$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/40567CA8F25A11F09752333B5F6F56BC.roa File: 40567CA8F25A11F09752333B5F6F56BC.roa (raw, json) Hash identifier: XiAc49h/ITbvuy7hirc9LsEmIhpsGVSj9jKpQ0AZeG4= Subject key identifier: FD:5C:4D:D4:64:4D:CD:E5:DF:DB:DB:0F:29:17:95:77:F2:D0:F1:27 Certificate issuer: /CN=A91B1FA8/serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B Certificate serial: 140D Authority key identifier: 1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/40567CA8F25A11F09752333B5F6F56BC.roa Signing time: Mon 02 Mar 2026 17:20:13 +0000 ROA not before: Mon 02 Mar 2026 17:20:13 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 4764 IP address blocks: 61.245.128.0/19 maxlen: 24 103.94.48.0/22 maxlen: 24 119.18.0.0/19 maxlen: 24 119.18.32.0/21 maxlen: 24 119.18.40.0/21 maxlen: 21 120.88.112.0/20 maxlen: 24 121.200.0.0/19 maxlen: 24 123.253.148.0/22 maxlen: 23 123.253.148.0/24 maxlen: 24 123.253.149.0/24 maxlen: 24 123.253.150.0/24 maxlen: 24 180.150.0.0/17 maxlen: 24 180.181.192.0/18 maxlen: 22 202.90.240.0/21 maxlen: 24 202.142.128.0/20 maxlen: 24 203.129.16.0/20 maxlen: 24 2403:5800::/27 maxlen: 27 2403:5800::/32 maxlen: 36 2403:5800:1::/48 maxlen: 48 2403:5800:3::/48 maxlen: 48 2403:5800:5::/48 maxlen: 48 2407:600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 16:48:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5133 (0x140d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1FA8, serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B Validity Not Before: Mar 2 17:20:13 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a5c6cd-6734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:70:26:d0:f3:fd:b8:24:a9:fe:4a:24:08:c7: a8:5e:82:38:77:7e:d0:5b:57:ed:b3:2a:c9:2c:13: d8:18:ea:55:10:f5:4e:57:07:7c:48:d6:00:38:23: 7f:be:aa:0e:08:01:0a:1b:7a:99:75:40:9b:8d:6b: 8a:c4:3a:88:e9:8b:77:f5:b9:1b:5f:d6:ed:e4:45: 57:54:a7:5b:a2:65:79:02:17:2d:e7:60:8d:fb:45: 23:8c:24:b3:06:ad:41:42:e5:79:b2:71:85:c4:6b: d2:eb:e6:63:12:3a:34:e1:ba:70:61:f0:51:94:ff: 41:d9:9f:3b:59:6d:2b:92:ed:44:80:d5:33:55:fd: b1:64:fa:bc:6c:06:db:21:c5:9f:e4:24:a5:fc:0e: 36:a1:d5:24:b3:b3:20:d6:52:ed:3d:61:c2:a6:42: e9:79:9f:c6:49:f7:b1:d1:a7:b7:f5:9c:cd:d1:7e: 93:15:94:ef:82:79:40:b5:b9:b9:ff:15:8c:a2:a5: fe:49:cf:7e:3a:20:ca:f1:e2:4a:01:96:4a:87:e7: da:b9:14:a0:16:e3:cd:98:ce:4e:a1:dc:1c:92:a8: fe:6d:84:15:51:b1:81:9a:49:a1:1c:0b:60:91:a5: 06:df:1e:de:45:4a:09:2a:17:02:c3:8f:13:ce:ac: ba:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:5C:4D:D4:64:4D:CD:E5:DF:DB:DB:0F:29:17:95:77:F2:D0:F1:27 X509v3 Authority Key Identifier: keyid:1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/40567CA8F25A11F09752333B5F6F56BC.roa sbgp-ipAddrBlock: critical IPv4: 61.245.128.0/19 103.94.48.0/22 119.18.0.0-119.18.47.255 