$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/57D0ACB609B111EAB045B31EC4F9AE02.roa File: 57D0ACB609B111EAB045B31EC4F9AE02.roa (raw, json) Hash identifier: xKP37EABh8rD61R6/4WagmPFZCvxA5Xu2S0ApR1OmRU= Subject key identifier: 2A:9B:7A:C6:70:28:85:4C:86:48:3E:A1:51:E0:55:09:7F:DF:C7:48 Certificate issuer: /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Certificate serial: 10AD Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/57D0ACB609B111EAB045B31EC4F9AE02.roa Signing time: Fri 06 Mar 2026 18:24:50 +0000 ROA not before: Fri 06 Mar 2026 18:24:50 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 397236 IP address blocks: 120.29.252.0/24 maxlen: 24 120.29.253.0/24 maxlen: 24 120.29.254.0/24 maxlen: 24 203.17.72.0/24 maxlen: 24 2001:dcd:1::/48 maxlen: 48 2001:dcd:2::/48 maxlen: 48 2001:dcd:3::/48 maxlen: 48 2001:dcd:4::/48 maxlen: 48 2001:dcd:5::/48 maxlen: 48 2001:dcd:6::/48 maxlen: 48 2001:dcd:7::/48 maxlen: 48 2001:dcd:dd05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 18:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4269 (0x10ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91919EA, serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Validity Not Before: Mar 6 18:24:50 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69ab1bf2-8391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4b:e2:2b:0e:c8:72:fe:9e:6f:5f:6d:47:2c: d3:df:43:85:38:a3:4d:9c:e1:fe:1f:7f:ff:90:5c: 22:01:a9:79:20:a0:10:92:a0:c0:07:7a:ec:a6:7b: 9e:2f:2f:60:8e:19:3f:69:b9:2f:d6:ef:15:c6:21: 81:a1:e4:dd:cb:d7:7b:7c:80:e2:02:8d:69:f3:d4: 85:05:9b:89:7c:a3:e3:f6:a9:91:4f:4c:59:0c:68: df:3d:65:90:e2:c2:97:3f:ed:8e:df:f4:8e:88:eb: 68:86:2c:ee:6f:93:98:8d:d5:f9:ce:cd:9a:81:34: 01:7b:0f:8a:e1:26:29:73:63:32:e9:de:22:18:c5: 53:3c:29:e1:30:d7:76:83:f1:eb:d2:20:12:56:07: 77:97:c4:e1:7b:51:b4:b7:d6:44:f5:8b:99:2b:95: 9d:64:b4:96:ba:42:52:f1:46:51:bb:38:46:e9:f5: 46:d2:23:9d:92:fd:87:22:04:f8:b6:06:90:0c:c5: ef:3c:10:55:53:51:6b:71:99:58:9c:e2:16:aa:34: 96:7c:12:0f:70:d2:fb:95:de:91:39:b4:78:7c:d5: 4e:75:8e:a8:4e:e4:49:12:8f:e8:bb:2a:24:ee:eb: cc:4e:5e:52:76:67:e8:35:08:41:00:77:9f:e6:93: b3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9B:7A:C6:70:28:85:4C:86:48:3E:A1:51:E0:55:09:7F:DF:C7:48 X509v3 Authority Key Identifier: keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/57D0ACB609B111EAB045B31EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 120.29.252.0-120.29.254.255 203.17.72.0/24 IPv6: 2001:dcd:1::-2001:dcd:7:ffff:ffff:ffff:ffff:ffff 2001:dcd:dd05::/48 Signature Algorithm: