$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/919A58CE73AB11F095EAEF5CC4F9AE02.roa File: 919A58CE73AB11F095EAEF5CC4F9AE02.roa (raw, json) Hash identifier: 87Y7WQNrVw7H1x6dZylQAYpfTgEtcX9K34Gjps/BPcE= Subject key identifier: 30:C7:0B:FA:B7:A7:7E:12:8E:25:D9:E6:D3:94:11:72:B4:CA:9A:E4 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6BEA Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/919A58CE73AB11F095EAEF5CC4F9AE02.roa Signing time: Mon 02 Mar 2026 23:31:26 +0000 ROA not before: Thu 28 Aug 2025 14:57:05 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 38731 IP address blocks: 27.64.0.0/12 maxlen: 24 116.96.0.0/12 maxlen: 24 117.0.0.0/13 maxlen: 24 125.212.128.0/17 maxlen: 24 125.214.0.0/18 maxlen: 24 125.234.0.0/17 maxlen: 24 125.234.128.0/19 maxlen: 24 125.234.176.0/20 maxlen: 24 125.234.192.0/18 maxlen: 24 125.235.0.0/16 maxlen: 24 171.224.0.0/11 maxlen: 24 203.113.128.0/19 maxlen: 24 203.113.160.0/19 maxlen: 24 203.190.160.0/20 maxlen: 24 220.231.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27626 (0x6bea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:57:05 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a61dcd-41c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b9:37:b9:be:96:5a:5e:bf:ed:1e:52:69:15: 5d:6c:46:5d:31:84:7a:ea:7f:0e:91:f5:cc:05:a2: a3:2c:3c:ba:25:c1:95:da:0a:a0:e8:cd:80:55:91: 90:26:4b:e0:23:43:7e:81:61:b2:1d:a9:a6:71:8d: cc:09:91:04:60:57:ac:f8:fb:e1:d2:f9:11:99:cb: 06:8f:a7:35:9c:c3:e3:31:2a:b8:a3:a1:36:49:6d: 1a:dd:2e:d6:ed:9b:e0:fa:bd:d4:93:36:d8:ee:6c: 0f:37:8c:42:4b:af:b0:5f:f0:96:90:54:99:82:18: f3:d9:d6:67:ff:11:ee:a2:f4:ce:19:14:64:cc:c1: 59:62:30:98:46:7c:18:be:75:15:2a:58:fe:72:6f: 06:46:ce:aa:c2:fe:55:b5:ba:35:8e:d6:71:10:a6: bc:31:b0:33:c6:af:25:07:4c:da:0f:10:77:26:7f: de:c9:e1:3f:df:9e:83:2c:97:d4:1d:7d:c2:90:ed: d3:c4:16:f7:04:65:54:4e:64:41:4a:40:2e:aa:ef: 4d:46:38:88:d4:5b:24:dd:4e:c4:2a:d1:6d:16:a3: 7b:05:ba:d9:d6:4a:e2:03:57:f2:35:9e:af:b2:62: 75:c8:01:f2:ed:41:b8:be:08:2a:86:5e:78:49:18: 83:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C7:0B:FA:B7:A7:7E:12:8E:25:D9:E6:D3:94:11:72:B4:CA:9A:E4 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/919A58CE73AB11F095EAEF5CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.64.0.0/12 116.96.0.0/12 117.0.0.0/13 125.212.128.0/17 125.214.0.0/18 