12:35:ce:bf:d6: d9:7b:32:d8:03:37:14:6e:29:e4:8a:9a:7b:41:9b:b7:ce:f0: ff:10:e1:0e:cc:22:80:84:fb:ac:59:21:66:06:3c:c7:40:a6: c5:7c:ce:33:cb:02:7b:f0:65:05:01:82:9a:55:aa:68:11:60: 41:b0:b7:22:c9:67:31:9a:12:06:87:d8:cb:8a:58:2b:a9:0b: 7a:42:28:a3:79:81:8b:e0:47:97:46:c6:1b:0e:3f:17:66:04: 77:f0:76:3c:a4:b0:ef:de:d1:b2:16:86:72:a1:b0:5f:85:fc: 84:d5:c4:c4:4d:03:33:36:c5:f7:23:f5:d8:e6:c5:ed:49:64: a4:36:de:ac -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICX08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUxMTI2MDQzMzMwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MGQ4NC0yYWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTWi7XRsFoNAWryqCsGyWHC3uEoOViQJDLQN6HxVt6Wyc70qg2Ha2ZqlH81x qHVQ7itUW66DwGV24sh03soUJOLDxVpAeYNsy1FNlav8VdVYqoy9FgJKc8sQc/RR V7vtt77N3FXf45hIXqj0QMR97MZiveMoBK7N/qGUrqw5sJCKD1bXxaVw1mywwJlV BPcXcmyAXub8vwLQLDhaO+m4cplKE9rcGT0+Jz86afWNrlmNdWaDpESQbTWCi48o ZTN0pTypKB8xCSnnd1J+KS8VYoOjtIIG5+UB0azmipDRMSi47Sqy7/wBU+ajVN10 8vWNZzDcO0AKCDjSy0tel7EE3wIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFPQ1SdvN dGiFKTp3SZcjGNt9pxJgMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNDJDRTJBRjRD RTNEMTFFRkI2NEMyRDFCQzRGOUFFMDIucm9hMG8GCCsGAQUFBwEHAQH/BGAwXjAw BAIAATAqAwQDLXdQAwQCZwLkAwQCZxvsAwQCZ1fcAwQCZ1lcAwQCZ1+cAwQCZ8gY MCoEAgACMCQDBwAkA79AAAADBwAkA79AAAIDBwAkA79AAAYDBwYkA79AAkAwDQYJ KoZIhvcNAQELBQADggEBAD7F72tZ0gdGYUtsA8kh3ueBcIYz+sDDJFgn2RsHgqLe hoAR1IdTbDzbf397WTHnj/3QmMoGp5SAFdH2XFtg3L7ju3/LTexWFpiVkfhAB81l 02eJsOA0Y4sT2B7vw7YBPiXc93ZXGDnKwYZAc90xpc0AmsGRR8IaUEASNc6/1tl7 MtgDNxRuKeSKmntBm7fO8P8Q4Q7MIoCE+6xZIWYGPMdApsV8zjPLAnvwZQUBgppV qmgRYEGwtyLJZzGaEgaH2MuKWCupC3pCKKN5gYvgR5dGxhsOPxdmBHfwdjyksO/e 0bIWhnKhsF+F/ITVxMRNAzM2xfcj9djmxe1JZKQ23qw= -----END CERTIFICATE-----Generated at Sat Mar 7 22:42:51 2026 by rpki-client