$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C4C5C94C721511EF9D7B9F3DC4F9AE02.roa File: C4C5C94C721511EF9D7B9F3DC4F9AE02.roa (raw, json) Hash identifier: wDNmgexH3dzz5phcLV3XuHo75qIPSBzXugdjp39g8kk= Subject key identifier: 7A:31:B4:F2:27:FF:58:F8:27:7F:04:A4:6D:D2:2D:61:DA:FB:C3:72 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 026D Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C4C5C94C721511EF9D7B9F3DC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:17:18 +0000 ROA not before: Wed 31 Dec 2025 04:24:45 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 45847 IP address blocks: 202.29.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 04:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 621 (0x26d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:45 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a490be-4a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:22:76:c5:3f:9f:c3:c4:80:e6:22:f0:cd:14: d9:c2:2a:13:66:c9:c7:7a:f7:1d:cf:77:c1:14:f2: 7d:1e:3c:e3:43:75:f0:a0:c0:3c:93:56:6e:e2:53: 5a:12:89:6f:b2:f9:27:c3:69:c7:0a:90:c4:5f:36: 16:df:fd:64:de:43:1b:c8:21:52:57:1c:4e:fd:6c: d8:1e:d0:d5:17:e2:5b:02:0d:ac:cf:fd:49:a0:14: d4:cf:41:bf:cc:3d:a1:c0:a9:a6:3f:57:92:64:cf: 6f:40:c1:3f:7f:d5:02:7f:c2:45:9e:1c:d9:96:69: 67:8b:ac:36:1a:12:58:b9:e2:d0:6e:2b:df:12:6c: 9d:e5:9b:a4:34:a9:da:fd:3b:ff:f9:1f:d6:6c:e4: 3c:fc:e7:54:8e:f4:c6:64:8d:2b:4f:ff:8d:ed:41: 86:bb:76:13:b1:04:3f:f7:3e:e0:f5:fe:20:0e:51: 0d:2b:31:27:0b:a6:b0:44:5f:8e:fd:84:ed:99:ef: e7:15:07:5a:44:97:57:97:d7:b2:55:ce:1c:ee:2b: 15:f2:93:ea:51:b9:7d:b1:b4:ba:28:bc:f6:70:6b: 7a:ad:ad:5a:17:40:3c:3e:a7:9b:1b:b1:14:49:37: 33:0b:2f:08:23:26:1c:55:09:ea:6d:98:35:8d:b5: 83:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:31:B4:F2:27:FF:58:F8:27:7F:04:A4:6D:D2:2D:61:DA:FB:C3:72 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C4C5C94C721511EF9D7B9F3DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.29.33.0/24 Signature Algorithm: sha256WithRSAEncryption 72:57:da:57:6e:96:4b:24:e9:5d:fd:0c:ce:76:b5:12:78:f2: c8:7b:e5:9c:e8:07:ca:ec:56:3e:96:eb:71:a7:1d:09:78:7a: 25:6b:6e:6c:e7:f9:7e:15:47:97:8b:cc:5b:28:f9:c0:72:49: bc:8b:0c:51:ad:2d:f0:9c:54:c5:cf:db:b3:cb:66:c8:04:7c: cd:4d:1f:6e:dc:9b:1a:cc:17:ab:c8:d6:c7:2a:7b:36:97:5e: 32:99:65:0f:86:dc:e3:25:0c:df:1b:5c:3e:7d:40:e6:87:f8: a9:dd:34:04:12:3c:a5:e0:4c:d4:be:0c:b8:52:bc:31:c3:31: f3:7a:ca:13:95:54:9a:23:b2:c3:1c:51:d4:4e:b7:67:cf:02: 46:87:8d:19:5e:c6:ab:da:4f:6a:33:45:fa:84:cb:7a:43:7b: c2:08:ae:01:b7:73:2c:a0:0e:c4:e2:3a:5c:67:86:25:46:6b: c6:b1:ea:bd:57:ec:30:1e:18:1d:eb:55:31:a9:c2:48:9c:de: 28:e4:d1:35:6b:ec:84:56:56:d8:c0:bc:b4:0e:89:d2:40:6c: a0:8b:37:25:5c:52:1c:d3:ff:63:9d:79:3e:27:1a:d2:f7:18: 0e:d0:92:46:fc:00:00:ea:c6:2f:fd:41:a3:70:ca:61:d9:58: bc:cb:5e:08 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDQ1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTBiZS00YTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjSJ2xT+fw8SA5iLwzRTZwioTZsnHevcdz3fBFPJ9HjzjQ3XwoMA8k1Zu4lNa Eolvsvknw2nHCpDEXzYW3/1k3kMbyCFSVxxO/WzYHtDVF+JbAg2sz/1JoBTUz0G/ zD2hwKmmP1eSZM9vQME/f9UCf8JFnhzZlmlni6w2GhJYueLQbivfEmyd5ZukNKna /Tv/+R/WbOQ8/OdUjvTGZI0rT/+N7UGGu3YTsQQ/9z7g9f4gDlENKzEnC6awRF+O /YTtme/nFQdaRJdXl9eyVc4c7isV8pPqUbl9sbS6KLz2cGt6ra1aF0A8PqebG7EU STczCy8IIyYcVQnqbZg1jbWDlwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHoxtPIn /1j4J38EpG3SLWHa+8NyMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvQzRDNUM5NEM3 MjE1MTFFRjlEN0I5RjNEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyh0hMA0GCSqGSIb3DQEBCwUAA4IBAQByV9pXbpZLJOld/QzOdrUS ePLIe+Wc6AfK7FY+lutxpx0JeHola25s5/l+FUeXi8xbKPnAckm8iwxRrS3wnFTF z9uzy2bIBHzNTR9u3JsazBeryNbHKns2l14ymWUPhtzjJQzfG1w+fUDmh/ip3TQE Ejyl4EzUvgy4UrwxwzHzesoTlVSaI7LDHFHUTrdnzwJGh40ZXsar2k9qM0X6hMt6 Q3vCCK4Bt3MsoA7E4jpcZ4YlRmvGseq9V+wwHhgd61UxqcJInN4o5NE1a+yEVlbY wLy0DonSQGygizclXFIc0/9jnXk+JxrS9xgO0JJG/AAA6sYv/UGjcMph2Vi8y14I -----END CERTIFICATE-----Generated at Sun Mar 15 05:53:25 2026 by rpki-client