$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D93DA9C0C93411ED9A315E3DC4F9AE02.roa File: D93DA9C0C93411ED9A315E3DC4F9AE02.roa (raw, json) Hash identifier: IAfSZKh433fHvDh+S888A13D/gm9mXLWEoDlK3KoopA= Subject key identifier: 67:CC:F9:2A:27:29:07:22:91:25:CC:6E:DC:F2:81:90:AB:02:E8:58 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 5E63 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D93DA9C0C93411ED9A315E3DC4F9AE02.roa Signing time: Mon 02 Mar 2026 22:17:59 +0000 ROA not before: Thu 28 Aug 2025 14:55:10 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 150828 IP address blocks: 36.50.232.0/24 maxlen: 24 36.50.233.0/24 maxlen: 24 103.116.8.0/23 maxlen: 23 103.252.122.0/24 maxlen: 24 103.252.123.0/24 maxlen: 24 2400:eca0::/48 maxlen: 48 2401:4ae0::/48 maxlen: 48 2401:5e20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24163 (0x5e63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:55:10 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a60c96-94e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:34:6c:7e:5f:e9:0e:4e:3f:ff:9f:f4:aa:20: 6e:b7:ae:93:6c:c6:69:75:35:e2:c3:db:46:d9:b3: 8b:da:e7:64:ed:d7:83:31:ee:27:2d:d3:b5:cd:c6: b4:97:2a:9c:fd:33:72:92:2a:b1:81:98:77:44:6e: 2a:ce:dd:f1:fa:e3:5a:4a:16:09:4f:45:c7:34:80: c4:2e:d3:80:20:72:14:9b:6f:97:94:28:94:03:a9: c8:70:ab:1c:56:15:33:47:0f:d1:c5:44:c5:ff:df: d6:e4:14:22:f8:98:a0:19:89:d4:7d:3d:df:b5:aa: 38:19:de:0d:43:2c:9a:f0:76:ee:e2:83:ee:1e:9b: be:22:c1:55:87:ab:68:35:54:9d:b9:cb:77:68:7a: 70:1c:e1:e4:46:af:97:d6:77:50:dd:fc:60:6a:35: e7:be:89:14:d3:3d:ed:25:10:24:04:13:29:d4:8c: 2a:29:5d:00:ae:b4:0e:ca:9c:24:7c:10:ce:98:34: 9b:79:53:fb:da:ca:7b:94:20:ad:14:73:ca:50:5d: 67:78:4c:bc:45:a1:bf:c7:13:2f:aa:dc:d6:a2:c3: ce:42:3b:0b:0f:ef:be:11:1b:0f:65:4d:72:f8:a0: 8e:cb:76:7c:ce:3a:ef:08:61:df:9d:16:d7:1c:d1: 34:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:CC:F9:2A:27:29:07:22:91:25:CC:6E:DC:F2:81:90:AB:02:E8:58 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D93DA9C0C93411ED9A315E3DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.50.232.0/23 103.116.8.0/23 103.252.122.0/23 IPv6: 2400:eca0::/48 2401:4ae0::/48 2401:5e20::/48 Signature Algorithm: sha256WithRSAEncryption 01:36:eb:c6:55:88:4a:ee:c5:6d:59:6d:67:8f:8b:ca:a4:53: f9:23:51:26:49:30:9d:db:62:8c:63:32:f4:99:88:75:4f:d9: 83:e1:1b:fe:6d:d3:c6:e7:d8:b9:f2:fd:dc:2b:5d:31:a5:36: 35:c6:34:59:72:2c:b2:6f:f7:ea:95:62:30:14:63:ba:1e:7d: aa:ba:85:d3:eb:6f:d9:8e:3c:7f:5a:01:e5:11:78:df:39:ba: 48:b6:5b:27:d7:d5:6d:a2:38:4f:b7:bb:d7:3e:68:bc:08:b5: ec:9b:51:4b:4d:49:3f:52:df:a6:7a:13:f3:9b:70:e5:70:6d: 8f:08:36:43:ac:30:84:d0:5b:fd:52:49:4b:2e:34:0d:b5:11: 3b:5a:21:e4:b3:38:50:cf:0e:e2:27:7a:5e:d8:4b:24:80:ae: 7f:f9:35:7a:83:4b:fb:db:f9:ad:c3:64:89:ba:d2:79:9b:99: 74:e1:43:71:fa:c4:91:06:72:e2:d2:26:b7:64:41:2c:ad:d1: 5c:e1:73:a0:90:e4:a1:e7:31:af:0d:c4:70:0f:94:93:cc:23: 74:79:14:00:b3:79:2c:eb:e1:14:62:83:87:c8:e4:e6:56:c4: b7:2b:f0:e9:69:7d:c7:46:2a:5f:8c:a6:af:7e:7a:60:6f:eb: 23:c6:9e:27 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgICXmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NTEwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MGM5Ni05NGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhjRsfl/pDk4//5/0qiBut66TbMZpdTXiw9tG2bOL2udk7deDMe4nLdO1zca0 lyqc/TNykiqxgZh3RG4qzt3x+uNaShYJT0XHNIDELtOAIHIUm2+XlCiUA6nIcKsc VhUzRw/RxUTF/9/W5BQi+JigGYnUfT3ftao4Gd4NQyya8Hbu4oPuHpu+IsFVh6to NVSduct3aHpwHOHkRq+X1ndQ3fxgajXnvokU0z3tJRAkBBMp1IwqKV0ArrQOypwk fBDOmDSbeVP72sp7lCCtFHPKUF1neEy8RaG/xxMvqtzWosPOQjsLD+++ERsPZU1y +KCOy3Z8zjrvCGHfnRbXHNE0AQIDAQABo4ICjzCCAoswHQYDVR0OBBYEFGfM+Son KQcikSXMbtzygZCrAuhYMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRDkzREE5QzBD OTM0MTFFRDlBMzE1RTNEQzRGOUFFMDIucm9hME4GCCsGAQUFBwEHAQH/BD8wPTAY BAIAATASAwQBJDLoAwQBZ3QIAwQBZ/x6MCEEAgACMBsDBwAkAOygAAADBwAkAUrg AAADBwAkAV4gAAAwDQYJKoZIhvcNAQELBQADggEBAAE268ZViEruxW1ZbWePi8qk U/kjUSZJMJ3bYoxjMvSZiHVP2YPhG/5t08bn2Lny/dwrXTGlNjXGNFlyLLJv9+qV YjAUY7oefaq6hdPrb9mOPH9aAeUReN85uki2WyfX1W2iOE+3u9c+aLwIteybUUtN ST9S36Z6E/ObcOVwbY8INkOsMITQW/1SSUsuNA21ETtaIeSzOFDPDuInel7YSySA rn/5NXqDS/vb+a3DZIm60nmbmXThQ3H6xJEGcuLSJrdkQSyt0Vzhc6CQ5KHnMa8N xHAPlJPMI3R5FACzeSzr4RRig4fI5OZWxLcr8OlpfcdGKl+Mpq9+emBv6yPGnic= -----END CERTIFICATE-----Generated at Sat Mar 7 22:44:57 2026 by rpki-client