$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/4C72E61CB0EC11E5A6934B42C4F9AE02.roa File: 4C72E61CB0EC11E5A6934B42C4F9AE02.roa (raw, json) Hash identifier: ot76bD4Fe2eGS+QL+OB7ESET88ZeiKoIEOY/MT5QHrY= Subject key identifier: FA:B8:81:09:C0:67:FF:39:8B:03:E5:C3:C5:0B:50:79:24:9A:94:9A Certificate issuer: /CN=A91B80BD/serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0 Certificate serial: 3114 Authority key identifier: A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/4C72E61CB0EC11E5A6934B42C4F9AE02.roa Signing time: Mon 02 Mar 2026 05:13:53 +0000 ROA not before: Thu 18 Sep 2025 15:52:25 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 715 IP address blocks: 45.112.180.0/22 maxlen: 22 103.52.24.0/22 maxlen: 22 2401:680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.crl rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 15:22:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12564 (0x3114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80BD, serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0 Validity Not Before: Sep 18 15:52:25 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a51c91-5bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b7:66:fc:e5:e1:0d:d3:85:cc:3b:64:a8:19: 43:b2:ad:bc:71:6c:77:19:28:ff:10:c2:45:72:90: d9:de:bc:57:2a:5a:5b:b7:df:ec:70:69:80:39:0e: ff:cd:42:51:0d:a3:33:3d:5b:36:52:78:7b:cf:4e: c8:cf:67:c7:50:d5:56:19:86:06:6c:16:9d:e0:25: f3:36:54:89:55:88:aa:c1:93:c1:ab:6b:de:a1:52: ea:7d:be:43:fe:59:ae:de:1d:9c:cf:5a:0c:e8:cd: b1:bb:85:7f:0b:d8:73:67:9c:3b:b1:d6:55:71:23: 28:90:d3:3b:7e:34:43:87:7b:42:2f:12:f4:70:f4: 3c:03:8d:34:fa:51:b7:6c:d8:58:15:54:7e:e1:8c: cf:7d:be:bb:cd:21:88:d6:39:6d:8f:68:89:c4:bd: 40:00:cc:80:46:27:30:9f:b4:83:d5:fa:17:de:6e: 6f:0d:9b:4c:67:e0:40:ad:49:6b:6e:8e:43:43:74: 05:7d:e9:ac:ae:ad:a1:ac:30:40:f5:7d:b7:80:59: 58:18:ae:3e:fb:4c:ae:c7:67:c6:74:dd:56:66:f0: 73:c6:2a:f8:d1:11:27:5a:5f:bd:61:13:21:4a:96: 3a:00:83:4a:61:cb:2a:be:ce:e9:ea:e1:25:51:c4: fd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B8:81:09:C0:67:FF:39:8B:03:E5:C3:C5:0B:50:79:24:9A:94:9A X509v3 Authority Key Identifier: keyid:A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/4C72E61CB0EC11E5A6934B42C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.112.180.0/22 103.52.24.0/22 IPv6: 2401:680::/32 Signature Algorithm: sha256WithRSAEncryption 55:a0:c1:2b:9f:fa:80:ef:b1:36:48:40:77:82:97:50:e4:03: ec:d5:8e:0b:d9:25:80:a1:af:49:f4:a7:f6:c1:8b:f9:c1:0b: 8c:fe:16:a3:75:2d:9d:e6:74:ba:1e:b7:c6:57:20:ce:05:24: 63:28:f2:3e:b3:5c:ba:65:a9:ac:ba:f6:56:dc:59:7f:0c:8c: 78:c7:b3:96:69:ab:c9:1a:14:29:ef:1d:18:5f:0d:10:46:b6: 8c:82:0b:2f:a4:57:36:c8:7c:14:95:72:ad:ae:59:35:22:21: 4d:7b:6d:5a:f0:35:50:6a:a1:96:06:bc:6d:78:1f:8a:43:f4: 88:92:f4:ca:05:31:2b:a6:af:68:cc:9a:21:4a:e9:6e:b1:c6: af:e1:80:a7:e4:3c:42:72:f7:ed:57:9f:2e:61:a2:e9:bd:34: b4:04:34:1c:cb:52:ca:d7:b3:05:54:56:79:29:49:55:bd:2a: c4:36:7d:34:8a:66:63:f6:20:68:53:85:ee:57:cc:09:dc:31: 74:82:3f:2f:ae:5c:6c:78:b1:70:48:3b:ff:d4:12:7b:d4:89: 73:30:fc:83:57:45:fd:78:fb:6c:d7:4f:5c:0f:96:25:ea:42: 43:77:23:ba:02:50:71:37:51:15:b0:ed:c3:a0:9c:f7:db:39: f6:6e:6c:1c -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICMRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQkQxMTAvBgNVBAUTKEEwQTMyMjRBRDBDODJCM0Y5QTYyRjM0N0FDQTNGOTQ1 REIwOEYyQjAwHhcNMjUwOTE4MTU1MjI1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1MWM5MS01YmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjLdm/OXhDdOFzDtkqBlDsq28cWx3GSj/EMJFcpDZ3rxXKlpbt9/scGmAOQ7/ zUJRDaMzPVs2Unh7z07Iz2fHUNVWGYYGbBad4CXzNlSJVYiqwZPBq2veoVLqfb5D /lmu3h2cz1oM6M2xu4V/C9hzZ5w7sdZVcSMokNM7fjRDh3tCLxL0cPQ8A400+lG3 bNhYFVR+4YzPfb67zSGI1jltj2iJxL1AAMyARicwn7SD1foX3m5vDZtMZ+BArUlr bo5DQ3QFfemsrq2hrDBA9X23gFlYGK4++0yux2fGdN1WZvBzxir40REnWl+9YRMh SpY6AINKYcsqvs7p6uElUcT9VQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFPq4gQnA Z/85iwPlw8ULUHkkmpSaMB8GA1UdIwQYMBaAFKCjIkrQyCs/mmLzR6yj+UXbCPKw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBCRC9CNUE2MzZEOEZF NUMxMUUyQUVDMDQyNTA1OTExRUEzMi9vS01pU3RESUt6LWFZdk5IcktQNVJkc0k4 ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29LTWlTdERJS3otYVl2TkhyS1A1UmRzSThyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjgwQkQvQjVBNjM2RDhGRTVDMTFFMkFFQzA0MjUwNTkxMUVBMzIvNEM3MkU2MUNC MEVDMTFFNUE2OTM0QjQyQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCLXC0AwQCZzQYMA0EAgACMAcDBQAkAQaAMA0GCSqGSIb3DQEBCwUA A4IBAQBVoMErn/qA77E2SEB3gpdQ5APs1Y4L2SWAoa9J9Kf2wYv5wQuM/hajdS2d 5nS6HrfGVyDOBSRjKPI+s1y6ZamsuvZW3Fl/DIx4x7OWaavJGhQp7x0YXw0QRraM ggsvpFc2yHwUlXKtrlk1IiFNe21a8DVQaqGWBrxteB+KQ/SIkvTKBTErpq9ozJoh Suluscav4YCn5DxCcvftV58uYaLpvTS0BDQcy1LK17MFVFZ5KUlVvSrENn00imZj 9iBoU4XuV8wJ3DF0gj8vrlxseLFwSDv/1BJ71IlzMPyDV0X9ePts109cD5Yl6kJD dyO6AlBxN1EVsO3DoJz32zn2bmwc -----END CERTIFICATE-----Generated at Wed Mar 18 02:49:24 2026 by rpki-client