$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/9CDAADC2091E11EAB375615BC4F9AE02.roa File: 9CDAADC2091E11EAB375615BC4F9AE02.roa (raw, json) Hash identifier: nbleFFcKgxmn1F4KARea2uckGFoVmcgHkC7uA6X0V9I= Subject key identifier: 4A:0D:2B:E7:CC:97:9F:08:56:95:F8:A2:13:11:30:C0:A6:FC:9E:C0 Certificate issuer: /CN=A91EE6E8/serialNumber=9629AC710D3E21D5991928D59A4DB65411A96BFF Certificate serial: 0CDD Authority key identifier: 96:29:AC:71:0D:3E:21:D5:99:19:28:D5:9A:4D:B6:54:11:A9:6B:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/limscQ0-IdWZGSjVmk22VBGpa_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/9CDAADC2091E11EAB375615BC4F9AE02.roa Signing time: Thu 02 Apr 2026 18:22:57 +0000 ROA not before: Thu 02 Apr 2026 18:22:57 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 55406 IP address blocks: 45.251.56.0/22 maxlen: 22 45.251.56.0/24 maxlen: 24 45.251.57.0/24 maxlen: 24 45.251.58.0/24 maxlen: 24 45.251.59.0/24 maxlen: 24 103.20.52.0/22 maxlen: 22 103.20.52.0/24 maxlen: 24 103.20.53.0/24 maxlen: 24 103.20.54.0/24 maxlen: 24 103.20.55.0/24 maxlen: 24 103.254.84.0/22 maxlen: 22 103.254.84.0/24 maxlen: 24 103.254.85.0/24 maxlen: 24 103.254.86.0/24 maxlen: 24 103.254.87.0/24 maxlen: 24 182.16.156.0/22 maxlen: 22 182.16.156.0/24 maxlen: 24 182.16.157.0/24 maxlen: 24 182.16.158.0/24 maxlen: 24 182.16.159.0/24 maxlen: 24 2405:f200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.crl rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/limscQ0-IdWZGSjVmk22VBGpa_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:12:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3293 (0xcdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE6E8, serialNumber=9629AC710D3E21D5991928D59A4DB65411A96BFF Validity Not Before: Apr 2 18:22:57 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69ceb401-9cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b3:4d:f0:f9:98:e5:5a:5a:82:ab:b6:12:a5: 26:6a:5a:ea:46:02:74:a4:b8:e7:bb:95:6a:a1:e8: e2:19:d7:c3:2f:ec:3f:8f:1e:e9:a1:34:2c:37:f8: e7:3b:97:d6:65:c6:45:95:90:d2:9b:89:ff:0b:71: 75:c0:34:b5:af:e1:19:b6:c2:57:69:0d:94:57:a9: fd:d5:77:10:fe:c7:d5:5a:a8:bf:c9:71:fa:3f:fc: 49:f8:7b:6e:0b:3f:ca:16:4c:98:15:ec:e9:be:98: 5d:33:d3:3d:76:4e:63:88:a8:8f:7f:47:cf:2f:f2: 6d:8f:7a:de:09:06:ec:4c:b1:52:4b:02:81:ac:8d: 8e:f3:d8:11:b9:cb:ea:90:27:91:0f:97:0a:85:d1: 0c:3d:ee:56:d2:de:2a:40:e8:57:39:b5:cc:59:e8: 69:49:28:32:6c:c3:5d:bc:75:77:14:1b:cc:fb:01: 68:cf:f5:1b:d0:ab:5a:4f:ec:36:00:7d:60:70:6e: fe:3d:5b:11:6d:03:d9:42:bc:2e:f2:a3:37:9b:86: 18:1b:b3:54:6f:33:59:11:e6:3b:db:fd:d4:19:a6: df:30:f0:df:2a:1f:63:5c:87:2b:df:5b:b5:1d:e5: 8d:1e:3f:93:a7:5b:3c:f8:84:4b:39:cc:dd:53:c2: 3c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:0D:2B:E7:CC:97:9F:08:56:95:F8:A2:13:11:30:C0:A6:FC:9E:C0 X509v3 Authority Key Identifier: