$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EF9FF2AC721311EFA9D7CA3AC4F9AE02.roa File: EF9FF2AC721311EFA9D7CA3AC4F9AE02.roa (raw, json) Hash identifier: 26s7vw1K0V5JLwAH3IBN7tjW/RRFB5T3mrvC8Y4fGJ0= Subject key identifier: 37:13:A1:E6:44:2C:51:26:8D:41:EA:9B:75:6A:2F:76:8E:D0:1F:3A Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 0255 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EF9FF2AC721311EFA9D7CA3AC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:16:56 +0000 ROA not before: Wed 31 Dec 2025 04:24:24 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 138547 IP address blocks: 202.29.20.0/24 maxlen: 24 2001:3c8:d109::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 04:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 597 (0x255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:24 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a490a8-dbe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:df:47:09:72:15:20:53:ca:c5:47:1a:34:74: cb:36:6f:1e:f2:4d:7e:1d:ff:cf:e2:e7:42:8d:0f: f1:25:e1:3d:bd:05:4f:99:59:0e:a6:5f:ec:67:27: f3:a5:fc:69:08:40:4a:12:27:e3:8d:54:67:30:3f: d0:a3:60:48:65:f9:d6:3b:8f:87:2a:d3:2f:e7:c3: 37:df:b3:f6:ef:b4:fc:e4:5d:98:1d:eb:27:1b:8c: 4d:45:08:d2:38:83:8e:17:4d:b1:ac:a3:aa:ca:06: c4:cd:e3:93:c3:17:a9:cc:d7:53:4f:ab:e4:ff:30: ac:a1:c8:25:46:c3:7f:37:cf:9f:f1:6f:12:63:5a: b1:2c:a1:4d:40:5f:1c:4c:b5:b2:50:d5:5c:3d:b3: c9:1f:fa:ac:08:3e:40:05:7f:ac:1d:e2:25:b1:25: d8:1c:92:95:90:36:91:e3:e2:84:c2:9a:47:94:9d: e2:15:5e:b8:f5:ff:fa:60:e1:6d:00:16:c1:89:6d: 6c:fc:6a:ac:6d:6b:73:4d:2e:00:c2:12:de:4b:f8: 05:97:3d:d2:6c:dd:ee:20:74:0c:52:4f:c5:50:2b: e3:1c:37:d8:9b:6e:f2:ae:d5:f8:db:3a:a5:ef:97: d5:cc:7d:fb:c8:c5:56:6e:05:18:37:3d:d9:18:f4: e6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:13:A1:E6:44:2C:51:26:8D:41:EA:9B:75:6A:2F:76:8E:D0:1F:3A X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EF9FF2AC721311EFA9D7CA3AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.29.20.0/24 IPv6: 2001:3c8:d109::/48 Signature Algorithm: sha256WithRSAEncryption 4b:20:50:f6:89:6f:85:c6:7d:36:75:40:4c:ea:09:5b:29:4e: 4d:bc:e2:44:b6:70:60:a4:51:58:66:89:d1:c6:da:9c:d1:19: 99:bb:cf:97:4c:bd:17:bd:42:12:9e:39:78:02:15:0e:e0:e5: fe:f6:da:03:3d:c2:76:8f:c5:aa:ac:fa:a0:bc:c5:09:f9:e3: 40:f7:f9:25:59:7d:0f:f3:c6:01:5d:39:48:19:08:9d:72:db: 17:cd:81:04:d4:68:3e:dd:e4:e6:f4:19:56:51:6e:6d:76:17: b9:af:59:a0:1e:66:38:e2:55:32:f2:94:c1:20:02:db:f5:57: 72:66:cd:33:f7:53:53:19:c7:3d:20:5b:93:b4:f3:96:14:9a: 17:ff:a5:91:66:9d:42:3e:9e:74:f7:e5:38:42:13:0a:f9:90: 5a:72:e7:a7:15:6b:fc:22:3e:ef:28:f9:5c:2e:66:4e:e0:f4: cd:03:24:65:49:b4:45:a8:51:66:17:3c:c3:43:dc:93:ec:7d: 02:50:bf:13:a3:be:97:08:1a:1c:fd:6d:6d:f3:46:da:9a:a3: 01:da:cf:37:3d:1d:96:7b:e7:98:38:fd:f4:dc:df:56:f2:61: d2:41:f0:52:0f:c9:f9:3d:60:6c:c1:c5:ba:bc:42:9d:37:83: e6:f9:11:de -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDI0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTBhOC1kYmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmd9HCXIVIFPKxUcaNHTLNm8e8k1+Hf/P4udCjQ/xJeE9vQVPmVkOpl/sZyfz pfxpCEBKEifjjVRnMD/Qo2BIZfnWO4+HKtMv58M337P277T85F2YHesnG4xNRQjS OIOOF02xrKOqygbEzeOTwxepzNdTT6vk/zCsocglRsN/N8+f8W8SY1qxLKFNQF8c TLWyUNVcPbPJH/qsCD5ABX+sHeIlsSXYHJKVkDaR4+KEwppHlJ3iFV649f/6YOFt ABbBiW1s/GqsbWtzTS4AwhLeS/gFlz3SbN3uIHQMUk/FUCvjHDfYm27yrtX42zql 75fVzH37yMVWbgUYNz3ZGPTmowIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFDcToeZE LFEmjUHqm3VqL3aO0B86MB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvRUY5RkYyQUM3 MjEzMTFFRkE5RDdDQTNBQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAyh0UMA8EAgACMAkDBwAgAQPI0QkwDQYJKoZIhvcNAQELBQADggEB AEsgUPaJb4XGfTZ1QEzqCVspTk284kS2cGCkUVhmidHG2pzRGZm7z5dMvRe9QhKe OXgCFQ7g5f722gM9wnaPxaqs+qC8xQn540D3+SVZfQ/zxgFdOUgZCJ1y2xfNgQTU aD7d5Ob0GVZRbm12F7mvWaAeZjjiVTLylMEgAtv1V3JmzTP3U1MZxz0gW5O085YU mhf/pZFmnUI+nnT35ThCEwr5kFpy56cVa/wiPu8o+VwuZk7g9M0DJGVJtEWoUWYX PMND3JPsfQJQvxOjvpcIGhz9bW3zRtqaowHazzc9HZZ755g4/fTc31byYdJB8FIP yfk9YGzBxbq8Qp03g+b5Ed4= -----END CERTIFICATE-----Generated at Sun Mar 15 05:54:44 2026 by rpki-client