$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A0EF6C88655D11ED8378684BC4F9AE02.roa File: A0EF6C88655D11ED8378684BC4F9AE02.roa (raw, json) Hash identifier: jzn7T9wUB1lxCZCxjnkrZKAd4XP/a1UnuEtHSet0zbk= Subject key identifier: 2C:AC:23:DB:56:6C:BA:F6:A3:0C:7A:43:63:C6:A2:8E:46:56:15:B9 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 5F21 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A0EF6C88655D11ED8378684BC4F9AE02.roa Signing time: Mon 02 Mar 2026 22:21:11 +0000 ROA not before: Thu 28 Aug 2025 14:57:59 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 63747 IP address blocks: 45.252.240.0/22 maxlen: 23 45.252.240.0/24 maxlen: 24 45.252.241.0/24 maxlen: 24 45.252.242.0/24 maxlen: 24 45.252.243.0/24 maxlen: 24 45.252.244.0/22 maxlen: 24 103.221.224.0/22 maxlen: 24 103.221.228.0/22 maxlen: 24 2001:df2:ce00::/48 maxlen: 48 2405:53c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24353 (0x5f21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:57:59 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a60d57-12e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bc:94:bc:da:e6:2b:cb:12:3b:65:97:e2:54: 25:9d:48:a8:b6:81:1f:06:b0:3b:8a:9a:af:4f:0e: 84:9e:71:48:35:2a:68:dd:e5:b7:10:42:d3:ed:21: 89:e6:ff:24:2f:c3:50:10:99:08:d0:c7:e7:f1:27: 44:02:3d:68:31:12:01:57:86:3e:7a:ce:e7:4a:8c: 49:64:8a:0d:15:b3:95:1e:af:de:76:7a:f6:40:b2: fb:55:25:f6:da:cc:51:79:ff:58:d2:e4:23:76:df: cb:80:89:a8:6f:9a:70:dd:05:89:2e:c9:c0:db:43: a8:8b:0b:a5:7e:4c:b6:84:2f:b0:31:69:f3:e8:08: 8a:ff:a0:63:35:08:96:10:69:1e:f4:a5:08:52:99: cb:1b:d9:c2:e1:05:aa:e0:2d:fa:2c:7e:c4:34:95: 5e:bf:db:d5:4e:e9:2f:e5:50:64:25:0f:88:f5:03: 98:b9:6c:6f:cf:01:58:3a:ca:1c:c0:d7:ff:35:ae: 05:25:8b:ba:19:d4:27:ff:15:a0:f7:bf:ab:af:4c: 18:cb:bf:8a:78:77:07:91:45:5d:4d:a8:9f:86:87: 87:c7:0f:87:fc:a9:06:31:8f:f1:30:fa:6b:84:e0: 03:22:0c:8f:6a:ff:74:ee:4f:78:16:ee:99:00:fa: 8d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AC:23:DB:56:6C:BA:F6:A3:0C:7A:43:63:C6:A2:8E:46:56:15:B9 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A0EF6C88655D11ED8378684BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.252.240.0/21 103.221.224.0/21 IPv6: 2001:df2:ce00::/48 2405:53c0::/32 Signature Algorithm: sha256WithRSAEncryption 42:f9:06:ae:71:2a:2b:23:86:15:a3:a9:bc:73:b9:cb:ff:d6: a3:6b:a0:94:1f:66:05:66:c7:e2:2b:5a:fe:c2:a2:b0:1f:23: 39:55:45:ea:eb:82:d1:c0:d6:32:9e:87:8a:cc:34:8c:f9:ba: eb:4d:83:07:06:84:48:65:ba:e9:0c:94:bf:c8:07:d7:b8:df: 2e:8a:b1:34:50:d6:d7:b8:8c:24:3e:39:2d:b0:f5:be:25:1e: ae:46:22:b7:74:f5:af:34:b0:53:cb:8a:b3:9e:aa:96:2a:7d: f2:61:91:7f:9f:a7:06:f6:fd:63:e7:27:e6:d7:f7:f4:ec:f1: 98:aa:52:e3:e0:86:ab:6c:7c:92:48:f2:ae:01:c6:b6:39:1d: 4a:4f:7a:c7:8d:9e:3e:48:c0:ae:d5:67:4d:1e:85:1b:0c:11: e6:ea:30:9b:5a:91:0d:d9:52:48:c4:3b:da:70:08:e3:6b:41: ec:bc:70:70:e4:3a:f1:d6:63:c2:52:a3:64:ca:56:5f:3f:d3: 13:1f:ff:70:5f:5d:46:74:06:57:7c:e0:9d:8a:bd:c7:f1:f2: 70:f1:3f:a7:b2:ed:92:a3:2a:33:9a:b7:f7:a0:00:f7:c9:f5: c7:31:60:6f:62:9c:e5:e1:3f:4c:95:c8:b5:33:a5:94:de:a6: ad:82:06:51 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICXyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NzU5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MGQ1Ny0xMmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLyUvNrmK8sSO2WX4lQlnUiotoEfBrA7ipqvTw6EnnFINSpo3eW3EELT7SGJ 5v8kL8NQEJkI0Mfn8SdEAj1oMRIBV4Y+es7nSoxJZIoNFbOVHq/ednr2QLL7VSX2 2sxRef9Y0uQjdt/LgImob5pw3QWJLsnA20Ooiwulfky2hC+wMWnz6AiK/6BjNQiW EGke9KUIUpnLG9nC4QWq4C36LH7ENJVev9vVTukv5VBkJQ+I9QOYuWxvzwFYOsoc wNf/Na4FJYu6GdQn/xWg97+rr0wYy7+KeHcHkUVdTaifhoeHxw+H/KkGMY/xMPpr hOADIgyPav907k94Fu6ZAPqNlwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFCysI9tW bLr2owx6Q2PGoo5GVhW5MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQTBFRjZDODg2 NTVEMTFFRDgzNzg2ODRCQzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAS BAIAATAMAwQDLfzwAwQDZ93gMBYEAgACMBADBwAgAQ3yzgADBQAkBVPAMA0GCSqG SIb3DQEBCwUAA4IBAQBC+QaucSorI4YVo6m8c7nL/9aja6CUH2YFZsfiK1r+wqKw HyM5VUXq64LRwNYynoeKzDSM+brrTYMHBoRIZbrpDJS/yAfXuN8uirE0UNbXuIwk PjktsPW+JR6uRiK3dPWvNLBTy4qznqqWKn3yYZF/n6cG9v1j5yfm1/f07PGYqlLj 4IarbHySSPKuAca2OR1KT3rHjZ4+SMCu1WdNHoUbDBHm6jCbWpEN2VJIxDvacAjj a0HsvHBw5Drx1mPCUqNkylZfP9MTH/9wX11GdAZXfOCdir3H8fJw8T+nsu2Soyoz mrf3oAD3yfXHMWBvYpzl4T9Mlci1M6WU3qatggZR -----END CERTIFICATE-----Generated at Sat Mar 7 22:48:13 2026 by rpki-client