$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/4F7F735071BF11EF9707C757C4F9AE02.roa File: 4F7F735071BF11EF9707C757C4F9AE02.roa (raw, json) Hash identifier: wuiMxHMg82p8vr5WE2/fAYuXxsngZfz4Ij1bowWq4ac= Subject key identifier: 09:C1:36:16:06:C7:16:2A:26:A5:43:69:0E:AF:C7:0F:4A:8F:BF:AE Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 0260 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/4F7F735071BF11EF9707C757C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:17:06 +0000 ROA not before: Wed 31 Dec 2025 04:24:33 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 17479 IP address blocks: 202.28.24.0/22 maxlen: 22 202.28.24.0/24 maxlen: 24 202.28.25.0/24 maxlen: 24 202.28.26.0/24 maxlen: 24 202.28.27.0/24 maxlen: 24 202.28.244.0/22 maxlen: 22 202.28.244.0/24 maxlen: 24 202.28.245.0/24 maxlen: 24 202.28.246.0/24 maxlen: 24 202.28.247.0/24 maxlen: 24 202.28.248.0/22 maxlen: 22 202.28.248.0/24 maxlen: 24 202.28.249.0/24 maxlen: 24 202.28.250.0/24 maxlen: 24 202.28.251.0/24 maxlen: 24 2001:3c8:5007::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 04:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 608 (0x260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:33 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a490b2-b2fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ba:dc:40:a7:61:5e:e2:00:2c:e0:f6:f3:73: 6e:da:a0:cb:06:0d:a6:14:a3:87:d7:7b:e9:01:8b: e2:56:ec:79:e6:fb:9c:e0:17:73:de:74:c7:69:5e: d1:43:b3:9d:ec:55:4e:cf:f7:da:ce:36:62:56:47: ad:15:e8:81:03:da:c9:2e:7f:36:d4:e1:46:d3:54: 16:a8:1d:83:a0:40:30:93:9d:56:3b:3d:a5:3d:b4: bd:a4:a7:c8:0f:3c:86:18:cb:d6:1c:ef:93:39:26: eb:21:0d:28:ae:7c:e5:32:bf:b0:2b:65:bc:bb:59: 22:13:60:28:7b:60:f9:da:0a:ae:c6:43:bb:a1:d0: c7:89:b3:c4:3f:83:d3:8b:dc:fb:2f:f9:75:7e:2b: 0b:46:85:73:f9:0d:7d:a2:cd:4b:62:8f:79:77:03: ad:fc:d6:07:97:eb:a1:6a:ec:d0:45:9b:1d:58:50: 7a:15:a4:0f:5f:b1:14:8a:bf:92:71:e7:46:44:ac: c5:12:69:dd:ce:97:a0:a9:41:4b:27:57:9e:c5:22: f5:70:af:94:cd:1b:6b:3f:10:5f:46:8f:07:30:ef: 12:f9:c8:06:e1:25:d3:a4:bd:61:35:6c:c1:2b:51: 1b:34:0a:41:ec:45:e0:66:ad:4d:ea:45:d5:ac:2d: 4e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C1:36:16:06:C7:16:2A:26:A5:43:69:0E:AF:C7:0F:4A:8F:BF:AE X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/4F7F735071BF11EF9707C757C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.28.24.0/22 202.28.244.0-202.28.251.255 IPv6: 2001:3c8:5007::/48 Signature Algorithm: sha256WithRSAEncryption 0e:73:61:a1:93:ff:3b:ae:37:ee:44:1b:b7:cb:10:16:21:09: 81:31:69:af:3d:0a:ed:fd:ab:6e:93:ba:77:86:f8:b2:25:c2: d0:d9:bc:fb:b7:a9:69:ec:51:96:31:ba:66:cf:c2:f0:67:71: 91:ec:13:30:5e:10:ec:31:11:0e:e2:be:22:eb:00:8d:4a:73: ec:7c:49:f2:0c:dc:2d:f7:d9:e4:03:2d:b6:51:2f:c9:74:67: 85:d7:01:8c:29:8e:4a:9f:33:a0:50:42:9a:44:88:20:25:7c: 54:68:20:78:08:be:ea:9d:a5:ba:ea:83:74:38:c5:e0:74:ab: aa:ab:66:6f:35:06:07:67:b0:17:25:c5:8b:68:ad:18:b5:95: 6e:b4:1a:2f:c4:21:97:af:cf:38:78:3d:b2:17:49:95:a9:1c: c2:72:33:66:ba:47:e7:8e:3c:6f:b1:69:8a:93:64:23:79:5d: 54:bd:ef:35:2e:8a:22:f9:a1:79:32:8b:7d:50:f7:b5:37:eb: a2:47:62:85:23:1b:db:f9:07:33:f9:d8:2d:9f:4b:48:9c:18: 4d:77:b8:35:d0:26:ea:b1:5c:f4:11:c5:d8:23:80:83:b2:94: 68:ba:fa:17:89:3e:0b:6f:7b:38:b4:06:07:31:ee:31:84:05: 06:99:c8:d9 -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDMzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTBiMi1iMmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17rcQKdhXuIALOD283Nu2qDLBg2mFKOH13vpAYviVux55vuc4Bdz3nTHaV7R Q7Od7FVOz/fazjZiVketFeiBA9rJLn821OFG01QWqB2DoEAwk51WOz2lPbS9pKfI DzyGGMvWHO+TOSbrIQ0ornzlMr+wK2W8u1kiE2Aoe2D52gquxkO7odDHibPEP4PT i9z7L/l1fisLRoVz+Q19os1LYo95dwOt/NYHl+uhauzQRZsdWFB6FaQPX7EUir+S cedGRKzFEmndzpegqUFLJ1eexSL1cK+UzRtrPxBfRo8HMO8S+cgG4SXTpL1hNWzB K1EbNApB7EXgZq1N6kXVrC1O3wIDAQABo4ICfzCCAnswHQYDVR0OBBYEFAnBNhYG xxYqJqVDaQ6vxw9Kj7+uMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvNEY3RjczNTA3 MUJGMTFFRjk3MDdDNzU3QzRGOUFFMDIucm9hMD4GCCsGAQUFBwEHAQH/BC8wLTAa BAIAATAUAwQCyhwYMAwDBALKHPQDBALKHPgwDwQCAAIwCQMHACABA8hQBzANBgkq hkiG9w0BAQsFAAOCAQEADnNhoZP/O6437kQbt8sQFiEJgTFprz0K7f2rbpO6d4b4 siXC0Nm8+7epaexRljG6Zs/C8GdxkewTMF4Q7DERDuK+IusAjUpz7HxJ8gzcLffZ 5AMttlEvyXRnhdcBjCmOSp8zoFBCmkSIICV8VGggeAi+6p2luuqDdDjF4HSrqqtm bzUGB2ewFyXFi2itGLWVbrQaL8Qhl6/POHg9shdJlakcwnIzZrpH5448b7FpipNk I3ldVL3vNS6KIvmheTKLfVD3tTfrokdihSMb2/kHM/nYLZ9LSJwYTXe4NdAm6rFc 9BHF2COAg7KUaLr6F4k+C297OLQGBzHuMYQFBpnI2Q== -----END CERTIFICATE-----Generated at Sun Mar 15 05:54:42 2026 by rpki-client