$ rpki-client -vvf rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/AA02862E890C11EE87862551C4F9AE02.roa File: AA02862E890C11EE87862551C4F9AE02.roa (raw, json) Hash identifier: txKDX+YhBJXdDuRQY7L74gG8NetRgth5sfhluKMRd0M= Subject key identifier: 3F:EE:4F:ED:B3:66:92:7C:B6:81:86:D6:A7:5C:4C:D1:4A:DE:66:B0 Certificate issuer: /CN=A91127B5/serialNumber=FDE81CA7695E94A90BFDFD83F11A7734630817E8 Certificate serial: 01BC Authority key identifier: FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/AA02862E890C11EE87862551C4F9AE02.roa Signing time: Mon 02 Mar 2026 12:34:10 +0000 ROA not before: Sat 03 Jan 2026 03:25:13 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 140543 IP address blocks: 115.187.16.0/24 maxlen: 24 115.187.17.0/24 maxlen: 24 2401:4ea0::/48 maxlen: 48 2401:4ea0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.crl rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91127B5, serialNumber=FDE81CA7695E94A90BFDFD83F11A7734630817E8 Validity Not Before: Jan 3 03:25:13 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a583c2-18f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d1:6a:33:99:ee:a4:a3:8a:a5:66:be:65:54: 63:d2:f1:80:7e:e0:d5:9e:63:1a:04:6f:aa:b7:64: 8f:c2:91:52:9f:09:05:1b:ed:3f:6f:c0:eb:b6:cd: 59:eb:f2:95:1d:cb:08:10:70:7a:e3:31:53:0b:30: db:d1:9b:1c:9b:e0:9c:03:d5:8b:63:63:be:d9:1f: 42:bb:be:43:ae:65:4d:93:b2:24:d4:32:81:87:6a: 0e:c1:91:6e:c5:5d:ef:9c:7d:9f:d0:af:9d:d2:c3: 10:1c:b1:9a:74:73:c6:70:df:74:51:39:a8:87:85: 80:04:8f:79:f8:f1:88:a8:15:49:bb:5d:be:e7:21: 53:c5:f8:5f:35:dc:b0:c7:b2:01:f1:1f:d3:35:86: ba:da:a2:84:75:d7:10:c6:78:54:f5:6f:a3:e2:c4: db:f3:44:e2:c4:82:a9:42:08:02:3a:53:25:ae:7d: 97:c6:47:83:af:ab:b6:2c:40:fd:6c:55:9f:9f:97: db:e2:e3:6e:13:c5:25:87:05:f4:71:64:39:52:96: 85:18:1a:ca:c3:8b:5f:0b:85:08:9d:82:f9:eb:4f: 44:53:cd:59:45:bc:4a:41:f0:bd:ba:07:3f:40:99: a3:2a:b0:25:c8:cf:84:8a:58:84:41:32:b7:85:a2: 75:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EE:4F:ED:B3:66:92:7C:B6:81:86:D6:A7:5C:4C:D1:4A:DE:66:B0 X509v3 Authority Key Identifier: keyid:FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/AA02862E890C11EE87862551C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 115.187.16.0/23 IPv6: 2401:4ea0::/47 Signature Algorithm: sha256WithRSAEncryption 1a:96:76:68:76:79:a3:1b:4d:b3:63:e4:90:f2:9a:5c:07:40: 