$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/BFCA7E1A721511EF9D7B9F3DC4F9AE02.roa File: BFCA7E1A721511EF9D7B9F3DC4F9AE02.roa (raw, json) Hash identifier: YVTw89zCR/5t1dTCYccIVScVC1GGb+nv9cofNELtmZ4= Subject key identifier: 46:D9:7B:07:97:84:98:FC:F5:29:45:30:92:31:EF:BD:5E:F7:DA:89 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 0246 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/BFCA7E1A721511EF9D7B9F3DC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:16:43 +0000 ROA not before: Wed 31 Dec 2025 04:24:09 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 132879 IP address blocks: 202.29.22.0/24 maxlen: 24 2001:3c8:a702::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 04:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:09 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a4909b-2d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:46:fd:72:a8:2e:1e:86:89:41:ca:39:e1:87: 5c:87:d6:5e:33:1e:a1:e2:d1:3f:17:3c:85:bf:37: b2:b0:d3:e2:3f:3f:c9:d8:f5:a1:db:fd:03:0b:cb: fa:f8:97:30:19:bd:14:36:b1:68:5b:56:4c:95:39: 1b:3d:5c:1c:3e:24:91:b4:40:7b:63:f9:0c:20:5b: d0:9d:40:9c:c4:b5:1d:9a:8c:f5:c6:46:ee:40:81: 2b:fe:e9:29:f6:66:90:39:3c:d1:19:13:a3:c0:b7: 23:8e:a1:83:52:f3:10:a4:3e:15:cf:ff:53:bc:b1: b3:40:7e:77:77:f1:7b:0e:76:c5:45:dd:53:f8:48: e1:70:f9:b2:6a:42:9c:fd:49:a5:61:15:56:e4:c2: 70:87:79:0c:fa:05:07:19:10:e0:37:29:1a:39:4c: 10:fa:09:05:53:2b:ce:3f:70:ad:96:e8:8a:46:43: 4e:05:9d:c7:ae:cd:38:43:ac:98:01:e9:d4:20:ab: d4:d3:83:4f:98:c2:c9:3e:03:e4:73:d1:2e:8e:e6: b8:1b:11:81:8b:f0:1e:73:06:61:90:55:e8:4d:f2: 1f:5d:eb:59:d9:cd:a7:f1:ff:dd:af:6c:d8:01:80: e9:4b:a9:dc:d9:61:c2:3c:c5:ae:c8:91:02:a8:76: ba:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D9:7B:07:97:84:98:FC:F5:29:45:30:92:31:EF:BD:5E:F7:DA:89 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/BFCA7E1A721511EF9D7B9F3DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.29.22.0/24 IPv6: 2001:3c8:a702::/48 Signature Algorithm: sha256WithRSAEncryption a8:85:37:f3:25:a8:66:84:21:de:c2:bf:44:53:77:a4:c1:55: e7:4a:68:0f:c9:d2:b4:af:62:47:5b:20:12:38:12:c2:a6:a6: 66:67:c9:35:14:2c:84:44:f1:16:7a:41:e9:b9:3f:6a:47:3d: 57:e4:e9:08:48:e8:a0:ce:fc:13:f7:2e:ca:57:84:47:89:88: 9f:74:42:95:02:1d:8f:63:99:d5:a1:61:52:70:c1:4d:a2:be: e3:99:3d:f1:34:f0:12:e7:c9:9f:d6:f9:57:62:4b:bc:3f:f2: 7f:8a:4d:59:1f:49:19:83:e4:33:88:93:4b:36:66:c7:78:17: 05:a6:ac:13:87:c3:d2:0f:86:7b:f8:55:f0:09:dd:c1:63:a1: e0:bb:bd:0e:c4:37:f5:0f:f1:ea:a6:6b:59:2b:19:5f:f6:4d: 83:ac:75:4b:6a:c6:1b:bf:50:28:71:e5:06:38:5e:25:ef:a3: bf:2d:ad:86:47:39:d8:3a:b6:d0:5d:bf:55:6d:93:ae:a8:93: d7:fe:13:6f:28:8e:56:88:ff:72:c9:af:40:75:87:77:d9:7e: 08:88:3a:b7:60:87:4c:05:fb:0c:31:6b:3c:73:d3:38:a7:47: 84:12:ba:6d:43:e4:21:e2:1c:c4:bd:c4:20:96:38:be:4a:2e: dd:11:d8:bc -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDA5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTA5Yi0yZDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkb9cqguHoaJQco54Ydch9ZeMx6h4tE/FzyFvzeysNPiPz/J2PWh2/0DC8v6 +JcwGb0UNrFoW1ZMlTkbPVwcPiSRtEB7Y/kMIFvQnUCcxLUdmoz1xkbuQIEr/ukp 9maQOTzRGROjwLcjjqGDUvMQpD4Vz/9TvLGzQH53d/F7DnbFRd1T+EjhcPmyakKc /UmlYRVW5MJwh3kM+gUHGRDgNykaOUwQ+gkFUyvOP3CtluiKRkNOBZ3Hrs04Q6yY AenUIKvU04NPmMLJPgPkc9Eujua4GxGBi/AecwZhkFXoTfIfXetZ2c2n8f/dr2zY AYDpS6nc2WHCPMWuyJECqHa6YQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFEbZeweX hJj89SlFMJIx771e99qJMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvQkZDQTdFMUE3 MjE1MTFFRjlEN0I5RjNEQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAyh0WMA8EAgACMAkDBwAgAQPIpwIwDQYJKoZIhvcNAQELBQADggEB AKiFN/MlqGaEId7Cv0RTd6TBVedKaA/J0rSvYkdbIBI4EsKmpmZnyTUULIRE8RZ6 Qem5P2pHPVfk6QhI6KDO/BP3LspXhEeJiJ90QpUCHY9jmdWhYVJwwU2ivuOZPfE0 8BLnyZ/W+VdiS7w/8n+KTVkfSRmD5DOIk0s2Zsd4FwWmrBOHw9IPhnv4VfAJ3cFj oeC7vQ7EN/UP8eqma1krGV/2TYOsdUtqxhu/UChx5QY4XiXvo78trYZHOdg6ttBd v1Vtk66ok9f+E28ojlaI/3LJr0B1h3fZfgiIOrdgh0wF+wwxazxz0zinR4QSum1D 5CHiHMS9xCCWOL5KLt0R2Lw= -----END CERTIFICATE-----Generated at Sun Mar 15 05:53:25 2026 by rpki-client