$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/9907DC46D4BC11EF9BDDAF2EC4F9AE02.roa File: 9907DC46D4BC11EF9BDDAF2EC4F9AE02.roa (raw, json) Hash identifier: DNaQzWtObT5DaBf5rMkdrtx4HMZbyrfOB84Oiv/VTA0= Subject key identifier: 04:96:00:09:F7:83:80:A4:64:5B:49:D6:0F:9B:F7:02:9C:B0:9C:90 Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Certificate serial: 1B90 Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/9907DC46D4BC11EF9BDDAF2EC4F9AE02.roa Signing time: Thu 26 Mar 2026 15:11:10 +0000 ROA not before: Thu 26 Mar 2026 15:11:10 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 3949 IP address blocks: 116.51.19.0/24 maxlen: 24 116.51.20.0/24 maxlen: 24 116.51.22.240/28 maxlen: 32 116.51.23.192/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7056 (0x1b90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Validity Not Before: Mar 26 15:11:10 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69c54c8d-b2fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a2:57:a0:18:97:c9:f5:2d:f9:94:00:9e:7d: 6a:58:bd:fe:ef:9c:28:c4:76:f5:d2:e8:e0:b2:0e: f8:07:c4:f0:69:f8:86:31:9a:56:ac:71:21:e2:fe: 74:70:ce:43:b1:94:0b:5e:cc:5b:a9:61:a7:80:a7: 4f:25:1f:95:38:53:6d:07:1a:0d:98:ac:c8:61:ec: 79:e2:c0:62:d5:ec:95:4c:6a:90:c5:79:02:ef:21: b2:9b:db:59:fa:6b:51:72:13:17:d8:8b:96:02:89: 27:5f:b9:da:77:a8:ba:8f:04:4c:3a:6b:a1:48:0f: b9:d8:8a:65:ac:7e:f2:66:e4:84:2b:e6:35:55:24: 49:36:e3:1b:4f:cf:d3:12:4f:25:e9:ba:d1:ad:1d: 84:cb:dd:d7:6a:09:2e:b4:db:2e:3e:5b:c5:41:bb: 3a:94:c6:fe:61:29:25:c2:82:86:c2:d3:89:c0:d0: 40:2b:5f:a3:c5:c9:bb:66:6d:68:91:e4:13:e2:4c: 5f:d6:7e:36:4e:62:cb:da:7d:39:82:f0:04:b4:a3: e6:3d:80:4b:09:37:8a:7e:d1:7d:c6:85:1a:22:2f: 6e:ca:54:5a:29:02:77:51:f2:11:72:a1:6b:54:4a: cc:22:39:3b:0b:76:9a:0d:df:93:5f:cf:b6:d1:20: e9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:96:00:09:F7:83:80:A4:64:5B:49:D6:0F:9B:F7:02:9C:B0:9C:90 X509v3 Authority Key Identifier: keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/9907DC46D4BC11EF9BDDAF2EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 116.51.19.0-116.51.20.255 116.51.22.240/28 116.51.23.192/27 Signature Algorithm: sha256WithRSAEncryption 9f:2d:e7:77:7c:72:c4:5b:d4:54:79:1b:7c:18:8e:d1:f4:3f: 3c:7a:49:71:dd:65:30:11:7f:2c:ac:d6:fb:b0:36:ae:fc:56: 77:f1:c6:90:5b:b3:7e:12:a8:8f:2e:6f:72:05:b6:90:d5:59: 1a:5d:d4:65:14:1e:7c:22:bc:b4:e9:e4:84:2d:dd:7f:43:e2: 3f:0d:3c:52:30:3f:a0:1a:0f:6c:17:c0:29:4b:a2:6f:9e:67: e8:e7:60:7f:84:17:b3:fb:43:b8:2e:c0:0a:4f:7a:82:81:97: 69:38:3e:8e:ba:ef:74:7a:ff:2a:d4:30:53:96:1d:5d:9b:2c: 40:09:d3:1e:16:f9:6c:24:f2:16:f9:bc:49:fa:ab:ce:fc:cf: 45:61:b0:a5:22:08:98:fc:f5:60:3d:c9:31:f5:b9:73:93:f7: 38:2e:c3:9c:66:88:77:e7:5d:0c:39:5d:67:5c:db:62:54:6c: 7f:fb:06:48:0f:21:db:b5:fb:eb:35:2b:f8:7e:75:3f:17:be: 68:8b:3e:3f:c4:0c:f5:be:50:19:d1:61:7a:e8:08:0f:15:05: 13:73:e6:e5:54:a8:0b:e6:24:04:49:85:1e:0f:54:52:36:0c: e1:a7:c0:5e:27:22:ec:05:f2:99:3f:88:a9:e5:41:59:f5:d6: c8:72:77:a2 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgICG5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDY0QTY2NTgxNkFFRkVENzNCMzA3NTAwN0RBNTMzN0FD N0RFQzRCODEwHhcNMjYwMzI2MTUxMTEwWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWM1NGM4ZC1iMmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKJXoBiXyfUt+ZQAnn1qWL3+75woxHb10ujgsg74B8TwafiGMZpWrHEh4v50 cM5DsZQLXsxbqWGngKdPJR+VOFNtBxoNmKzIYex54sBi1eyVTGqQxXkC7yGym9tZ +mtRchMX2IuWAoknX7nad6i6jwRMOmuhSA+52IplrH7yZuSEK+Y1VSRJNuMbT8/T Ek8l6brRrR2Ey93XagkutNsuPlvFQbs6lMb+YSklwoKGwtOJwNBAK1+jxcm7Zm1o keQT4kxf1n42TmLL2n05gvAEtKPmPYBLCTeKftF9xoUaIi9uylRaKQJ3UfIRcqFr VErMIjk7C3aaDd+TX8+20SDpBwIDAQABo4ICdjCCAnIwHQYDVR0OBBYEFASWAAn3 g4CkZFtJ1g+b9wKcsJyQMB8GA1UdIwQYMBaAFGSmZYFq7+1zswdQB9pTN6x97EuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdYT3pCMUFIMmxNM3JIM3NT NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLWmxnV3J2N1hPekIxQUgybE0zckgzc1M0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTZENUQvOURDQjY4RTAxRDg4MTFFMjk0Qjk1NUUxMDhCMDJDRDIvOTkwN0RDNDZE NEJDMTFFRjlCRERBRjJFQzRGOUFFMDIucm9hMDUGCCsGAQUFBwEHAQH/BCYwJDAi BAIAATAcMAwDBAB0MxMDBAB0MxQDBQR0MxbwAwUFdDMXwDANBgkqhkiG9w0BAQsF AAOCAQEAny3nd3xyxFvUVHkbfBiO0fQ/PHpJcd1lMBF/LKzW+7A2rvxWd/HGkFuz fhKojy5vcgW2kNVZGl3UZRQefCK8tOnkhC3df0PiPw08UjA/oBoPbBfAKUuib55n 6Odgf4QXs/tDuC7ACk96goGXaTg+jrrvdHr/KtQwU5YdXZssQAnTHhb5bCTyFvm8 SfqrzvzPRWGwpSIImPz1YD3JMfW5c5P3OC7DnGaId+ddDDldZ1zbYlRsf/sGSA8h 27X76zUr+H51Pxe+aIs+P8QM9b5QGdFheugIDxUFE3Pm5VSoC+YkBEmFHg9UUjYM 4afAXici7AXymT+IqeVBWfXWyHJ3og== -----END CERTIFICATE-----Generated at Sat Apr 11 21:03:53 2026 by rpki-client