120.88.112.0/20 121.200.0.0/19 123.253.148.0/22 180.150.0.0/17 180.181.192.0/18 202.90.240.0/21 202.142.128.0/20 203.129.16.0/20 IPv6: 2403:5800::/27 2407:600::/32 Signature Algorithm: sha256WithRSAEncryption 2b:2d:84:b3:60:be:ad:81:38:d8:89:c3:9d:a9:47:4f:26:96: fa:9e:98:38:4b:fb:b7:bb:1c:e4:4b:73:f3:9a:c9:b0:67:65: e3:88:ed:d1:a7:81:04:5f:0e:b3:cc:5b:5c:be:2a:bd:74:b8: 56:af:63:39:b2:a1:45:8a:4d:b5:b1:40:05:b4:51:aa:df:ca: ce:76:4d:51:dd:95:ed:50:44:c2:51:88:cd:96:6c:17:4d:9b: d6:2f:04:6b:48:fb:3a:d1:37:6f:54:1b:15:62:f6:b8:6f:17: 9f:fd:1a:1e:be:4e:db:f1:d3:7f:f6:1e:be:d4:69:06:19:74: 18:db:78:0a:87:5e:d4:1b:0f:3e:84:df:3c:ef:df:3d:18:1b: b0:c1:e8:a3:b9:99:3f:d8:d8:e5:fa:66:79:81:9c:90:8c:4b: 9f:e6:5c:36:71:e3:88:83:2b:7c:45:46:87:11:af:b6:55:ea: 45:57:be:62:87:ff:8f:8c:7a:ac:38:53:ee:01:d2:91:8d:df: 46:08:79:bb:b3:02:41:cd:28:25:6b:7d:5e:d1:96:42:30:ce: ca:6b:ba:45:7f:a8:da:ea:81:16:29:45:bb:67:74:e3:4a:1a: c5:d4:0a:de:3a:9b:af:99:59:aa:f5:bd:62:b9:ad:ed:2b:88: 10:f1:ac:b3 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgICFA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGQTgxMTAvBgNVBAUTKDFDNEU5RjNGODAwNTA1QTQwQkExNjVCNkMwMjA0MDVB MjJDNjRCM0IwHhcNMjYwMzAyMTcyMDEzWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YzZjZC02NzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnXAm0PP9uCSp/kokCMeoXoI4d37QW1ftsyrJLBPYGOpVEPVOVwd8SNYAOCN/ vqoOCAEKG3qZdUCbjWuKxDqI6Yt39bkbX9bt5EVXVKdbomV5Ahct52CN+0UjjCSz Bq1BQuV5snGFxGvS6+ZjEjo04bpwYfBRlP9B2Z87WW0rku1EgNUzVf2xZPq8bAbb IcWf5CSl/A42odUks7Mg1lLtPWHCpkLpeZ/GSfex0ae39ZzN0X6TFZTvgnlAtbm5 /xWMoqX+Sc9+OiDK8eJKAZZKh+fauRSgFuPNmM5Oodwckqj+bYQVUbGBmkmhHAtg kaUG3x7eRUoJKhcCw48Tzqy67wIDAQABo4ICuTCCArUwHQYDVR0OBBYEFP1cTdRk Tc3l39vbDykXlXfy0PEnMB8GA1UdIwQYMBaAFBxOnz+ABQWkC6FltsAgQFoixks7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9FODYxRkQzQUFG RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9IRTZmUDRBRkJhUUxvV1cyd0NCQVdpTEdT enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hFNmZQNEFGQmFRTG9XVzJ3Q0JBV2lMR1N6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjFGQTgvRTg2MUZEM0FBRkQ5MTFFOEIyRUQ0QzdGQzRGOUFFMDIvNDA1NjdDQThG MjVBMTFGMDk3NTIzMzNCNUY2RjU2QkMucm9hMHgGCCsGAQUFBwEHAQH/BGkwZzBP BAIAATBJAwQFPfWAAwQCZ14wMAsDAwF3EgMEBHcSIAMEBHhYcAMEBXnIAAMEAnv9 lAMEB7SWAAMEBrS1wAMEA8pa8AMEBMqOgAMEBMuBEDAUBAIAAjAOAwUFJANYAAMF ACQHBgAwDQYJKoZIhvcNAQELBQADggEBACsthLNgvq2BONiJw52pR08mlvqemDhL +7e7HORLc/OaybBnZeOI7dGngQRfDrPMW1y+Kr10uFavYzmyoUWKTbWxQAW0Uarf ys52TVHdle1QRMJRiM2WbBdNm9YvBGtI+zrRN29UGxVi9rhvF5/9Gh6+Ttvx03/2 Hr7UaQYZdBjbeAqHXtQbDz6E3zzv3z0YG7DB6KO5mT/Y2OX6ZnmBnJCMS5/mXDZx 44iDK3xFRocRr7ZV6kVXvmKH/4+Meqw4U+4B0pGN30YIebuzAkHNKCVrfV7RlkIw zsprukV/qNrqgRYpRbtndONKGsXUCt46m6+ZWar1vWK5re0riBDxrLM= -----END CERTIFICATE-----Generated at Sun Mar 8 00:03:44 2026 by rpki-client