$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/ECF72566721311EFA9D7CA3AC4F9AE02.roa File: ECF72566721311EFA9D7CA3AC4F9AE02.roa (raw, json) Hash identifier: DCFdV/p/U61bIf0cpJYT28UFhWYqvIFkswPTTW5fczs= Subject key identifier: 53:D5:A0:E3:0D:67:9C:3F:39:9D:43:03:32:65:7A:9A:7D:55:CB:C4 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 024C Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/ECF72566721311EFA9D7CA3AC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:16:48 +0000 ROA not before: Wed 31 Dec 2025 04:24:15 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 135616 IP address blocks: 202.28.64.0/24 maxlen: 24 202.28.66.0/24 maxlen: 24 202.28.67.0/24 maxlen: 24 2001:3c8:9006::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 04:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 588 (0x24c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:15 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a490a0-adb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ec:a7:18:1c:36:8a:ba:72:2f:08:db:6a:03: 46:2c:8d:d3:8e:59:dc:87:ec:68:d3:5d:0c:af:23: 8f:66:60:a8:ae:99:1c:d4:2d:9f:b7:fe:30:0c:7c: 46:31:c9:2c:0f:f7:da:69:8d:11:12:31:7b:e3:52: 40:2c:12:2b:ed:d4:4b:17:7e:cd:24:97:cc:c3:bb: d9:fe:c9:9b:c7:30:1e:57:20:5f:92:24:45:82:77: 1b:e8:a4:03:e3:2c:96:54:2c:0c:87:eb:3a:1f:8d: 7c:9e:ad:5e:38:6e:a8:a1:48:a6:5b:e4:e6:ad:fb: 05:0e:59:23:cf:b3:9f:01:f0:bf:f4:13:f3:a9:e2: f0:9e:ed:6a:cb:d7:d9:87:21:fb:29:36:2d:d7:aa: d5:9f:7a:0c:a1:48:dc:1f:3b:0c:65:0c:48:89:e9: 1b:d2:2e:0d:d2:cf:0e:49:9e:aa:61:3b:28:3d:34: fd:ed:ed:bb:7b:43:a3:e2:b6:62:72:fc:24:05:fc: 3e:77:ba:c2:19:a5:79:4f:42:f1:32:3e:3e:67:ac: 16:26:17:f2:e9:60:b7:a7:d1:42:c2:01:96:bb:2d: 6d:9b:dc:53:3c:ce:45:de:66:d3:65:78:89:6b:1d: 14:39:6b:75:99:37:3e:16:33:fc:16:35:50:21:d0: 6b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D5:A0:E3:0D:67:9C:3F:39:9D:43:03:32:65:7A:9A:7D:55:CB:C4 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/ECF72566721311EFA9D7CA3AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.28.64.0/24 202.28.66.0/23 IPv6: 2001:3c8:9006::/48 Signature Algorithm: sha256WithRSAEncryption 2b:a5:0a:ed:ff:5f:a4:26:42:f3:cc:e5:95:8d:2c:b3:cf:8d: 97:2d:77:87:96:c5:15:e3:40:d0:0d:e1:01:42:44:97:79:61: 99:da:50:12:4f:83:28:14:fd:f5:89:0b:1a:e9:73:11:5d:eb: 58:42:8b:1f:2c:cc:0d:32:cc:7b:47:94:8d:53:4c:52:8b:22: 6b:4c:a5:bb:88:20:b4:7c:38:1f:fa:81:bc:04:c1:ff:34:e2: 5c:d8:34:43:6e:31:39:98:e9:86:07:c8:cb:33:a4:ec:6f:d1: 80:a8:70:43:ac:25:2d:35:1e:d0:c8:a6:05:1c:56:74:0e:19: f8:20:05:20:88:8c:81:a1:5d:c9:28:b8:af:ce:f6:4b:24:d6: 31:15:f5:a3:55:c9:25:9a:e2:08:db:2a:ad:d4:e9:54:06:60: 25:fb:1e:5c:50:73:0c:58:12:8e:69:e5:9d:b3:50:09:ac:e9: 9d:ec:5f:15:f8:b1:28:5c:00:bd:cc:4c:8b:1d:a2:ee:9b:c8: 40:26:4c:f7:97:db:9c:56:c5:0c:61:96:c5:4f:63:ab:9a:eb: 1d:95:3f:b8:98:3d:c6:39:5a:4d:07:29:6b:c2:07:6b:2f:bb: c5:a0:05:8a:d0:74:80:5a:70:b7:a0:eb:2e:b3:8b:b1:c7:43: 22:26:fd:74 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICAkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDE1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTBhMC1hZGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+ynGBw2irpyLwjbagNGLI3Tjlnch+xo010MryOPZmCorpkc1C2ft/4wDHxG McksD/faaY0REjF741JALBIr7dRLF37NJJfMw7vZ/smbxzAeVyBfkiRFgncb6KQD 4yyWVCwMh+s6H418nq1eOG6ooUimW+TmrfsFDlkjz7OfAfC/9BPzqeLwnu1qy9fZ hyH7KTYt16rVn3oMoUjcHzsMZQxIiekb0i4N0s8OSZ6qYTsoPTT97e27e0Oj4rZi cvwkBfw+d7rCGaV5T0LxMj4+Z6wWJhfy6WC3p9FCwgGWuy1tm9xTPM5F3mbTZXiJ ax0UOWt1mTc+FjP8FjVQIdBrLwIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFFPVoOMN Z5w/OZ1DAzJlepp9VcvEMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvRUNGNzI1NjY3 MjEzMTFFRkE5RDdDQTNBQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAyhxAAwQByhxCMA8EAgACMAkDBwAgAQPIkAYwDQYJKoZIhvcNAQEL BQADggEBACulCu3/X6QmQvPM5ZWNLLPPjZctd4eWxRXjQNAN4QFCRJd5YZnaUBJP gygU/fWJCxrpcxFd61hCix8szA0yzHtHlI1TTFKLImtMpbuIILR8OB/6gbwEwf80 4lzYNENuMTmY6YYHyMszpOxv0YCocEOsJS01HtDIpgUcVnQOGfggBSCIjIGhXcko uK/O9ksk1jEV9aNVySWa4gjbKq3U6VQGYCX7HlxQcwxYEo5p5Z2zUAms6Z3sXxX4 sShcAL3MTIsdou6byEAmTPeX25xWxQxhlsVPY6ua6x2VP7iYPcY5Wk0HKWvCB2sv u8WgBYrQdIBacLeg6y6zi7HHQyIm/XQ= -----END CERTIFICATE-----Generated at Sun Mar 15 05:53:24 2026 by rpki-client