$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/4CA8BBE232CF11EBADB5497FC4F9AE02.roa File: 4CA8BBE232CF11EBADB5497FC4F9AE02.roa (raw, json) Hash identifier: zwaIVuRApbY9s1XyqtW/uqvzs4vi0AfgJgFNST/nhro= Subject key identifier: 24:12:3C:2C:1C:CD:AC:48:DA:4A:AD:61:8F:EF:1A:63:61:F7:A7:5A Certificate issuer: /CN=A91FF74B/serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F Certificate serial: 0815 Authority key identifier: 54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/4CA8BBE232CF11EBADB5497FC4F9AE02.roa Signing time: Thu 02 Apr 2026 21:28:39 +0000 ROA not before: Thu 02 Apr 2026 21:28:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56201 IP address blocks: 103.84.216.0/23 maxlen: 23 103.84.216.0/24 maxlen: 24 103.84.217.0/24 maxlen: 24 103.84.218.0/23 maxlen: 23 103.84.218.0/24 maxlen: 24 103.84.219.0/24 maxlen: 24 103.89.74.0/23 maxlen: 23 103.89.74.0/24 maxlen: 24 103.89.75.0/24 maxlen: 24 103.117.158.0/23 maxlen: 23 103.117.158.0/24 maxlen: 24 103.117.159.0/24 maxlen: 24 2001:df0:217::/48 maxlen: 48 2400:6d20::/47 maxlen: 47 2400:6d20::/48 maxlen: 48 2400:6d20:1::/48 maxlen: 48 2400:6d20:2::/47 maxlen: 47 2400:6d20:2::/48 maxlen: 48 2400:6d20:3::/48 maxlen: 48 2400:6d20:10::/47 maxlen: 47 2400:6d20:12::/47 maxlen: 47 2400:6d20:fc00::/47 maxlen: 47 2400:6d20:fc02::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 21:09:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2069 (0x815) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF74B, serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F Validity Not Before: Apr 2 21:28:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69cedf87-ca9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:01:18:e6:01:05:68:72:69:a1:2b:6c:e2:79: ef:44:85:0a:9b:71:05:b4:a9:80:40:c6:0f:f5:c8: 4c:c0:fe:76:0e:5f:53:b1:79:14:ca:21:e3:e5:80: 0d:36:13:8a:01:4e:8b:49:35:51:9c:87:a0:97:19: 27:4b:f9:19:cd:8d:92:3b:42:60:69:63:a6:2f:37: ce:0e:bf:d8:f3:b9:8d:a0:55:49:79:2a:55:e2:58: 0e:c3:a4:31:34:a7:bc:03:e6:a5:8c:22:c2:0c:b6: 82:12:fa:2c:80:e4:e7:8f:11:f1:a0:0c:ad:11:c7: b3:e7:94:cf:0f:c4:8a:c6:7c:dd:ca:bc:af:ec:49: ce:f9:00:5d:4d:e6:32:49:57:97:5a:e7:19:a7:19: 90:8d:d8:1c:45:01:9f:b9:e2:3b:ff:65:18:d4:79: 86:6e:ca:bb:78:93:1e:08:86:c9:30:61:d3:11:77: ab:eb:0d:85:94:d4:c1:05:c8:a1:03:ce:8a:35:36: 1c:73:eb:c0:89:12:ca:b9:c1:8d:61:8b:85:18:0f: 8a:df:97:6d:52:af:b4:8b:51:69:75:c4:11:6a:03: a6:c4:41:1e:ed:bd:c3:54:c0:0a:b3:e3:85:26:2a: b4:13:99:85:37:1c:00:28:3f:96:07:6a:d5:84:f0: f1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:12:3C:2C:1C:CD:AC:48:DA:4A:AD:61:8F:EF:1A:63:61:F7:A7:5A X509v3 Authority Key Identifier: keyid:54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/4CA8BBE232CF11EBADB5497FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.84.216.0/22 