$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/BF1B2E7E721511EF9D7B9F3DC4F9AE02.roa File: BF1B2E7E721511EF9D7B9F3DC4F9AE02.roa (raw, json) Hash identifier: sHSBwUY1djwpDfmh1EbeuMGFHc/Nib8RNaWJD/HJ0oU= Subject key identifier: 5E:EC:36:2D:77:85:9C:77:C3:9A:DF:8E:A1:2B:BD:E8:8E:71:E3:0E Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 0245 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/BF1B2E7E721511EF9D7B9F3DC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:16:42 +0000 ROA not before: Wed 31 Dec 2025 04:24:08 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 132701 IP address blocks: 202.29.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 04:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 581 (0x245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:08 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a4909a-1064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:75:a3:6d:b0:7a:11:4f:1d:41:e3:fb:45:95: 6c:1e:25:1c:58:50:36:ed:40:70:60:39:6d:81:e6: c0:45:5b:b0:6a:37:5c:45:6e:81:64:11:59:ef:3f: 1f:36:7a:fa:64:d7:b2:48:42:de:87:7c:e5:6f:0e: 21:4e:54:cf:11:ba:83:00:3a:ff:d8:ce:c1:52:19: ff:8c:96:b7:8a:d9:b9:7d:39:c2:1d:b8:bd:2e:6a: ad:dd:34:77:b9:fb:12:4f:39:44:d7:ff:de:b6:b6: c8:93:19:28:8c:46:00:45:3f:13:5f:96:b8:1a:63: 5c:21:8e:cb:c9:26:b9:ec:5c:69:9c:86:22:e0:1b: 1f:e0:ae:3b:c8:ef:e7:86:b5:98:40:b1:f0:0a:72: 9d:8c:eb:b3:02:19:c4:14:99:da:bf:9e:b5:14:a0: 79:1f:0f:e2:71:12:1c:b2:17:99:bc:bf:54:c9:68: 97:8d:34:ce:4d:e9:b4:b0:47:03:04:5f:cc:51:41: d9:52:a0:61:03:bf:8d:04:e7:51:9b:d9:c2:33:6f: 61:aa:09:1f:16:7c:ec:29:e3:72:3c:a6:82:43:9d: 55:f6:ab:9c:c5:53:22:8e:57:19:f2:10:30:af:e4: 01:17:a4:ad:95:f8:b3:a9:f2:07:d6:26:21:cd:d6: 3f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:EC:36:2D:77:85:9C:77:C3:9A:DF:8E:A1:2B:BD:E8:8E:71:E3:0E X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/BF1B2E7E721511EF9D7B9F3DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.29.52.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:3d:9a:d1:d8:55:f6:be:a5:18:9a:af:4b:77:1e:b0:c1:48: 43:96:01:25:23:18:ea:e2:ba:11:7c:2a:e2:93:0b:18:5e:b0: 92:f8:06:18:19:81:3f:4d:02:02:c8:52:b9:85:81:c2:9a:15: 07:ba:81:e7:a2:25:2d:57:f9:79:e3:05:22:a8:af:88:ef:5d: 40:83:39:4c:fa:e1:7e:87:36:dd:46:0d:a7:ce:8c:6f:7f:5b: 6f:b4:dd:b1:62:b5:f3:54:a0:ad:ca:6f:22:55:dc:13:a2:2f: 13:42:f0:35:06:11:05:ac:75:bd:6d:28:d0:50:1e:d0:1b:a0: 2c:ef:50:d2:a7:5f:86:75:12:4d:37:01:f9:ea:55:97:2b:64: ef:31:86:24:74:cc:c7:67:2d:16:b2:da:3a:6e:be:d6:7c:3d: a3:f5:5c:b6:9e:4c:45:81:6d:86:84:a0:df:e6:0e:79:d1:d0: 2c:00:96:f0:c9:ad:8d:37:a2:12:9b:91:92:1c:d5:85:51:82: e3:60:87:fb:bb:87:e2:58:9d:b9:98:9e:34:91:d1:f4:71:50: f0:a6:ab:71:c8:56:65:fa:dd:5d:6a:74:08:3d:a9:46:43:7e: da:8a:c9:21:e0:4d:d9:3d:5c:36:43:3b:15:26:e4:43:36:c5: 2f:e2:05:29 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDA4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTA5YS0xMDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3XWjbbB6EU8dQeP7RZVsHiUcWFA27UBwYDltgebARVuwajdcRW6BZBFZ7z8f Nnr6ZNeySELeh3zlbw4hTlTPEbqDADr/2M7BUhn/jJa3itm5fTnCHbi9Lmqt3TR3 ufsSTzlE1//etrbIkxkojEYART8TX5a4GmNcIY7LySa57FxpnIYi4Bsf4K47yO/n hrWYQLHwCnKdjOuzAhnEFJnav561FKB5Hw/icRIcsheZvL9UyWiXjTTOTem0sEcD BF/MUUHZUqBhA7+NBOdRm9nCM29hqgkfFnzsKeNyPKaCQ51V9qucxVMijlcZ8hAw r+QBF6StlfizqfIH1iYhzdY/vwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFF7sNi13 hZx3w5rfjqErveiOceMOMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvQkYxQjJFN0U3 MjE1MTFFRjlEN0I5RjNEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyh00MA0GCSqGSIb3DQEBCwUAA4IBAQBuPZrR2FX2vqUYmq9Ldx6w wUhDlgElIxjq4roRfCrikwsYXrCS+AYYGYE/TQICyFK5hYHCmhUHuoHnoiUtV/l5 4wUiqK+I711AgzlM+uF+hzbdRg2nzoxvf1tvtN2xYrXzVKCtym8iVdwToi8TQvA1 BhEFrHW9bSjQUB7QG6As71DSp1+GdRJNNwH56lWXK2TvMYYkdMzHZy0Wsto6br7W fD2j9Vy2nkxFgW2GhKDf5g550dAsAJbwya2NN6ISm5GSHNWFUYLjYIf7u4fiWJ25 mJ40kdH0cVDwpqtxyFZl+t1danQIPalGQ37aiskh4E3ZPVw2QzsVJuRDNsUv4gUp -----END CERTIFICATE-----Generated at Sun Mar 15 05:53:23 2026 by rpki-client