$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/456D4CD41E0111ED858FE624C4F9AE02.roa File: 456D4CD41E0111ED858FE624C4F9AE02.roa (raw, json) Hash identifier: WL4dt4Iogb14W0euQ5DQnaaL1gMHYr9xfzJ0IrancOo= Subject key identifier: F5:4A:9D:A9:BD:5E:F8:6C:64:79:72:86:D5:2B:79:DD:42:8D:60:84 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 5DDF Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/456D4CD41E0111ED858FE624C4F9AE02.roa Signing time: Mon 02 Mar 2026 22:15:47 +0000 ROA not before: Thu 28 Aug 2025 14:53:11 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 135916 IP address blocks: 103.94.16.0/24 maxlen: 24 103.94.17.0/24 maxlen: 24 103.94.18.0/24 maxlen: 24 103.94.19.0/24 maxlen: 24 202.47.87.0/24 maxlen: 24 202.56.57.0/24 maxlen: 24 202.94.82.0/24 maxlen: 24 203.8.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24031 (0x5ddf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:53:11 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a60c13-19fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1a:88:1e:f9:8c:30:d2:e7:07:aa:3e:4d:ea: 3e:80:7e:c8:47:49:0f:7e:6e:d7:79:bc:53:cf:42: 2c:cd:e7:57:26:bd:bb:46:1a:e1:30:2d:6c:0c:ae: bd:e6:2d:9e:22:93:92:05:c0:27:b2:5e:e5:b5:fc: 8d:ba:7c:42:21:d0:8f:da:af:83:83:cd:fb:cf:8a: f5:37:05:fa:7b:26:c1:d5:15:87:8e:6c:09:ce:23: 02:5e:01:95:d2:52:51:55:74:e3:84:7a:98:64:93: 2b:3d:8d:50:b3:cc:0d:3b:33:1c:d4:27:c1:ec:fd: 4e:6e:41:66:90:48:a5:0b:2d:e1:f7:43:c0:ab:88: d4:bb:d7:ff:de:e9:39:c6:45:1f:3e:9f:32:3f:2a: 57:2d:48:d5:48:fd:95:41:33:8a:82:fb:f5:6d:02: be:60:e1:40:81:b8:75:51:98:a3:72:55:05:3a:0c: 5a:82:ed:25:8c:59:ca:0b:8e:e8:c9:17:b0:63:4c: 0d:9e:8b:bf:e9:8e:a9:74:f4:95:1f:85:65:c5:01: 86:59:8a:c4:c1:3d:99:7b:5c:ae:43:4e:7e:52:91: 14:8e:76:6a:d1:2e:f7:9c:b4:da:ca:17:6f:19:2a: ad:a8:da:20:12:f8:5e:c1:05:71:eb:d5:15:40:c1: 00:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:4A:9D:A9:BD:5E:F8:6C:64:79:72:86:D5:2B:79:DD:42:8D:60:84 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/456D4CD41E0111ED858FE624C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.94.16.0/22 202.47.87.0/24 202.56.57.0/24 202.94.82.0/24 203.8.172.0/24 Signature Algorithm: sha256WithRSAEncryption 17:73:96:08:4f:42:4f:76:2d:7e:cc:b9:da:7f:37:0e:5b:6f: ed:c2:4f:f6:b0:1d:34:e4:4c:73:76:28:a9:62:83:ca:4b:d0: 3b:42:04:c8:3e:c5:71:aa:63:7e:33:b1:9b:aa:05:0a:9b:85: f2:e8:2e:b2:81:ed:3c:0b:f7:16:3c:8f:d8:59:0a:92:42:9b: aa:a3:2f:69:9f:9c:5c:c3:7e:48:d8:7f:87:34:cd:ef:46:cf: 80:45:3f:f5:f3:e8:b7:95:c2:ab:8a:e2:be:3a:80:c2:8a:66: ea:72:d4:4f:2d:19:56:ae:37:5e:8a:7d:0e:90:e5:7a:5c:a2: 55:95:95:a5:ee:54:71:cb:f6:0d:7e:a7:59:29:14:02:ce:a7: 08:25:6f:07:3b:9a:fd:cf:f0:e3:a5:d6:b9:37:f6:c8:3e:87: 10:64:8e:c7:bb:02:d8:c8:19:74:ae:03:db:0b:b0:d1:b8:ea: b1:17:9e:59:9b:16:d7:05:c8:07:ce:bb:70:69:a1:3d:6e:2e: 12:dd:44:1a:30:0b:d6:46:05:f3:c8:bf:fd:59:ac:93:6c:ce: 6e:b0:bf:f5:f6:ed:0d:ba:1d:de:78:f4:c8:c3:f2:80:04:f2: aa:09:af:0d:e2:f1:04:e4:30:68:cd:79:20:d2:4b:94:91:71: d5:a0:9d:a9 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICXd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1MzExWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MGMxMy0xOWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBqIHvmMMNLnB6o+Teo+gH7IR0kPfm7XebxTz0IszedXJr27RhrhMC1sDK69 5i2eIpOSBcAnsl7ltfyNunxCIdCP2q+Dg837z4r1NwX6eybB1RWHjmwJziMCXgGV 0lJRVXTjhHqYZJMrPY1Qs8wNOzMc1CfB7P1ObkFmkEilCy3h90PAq4jUu9f/3uk5 xkUfPp8yPypXLUjVSP2VQTOKgvv1bQK+YOFAgbh1UZijclUFOgxagu0ljFnKC47o yRewY0wNnou/6Y6pdPSVH4VlxQGGWYrEwT2Ze1yuQ05+UpEUjnZq0S73nLTayhdv GSqtqNogEvhewQVx69UVQMEAkwIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFPVKnam9 XvhsZHlyhtUred1CjWCEMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNDU2RDRDRDQx RTAxMTFFRDg1OEZFNjI0QzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQCZ14QAwQAyi9XAwQAyjg5AwQAyl5SAwQAywisMA0GCSqGSIb3DQEB CwUAA4IBAQAXc5YIT0JPdi1+zLnafzcOW2/twk/2sB005ExzdiipYoPKS9A7QgTI PsVxqmN+M7GbqgUKm4Xy6C6yge08C/cWPI/YWQqSQpuqoy9pn5xcw35I2H+HNM3v Rs+ART/18+i3lcKriuK+OoDCimbqctRPLRlWrjdein0OkOV6XKJVlZWl7lRxy/YN fqdZKRQCzqcIJW8HO5r9z/Djpda5N/bIPocQZI7HuwLYyBl0rgPbC7DRuOqxF55Z mxbXBcgHzrtwaaE9bi4S3UQaMAvWRgXzyL/9WayTbM5usL/19u0Nuh3eePTIw/KA BPKqCa8N4vEE5DBozXkg0kuUkXHVoJ2p -----END CERTIFICATE-----Generated at Sat Mar 7 22:44:09 2026 by rpki-client