$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/5690B49A09B111EAB045B31EC4F9AE02.roa File: 5690B49A09B111EAB045B31EC4F9AE02.roa (raw, json) Hash identifier: cIWKVTJOs6P8k3bxazaFK6t1brfafCbCTSqdvKfLWFA= Subject key identifier: 36:45:79:D7:CF:B9:C8:67:B2:30:2B:43:C4:E8:66:4B:7C:EA:61:9A Certificate issuer: /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Certificate serial: 10A7 Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/5690B49A09B111EAB045B31EC4F9AE02.roa Signing time: Fri 06 Mar 2026 18:24:39 +0000 ROA not before: Fri 06 Mar 2026 18:24:39 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 397230 IP address blocks: 120.29.252.0/24 maxlen: 24 120.29.253.0/24 maxlen: 24 120.29.254.0/24 maxlen: 24 203.17.72.0/24 maxlen: 24 2001:dcd:1::/48 maxlen: 48 2001:dcd:2::/48 maxlen: 48 2001:dcd:3::/48 maxlen: 48 2001:dcd:4::/48 maxlen: 48 2001:dcd:5::/48 maxlen: 48 2001:dcd:6::/48 maxlen: 48 2001:dcd:7::/48 maxlen: 48 2001:dcd:dd05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 18:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4263 (0x10a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91919EA, serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Validity Not Before: Mar 6 18:24:39 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69ab1be7-d8a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:34:94:2f:4a:bb:d2:e3:6c:19:9f:cf:db:85: 93:59:e5:c6:61:b2:ba:60:d5:fb:e6:d3:dd:60:ea: 06:7c:44:2e:02:b6:79:69:38:be:4b:30:5d:d6:9c: a8:98:3c:4d:42:10:a8:fd:06:ea:f1:4a:6c:99:c6: 85:ab:6b:ad:6f:c2:a7:bc:d6:f0:31:b3:a8:54:eb: 3b:9d:f8:d0:4b:0d:d6:47:7b:cf:d9:41:12:3b:6f: 36:79:04:4d:d5:7b:b9:b6:89:4d:00:56:28:e8:6f: f4:bf:54:95:fd:c5:5f:63:89:0d:98:1b:6a:19:87: 77:46:63:f4:01:f0:d3:4c:28:1a:c9:67:fa:a6:68: 99:ac:05:f6:78:50:eb:b1:70:95:15:ce:f7:25:7b: 41:17:ec:8d:0e:c7:3a:67:35:ce:df:4c:2e:62:56: 5f:53:24:54:d5:1d:7d:06:78:2e:47:67:c8:99:49: f7:0a:4c:24:70:39:97:6f:51:b8:ca:14:ae:b5:aa: 39:ee:51:e4:36:2b:19:72:96:09:c7:1b:a1:01:32: b4:3a:59:f7:c2:bc:eb:47:a2:f3:bb:66:a5:43:3f: 36:85:86:c4:73:a8:87:26:8c:f3:5e:2b:02:89:c1: 88:ac:26:d4:00:d3:8f:a7:23:6a:ed:76:ac:b6:1e: 68:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:45:79:D7:CF:B9:C8:67:B2:30:2B:43:C4:E8:66:4B:7C:EA:61:9A X509v3 Authority Key Identifier: keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/5690B49A09B111EAB045B31EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 120.29.252.0-120.29.254.255 203.17.72.0/24 IPv6: 2001:dcd:1::-2001:dcd:7:ffff:ffff:ffff:ffff:ffff 2001:dcd:dd05::/48 Signature Algorithm: