$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/268DF20A940C11EE9B034255C4F9AE02.roa File: 268DF20A940C11EE9B034255C4F9AE02.roa (raw, json) Hash identifier: WlT7lqcgc4c8+rWeXt+Y5JcXRKuZvK0wiGPxDwUbSb0= Subject key identifier: E3:7A:E0:5F:E5:21:4A:B9:16:18:C5:FC:B8:FF:A6:E3:70:F8:31:C3 Certificate issuer: /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Certificate serial: 0210 Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/268DF20A940C11EE9B034255C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:04:46 +0000 ROA not before: Sun 03 Aug 2025 04:10:37 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 136897 IP address blocks: 116.204.232.0/24 maxlen: 24 116.204.233.0/24 maxlen: 24 116.204.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 02:45:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 528 (0x210) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Validity Not Before: Aug 3 04:10:37 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a47fbe-d0c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0b:4e:ec:7c:42:28:27:29:5f:67:d6:4b:35: ee:05:81:59:a8:2d:b1:20:51:40:36:0f:84:11:e6: 9c:da:99:dc:f5:4d:27:f1:da:63:29:52:50:37:0b: 1b:61:81:39:84:52:f1:6e:6e:28:73:b4:80:ef:35: 2e:48:94:f5:2f:4f:80:b4:b7:17:06:86:42:b8:ed: d5:f6:65:98:e0:3d:d7:8f:a3:2f:96:58:bd:56:cf: 88:bb:c7:17:38:2e:b0:bd:38:81:ee:b3:f9:38:f6: 08:6d:8b:6d:07:01:8e:a6:70:fb:68:ba:e4:4b:52: d7:f1:5c:e5:bb:25:5c:ad:03:d9:6a:a5:23:9d:65: d6:ac:63:49:39:4d:94:2a:81:60:55:ea:2e:24:57: 9c:e7:bd:f3:d5:c6:19:ec:1f:75:ee:06:8d:cc:47: 5d:76:39:f8:61:77:13:46:91:43:40:0d:25:34:66: 33:69:c1:94:b8:f1:e5:6a:a4:84:3b:3a:8d:0b:b1: 45:a2:85:77:97:12:13:90:59:d2:fa:aa:de:b0:ff: d5:82:8d:83:54:ad:37:d9:66:66:11:5e:31:50:f7: 75:92:cf:29:7f:e4:2a:f8:02:23:72:0a:49:94:58: 8c:a4:c0:37:15:be:74:d9:13:e7:ed:27:48:85:b1: 70:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:7A:E0:5F:E5:21:4A:B9:16:18:C5:FC:B8:FF:A6:E3:70:F8:31:C3 X509v3 Authority Key Identifier: keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/268DF20A940C11EE9B034255C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 116.204.232.0-116.204.234.255 Signature Algorithm: sha256WithRSAEncryption 72:a6:03:46:de:71:25:c4:4f:e2:40:de:7c:31:05:49:8f:18: e1:aa:07:ab:97:d0:a3:96:73:3d:37:da:ce:60:e9:6d:17:7d: bb:e9:2f:24:c9:40:cd:7e:78:ef:26:b9:98:53:46:67:97:96: 06:2a:a6:44:dd:25:f6:2b:59:df:95:5a:77:80:a0:1d:8f:1a: 80:08:3f:db:b7:f8:43:5f:11:a0:07:76:63:0a:3a:91:18:f4: 44:ef:51:a8:04:de:e1:e7:a6:85:17:e7:37:14:b8:29:5c:88: 7a:f8:26:9b:7d:1a:40:7c:4b:9b:af:30:fb:a3:09:c3:3d:e5: c1:bc:9d:43:55:ba:04:23:01:ca:6d:42:37:da:f8:60:51:41: 69:8d:bd:00:8c:9a:22:cb:d7:d3:47:4e:bc:d1:63:8f:16:9a: d8:3d:60:a3:63:92:44:a3:a8:e3:7e:6e:1b:f0:fd:d3:45:02: a8:79:cc:69:74:1f:bc:e9:d3:18:f5:05:1e:c2:10:6b:4a:96: 7e:01:6a:c6:31:46:de:1c:73:41:15:7f:24:21:6c:b9:ac:e5: 56:2a:61:19:96:96:cd:c1:72:5d:64:5b:35:4d:53:86:a4:c5: df:92:85:c2:00:92:92:b0:f1:98:70:be:b9:48:f1:61:31:c4: 54:6d:19:74 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdCOTQxMTAvBgNVBAUTKDMxMjZGNEVGMDVFM0FFNzVBMDkxNDRCNjY3RDM5MzQ3 RDREQUE4OTAwHhcNMjUwODAzMDQxMDM3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2ZiZS1kMGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1QtO7HxCKCcpX2fWSzXuBYFZqC2xIFFANg+EEeac2pnc9U0n8dpjKVJQNwsb YYE5hFLxbm4oc7SA7zUuSJT1L0+AtLcXBoZCuO3V9mWY4D3Xj6Mvlli9Vs+Iu8cX OC6wvTiB7rP5OPYIbYttBwGOpnD7aLrkS1LX8VzluyVcrQPZaqUjnWXWrGNJOU2U KoFgVeouJFec573z1cYZ7B917gaNzEdddjn4YXcTRpFDQA0lNGYzacGUuPHlaqSE OzqNC7FFooV3lxITkFnS+qresP/Vgo2DVK032WZmEV4xUPd1ks8pf+Qq+AIjcgpJ lFiMpMA3Fb502RPn7SdIhbFwIQIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFON64F/l IUq5FhjF/Lj/puNw+DHDMB8GA1UdIwQYMBaAFDEm9O8F4651oJFEtmfTk0fU2qiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0I5NC9DQzc0MUJCNjM3 NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJuV2drVVMyWjlPVFI5VGFx SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01TYjA3d1hqcm5XZ2tVUzJaOU9UUjlUYXFKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTdCOTQvQ0M3NDFCQjYzNzcwMTFFRThEQzhCQjM0QzRGOUFFMDIvMjY4REYyMEE5 NDBDMTFFRTlCMDM0MjU1QzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBAN0zOgDBAB0zOowDQYJKoZIhvcNAQELBQADggEBAHKmA0becSXE T+JA3nwxBUmPGOGqB6uX0KOWcz032s5g6W0XfbvpLyTJQM1+eO8muZhTRmeXlgYq pkTdJfYrWd+VWneAoB2PGoAIP9u3+ENfEaAHdmMKOpEY9ETvUagE3uHnpoUX5zcU uClciHr4Jpt9GkB8S5uvMPujCcM95cG8nUNVugQjAcptQjfa+GBRQWmNvQCMmiLL 19NHTrzRY48Wmtg9YKNjkkSjqON+bhvw/dNFAqh5zGl0H7zp0xj1BR7CEGtKln4B asYxRt4cc0EVfyQhbLms5VYqYRmWls3Bcl1kWzVNU4akxd+ShcIAkpKw8ZhwvrlI 8WExxFRtGXQ= -----END CERTIFICATE-----Generated at Sat Mar 7 14:15:20 2026 by rpki-client