sha256WithRSAEncryption 9c:80:c4:a2:a2:2f:58:05:29:5e:53:ab:0b:5d:d8:6b:82:73: e1:4a:f7:90:1d:db:d4:d4:57:d8:6a:7b:43:33:a3:ba:b8:e1: 73:ba:7f:e7:64:15:11:4d:56:45:82:ba:57:02:86:c9:21:14: b8:31:f2:30:a1:06:17:0e:73:00:ca:f0:af:4a:03:e7:51:12: 17:11:f5:9c:9e:85:45:ce:f8:fa:36:1d:d3:41:e2:ac:ec:88: 45:d4:42:47:01:6e:ce:f5:63:d6:07:09:3c:35:25:79:db:e0: b5:71:d7:04:8b:3c:b5:22:da:7f:d0:e6:4c:1e:03:05:dc:a1: b1:02:be:b0:22:ca:20:6a:24:84:9c:f9:f8:ce:96:fd:18:88: f2:03:54:3c:4f:b2:e8:33:72:70:54:96:9b:8c:17:4a:6b:be: fe:74:0f:c4:52:dc:b9:43:86:21:12:f3:c7:72:ad:ea:b4:3e: e1:85:7f:b6:24:a3:e8:27:08:76:b7:b5:bb:62:42:b9:1b:47: 87:50:7e:17:f3:a3:bc:76:e5:76:43:55:cf:0e:1e:e3:e0:76: 0a:30:bb:ec:cf:c8:96:4a:4f:c5:d1:71:48:e1:52:91:87:f4: cf:23:f1:73:07:f3:e9:db:fa:fc:ef:e4:74:75:ac:10:0d:55: 86:6a:38:0a -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgICEK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE5RUExMTAvBgNVBAUTKDdCMDFDQUNDMTcwRkU2QTYxQjIwMzA0MTg1RTg2ODk0 NkRGNzI4NUEwHhcNMjYwMzA2MTgyNDUwWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWFiMWJmMi04MzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqUviKw7Icv6eb19tRyzT30OFOKNNnOH+H3//kFwiAal5IKAQkqDAB3rspnue Ly9gjhk/abkv1u8VxiGBoeTdy9d7fIDiAo1p89SFBZuJfKPj9qmRT0xZDGjfPWWQ 4sKXP+2O3/SOiOtohizub5OYjdX5zs2agTQBew+K4SYpc2My6d4iGMVTPCnhMNd2 g/Hr0iASVgd3l8The1G0t9ZE9YuZK5WdZLSWukJS8UZRuzhG6fVG0iOdkv2HIgT4 tgaQDMXvPBBVU1FrcZlYnOIWqjSWfBIPcNL7ld6RObR4fNVOdY6oTuRJEo/ouyok 7uvMTl5SdmfoNQhBAHef5pOzkQIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFCqbesZw KIVMhkg+oVHgVQl/38dIMB8GA1UdIwQYMBaAFHsByswXD+amGyAwQYXoaJRt9yha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTlFQS82RDQ2M0NGRTA0 RkQxMUVBODJDQ0NBMThDNEY5QUUwMi9ld0hLekJjUDVxWWJJREJCaGVob2xHMzNL Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V3SEt6QmNQNXFZYklEQkJoZWhvbEczM0tGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTE5RUEvNkQ0NjNDRkUwNEZEMTFFQTgyQ0NDQTE4QzRGOUFFMDIvNTdEMEFDQjYw OUIxMTFFQUIwNDVCMzFFQzRGOUFFMDIucm9hMFIGCCsGAQUFBwEHAQH/BEMwQTAa BAIAATAUMAwDBAJ4HfwDBAB4Hf4DBADLEUgwIwQCAAIwHTASAwcAIAENzQABAwcD IAENzQAAAwcAIAENzd0FMA0GCSqGSIb3DQEBCwUAA4IBAQCcgMSioi9YBSleU6sL XdhrgnPhSveQHdvU1FfYantDM6O6uOFzun/nZBURTVZFgrpXAobJIRS4MfIwoQYX DnMAyvCvSgPnURIXEfWcnoVFzvj6Nh3TQeKs7IhF1EJHAW7O9WPWBwk8NSV52+C1 cdcEizy1Itp/0OZMHgMF3KGxAr6wIsogaiSEnPn4zpb9GIjyA1Q8T7LoM3JwVJab jBdKa77+dA/EUty5Q4YhEvPHcq3qtD7hhX+2JKPoJwh2t7W7YkK5G0eHUH4X86O8 duV2Q1XPDh7j4HYKMLvsz8iWSk/F0XFI4VKRh/TPI/FzB/Pp2/r87+R0dawQDVWG ajgK -----END CERTIFICATE-----Generated at Fri Mar 13 10:39:01 2026 by rpki-client