$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/F8E5E56ABA3311F097F3633AC4F9AE02.roa File: F8E5E56ABA3311F097F3633AC4F9AE02.roa (raw, json) Hash identifier: HAqcjovZJYFVqZGaHRtS4+R51e9Xtry3aapf5JCY8eI= Subject key identifier: 0A:86:44:50:26:AB:CB:92:16:E7:51:B6:D2:C3:2A:52:DF:6E:A6:92 Certificate issuer: /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Certificate serial: 0910 Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/F8E5E56ABA3311F097F3633AC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:09:04 +0000 ROA not before: Wed 05 Nov 2025 10:41:23 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 24435 IP address blocks: 116.0.35.0/24 maxlen: 24 116.0.36.0/24 maxlen: 24 116.0.37.0/24 maxlen: 24 116.0.39.0/24 maxlen: 24 116.0.45.0/24 maxlen: 24 116.0.48.0/24 maxlen: 24 116.0.49.0/24 maxlen: 24 116.0.50.0/24 maxlen: 24 116.0.51.0/24 maxlen: 24 116.0.52.0/24 maxlen: 24 116.0.53.0/24 maxlen: 24 116.0.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 20:14:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2320 (0x910) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Validity Not Before: Nov 5 10:41:23 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a480c0-7d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:97:90:04:1c:10:8f:10:9f:69:c4:0d:1c:84: e3:0f:8d:e1:38:a9:df:af:1b:a3:5c:c6:a2:dd:f7: 1e:1d:fc:2c:a3:18:fa:34:a9:a3:bf:fa:1b:36:6e: 77:0e:15:2a:ef:df:ea:23:d8:18:0c:51:b2:a9:c3: be:9e:87:38:46:ba:c3:f5:88:c8:23:1e:4f:a4:6d: fd:c8:2f:31:c3:69:db:ac:24:79:de:a4:96:ce:26: c0:56:83:f4:bf:43:2c:e8:8d:7e:cd:ef:36:ad:4b: b8:69:17:81:ce:03:0c:d7:2d:d1:e1:01:f8:42:70: f6:cf:b1:7b:25:06:60:08:49:01:90:83:82:f1:02: c3:b3:95:f4:ef:d5:5e:f2:7e:e5:7d:74:44:b7:2f: 2c:34:17:50:72:d6:1a:15:fb:6b:06:3b:12:b6:c2: 36:c7:50:c0:2a:78:32:70:72:6c:a4:4c:b9:82:40: 31:25:f4:41:e8:f2:b6:b4:61:7e:34:34:70:e4:d6: 27:17:4e:03:f2:0a:61:d1:8e:c1:5c:92:67:b8:d6: d9:ba:2c:ee:80:55:54:e9:78:fa:a3:10:96:66:b8: 65:ee:82:8d:c9:7a:b3:c6:f7:d4:71:e4:bf:7c:71: cd:d7:39:9e:d3:3f:24:25:7c:82:05:4d:a6:67:7c: 42:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:86:44:50:26:AB:CB:92:16:E7:51:B6:D2:C3:2A:52:DF:6E:A6:92 X509v3 Authority Key Identifier: keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/F8E5E56ABA3311F097F3633AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 116.0.35.0-116.0.37.255 116.0.39.0/24 116.0.45.0/24 116.0.48.0-116.0.54.255 Signature Algorithm: sha256WithRSAEncryption 