$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C0F1CF78721511EF9D7B9F3DC4F9AE02.roa File: C0F1CF78721511EF9D7B9F3DC4F9AE02.roa (raw, json) Hash identifier: 93YBmSCoUWUeutnwUdkSqBuAg+m32O7JsEIFo9zbV6s= Subject key identifier: 0C:EB:62:3B:6F:C2:36:E3:DD:FD:97:26:C3:8E:CB:C7:47:51:38:EE Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 024A Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C0F1CF78721511EF9D7B9F3DC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:16:47 +0000 ROA not before: Wed 31 Dec 2025 04:24:13 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 134690 IP address blocks: 202.29.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 04:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 586 (0x24a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:13 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a4909e-07c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d2:75:39:34:2f:e7:c1:f0:17:64:9b:f2:15: 00:04:5e:5d:86:f5:cd:3a:61:12:b3:be:38:41:bc: a3:a7:5b:b2:3a:d6:f7:71:08:9c:a8:21:35:5b:d5: 8d:f4:4c:4f:81:a5:c5:e3:5b:a1:13:16:27:4d:62: 0f:df:fe:51:96:7c:a5:49:74:f7:7a:ae:94:1f:82: 28:9a:88:fa:dc:a2:a9:df:f1:c9:e0:eb:19:bb:26: 3b:c4:72:84:6e:1c:76:d2:bf:c0:0a:27:34:2f:e3: 31:85:34:38:79:89:8c:22:1c:c7:d0:17:37:ad:bc: ac:18:b0:bd:f1:98:8c:b7:88:a0:5a:23:e7:7c:40: 8c:b6:b9:62:3c:aa:9e:8d:91:80:51:d2:5a:c5:c5: c2:cc:14:53:ef:99:74:74:6c:d6:c9:26:cc:ec:ca: ad:b8:ca:c3:48:30:92:a0:49:c3:08:d2:62:e0:75: a5:ee:c9:a8:6d:9e:c6:15:99:86:37:a5:18:34:e2: 35:e9:fe:f1:8b:d1:0d:33:6c:81:2b:b4:30:ea:70: 04:fa:13:c3:af:01:4f:fa:00:ef:a3:6d:5b:d9:4d: 22:87:0e:e2:30:b6:0f:4c:8c:eb:7f:63:d0:5a:09: e0:59:c8:57:1c:3d:2e:f5:8d:15:5b:0a:89:55:b8: 1d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:EB:62:3B:6F:C2:36:E3:DD:FD:97:26:C3:8E:CB:C7:47:51:38:EE X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C0F1CF78721511EF9D7B9F3DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.29.98.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:6c:50:9b:7c:c6:8d:65:a8:a3:6a:00:6b:3e:fe:df:89:80: 4c:b6:7a:e0:ab:86:b3:e2:7a:2a:5b:45:e1:a0:02:f9:e0:22: 01:3e:92:3c:28:81:dd:3a:0a:18:70:48:62:bf:8f:2e:93:0e: bb:cf:c1:75:88:e5:1b:4c:4a:7b:b8:a4:44:dd:ad:35:42:3f: 69:b2:3b:f2:03:90:0b:d9:6e:f5:26:17:0d:41:a9:0d:38:13: 0c:db:cb:83:36:c9:25:71:b5:3c:50:82:d2:42:46:6c:55:bd: ef:fc:82:ee:57:35:21:06:3c:8a:df:0f:6d:65:e1:f8:40:25: 69:c4:43:4a:7c:a4:7f:2d:aa:33:bc:f1:74:fd:19:ce:2d:4b: 2a:62:88:3d:ed:1e:4e:75:80:b9:87:74:1d:61:70:f7:cb:6f: 14:0d:12:fb:6d:e4:f9:c1:22:d2:52:79:76:91:00:9b:c9:e4: 38:90:c2:6b:47:99:62:55:fa:23:22:41:97:97:31:29:ba:83: 86:6a:31:44:5f:e1:bd:61:ee:2a:84:bf:19:f5:d1:c6:1f:fd: ec:0a:92:56:ba:78:6a:75:8d:60:2c:4a:b7:29:99:70:b2:44: ea:fa:17:ae:99:2b:ca:09:8d:ca:9f:86:b4:3f:95:8a:c6:83: 58:78:94:4b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDEzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTA5ZS0wN2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9J1OTQv58HwF2Sb8hUABF5dhvXNOmESs744Qbyjp1uyOtb3cQicqCE1W9WN 9ExPgaXF41uhExYnTWIP3/5RlnylSXT3eq6UH4Iomoj63KKp3/HJ4OsZuyY7xHKE bhx20r/ACic0L+MxhTQ4eYmMIhzH0Bc3rbysGLC98ZiMt4igWiPnfECMtrliPKqe jZGAUdJaxcXCzBRT75l0dGzWySbM7MqtuMrDSDCSoEnDCNJi4HWl7smobZ7GFZmG N6UYNOI16f7xi9ENM2yBK7Qw6nAE+hPDrwFP+gDvo21b2U0ihw7iMLYPTIzrf2PQ WgngWchXHD0u9Y0VWwqJVbgdWwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAzrYjtv wjbj3f2XJsOOy8dHUTjuMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvQzBGMUNGNzg3 MjE1MTFFRjlEN0I5RjNEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyh1iMA0GCSqGSIb3DQEBCwUAA4IBAQBtbFCbfMaNZaijagBrPv7f iYBMtnrgq4az4noqW0XhoAL54CIBPpI8KIHdOgoYcEhiv48ukw67z8F1iOUbTEp7 uKRE3a01Qj9psjvyA5AL2W71JhcNQakNOBMM28uDNsklcbU8UILSQkZsVb3v/ILu VzUhBjyK3w9tZeH4QCVpxENKfKR/LaozvPF0/RnOLUsqYog97R5OdYC5h3QdYXD3 y28UDRL7beT5wSLSUnl2kQCbyeQ4kMJrR5liVfojIkGXlzEpuoOGajFEX+G9Ye4q hL8Z9dHGH/3sCpJWunhqdY1gLEq3KZlwskTq+heumSvKCY3Kn4a0P5WKxoNYeJRL -----END CERTIFICATE-----Generated at Sun Mar 15 05:54:41 2026 by rpki-client