103.89.74.0/23 103.117.158.0/23 IPv6: 2001:df0:217::/48 2400:6d20::/46 2400:6d20:10::/46 2400:6d20:fc00::/46 Signature Algorithm: sha256WithRSAEncryption b0:0a:4c:96:d4:61:01:f5:91:af:cb:9f:ca:31:19:18:95:c7: 11:b8:bf:11:3c:83:f8:4a:f1:7f:d7:5a:58:db:25:62:87:bd: 78:15:c0:75:3a:ad:47:e8:a6:0e:79:9f:17:4b:17:46:b6:21: d8:f5:4e:05:5e:26:4e:59:a1:6f:52:bc:f3:ec:9e:29:82:c8: c4:6e:96:d5:33:62:55:02:10:ab:af:56:b4:2d:c3:98:14:48: c2:07:f8:ce:59:f1:23:4d:23:f2:1a:c6:26:38:29:ea:ea:3f: 39:25:d5:77:c6:bc:2f:7e:de:8d:a8:9c:60:d2:99:61:f3:85: 8e:ab:9a:99:d5:95:ff:48:f0:00:2d:68:25:86:42:5f:d0:19: 7d:42:24:ea:fc:5e:cf:cd:5d:5d:a6:24:93:5b:ab:05:e9:0f: 02:57:bb:4f:17:80:57:c3:b6:6f:1c:c4:8c:a0:af:cb:dc:a7: 4b:a0:f9:64:cd:b7:4c:97:8b:c8:7d:7e:bc:89:0a:c0:3a:11: 9d:4a:62:c7:77:30:a9:32:59:5f:f0:76:4a:98:a4:63:a4:3f: e3:27:24:89:1e:c9:78:7b:81:4a:f2:c6:db:62:ed:23:1b:a8: 8c:b5:a2:24:2e:16:28:ba:80:ef:08:e5:c8:a9:4f:4c:e3:d0: 37:70:91:d2 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICCBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY3NEIxMTAvBgNVBAUTKDU0MEREQUM2NjhEOEI1MEM5NjYwNTcxMjE5NUE5ODhB MUNBRDlFM0YwHhcNMjYwNDAyMjEyODM5WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWNlZGY4Ny1jYTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgEY5gEFaHJpoSts4nnvRIUKm3EFtKmAQMYP9chMwP52Dl9TsXkUyiHj5YAN NhOKAU6LSTVRnIeglxknS/kZzY2SO0JgaWOmLzfODr/Y87mNoFVJeSpV4lgOw6Qx NKe8A+aljCLCDLaCEvosgOTnjxHxoAytEcez55TPD8SKxnzdyryv7EnO+QBdTeYy SVeXWucZpxmQjdgcRQGfueI7/2UY1HmGbsq7eJMeCIbJMGHTEXer6w2FlNTBBcih A86KNTYcc+vAiRLKucGNYYuFGA+K35dtUq+0i1FpdcQRagOmxEEe7b3DVMAKs+OF Jiq0E5mFNxwAKD+WB2rVhPDx0wIDAQABo4ICmDCCApQwHQYDVR0OBBYEFCQSPCwc zaxI2kqtYY/vGmNh96daMB8GA1UdIwQYMBaAFFQN2sZo2LUMlmBXEhlamIocrZ4/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjc0Qi8wOTQ0ODlGRTMy Q0UxMUVCOUMxNDNGN0VDNEY5QUUwMi9WQTNheG1qWXRReVdZRmNTR1ZxWWloeXRu ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZBM2F4bWpZdFF5V1lGY1NHVnFZaWh5dG5qOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkY3NEIvMDk0NDg5RkUzMkNFMTFFQjlDMTQzRjdFQzRGOUFFMDIvNENBOEJCRTIz MkNGMTFFQkFEQjU0OTdGQzRGOUFFMDIucm9hMFcGCCsGAQUFBwEHAQH/BEgwRjAY BAIAATASAwQCZ1TYAwQBZ1lKAwQBZ3WeMCoEAgACMCQDBwAgAQ3wAhcDBwIkAG0g AAADBwIkAG0gABADBwIkAG0g/AAwDQYJKoZIhvcNAQELBQADggEBALAKTJbUYQH1 ka/Ln8oxGRiVxxG4vxE8g/hK8X/XWljbJWKHvXgVwHU6rUfopg55nxdLF0a2Idj1 TgVeJk5ZoW9SvPPsnimCyMRultUzYlUCEKuvVrQtw5gUSMIH+M5Z8SNNI/IaxiY4 KerqPzkl1XfGvC9+3o2onGDSmWHzhY6rmpnVlf9I8AAtaCWGQl/QGX1CJOr8Xs/N XV2mJJNbqwXpDwJXu08XgFfDtm8cxIygr8vcp0ug+WTNt0yXi8h9fryJCsA6EZ1K Ysd3MKkyWV/wdkqYpGOkP+MnJIkeyXh7gUryxtti7SMbqIy1oiQuFii6gO8I5cip T0zj0DdwkdI= -----END CERTIFICATE-----Generated at Mon Apr 6 10:06:52 2026 by rpki-client