125.234.0.0-125.234.159.255 125.234.176.0-125.235.255.255 171.224.0.0/11 203.113.128.0/18 203.190.160.0/20 220.231.64.0/18 Signature Algorithm: sha256WithRSAEncryption 52:8a:97:dd:b7:1a:be:85:16:48:4e:0c:5a:82:01:65:46:b6: 44:ef:d4:a5:52:43:bb:ac:0f:c8:7d:09:dd:59:f2:f8:73:1b: cd:f5:c0:6b:15:e3:56:94:76:8a:51:85:a6:7c:2f:3e:40:02: a7:b3:0a:5e:83:a2:5f:d8:6b:2d:f4:b3:39:8e:d2:3a:06:ff: 5f:94:b3:44:91:07:e4:df:37:d8:d6:48:35:b5:7b:82:10:7d: b0:28:24:39:37:df:fd:8b:b2:a5:b9:1a:dd:10:13:bc:85:d7: a9:2f:ca:e7:ac:f8:df:34:2c:4f:61:34:15:4d:b5:9c:09:ba: 81:b5:20:f3:4f:e0:16:f6:6f:b1:e4:d9:11:25:1d:41:79:f1: d7:f7:eb:4b:01:24:67:f3:f9:c1:b7:d5:38:eb:1f:88:fc:93: 9a:e4:0a:8e:e4:7e:c4:9b:1c:c4:8b:73:2a:57:a8:8e:88:fa: c5:8b:2a:9d:a7:af:da:44:26:c6:b0:b3:1f:c3:98:4e:68:85: 5c:d4:64:c6:b5:67:f5:d2:eb:79:cb:46:64:7a:4e:cb:30:ee: 40:c4:99:b7:70:35:75:ee:5c:2f:93:57:1c:ef:57:c6:7d:f2: 56:f5:bb:d7:20:d9:8f:26:2a:4e:7c:bd:be:b0:d3:c0:2c:d8: cc:92:ac:c4 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICa+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NzA1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MWRjZC00MWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlLk3ub6WWl6/7R5SaRVdbEZdMYR66n8OkfXMBaKjLDy6JcGV2gqg6M2AVZGQ JkvgI0N+gWGyHammcY3MCZEEYFes+Pvh0vkRmcsGj6c1nMPjMSq4o6E2SW0a3S7W 7Zvg+r3UkzbY7mwPN4xCS6+wX/CWkFSZghjz2dZn/xHuovTOGRRkzMFZYjCYRnwY vnUVKlj+cm8GRs6qwv5Vtbo1jtZxEKa8MbAzxq8lB0zaDxB3Jn/eyeE/356DLJfU HX3CkO3TxBb3BGVUTmRBSkAuqu9NRjiI1Fsk3U7EKtFtFqN7BbrZ1kriA1fyNZ6v smJ1yAHy7UG4vggqhl54SRiD2wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDDHC/q3 p34SjiXZ5tOUEXK0yprkMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvOTE5QTU4Q0U3 M0FCMTFGMDk1RUFFRjVDQzRGOUFFMDIucm9hMGUGCCsGAQUFBwEHAQH/BFYwVDBS BAIAATBMAwMEG0ADAwR0YAMDA3UAAwQHfdSAAwQGfdYAMAsDAwF96gMEBX3qgDAL AwQEfeqwAwMCfegDAwWr4AMEBstxgAMEBMu+oAMEBtznQDANBgkqhkiG9w0BAQsF AAOCAQEAUoqX3bcavoUWSE4MWoIBZUa2RO/UpVJDu6wPyH0J3Vny+HMbzfXAaxXj VpR2ilGFpnwvPkACp7MKXoOiX9hrLfSzOY7SOgb/X5SzRJEH5N832NZINbV7ghB9 sCgkOTff/Yuypbka3RATvIXXqS/K56z43zQsT2E0FU21nAm6gbUg80/gFvZvseTZ ESUdQXnx1/frSwEkZ/P5wbfVOOsfiPyTmuQKjuR+xJscxItzKleojoj6xYsqnaev 2kQmxrCzH8OYTmiFXNRkxrVn9dLrectGZHpOyzDuQMSZt3A1de5cL5NXHO9Xxn3y VvW71yDZjyYqTny9vrDTwCzYzJKsxA== -----END CERTIFICATE-----Generated at Sat Mar 7 22:49:20 2026 by rpki-client