$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/F34CE5D6099A11EAB5891D5BC4F9AE02.roa File: F34CE5D6099A11EAB5891D5BC4F9AE02.roa (raw, json) Hash identifier: zPpkS710WG8WFXrTJu1Esm0TcAt5p7z07ABQIL7jb8Y= Subject key identifier: DC:34:35:59:3C:F1:72:FB:3F:04:B6:11:A8:DC:7D:F5:6D:11:75:E2 Certificate issuer: /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Certificate serial: 10AF Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/F34CE5D6099A11EAB5891D5BC4F9AE02.roa Signing time: Fri 06 Mar 2026 18:24:54 +0000 ROA not before: Fri 06 Mar 2026 18:24:54 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 397238 IP address blocks: 120.29.252.0/24 maxlen: 24 120.29.253.0/24 maxlen: 24 120.29.254.0/24 maxlen: 24 203.17.72.0/24 maxlen: 24 2001:dcd:1::/48 maxlen: 48 2001:dcd:2::/48 maxlen: 48 2001:dcd:3::/48 maxlen: 48 2001:dcd:4::/48 maxlen: 48 2001:dcd:5::/48 maxlen: 48 2001:dcd:6::/48 maxlen: 48 2001:dcd:7::/48 maxlen: 48 2001:dcd:dd05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 18:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4271 (0x10af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91919EA, serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Validity Not Before: Mar 6 18:24:54 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69ab1bf6-9ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fc:e1:4f:ea:28:1b:c3:bf:61:71:f2:6c:23: 6b:76:dc:a8:9f:5f:b2:d0:0c:d7:f1:1b:67:6a:9f: de:2c:8b:b0:b7:5a:c2:ca:f2:20:cc:1a:d0:49:7b: cb:4b:86:bb:b5:fa:5b:95:e5:13:a4:9d:0c:ff:5b: 78:b8:4c:1f:a1:fb:ac:66:51:aa:c8:72:dc:2e:d0: 63:91:04:5e:9f:6f:49:97:a8:a6:68:90:56:50:04: 7d:db:51:bd:e6:92:88:2d:44:c0:c6:66:44:ec:1d: db:b7:12:ba:f0:29:1a:c8:3c:dc:71:41:c3:2f:ea: d2:fa:4b:ec:06:e3:bb:89:32:91:be:6a:8d:10:b6: 5a:7b:09:ee:c6:c1:41:8a:7f:b8:8b:aa:af:79:9b: 3b:85:b8:75:d6:31:b5:41:03:78:7d:89:06:aa:09: 10:75:08:4d:b4:74:bc:fd:9c:73:12:f3:6a:75:eb: 17:8c:e3:62:1b:96:44:cd:1a:26:55:9c:72:99:c9: 78:8a:ad:dc:c2:7d:da:e9:e8:16:0a:a6:62:61:d6: 46:ae:05:2c:b9:bd:3c:1d:31:15:0d:cc:35:83:49: ed:9b:32:2c:a1:a2:7e:59:3b:54:58:fd:dc:25:c5: 26:f5:67:86:db:2f:55:98:2c:5c:2a:20:44:a8:a6: 7f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:34:35:59:3C:F1:72:FB:3F:04:B6:11:A8:DC:7D:F5:6D:11:75:E2 X509v3 Authority Key Identifier: keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/F34CE5D6099A11EAB5891D5BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 120.29.252.0-120.29.254.255 203.17.72.0/24 IPv6: 2001:dcd:1::-2001:dcd:7:ffff:ffff:ffff:ffff:ffff 2001:dcd:dd05::/48 Signature Algorithm: