$ rpki-client -vvf rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/84FDF6D0AABA11EABB84756CC4F9AE02.roa File: 84FDF6D0AABA11EABB84756CC4F9AE02.roa (raw, json) Hash identifier: bi7S0Lre58ov+uuKcsOPGOj7mTYCWHlHABLA+5UjZ18= Subject key identifier: EB:2A:B7:B6:08:AA:A5:F6:9D:9F:67:AD:5F:27:9C:31:ED:06:04:5D Certificate issuer: /CN=A91866D6/serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C Certificate serial: 097D Authority key identifier: AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/84FDF6D0AABA11EABB84756CC4F9AE02.roa Signing time: Thu 22 Jan 2026 20:16:43 +0000 ROA not before: Thu 22 Jan 2026 20:16:43 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 4858 IP address blocks: 203.90.24.0/22 maxlen: 22 203.90.29.0/24 maxlen: 24 2406:ca00:1::/48 maxlen: 48 2406:ca00:2::/48 maxlen: 48 2406:ca00:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Feb 2026 19:35:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2429 (0x97d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91866D6, serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C Validity Not Before: Jan 22 20:16:43 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=697285ab-d9d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d4:e0:a8:cd:bf:44:96:48:68:25:83:af:cd: 6f:a4:66:80:3d:8d:a4:df:01:ae:3d:9a:d0:e2:57: f3:e6:7a:51:38:e9:d8:4c:dc:ea:18:50:ff:a6:a9: ec:12:3b:3b:f7:6b:24:b2:6b:81:77:a0:db:e7:9c: 6c:d7:ee:5b:b8:4d:33:1e:f7:5d:20:51:e0:6c:de: 61:5b:8c:8d:02:d8:a3:8f:7a:33:aa:06:e4:89:40: f7:5c:84:1b:d9:fb:7e:86:70:4d:ed:53:b1:d6:07: af:7f:08:14:60:57:3c:ed:8f:70:61:be:b7:f1:c4: 4b:ca:30:75:09:be:ef:7a:d1:2b:6b:01:bb:c0:f1: ba:9f:9c:05:85:6d:0d:58:ee:0a:9b:65:a3:db:7a: 7f:44:17:29:be:44:e0:6f:fa:16:cd:87:96:4d:5b: ca:27:16:4c:3d:50:4a:26:bd:94:24:74:e1:b2:ff: 69:ac:24:8a:0d:9f:6b:35:29:8f:1b:bf:4b:f6:57: 02:d0:c3:47:37:e7:a4:5b:56:52:36:c5:f1:ee:1d: 15:39:ea:54:4b:57:d3:5c:6c:4e:cb:e4:ec:97:27: 50:4c:3b:53:c6:b5:61:f3:b4:50:90:c4:b2:3d:46: f6:09:78:f2:9e:55:4f:4a:31:e5:a8:82:6f:57:70: c5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:2A:B7:B6:08:AA:A5:F6:9D:9F:67:AD:5F:27:9C:31:ED:06:04:5D X509v3 Authority Key Identifier: keyid:AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/84FDF6D0AABA11EABB84756CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.90.24.0/22 203.90.29.0/24 IPv6: 2406:ca00:1::-2406:ca00:3:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 70:00:6b:81:53:1a:2c:b0:c9:f2:5b:49:22:d8:73:96:a9:a1: