$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0CB3549EA01011F086F7E872C4F9AE02.roa File: 0CB3549EA01011F086F7E872C4F9AE02.roa (raw, json) Hash identifier: qNCbZu71GlJ2EbHSqSV3GTYTwSxpXIAMuhE3GaYj/5A= Subject key identifier: 68:A6:C3:16:F0:DB:5E:38:79:E3:84:91:DD:B2:1F:77:46:04:6E:69 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6BC7 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0CB3549EA01011F086F7E872C4F9AE02.roa Signing time: Mon 02 Mar 2026 23:30:36 +0000 ROA not before: Mon 24 Nov 2025 09:05:50 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 154247 IP address blocks: 121.200.216.0/24 maxlen: 24 121.200.217.0/24 maxlen: 24 2001:df6:22c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27591 (0x6bc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Nov 24 09:05:50 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a61d9c-2c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:21:92:62:25:2b:e0:94:86:8e:0d:20:bd:c1: d9:08:5e:d4:20:a1:88:60:71:46:e2:f5:b6:18:56: b6:a2:83:0c:9c:6f:1a:ec:d1:e6:3f:b4:01:42:38: c4:ff:68:c7:ae:ba:fa:4b:f4:b6:51:b3:b6:51:69: 30:2b:ff:83:e8:4c:8e:20:9e:a0:97:96:26:a1:a7: 4b:81:ae:ad:85:8a:b2:d1:1b:96:6a:df:5e:cd:90: d2:17:fa:37:96:ed:00:ab:2c:b5:76:15:70:47:1c: ac:f2:0e:01:bb:73:d6:49:8e:4c:11:1c:53:93:4b: 00:80:0b:3d:7a:71:52:d3:9d:31:fe:36:0a:1e:4c: 17:5b:bf:b3:0a:25:0e:b7:09:ef:85:24:00:22:aa: 27:76:46:8b:9b:05:06:6d:aa:06:2e:37:c4:24:72: 85:09:58:d4:38:78:f3:2b:8c:4f:c1:ba:46:f4:5e: 3d:49:ef:68:5d:80:e5:e2:c0:14:47:7d:7f:6b:89: 3a:ac:77:8b:a9:fa:d6:0a:c7:f0:35:67:f3:fc:f4: 42:c5:1a:03:8d:1e:44:66:74:f6:f5:e0:69:98:b2: f4:30:50:4b:05:e2:02:02:f1:cc:38:a4:1a:d1:4b: e7:94:da:c4:64:34:22:2e:e4:a0:0d:e7:fa:c3:bb: 6e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A6:C3:16:F0:DB:5E:38:79:E3:84:91:DD:B2:1F:77:46:04:6E:69 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0CB3549EA01011F086F7E872C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 121.200.216.0/23 IPv6: 2001:df6:22c0::/48 Signature Algorithm: sha256WithRSAEncryption 98:cf:c7:e4:ac:23:93:f0:cf:d6:81:5e:fe:3d:be:7c:a2:3c: e1:fc:ec:01:f5:f7:b4:87:bd:7c:e6:93:ee:3f:71:a4:e4:60: 8d:19:5c:0c:43:fd:2d:01:2c:ed:37:98:96:d2:78:7b:a7:61: cd:be:4a:77:5e:80:bf:3a:11:5b:02:68:e8:fe:cd:23:2d:fb: f4:27:6f:98:a9:57:45:62:b2:2d:71:f1:6f:70:59:86:85:73: bd:f2:28:49:bb:28:3f:47:86:05:ce:0d:47:15:48:aa:6a:60: ea:73:78:0a:51:04:10:90:05:2c:3e:11:23:0e:f1:67:eb:93: 6c:64:d6:95:93:bb:be:50:75:65:3b:d3:33:49:31:1e:58:22: 70:9a:cd:03:d8:05:e0:10:cd:ed:a8:e8:4a:48:b0:23:83:dc: 54:36:15:58:0d:c6:51:48:a2:cc:11:04:8a:0f:e8:24:3f:6b: 0b:02:37:1e:7f:08:23:08:a7:34:ae:e7:95:9b:0c:62:2d:48: 63:9a:1b:8d:c0:74:9d:45:02:65:41:13:b1:ba:7f:07:a1:04: e2:c4:c9:00:4e:78:d6:11:0d:0b:da:85:bb:17:99:4b:4d:18: 88:28:19:26:40:18:a1:14:0c:4a:59:0c:f3:4e:8e:94:ed:fe: 87:2a:c8:0f -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICa8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUxMTI0MDkwNTUwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MWQ5Yy0yYzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCGSYiUr4JSGjg0gvcHZCF7UIKGIYHFG4vW2GFa2ooMMnG8a7NHmP7QBQjjE /2jHrrr6S/S2UbO2UWkwK/+D6EyOIJ6gl5YmoadLga6thYqy0RuWat9ezZDSF/o3 lu0Aqyy1dhVwRxys8g4Bu3PWSY5MERxTk0sAgAs9enFS050x/jYKHkwXW7+zCiUO twnvhSQAIqondkaLmwUGbaoGLjfEJHKFCVjUOHjzK4xPwbpG9F49Se9oXYDl4sAU R31/a4k6rHeLqfrWCsfwNWfz/PRCxRoDjR5EZnT29eBpmLL0MFBLBeICAvHMOKQa 0UvnlNrEZDQiLuSgDef6w7tufwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFGimwxbw 2144eeOEkd2yH3dGBG5pMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMENCMzU0OUVB MDEwMTFGMDg2RjdFODcyQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBecjYMA8EAgACMAkDBwAgAQ32IsAwDQYJKoZIhvcNAQELBQADggEB AJjPx+SsI5Pwz9aBXv49vnyiPOH87AH197SHvXzmk+4/caTkYI0ZXAxD/S0BLO03 mJbSeHunYc2+SndegL86EVsCaOj+zSMt+/Qnb5ipV0Visi1x8W9wWYaFc73yKEm7 KD9HhgXODUcVSKpqYOpzeApRBBCQBSw+ESMO8Wfrk2xk1pWTu75QdWU70zNJMR5Y InCazQPYBeAQze2o6EpIsCOD3FQ2FVgNxlFIoswRBIoP6CQ/awsCNx5/CCMIpzSu 55WbDGItSGOaG43AdJ1FAmVBE7G6fwehBOLEyQBOeNYRDQvahbsXmUtNGIgoGSZA GKEUDEpZDPNOjpTt/ocqyA8= -----END CERTIFICATE-----Generated at Sat Mar 7 22:49:00 2026 by rpki-client