$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C0E4891CCE1511EDAA593314C4F9AE02.roa File: C0E4891CCE1511EDAA593314C4F9AE02.roa (raw, json) Hash identifier: x+8XP9C/c7iIg8oO/ZFKjqxE//CgZJh5U5PW8b2J+sw= Subject key identifier: 63:73:5C:3D:07:99:56:62:DF:10:D4:19:1A:39:90:87:24:A3:E4:29 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 5F04 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C0E4891CCE1511EDAA593314C4F9AE02.roa Signing time: Mon 02 Mar 2026 22:20:41 +0000 ROA not before: Thu 28 Aug 2025 14:57:32 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 55313 IP address blocks: 27.118.16.0/20 maxlen: 24 45.126.92.0/22 maxlen: 24 103.245.148.0/22 maxlen: 24 2400:9bc0::/32 maxlen: 32 2400:9bc0::/48 maxlen: 48 2400:9bc0:1::/48 maxlen: 48 2400:9bc0:2::/48 maxlen: 48 2400:9bc0:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24324 (0x5f04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:57:32 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a60d39-508c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ca:7c:42:33:e5:03:24:16:8e:58:ab:4c:9a: 99:e7:76:fe:44:aa:55:f7:4f:c9:eb:5d:b4:d1:45: fd:03:bf:39:97:dc:75:9a:ad:ec:d3:77:e0:87:9b: 33:04:a5:92:b0:bf:1e:40:97:60:27:b2:fe:b0:15: 21:71:1f:42:2d:b5:3d:14:22:61:20:cc:48:22:3b: 2e:74:e8:2b:cb:f9:07:1d:1e:3c:71:e4:07:a9:89: af:60:56:a1:48:4c:b4:50:69:07:3d:44:6c:7f:63: 73:df:1b:95:9d:c2:41:0e:27:a6:f2:f1:c1:67:d2: 64:47:ee:ea:b9:e8:8d:d2:eb:66:62:12:f3:ea:4e: 07:c3:d5:b8:5e:18:13:06:8e:81:32:b1:43:ef:07: e0:2d:70:c9:d7:ec:b2:14:53:f9:a4:3d:bf:36:98: fa:c9:9c:56:8a:70:80:a8:9c:09:9b:e6:ac:24:75: 7b:9a:53:7e:36:54:88:c8:5a:2c:cf:a0:1b:49:14: 64:f8:3f:96:62:97:b0:f9:c5:26:29:c6:0d:04:29: ba:a8:dd:ad:6d:76:78:0e:04:10:0f:93:89:40:ad: a8:83:54:74:1e:95:82:4a:c6:ba:f5:ba:a0:a5:23: 2e:a9:90:83:bc:e6:38:06:8b:83:e9:99:cc:84:05: 4e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:73:5C:3D:07:99:56:62:DF:10:D4:19:1A:39:90:87:24:A3:E4:29 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C0E4891CCE1511EDAA593314C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.118.16.0/20 45.126.92.0/22 103.245.148.0/22 IPv6: 2400:9bc0::/32 Signature Algorithm: sha256WithRSAEncryption 1b:c0:55:78:5d:0a:e3:cb:50:40:91:e6:d9:5d:2b:fe:4c:7c: e3:a3:4f:61:31:35:10:2e:d6:35:cc:70:95:91:33:25:9f:fb: bd:1e:97:cf:1b:d5:f8:3f:2e:a6:af:2b:8e:8b:95:87:ff:fe: 18:0c:ae:a2:47:98:f5:91:4d:fb:bb:79:6f:9f:df:07:39:55: 68:f6:03:a9:72:35:19:fd:73:7f:1e:93:9e:56:f0:be:b5:9f: 0f:24:82:a5:39:c2:ca:d7:23:14:8d:4a:e4:5a:bd:f5:ae:43: 88:e4:6c:6a:5b:0a:c7:62:7b:ca:24:4a:bd:ea:3e:40:d1:95: c6:25:2d:a6:2b:8c:f2:90:25:b0:a0:97:4c:85:fc:ad:1f:4e: f6:ee:a2:89:c5:30:57:49:72:39:59:fd:5e:54:73:a3:b7:2b: ad:ff:b7:2b:5f:d5:04:7b:1d:dd:15:6e:30:f3:ea:6e:6b:ba: e3:6b:81:93:69:b5:08:4a:b6:da:d6:ec:13:7c:28:8d:c2:b2: 31:e8:41:b1:c5:d1:27:7f:ea:b5:a8:95:3b:d6:3f:ac:34:d9: 76:a2:31:16:1d:3b:85:c1:9f:42:9f:d0:09:f7:1e:ad:25:28: 21:87:0a:94:12:f6:27:a6:a6:14:89:f7:4b:26:a8:44:99:90: 0f:17:b8:f6 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICXwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NzMyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MGQzOS01MDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn8p8QjPlAyQWjlirTJqZ53b+RKpV90/J61200UX9A785l9x1mq3s03fgh5sz BKWSsL8eQJdgJ7L+sBUhcR9CLbU9FCJhIMxIIjsudOgry/kHHR48ceQHqYmvYFah SEy0UGkHPURsf2Nz3xuVncJBDiem8vHBZ9JkR+7queiN0utmYhLz6k4Hw9W4XhgT Bo6BMrFD7wfgLXDJ1+yyFFP5pD2/Npj6yZxWinCAqJwJm+asJHV7mlN+NlSIyFos z6AbSRRk+D+WYpew+cUmKcYNBCm6qN2tbXZ4DgQQD5OJQK2og1R0HpWCSsa69bqg pSMuqZCDvOY4BouD6ZnMhAVOWQIDAQABo4ICezCCAncwHQYDVR0OBBYEFGNzXD0H mVZi3xDUGRo5kIcko+QpMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQzBFNDg5MUND RTE1MTFFREFBNTkzMzE0QzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQEG3YQAwQCLX5cAwQCZ/WUMA0EAgACMAcDBQAkAJvAMA0GCSqGSIb3 DQEBCwUAA4IBAQAbwFV4XQrjy1BAkebZXSv+THzjo09hMTUQLtY1zHCVkTMln/u9 HpfPG9X4Py6mryuOi5WH//4YDK6iR5j1kU37u3lvn98HOVVo9gOpcjUZ/XN/HpOe VvC+tZ8PJIKlOcLK1yMUjUrkWr31rkOI5GxqWwrHYnvKJEq96j5A0ZXGJS2mK4zy kCWwoJdMhfytH0727qKJxTBXSXI5Wf1eVHOjtyut/7crX9UEex3dFW4w8+pua7rj a4GTabUISrba1uwTfCiNwrIx6EGxxdEnf+q1qJU71j+sNNl2ojEWHTuFwZ9Cn9AJ 9x6tJSghhwqUEvYnpqYUifdLJqhEmZAPF7j2 -----END CERTIFICATE-----Generated at Sat Mar 7 22:48:15 2026 by rpki-client