a5:f8:29:ba:06:19:e0:1a:75:02:36:26:3e:05:ff:10:e6:af: a3:87:bc:38:f3:3a:c1:f6:e3:97:79:07:7f:b3:8f:d4:a8:0d: 86:ba:ed:9c:a7:28:f8:c4:c8:59:b0:26:cf:82:7e:e9:80:94: ce:a5:3e:1c:63:71:ba:85:71:ce:21:e6:84:8a:d5:1b:1e:64: 90:4f:4a:f9:8b:90:ce:41:0f:16:bb:f7:8a:99:79:a2:99:19: 16:29:d9:5d:e9:52:d6:5c:2a:78:ce:12:e3:b3:b8:15:18:d9: 7d:29:b9:2d:a4:c6:a4:96:41:f3:19:d4:5a:8b:5a:33:df:97: 32:ce:cb:07:23:98:f4:4a:92:60:65:60:a2:e0:fc:2d:bb:b5: b2:12:d5:30:8b:bf:87:b2:04:44:70:7a:62:32:4c:05:87:65: 9b:09:70:93:7c:46:c0:f6:7b:bd:04:de:b8:2f:15:dd:7f:f6: e8:11:98:0c:c8:6b:d4:31:65:81:56:c6:a1:c3:96:7d:16:47: 92:6f:ae:04:45:7d:91:bd:f3:ed:e8:09:be:ef:85:85:22:58: 09:6e:fe:dd:3c:9d:45:6c:99:b8:08:61:56:0c:4d:e7:c0:99: 87:4e:0e:3a -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICCX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx ODY2RDYxMTAvBgNVBAUTKEFFMDBDMUEyQzAzNDJBNzE1MjgzNTQ0RUQ2NUI0NjE4 NjU4MkYyNkMwHhcNMjYwMTIyMjAxNjQzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTcyODVhYi1kOWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdTgqM2/RJZIaCWDr81vpGaAPY2k3wGuPZrQ4lfz5npROOnYTNzqGFD/pqns Ejs792sksmuBd6Db55xs1+5buE0zHvddIFHgbN5hW4yNAtijj3ozqgbkiUD3XIQb 2ft+hnBN7VOx1gevfwgUYFc87Y9wYb638cRLyjB1Cb7vetErawG7wPG6n5wFhW0N WO4Km2Wj23p/RBcpvkTgb/oWzYeWTVvKJxZMPVBKJr2UJHThsv9prCSKDZ9rNSmP G79L9lcC0MNHN+ekW1ZSNsXx7h0VOepUS1fTXGxOy+TslydQTDtTxrVh87RQkMSy PUb2CXjynlVPSjHlqIJvV3DFewIDAQABo4ICtzCCArMwHQYDVR0OBBYEFOsqt7YI qqX2nZ9nrV8nnDHtBgRdMB8GA1UdIwQYMBaAFK4AwaLANCpxUoNUTtZbRhhlgvJs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjZENi85QTU2Q0MyRUFB QjkxMUVBOTRENjgxNkJDNEY5QUUwMi9yZ0RCb3NBMEtuRlNnMVJPMWx0R0dHV0M4 bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JnREJvc0EwS25GU2cxUk8xbHRHR0dXQzhtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODY2RDYvOUE1NkNDMkVBQUI5MTFFQTk0RDY4MTZCQzRGOUFFMDIvODRGREY2RDBB QUJBMTFFQUJCODQ3NTZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQQYIKwYBBQUHAQcBAf8E MjAwMBIEAgABMAwDBALLWhgDBADLWh0wGgQCAAIwFDASAwcAJAbKAAABAwcCJAbK AAAAMA0GCSqGSIb3DQEBCwUAA4IBAQBwAGuBUxossMnyW0ki2HOWqaGl+Cm6Bhng GnUCNiY+Bf8Q5q+jh7w48zrB9uOXeQd/s4/UqA2Guu2cpyj4xMhZsCbPgn7pgJTO pT4cY3G6hXHOIeaEitUbHmSQT0r5i5DOQQ8Wu/eKmXmimRkWKdld6VLWXCp4zhLj s7gVGNl9KbktpMaklkHzGdRai1oz35cyzssHI5j0SpJgZWCi4Pwtu7WyEtUwi7+H sgREcHpiMkwFh2WbCXCTfEbA9nu9BN64LxXdf/boEZgMyGvUMWWBVsahw5Z9FkeS b64ERX2RvfPt6Am+74WFIlgJbv7dPJ1FbJm4CGFWDE3nwJmHTg46 -----END CERTIFICATE-----Generated at Thu Feb 19 18:17:30 2026 by rpki-client