sha256WithRSAEncryption 4c:3f:fc:2a:e9:59:ea:c3:2f:8f:68:06:8f:00:14:aa:d6:38: 8c:09:7f:8f:d3:1e:ea:50:92:e1:e1:25:65:cc:85:54:4e:e2: 83:ad:4d:a6:68:0e:29:61:58:e0:9f:b1:36:13:79:74:df:5d: 0e:ca:e3:bf:99:3e:4d:f5:bb:e0:b5:bd:cc:34:ff:87:2d:e7: 57:47:7c:a3:c8:dc:d6:15:78:80:c5:63:cb:2f:82:ca:a5:ef: d2:fd:a8:c2:9f:97:41:55:81:d3:32:db:0c:44:d6:b8:77:0f: 65:ad:5a:83:42:2d:b5:6b:29:90:29:8d:15:f6:f8:bb:13:99: d5:f2:d4:ad:c1:93:ec:9f:06:05:75:e8:02:c9:dd:7f:60:18: 1a:01:9f:4b:67:5b:c4:0b:65:3d:dd:ab:c0:86:59:b6:0e:ef: 48:d2:8b:61:92:4a:4f:ac:bc:b6:59:5d:88:60:ac:5c:6a:f9: db:a7:43:27:25:b1:19:5c:3e:a6:81:a0:2d:96:37:4d:ea:03: a5:48:9a:0d:72:77:6a:ba:76:3c:74:28:2a:36:88:d2:49:e6: dc:ea:d2:8a:63:42:67:ca:10:b0:b5:ed:bd:3c:6f:c8:9f:9d: df:e2:3f:48:f4:3f:3b:64:a7:a5:7b:58:85:22:a6:ae:39:37: 78:4f:66:28 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgICEKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE5RUExMTAvBgNVBAUTKDdCMDFDQUNDMTcwRkU2QTYxQjIwMzA0MTg1RTg2ODk0 NkRGNzI4NUEwHhcNMjYwMzA2MTgyNDM5WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWFiMWJlNy1kOGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jSUL0q70uNsGZ/P24WTWeXGYbK6YNX75tPdYOoGfEQuArZ5aTi+SzBd1pyo mDxNQhCo/Qbq8UpsmcaFq2utb8KnvNbwMbOoVOs7nfjQSw3WR3vP2UESO282eQRN 1Xu5tolNAFYo6G/0v1SV/cVfY4kNmBtqGYd3RmP0AfDTTCgayWf6pmiZrAX2eFDr sXCVFc73JXtBF+yNDsc6ZzXO30wuYlZfUyRU1R19BnguR2fImUn3CkwkcDmXb1G4 yhSutao57lHkNisZcpYJxxuhATK0Oln3wrzrR6Lzu2alQz82hYbEc6iHJozzXisC icGIrCbUANOPpyNq7Xasth5onQIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFDZFedfP uchnsjArQ8ToZkt86mGaMB8GA1UdIwQYMBaAFHsByswXD+amGyAwQYXoaJRt9yha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTlFQS82RDQ2M0NGRTA0 RkQxMUVBODJDQ0NBMThDNEY5QUUwMi9ld0hLekJjUDVxWWJJREJCaGVob2xHMzNL Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V3SEt6QmNQNXFZYklEQkJoZWhvbEczM0tGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTE5RUEvNkQ0NjNDRkUwNEZEMTFFQTgyQ0NDQTE4QzRGOUFFMDIvNTY5MEI0OUEw OUIxMTFFQUIwNDVCMzFFQzRGOUFFMDIucm9hMFIGCCsGAQUFBwEHAQH/BEMwQTAa BAIAATAUMAwDBAJ4HfwDBAB4Hf4DBADLEUgwIwQCAAIwHTASAwcAIAENzQABAwcD IAENzQAAAwcAIAENzd0FMA0GCSqGSIb3DQEBCwUAA4IBAQBMP/wq6Vnqwy+PaAaP ABSq1jiMCX+P0x7qUJLh4SVlzIVUTuKDrU2maA4pYVjgn7E2E3l0310OyuO/mT5N 9bvgtb3MNP+HLedXR3yjyNzWFXiAxWPLL4LKpe/S/ajCn5dBVYHTMtsMRNa4dw9l rVqDQi21aymQKY0V9vi7E5nV8tStwZPsnwYFdegCyd1/YBgaAZ9LZ1vEC2U93avA hlm2Du9I0othkkpPrLy2WV2IYKxcavnbp0MnJbEZXD6mgaAtljdN6gOlSJoNcndq unY8dCgqNojSSebc6tKKY0JnyhCwte29PG/In53f4j9I9D87ZKele1iFIqauOTd4 T2Yo -----END CERTIFICATE-----Generated at Fri Mar 13 10:38:54 2026 by rpki-client