sha256WithRSAEncryption 99:c7:3c:ee:fd:4f:bd:8a:2b:a5:ce:15:94:a8:91:58:54:cb: 7a:67:7f:ba:a3:56:6f:7d:72:34:80:f6:a8:eb:41:f3:ce:d9: da:95:c2:45:5e:a7:ae:42:25:3d:67:99:19:d9:eb:b7:71:cd: ae:77:34:51:00:56:31:fe:85:72:30:58:c3:bf:3e:4d:ba:02: 6e:3b:5b:02:df:79:5c:e9:70:b2:b4:59:97:83:1d:4f:9f:ff: 8e:66:9f:f9:28:c2:7a:e2:fe:e3:8a:df:ec:1a:60:d9:e9:8b: c0:62:63:2a:04:53:62:83:e3:e4:ac:55:3a:0d:2f:da:24:20: 31:d6:7f:4d:15:7c:7e:2d:0b:7f:5f:ee:39:ce:28:a4:66:ab: 61:bf:9e:54:ad:a4:43:60:79:d7:c9:16:bc:2f:6a:61:46:9e: a7:82:38:94:e3:36:49:2b:e4:cb:8d:b1:2a:a4:7a:55:e3:b3: 26:3f:1f:c3:fb:cc:7d:20:81:aa:bb:32:a5:02:3b:f6:32:69: db:70:15:56:5b:0f:dd:69:78:bb:87:54:37:90:d7:91:5e:d4: 3b:51:16:50:4d:b6:3d:a7:0c:15:ba:5f:df:e1:56:e0:67:a1: 70:2f:f8:82:96:62:80:37:be:e1:01:d0:b3:cb:c9:86:fe:9e: 37:c5:2a:8a -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgICEK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE5RUExMTAvBgNVBAUTKDdCMDFDQUNDMTcwRkU2QTYxQjIwMzA0MTg1RTg2ODk0 NkRGNzI4NUEwHhcNMjYwMzA2MTgyNDU0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWFiMWJmNi05YWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1fzhT+ooG8O/YXHybCNrdtyon1+y0AzX8Rtnap/eLIuwt1rCyvIgzBrQSXvL S4a7tfpbleUTpJ0M/1t4uEwfofusZlGqyHLcLtBjkQRen29Jl6imaJBWUAR921G9 5pKILUTAxmZE7B3btxK68CkayDzccUHDL+rS+kvsBuO7iTKRvmqNELZaewnuxsFB in+4i6qveZs7hbh11jG1QQN4fYkGqgkQdQhNtHS8/ZxzEvNqdesXjONiG5ZEzRom VZxymcl4iq3cwn3a6egWCqZiYdZGrgUsub08HTEVDcw1g0ntmzIsoaJ+WTtUWP3c JcUm9WeG2y9VmCxcKiBEqKZ/SwIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFNw0NVk8 8XL7PwS2EajcffVtEXXiMB8GA1UdIwQYMBaAFHsByswXD+amGyAwQYXoaJRt9yha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTlFQS82RDQ2M0NGRTA0 RkQxMUVBODJDQ0NBMThDNEY5QUUwMi9ld0hLekJjUDVxWWJJREJCaGVob2xHMzNL Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V3SEt6QmNQNXFZYklEQkJoZWhvbEczM0tGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTE5RUEvNkQ0NjNDRkUwNEZEMTFFQTgyQ0NDQTE4QzRGOUFFMDIvRjM0Q0U1RDYw OTlBMTFFQUI1ODkxRDVCQzRGOUFFMDIucm9hMFIGCCsGAQUFBwEHAQH/BEMwQTAa BAIAATAUMAwDBAJ4HfwDBAB4Hf4DBADLEUgwIwQCAAIwHTASAwcAIAENzQABAwcD IAENzQAAAwcAIAENzd0FMA0GCSqGSIb3DQEBCwUAA4IBAQCZxzzu/U+9iiulzhWU qJFYVMt6Z3+6o1ZvfXI0gPao60HzztnalcJFXqeuQiU9Z5kZ2eu3cc2udzRRAFYx /oVyMFjDvz5NugJuO1sC33lc6XCytFmXgx1Pn/+OZp/5KMJ64v7jit/sGmDZ6YvA YmMqBFNig+PkrFU6DS/aJCAx1n9NFXx+LQt/X+45ziikZqthv55UraRDYHnXyRa8 L2phRp6ngjiU4zZJK+TLjbEqpHpV47MmPx/D+8x9IIGquzKlAjv2MmnbcBVWWw/d aXi7h1Q3kNeRXtQ7URZQTbY9pwwVul/f4VbgZ6FwL/iClmKAN77hAdCzy8mG/p43 xSqK -----END CERTIFICATE-----Generated at Fri Mar 13 10:38:47 2026 by rpki-client