$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/B3811802FED411EA83E4EC37C4F9AE02.roa File: B3811802FED411EA83E4EC37C4F9AE02.roa (raw, json) Hash identifier: 2Kcqq+XjvKNawutN51FJf3ZHNXLBf9EZjNKwwmxD3g0= Subject key identifier: FC:19:7E:A8:28:A2:B3:68:5F:61:24:C2:D6:90:9B:35:B5:45:E7:21 Certificate issuer: /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Certificate serial: 1096 Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/B3811802FED411EA83E4EC37C4F9AE02.roa Signing time: Fri 06 Mar 2026 18:24:06 +0000 ROA not before: Fri 06 Mar 2026 18:24:05 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 38796 IP address blocks: 120.29.248.0/23 maxlen: 23 120.29.250.0/23 maxlen: 23 120.29.255.0/24 maxlen: 24 202.65.14.0/24 maxlen: 24 202.65.15.0/24 maxlen: 24 203.17.72.0/24 maxlen: 24 2001:dcd:9::/48 maxlen: 48 2001:dcd:11::/48 maxlen: 48 2001:dcd:12::/48 maxlen: 48 2001:dcd:30::/48 maxlen: 48 2001:dcd:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 18:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4246 (0x1096) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91919EA, serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Validity Not Before: Mar 6 18:24:05 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69ab1bc5-4bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:8c:f4:dc:a8:ae:08:6b:d2:72:60:09:52:e1: 02:48:c3:ec:7b:a5:a4:a7:38:d5:75:9c:aa:52:2e: 2a:42:7e:54:90:33:c5:84:52:fd:f1:0a:16:ac:24: fb:20:03:99:e0:c5:bd:18:56:70:65:b3:7c:1e:b1: da:98:4a:6a:76:63:4a:02:ea:32:7d:59:ed:44:cd: 8b:fa:c0:7f:be:aa:c0:5c:46:6f:32:d3:a9:44:52: 21:63:fd:53:b5:7e:47:1e:71:b7:22:e2:37:c6:d6: 12:9d:10:e8:08:19:de:63:ca:4b:28:47:d1:99:60: f7:54:6f:9f:d3:23:40:ec:a5:5d:f9:63:5d:fd:cf: 04:77:6d:65:bc:bf:9d:0e:29:2a:9b:6d:64:97:b6: 87:f9:81:44:3b:b1:a3:f6:6f:25:ef:24:22:0f:ce: 46:0a:3e:51:28:c8:e2:3b:46:49:47:d8:79:4e:51: 93:8c:b6:89:a7:2d:81:22:8f:18:7a:fb:18:0b:8a: d5:c1:00:c4:a2:16:63:91:bb:19:6f:3e:03:55:8d: 5c:86:d2:cb:bd:8b:07:e1:c5:5c:76:44:8d:79:a8: df:e8:05:8a:34:4c:30:5b:94:3e:e1:0e:ff:2f:e4: 41:f1:e3:b7:21:38:2b:b1:11:22:7f:a9:c6:25:fa: bb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:19:7E:A8:28:A2:B3:68:5F:61:24:C2:D6:90:9B:35:B5:45:E7:21 X509v3 Authority Key Identifier: keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/B3811802FED411EA83E4EC37C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 120.29.248.0/22 120.29.255.0/24 202.65.14.0/23 203.17.72.0/24 IPv6: 2001:dcd:9::/48 2001:dcd:11::-2001:dcd:12:ffff:ffff:ffff:ffff:ffff 2001:dcd:30::/48 2001:dcd:40::/48 Signature Algorithm: