$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/E551CBD2BDCF11F0B085BE82C4F9AE02.roa File: E551CBD2BDCF11F0B085BE82C4F9AE02.roa (raw, json) Hash identifier: IIBSEhSGWvOtD18zZJ+qeiGEnoieLx/pQzi9soqlUGk= Subject key identifier: 09:0F:E2:F1:6F:8C:91:A1:05:6C:61:CE:49:90:93:50:A9:B8:B7:DA Certificate issuer: /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Certificate serial: 0C20 Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/E551CBD2BDCF11F0B085BE82C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:48:31 +0000 ROA not before: Tue 02 Dec 2025 18:50:36 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 400342 IP address blocks: 45.124.204.0/24 maxlen: 24 45.124.205.0/24 maxlen: 24 45.124.206.0/24 maxlen: 24 45.124.207.0/24 maxlen: 24 103.25.100.0/24 maxlen: 24 103.25.101.0/24 maxlen: 24 103.25.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 18:45:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3104 (0xc20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Validity Not Before: Dec 2 18:50:36 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a489ff-8e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0b:6e:33:b2:10:93:55:99:25:e1:27:35:49: 84:ca:c6:f0:80:aa:dc:d6:79:42:29:cc:c5:7a:8f: 1d:47:40:21:a4:5c:76:29:7c:5a:2a:e5:4d:7c:90: 5f:fa:0f:05:f3:04:b8:99:5a:1d:51:f9:44:59:d1: 3a:03:41:8c:6c:82:fe:15:5f:72:9b:ca:8a:67:9a: be:16:d3:5b:b6:74:d3:49:57:0e:ac:1b:90:bf:5e: d7:83:f5:30:03:97:2b:5a:79:04:05:08:57:57:4e: 54:4f:1b:3d:2c:f6:c3:6f:c8:d5:45:43:0f:c4:cb: 74:f4:a9:e6:46:bb:45:1c:2b:ae:91:d9:28:11:e6: 51:77:d4:0c:5d:f4:28:ae:ee:31:0b:8e:a7:9f:28: 1d:eb:e7:e5:46:b1:94:43:ce:c0:4c:d2:bd:a3:b7: 05:ad:47:61:a3:2d:36:93:53:89:1a:d0:8f:26:54: 03:f6:4a:69:cd:32:57:e5:b8:10:fc:ff:b5:30:83: db:e0:10:37:ad:68:5c:7b:64:24:e5:f2:52:66:94: a1:f7:68:86:3e:3d:74:94:df:72:64:d7:6a:03:30: d6:35:84:80:fb:75:fa:bb:4c:19:62:a7:f0:6a:18: 33:cf:88:d6:74:b4:c4:07:b5:c3:d6:63:e5:e9:be: 3c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0F:E2:F1:6F:8C:91:A1:05:6C:61:CE:49:90:93:50:A9:B8:B7:DA X509v3 Authority Key Identifier: keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/E551CBD2BDCF11F0B085BE82C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.124.204.0/22 103.25.100.0/22 Signature Algorithm: sha256WithRSAEncryption 22:68:6e:a1:48:2c:87:e0:24:c1:41:2e:62:92:16:0a:20:cd: 51:58:39:ae:fb:9e:0f:41:d2:d8:70:11:b2:ff:f1:1e:16:d3: 74:3e:30:21:82:17:56:53:24:7b:4d:7d:f4:ba:93:eb:02:df: 0f:0e:0f:e2:f1:76:bf:89:1a:24:78:fc:47:56:31:bf:00:2b: bf:bc:47:b9:2c:01:0b:0d:53:a5:7a:59:e1:49:3e:b8:1e:cb: d0:6c:2c:0f:37:ef:54:bc:4e:bf:fe:75:7b:c8:4d:e8:f0:96: 2e:b7:57:b6:55:18:21:69:f3:23:0d:1e:d7:04:a0:17:a5:bb: a1:04:9d:aa:90:fa:6a:4e:45:b4:c0:e6:55:09:f4:3e:15:ab: 90:5d:aa:c9:32:23:2b:1e:04:d1:e1:a1:26:0f:79:cf:09:25: 70:33:89:3d:db:01:c2:fe:ad:50:b4:aa:b3:88:9f:48:e8:84: 5e:2e:7a:4e:d8:86:2d:04:69:8f:5a:c7:3d:2e:03:3d:39:99: b9:1a:36:de:df:b5:f7:5a:40:2d:53:a4:87:a4:d5:ce:88:0a: 87:ee:53:d0:dc:e1:83:28:4a:12:5e:0c:ea:aa:66:2a:56:0c: f2:b5:78:a4:eb:b0:24:55:01:aa:dc:8d:74:42:67:08:f3:00: 8f:b6:8d:2d -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICDCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNEMzAxMTAvBgNVBAUTKDAxRUUwODlERDQ4NjdCMkNCMjc2NTgyQUE5N0IzMThG NTA5RUE2RUUwHhcNMjUxMjAyMTg1MDM2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODlmZi04ZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwtuM7IQk1WZJeEnNUmEysbwgKrc1nlCKczFeo8dR0AhpFx2KXxaKuVNfJBf +g8F8wS4mVodUflEWdE6A0GMbIL+FV9ym8qKZ5q+FtNbtnTTSVcOrBuQv17Xg/Uw A5crWnkEBQhXV05UTxs9LPbDb8jVRUMPxMt09KnmRrtFHCuukdkoEeZRd9QMXfQo ru4xC46nnygd6+flRrGUQ87ATNK9o7cFrUdhoy02k1OJGtCPJlQD9kppzTJX5bgQ /P+1MIPb4BA3rWhce2Qk5fJSZpSh92iGPj10lN9yZNdqAzDWNYSA+3X6u0wZYqfw ahgzz4jWdLTEB7XD1mPl6b487wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFAkP4vFv jJGhBWxhzkmQk1CpuLfaMB8GA1UdIwQYMBaAFAHuCJ3UhnsssnZYKql7MY9Qnqbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0QzMC9FM0RGNDY5QzQx NjgxMUVBQUU4QTc3NTBDNEY5QUUwMi9BZTRJbmRTR2V5eXlkbGdxcVhzeGoxQ2Vw dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FlNEluZFNHZXl5eWRsZ3FxWHN4ajFDZXB1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjNEMzAvRTNERjQ2OUM0MTY4MTFFQUFFOEE3NzUwQzRGOUFFMDIvRTU1MUNCRDJC RENGMTFGMEIwODVCRTgyQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCLXzMAwQCZxlkMA0GCSqGSIb3DQEBCwUAA4IBAQAiaG6hSCyH4CTB QS5ikhYKIM1RWDmu+54PQdLYcBGy//EeFtN0PjAhghdWUyR7TX30upPrAt8PDg/i 8Xa/iRokePxHVjG/ACu/vEe5LAELDVOlelnhST64HsvQbCwPN+9UvE6//nV7yE3o 8JYut1e2VRghafMjDR7XBKAXpbuhBJ2qkPpqTkW0wOZVCfQ+FauQXarJMiMrHgTR 4aEmD3nPCSVwM4k92wHC/q1QtKqziJ9I6IReLnpO2IYtBGmPWsc9LgM9OZm5Gjbe 37X3WkAtU6SHpNXOiAqH7lPQ3OGDKEoSXgzqqmYqVgzytXik67AkVQGq3I10QmcI 8wCPto0t -----END CERTIFICATE-----Generated at Sat Mar 7 16:13:16 2026 by rpki-client