70:57:ca:63:d2:d4:b1:06:68:23:3d:1b:f9:ca:8b:11:94:ca: df:32:41:f6:b8:b0:0b:63:66:29:80:79:9e:7f:c4:ef:e3:b0: b2:90:d8:e2:f5:ec:1c:79:40:88:8b:ab:b3:50:36:85:e2:0c: 96:7b:60:32:00:e0:e1:3c:df:db:61:62:1b:37:ca:2a:8c:d5: 22:94:0f:8f:df:0f:f1:af:84:5a:bc:21:bb:e8:72:55:3d:c5: 6b:46:e5:eb:15:17:bc:83:60:44:8e:7e:40:ab:53:0b:41:81: 7e:69:4f:da:d8:ed:33:82:96:87:62:3d:1c:45:d3:b2:f3:0f: 16:34:13:ff:92:bb:56:2d:0f:0a:72:d1:6e:1f:b6:de:eb:fb: 41:f2:33:c0:81:af:46:ef:09:f2:9a:04:36:72:98:c9:34:c0: a4:a2:55:10:01:07:38:ac:f2:7e:7f:cb:8c:74:f3:50:dc:25: 61:14:bd:82:54:fa:54:64:d1:df:51:5c:40:f6:dd:74:30:10: 0f:ab:e5:0f:01:64:d1:47:8a:c0:61:ab:c2:67:58:2f:fe:ec: d5:d6:bd:23:70:f7:1d:bf:eb:4d:ba:e7:f0:5b:a9:f3:c4:2f: 4e:32:44:af:fc:d1:27:fd:f3:5a:61:c5:98:ae:e2:41:ba:35: be:01:fc:69 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgICCRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2RDkxMTAvBgNVBAUTKDIxOUVBNjNDNkFDOTY2RERCMjg1ODg2QkQ3MTFDNzhB MTRERjUxMkIwHhcNMjUxMTA1MTA0MTIzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODBjMC03ZDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5eQBBwQjxCfacQNHITjD43hOKnfrxujXMai3fceHfwsoxj6NKmjv/obNm53 DhUq79/qI9gYDFGyqcO+noc4RrrD9YjIIx5PpG39yC8xw2nbrCR53qSWzibAVoP0 v0Ms6I1+ze82rUu4aReBzgMM1y3R4QH4QnD2z7F7JQZgCEkBkIOC8QLDs5X079Ve 8n7lfXREty8sNBdQctYaFftrBjsStsI2x1DAKngycHJspEy5gkAxJfRB6PK2tGF+ NDRw5NYnF04D8gph0Y7BXJJnuNbZuizugFVU6Xj6oxCWZrhl7oKNyXqzxvfUceS/ fHHN1zme0z8kJXyCBU2mZ3xCMQIDAQABo4ICgjCCAn4wHQYDVR0OBBYEFAqGRFAm q8uSFudRttLDKlLfbqaSMB8GA1UdIwQYMBaAFCGepjxqyWbdsoWIa9cRx4oU31Er MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTZEOS84MERGREVDMEU1 REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0MnloWWhyMXhISGloVGZV U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0laNm1QR3JKWnQyeWhZaHIxeEhIaWhUZlVTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTk2RDkvODBERkRFQzBFNUREMTFFQUIyNDY4RDY1QzRGOUFFMDIvRjhFNUU1NkFC QTMzMTFGMDk3RjM2MzNBQzRGOUFFMDIucm9hMEEGCCsGAQUFBwEHAQH/BDIwMDAu BAIAATAoMAwDBAB0ACMDBAF0ACQDBAB0ACcDBAB0AC0wDAMEBHQAMAMEAHQANjAN BgkqhkiG9w0BAQsFAAOCAQEAcFfKY9LUsQZoIz0b+cqLEZTK3zJB9riwC2NmKYB5 nn/E7+OwspDY4vXsHHlAiIurs1A2heIMlntgMgDg4Tzf22FiGzfKKozVIpQPj98P 8a+EWrwhu+hyVT3Fa0bl6xUXvINgRI5+QKtTC0GBfmlP2tjtM4KWh2I9HEXTsvMP FjQT/5K7Vi0PCnLRbh+23uv7QfIzwIGvRu8J8poENnKYyTTApKJVEAEHOKzyfn/L jHTzUNwlYRS9glT6VGTR31FcQPbddDAQD6vlDwFk0UeKwGGrwmdYL/7s1da9I3D3 Hb/rTbrn8Fup88QvTjJEr/zRJ/3zWmHFmK7iQbo1vgH8aQ== -----END CERTIFICATE-----Generated at Fri Mar 13 15:16:12 2026 by rpki-client