sha256WithRSAEncryption 2d:50:2c:80:09:bb:59:3d:1d:6d:ab:ed:bc:7a:82:cb:9c:1e: fe:56:3a:6a:8c:74:5a:d8:05:2c:fd:83:74:54:5f:a8:ba:b8: 61:f0:d8:2b:35:22:a5:a2:8a:c1:ad:75:d7:c0:58:9a:19:9e: c9:d1:26:27:4c:3c:71:87:8d:5e:55:77:f1:7d:74:27:71:b5: 0b:da:a4:cc:5b:72:9d:7d:34:58:71:f5:c2:36:be:0d:66:93: f5:a3:62:31:35:79:d1:5b:e1:4c:95:3f:b7:d8:d9:4c:23:08: d0:14:23:54:5f:60:60:10:27:03:a7:7d:14:7b:1f:64:00:bc: b4:ee:02:46:a8:0c:3a:02:4c:aa:70:4a:e4:f3:2d:c2:17:09: fd:d1:07:46:40:3e:51:7d:94:6a:19:33:eb:3d:a9:81:1c:04: 8c:b6:56:a5:e3:64:b1:70:8d:29:94:34:12:c8:20:63:c0:15: 0f:9f:e0:ea:69:ae:34:1c:34:ff:f2:5d:00:07:c0:7f:79:bd: 82:23:81:1f:5a:44:9b:01:d8:f9:37:cf:ce:fe:d5:a9:24:fb: 05:dd:5f:7b:53:2c:c2:ce:33:60:07:7a:c6:ca:25:e9:74:21: b0:7b:42:70:52:10:aa:26:6a:b8:8a:e8:07:f7:0b:d2:30:c6: 07:ad:0c:46 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICEJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE5RUExMTAvBgNVBAUTKDdCMDFDQUNDMTcwRkU2QTYxQjIwMzA0MTg1RTg2ODk0 NkRGNzI4NUEwHhcNMjYwMzA2MTgyNDA1WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWFiMWJjNS00YmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9oz03KiuCGvScmAJUuECSMPse6WkpzjVdZyqUi4qQn5UkDPFhFL98QoWrCT7 IAOZ4MW9GFZwZbN8HrHamEpqdmNKAuoyfVntRM2L+sB/vqrAXEZvMtOpRFIhY/1T tX5HHnG3IuI3xtYSnRDoCBneY8pLKEfRmWD3VG+f0yNA7KVd+WNd/c8Ed21lvL+d Dikqm21kl7aH+YFEO7Gj9m8l7yQiD85GCj5RKMjiO0ZJR9h5TlGTjLaJpy2BIo8Y evsYC4rVwQDEohZjkbsZbz4DVY1chtLLvYsH4cVcdkSNeajf6AWKNEwwW5Q+4Q7/ L+RB8eO3ITgrsREif6nGJfq7rQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFPwZfqgo orNoX2EkwtaQmzW1RechMB8GA1UdIwQYMBaAFHsByswXD+amGyAwQYXoaJRt9yha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTlFQS82RDQ2M0NGRTA0 RkQxMUVBODJDQ0NBMThDNEY5QUUwMi9ld0hLekJjUDVxWWJJREJCaGVob2xHMzNL Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V3SEt6QmNQNXFZYklEQkJoZWhvbEczM0tGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTE5RUEvNkQ0NjNDRkUwNEZEMTFFQTgyQ0NDQTE4QzRGOUFFMDIvQjM4MTE4MDJG RUQ0MTFFQTgzRTRFQzM3QzRGOUFFMDIucm9hMGgGCCsGAQUFBwEHAQH/BFkwVzAe BAIAATAYAwQCeB34AwQAeB3/AwQBykEOAwQAyxFIMDUEAgACMC8DBwAgAQ3NAAkw EgMHACABDc0AEQMHACABDc0AEgMHACABDc0AMAMHACABDc0AQDANBgkqhkiG9w0B AQsFAAOCAQEALVAsgAm7WT0dbavtvHqCy5we/lY6aox0WtgFLP2DdFRfqLq4YfDY KzUipaKKwa1118BYmhmeydEmJ0w8cYeNXlV38X10J3G1C9qkzFtynX00WHH1wja+ DWaT9aNiMTV50VvhTJU/t9jZTCMI0BQjVF9gYBAnA6d9FHsfZAC8tO4CRqgMOgJM qnBK5PMtwhcJ/dEHRkA+UX2Uahkz6z2pgRwEjLZWpeNksXCNKZQ0EsggY8AVD5/g 6mmuNBw0//JdAAfAf3m9giOBH1pEmwHY+TfPzv7VqST7Bd1fe1Msws4zYAd6xsol 6XQhsHtCcFIQqiZquIroB/cL0jDGB60MRg== -----END CERTIFICATE-----Generated at Fri Mar 13 10:38:49 2026 by rpki-client