keyid:96:29:AC:71:0D:3E:21:D5:99:19:28:D5:9A:4D:B6:54:11:A9:6B:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/limscQ0-IdWZGSjVmk22VBGpa_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/9CDAADC2091E11EAB375615BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.251.56.0/22 103.20.52.0/22 103.254.84.0/22 182.16.156.0/22 IPv6: 2405:f200::/32 Signature Algorithm: sha256WithRSAEncryption 2a:41:0c:32:3a:f6:bd:74:62:36:e0:65:b3:4e:a3:a3:81:55: 80:30:5f:f8:6b:35:9f:fc:92:66:49:e9:f5:fd:86:39:b5:fc: b6:98:75:79:23:d9:99:95:13:aa:b7:c2:d9:c0:2a:13:61:d8: 5e:88:60:8b:89:9f:79:f3:20:5e:28:69:75:86:a8:77:b5:97: d0:4f:3e:c4:37:4a:ea:ae:54:12:4c:3d:04:95:81:98:27:8b: cf:99:f4:9b:4e:5d:7d:de:06:25:ac:d1:8f:4e:ee:b6:33:ed: 06:1d:64:8d:8a:60:91:67:bc:6e:90:b0:12:88:1f:f8:9c:cf: 0d:9c:b1:54:14:4e:3c:1a:87:59:bd:0e:5b:3e:4e:c0:ae:7c: fa:ee:fa:d4:a7:8d:b2:03:34:bd:2a:3d:8b:30:f8:aa:92:f9: b7:2a:f2:13:45:36:66:ea:58:2c:0c:5e:74:d9:d9:3d:da:4d: 0b:6f:af:63:de:5b:2c:f8:44:78:6e:5b:be:5f:0e:71:bf:15: fd:bd:2d:17:37:aa:ce:c3:c2:b3:11:bc:1c:c7:49:cc:94:6e: 7a:eb:0e:9d:6c:29:54:50:0d:d9:ea:f9:e9:69:d8:f9:50:63: 9b:62:a0:89:53:74:b0:89:c3:3b:a7:4f:fa:9e:be:13:f4:27: 67:35:23:62 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICDN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU2RTgxMTAvBgNVBAUTKDk2MjlBQzcxMEQzRTIxRDU5OTE5MjhENTlBNERCNjU0 MTFBOTZCRkYwHhcNMjYwNDAyMTgyMjU3WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWNlYjQwMS05Y2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7NN8PmY5Vpagqu2EqUmalrqRgJ0pLjnu5VqoejiGdfDL+w/jx7poTQsN/jn O5fWZcZFlZDSm4n/C3F1wDS1r+EZtsJXaQ2UV6n91XcQ/sfVWqi/yXH6P/xJ+Htu Cz/KFkyYFezpvphdM9M9dk5jiKiPf0fPL/Jtj3reCQbsTLFSSwKBrI2O89gRucvq kCeRD5cKhdEMPe5W0t4qQOhXObXMWehpSSgybMNdvHV3FBvM+wFoz/Ub0KtaT+w2 AH1gcG7+PVsRbQPZQrwu8qM3m4YYG7NUbzNZEeY72/3UGabfMPDfKh9jXIcr31u1 HeWNHj+Tp1s8+IRLOczdU8I8iwIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFEoNK+fM l58IVpX4ohMRMMCm/J7AMB8GA1UdIwQYMBaAFJYprHENPiHVmRko1ZpNtlQRqWv/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTZFOC83QkNBRkYwMjA5 MUQxMUVBOTNCRDlFNTZDNEY5QUUwMi9saW1zY1EwLUlkV1pHU2pWbWsyMlZCR3Bh XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xpbXNjUTAtSWRXWkdTalZtazIyVkJHcGFfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUU2RTgvN0JDQUZGMDIwOTFEMTFFQTkzQkQ5RTU2QzRGOUFFMDIvOUNEQUFEQzIw OTFFMTFFQUIzNzU2MTVCQzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQCLfs4AwQCZxQ0AwQCZ/5UAwQCthCcMA0EAgACMAcDBQAkBfIAMA0G CSqGSIb3DQEBCwUAA4IBAQAqQQwyOva9dGI24GWzTqOjgVWAMF/4azWf/JJmSen1 /YY5tfy2mHV5I9mZlROqt8LZwCoTYdheiGCLiZ958yBeKGl1hqh3tZfQTz7EN0rq rlQSTD0ElYGYJ4vPmfSbTl193gYlrNGPTu62M+0GHWSNimCRZ7xukLASiB/4nM8N nLFUFE48GodZvQ5bPk7Arnz67vrUp42yAzS9Kj2LMPiqkvm3KvITRTZm6lgsDF50 2dk92k0Lb69j3lss+ER4blu+Xw5xvxX9vS0XN6rOw8KzEbwcx0nMlG566w6dbClU UA3Z6vnpadj5UGObYqCJU3SwicM7p0/6nr4T9CdnNSNi -----END CERTIFICATE-----Generated at Mon Apr 6 09:56:46 2026 by rpki-client