$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/08AF618871AB11EFB81ED37EC4F9AE02.roa File: 08AF618871AB11EFB81ED37EC4F9AE02.roa (raw, json) Hash identifier: iNSkdwJe4nri48IypKm7j3hsxVTU6s61yjMkYkmII68= Subject key identifier: AC:BD:26:FE:E5:46:DB:5E:DA:23:A6:1C:AF:07:3B:6A:A2:69:7E:03 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 0248 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/08AF618871AB11EFB81ED37EC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:16:45 +0000 ROA not before: Wed 31 Dec 2025 04:24:12 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 133919 IP address blocks: 202.29.104.0/24 maxlen: 24 2001:3c8:100f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 04:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 584 (0x248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:12 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a4909d-0d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c3:de:29:52:ee:7f:72:91:de:0d:5d:37:af: 96:8c:23:a1:4e:6b:05:da:b6:bd:5b:16:36:e5:84: e2:54:17:a6:96:7f:74:1f:38:a8:ad:06:ab:21:e0: aa:62:9f:3e:f7:29:ec:70:c9:4e:34:35:26:87:8e: f4:7e:0b:3f:36:e5:d8:43:63:2a:1f:a3:68:c6:08: f8:b6:0e:86:8b:1f:42:29:5a:70:27:7b:31:10:13: bc:7d:28:7c:0b:58:5f:a1:37:f6:d0:4d:f0:08:b1: f7:75:bd:68:fe:bf:1d:87:a8:b2:cb:0c:5b:17:00: dc:18:0a:6d:b4:a8:b0:4d:b6:4a:be:b3:39:cd:0a: 4a:aa:09:28:d8:de:9b:2c:40:4e:2a:9b:d4:06:19: b5:ca:44:90:74:62:39:6f:d2:ee:c9:57:89:f6:0a: 00:14:11:91:76:2c:c0:15:42:1e:e0:59:ea:8d:a1: 6f:40:80:51:04:34:b1:46:a5:11:49:ce:f9:78:fd: 83:a6:68:c6:77:e7:04:03:4b:e6:72:d2:14:37:94: 09:ea:9c:e3:45:53:2d:83:ef:a1:5a:b2:71:59:45: 40:9e:8e:09:06:c8:11:f6:71:ce:44:73:cb:16:7c: 10:f1:45:0b:5b:bb:f0:08:5f:14:cc:48:fb:c6:39: a5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BD:26:FE:E5:46:DB:5E:DA:23:A6:1C:AF:07:3B:6A:A2:69:7E:03 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/08AF618871AB11EFB81ED37EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.29.104.0/24 IPv6: 2001:3c8:100f::/48 Signature Algorithm: sha256WithRSAEncryption 79:c1:51:31:09:70:2f:a0:83:38:a2:85:14:a6:8a:dc:7b:51: f4:c1:78:b5:29:78:8e:22:94:5e:05:79:1f:af:07:2e:52:9e: ac:43:b9:b4:99:07:9b:5e:e8:60:e2:4e:08:1a:fe:d9:f6:5d: b6:69:c8:d3:08:00:7a:f3:2a:fe:72:f9:fe:b6:c5:29:09:0e: 0c:42:d4:58:e7:03:a5:35:69:51:6b:cb:53:ae:81:3e:96:2c: 10:3e:f1:ef:ba:83:b5:13:cf:bc:6d:5f:f5:b5:f8:1e:08:b4: 63:87:01:ed:90:c8:dc:b6:ee:a0:a4:d9:d1:0a:2a:df:81:cf: e5:47:5c:29:42:31:d9:fe:b2:ae:49:3b:97:2e:89:50:09:04: d6:ce:c3:92:8a:32:d9:65:51:1a:f7:c2:80:10:62:b9:3b:5b: 3b:6a:03:21:54:ef:84:e5:99:c0:a1:7c:78:9d:b7:70:6c:db: 6f:28:04:2b:0e:bf:bc:15:25:79:4b:23:e7:b4:78:81:43:45: 84:7c:9f:d6:77:c9:7a:41:16:36:8c:40:e8:d6:4b:c8:6b:8c: 05:32:7c:ad:5c:a9:7e:3c:7e:1f:b2:cf:d5:42:92:4c:8c:c1: 25:17:35:64:c7:45:a8:dd:07:e0:24:cd:36:5e:db:23:cb:c2: d5:f0:8b:0b -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDEyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTA5ZC0wZDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA28PeKVLuf3KR3g1dN6+WjCOhTmsF2ra9WxY25YTiVBemln90HziorQarIeCq Yp8+9ynscMlONDUmh470fgs/NuXYQ2MqH6Noxgj4tg6Gix9CKVpwJ3sxEBO8fSh8 C1hfoTf20E3wCLH3db1o/r8dh6iyywxbFwDcGApttKiwTbZKvrM5zQpKqgko2N6b LEBOKpvUBhm1ykSQdGI5b9LuyVeJ9goAFBGRdizAFUIe4FnqjaFvQIBRBDSxRqUR Sc75eP2DpmjGd+cEA0vmctIUN5QJ6pzjRVMtg++hWrJxWUVAno4JBsgR9nHORHPL FnwQ8UULW7vwCF8UzEj7xjml3wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFKy9Jv7l Rtte2iOmHK8HO2qiaX4DMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvMDhBRjYxODg3 MUFCMTFFRkI4MUVEMzdFQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAyh1oMA8EAgACMAkDBwAgAQPIEA8wDQYJKoZIhvcNAQELBQADggEB AHnBUTEJcC+ggziihRSmitx7UfTBeLUpeI4ilF4FeR+vBy5SnqxDubSZB5te6GDi Tgga/tn2XbZpyNMIAHrzKv5y+f62xSkJDgxC1FjnA6U1aVFry1OugT6WLBA+8e+6 g7UTz7xtX/W1+B4ItGOHAe2QyNy27qCk2dEKKt+Bz+VHXClCMdn+sq5JO5cuiVAJ BNbOw5KKMtllURr3woAQYrk7WztqAyFU74TlmcChfHidt3Bs228oBCsOv7wVJXlL I+e0eIFDRYR8n9Z3yXpBFjaMQOjWS8hrjAUyfK1cqX48fh+yz9VCkkyMwSUXNWTH RajdB+AkzTZe2yPLwtXwiws= -----END CERTIFICATE-----Generated at Sun Mar 15 05:50:05 2026 by rpki-client