05:44:dc:c5:fd:6e:ee:a0:74:d0:dd:c3:5e:60:d9:49:ce:aa: 89:a9:0f:3b:8c:fa:e8:59:e5:11:62:d0:97:9e:15:fb:c5:70: 59:38:f6:e2:e9:e7:07:85:ce:ef:11:ec:45:a6:b1:66:e3:69: 75:75:96:89:f4:ec:c8:25:dc:9f:88:2f:02:af:05:7c:b6:61: 1b:0d:6c:76:7d:e9:20:69:61:84:fc:17:96:14:8f:ef:fc:5e: e8:8e:f7:1b:90:a4:8e:8a:cf:7b:86:ab:ea:08:20:ce:55:5d: b8:c6:08:8a:9d:14:38:db:8a:d3:be:c9:4b:4f:fd:76:ab:47: f3:14:c4:f5:8c:ac:98:7b:98:16:bd:f2:82:8a:5d:11:04:c8: 73:b2:52:6f:18:57:7b:c9:46:fc:96:cf:69:06:7e:9d:b6:8d: 17:75:b7:3e:88:e1:ae:8f:8b:e4:f8:ed:52:67:c7:9d:0e:4d: f8:e2:87:c0:ba:0c:35:f9:47:a1:b1:ad:a3:0a:97:04:60:00: 28:ec:44:1c:7c:90:29:fc:fc:54:1d:f4:11:8b:2a:b7:c1:6a: 83:59:1b:9c:6c:9b:8c:da:9f:1b:f1:48:d6:c2:9c:fd:aa:b0: a4:cf:8b:67 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3QjUxMTAvBgNVBAUTKEZERTgxQ0E3Njk1RTk0QTkwQkZERkQ4M0YxMUE3NzM0 NjMwODE3RTgwHhcNMjYwMTAzMDMyNTEzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1ODNjMi0xOGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdFqM5nupKOKpWa+ZVRj0vGAfuDVnmMaBG+qt2SPwpFSnwkFG+0/b8Drts1Z 6/KVHcsIEHB64zFTCzDb0Zscm+CcA9WLY2O+2R9Cu75DrmVNk7Ik1DKBh2oOwZFu xV3vnH2f0K+d0sMQHLGadHPGcN90UTmoh4WABI95+PGIqBVJu12+5yFTxfhfNdyw x7IB8R/TNYa62qKEddcQxnhU9W+j4sTb80TixIKpQggCOlMlrn2XxkeDr6u2LED9 bFWfn5fb4uNuE8UlhwX0cWQ5UpaFGBrKw4tfC4UInYL5609EU81ZRbxKQfC9ugc/ QJmjKrAlyM+EiliEQTK3haJ1owIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFD/uT+2z ZpJ8toGG1qdcTNFK3mawMB8GA1UdIwQYMBaAFP3oHKdpXpSpC/39g/EadzRjCBfo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdCNS8wRjE5NEVBRTg5 MEMxMUVFOURGNzJDNTBDNEY5QUUwMi9fZWdjcDJsZWxLa0xfZjJEOFJwM05HTUlG LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19lZ2NwMmxlbEtrTF9mMkQ4UnAzTkdNSUYtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTI3QjUvMEYxOTRFQUU4OTBDMTFFRTlERjcyQzUwQzRGOUFFMDIvQUEwMjg2MkU4 OTBDMTFFRTg3ODYyNTUxQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBc7sQMA8EAgACMAkDBwEkAU6gAAAwDQYJKoZIhvcNAQELBQADggEB ABqWdmh2eaMbTbNj5JDymlwHQAVE3MX9bu6gdNDdw15g2UnOqompDzuM+uhZ5RFi 0JeeFfvFcFk49uLp5weFzu8R7EWmsWbjaXV1lon07Mgl3J+ILwKvBXy2YRsNbHZ9 6SBpYYT8F5YUj+/8XuiO9xuQpI6Kz3uGq+oIIM5VXbjGCIqdFDjbitO+yUtP/Xar R/MUxPWMrJh7mBa98oKKXREEyHOyUm8YV3vJRvyWz2kGfp22jRd1tz6I4a6Pi+T4 7VJnx50OTfjih8C6DDX5R6GxraMKlwRgACjsRBx8kCn8/FQd9BGLKrfBaoNZG5xs m4zanxvxSNbCnP2qsKTPi2c= -----END CERTIFICATE-----Generated at Sat Mar 21 18:33:22 2026 by rpki-client