$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D2835514991411EBAD428141C4F9AE02.roa File: D2835514991411EBAD428141C4F9AE02.roa (raw, json) Hash identifier: iKMBcEMPNiGZnIZxhq71JQifi0NGuZwEMASzHYsQV9Q= Subject key identifier: 83:47:4B:5E:C4:11:0C:AC:D2:1C:7A:62:EB:D9:B1:6E:06:75:14:C6 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 5EF9 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D2835514991411EBAD428141C4F9AE02.roa Signing time: Mon 02 Mar 2026 22:20:30 +0000 ROA not before: Thu 28 Aug 2025 14:57:22 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 45896 IP address blocks: 45.125.200.0/22 maxlen: 24 45.125.204.0/22 maxlen: 24 45.125.208.0/22 maxlen: 24 103.19.164.0/22 maxlen: 24 103.37.28.0/22 maxlen: 24 103.37.32.0/22 maxlen: 24 103.38.136.0/22 maxlen: 24 103.234.88.0/22 maxlen: 24 103.237.64.0/22 maxlen: 24 111.91.232.0/22 maxlen: 24 2001:df0:2e8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24313 (0x5ef9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:57:22 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a60d2e-4762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:44:fc:96:65:4c:06:d5:ea:7f:d4:21:9e:9d: 02:b9:32:3f:e9:fc:23:e4:dc:15:f5:08:f0:bd:82: 7a:f3:93:ed:21:1d:e0:a3:bc:8d:eb:ca:88:25:b9: a1:02:dd:9c:6c:a8:f3:bb:9a:87:3c:f1:18:73:b7: 60:06:24:f3:57:a9:b4:7a:17:a7:48:b2:fb:aa:56: 26:ab:38:fb:99:7d:36:d3:17:c6:ab:96:2a:b4:fa: d1:13:88:e4:5a:3a:a8:e7:52:bb:28:70:00:22:50: 7c:55:4c:9e:58:e8:85:62:cd:f3:20:b5:9a:64:d1: 0a:6c:b7:3c:0b:c7:6f:b4:91:fa:19:29:54:44:1c: 83:33:e2:f7:6d:71:50:60:3e:e1:7c:5f:55:c5:fb: 1c:20:d5:8b:f4:85:3b:88:26:a2:b6:ff:6a:fd:0c: d6:21:2b:cb:a6:d2:48:73:62:5c:8d:0f:3f:78:cd: 95:b4:6c:c9:68:2d:cb:9a:76:e6:c4:e6:8a:10:59: 69:63:01:c0:6f:99:c7:fd:5e:1e:11:b4:be:2d:75: 50:89:ca:d8:8d:d5:6f:8b:7e:2a:e2:d8:3e:b7:e4: 3a:a7:ea:92:83:38:93:fd:5c:a6:83:88:16:85:6e: 68:7d:bf:91:0c:64:9c:48:19:64:ae:c2:a8:f1:fa: aa:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:47:4B:5E:C4:11:0C:AC:D2:1C:7A:62:EB:D9:B1:6E:06:75:14:C6 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D2835514991411EBAD428141C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.125.200.0-45.125.211.255 103.19.164.0/22 103.37.28.0-103.37.35.255 103.38.136.0/22 103.234.88.0/22 103.237.64.0/22 111.91.232.0/22 IPv6: 2001:df0:2e8::/48 Signature Algorithm: sha256WithRSAEncryption 8e:14:c1:27:fb:68:35:4c:0b:1d:fc:0f:86:e2:29:46:03:2a: 27:05:aa:47:f3:31:26:12:0e:47:73:af:c7:1a:7b:76:47:9c: c0:b1:85:54:a7:0b:9f:ea:86:7c:19:09:f8:8e:7e:f2:7b:5f: a2:ed:35:a6:73:dd:20:32:f2:dd:9f:1b:44:e0:0d:64:82:05: 3c:d4:87:cc:ee:36:55:e7:7f:3a:03:9e:69:2d:a5:7f:c9:a9: 8b:ad:7b:77:33:08:15:68:90:93:58:d9:25:39:f3:f0:43:cf: 05:7a:63:7c:22:58:48:79:05:42:96:e1:d3:fc:82:69:dd:40: a1:08:d6:dc:bd:f0:c3:7f:99:7d:50:ac:c2:bb:15:12:7d:0a: 15:70:12:70:47:8e:ba:d4:2c:38:af:81:8b:f9:75:52:8d:ef: 49:02:31:ee:6a:ec:1f:36:82:f0:3f:9b:72:a2:e0:20:78:9d: cf:70:6a:82:d3:91:35:6c:bc:8e:e1:fc:a7:0f:0a:7a:0a:f4: a8:5c:71:7e:fa:6b:c3:98:45:3d:c3:7c:c4:49:6b:e1:f5:48: 6e:d8:0f:90:05:42:d2:25:c9:11:df:4f:98:0f:73:63:b2:84: c8:ae:ea:d2:67:6e:22:ed:db:ed:13:12:11:4e:db:66:16:48: 8a:7b:e4:b0 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICXvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NzIyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MGQyZS00NzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlUT8lmVMBtXqf9Qhnp0CuTI/6fwj5NwV9QjwvYJ685PtIR3go7yN68qIJbmh At2cbKjzu5qHPPEYc7dgBiTzV6m0ehenSLL7qlYmqzj7mX020xfGq5YqtPrRE4jk Wjqo51K7KHAAIlB8VUyeWOiFYs3zILWaZNEKbLc8C8dvtJH6GSlURByDM+L3bXFQ YD7hfF9VxfscINWL9IU7iCaitv9q/QzWISvLptJIc2JcjQ8/eM2VtGzJaC3Lmnbm xOaKEFlpYwHAb5nH/V4eEbS+LXVQicrYjdVvi34q4tg+t+Q6p+qSgziT/Vymg4gW hW5ofb+RDGScSBlkrsKo8fqqCQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFINHS17E EQys0hx6YuvZsW4GdRTGMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRDI4MzU1MTQ5 OTE0MTFFQkFENDI4MTQxQzRGOUFFMDIucm9hMGQGCCsGAQUFBwEHAQH/BFUwUzBA BAIAATA6MAwDBAMtfcgDBAItfdADBAJnE6QwDAMEAmclHAMEAmclIAMEAmcmiAME AmfqWAMEAmftQAMEAm9b6DAPBAIAAjAJAwcAIAEN8ALoMA0GCSqGSIb3DQEBCwUA A4IBAQCOFMEn+2g1TAsd/A+G4ilGAyonBapH8zEmEg5Hc6/HGnt2R5zAsYVUpwuf 6oZ8GQn4jn7ye1+i7TWmc90gMvLdnxtE4A1kggU81IfM7jZV5386A55pLaV/yamL rXt3MwgVaJCTWNklOfPwQ88FemN8IlhIeQVCluHT/IJp3UChCNbcvfDDf5l9UKzC uxUSfQoVcBJwR4661Cw4r4GL+XVSje9JAjHuauwfNoLwP5tyouAgeJ3PcGqC05E1 bLyO4fynDwp6CvSoXHF++mvDmEU9w3zESWvh9Uhu2A+QBULSJckR30+YD3NjsoTI rurSZ24i7dvtExIRTttmFkiKe+Sw -----END CERTIFICATE-----Generated at Sat Mar 7 22:44:07 2026 by rpki-client