$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F0ED627A721311EFA9D7CA3AC4F9AE02.roa File: F0ED627A721311EFA9D7CA3AC4F9AE02.roa (raw, json) Hash identifier: k39cyIGsK8iVtaLAY3ENCgvunwtoZOmhr8wazQL1iNs= Subject key identifier: CC:F0:5D:AB:90:15:92:13:54:BA:BD:24:44:9E:A3:52:74:F1:D5:28 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 025A Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F0ED627A721311EFA9D7CA3AC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:17:01 +0000 ROA not before: Wed 31 Dec 2025 04:24:28 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 141714 IP address blocks: 202.29.8.0/24 maxlen: 24 202.29.9.0/24 maxlen: 24 202.29.10.0/24 maxlen: 24 202.29.11.0/24 maxlen: 24 2001:3c8:2808::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 04:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 602 (0x25a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:28 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a490ad-f6a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bc:93:90:a0:8a:bf:7e:4c:f2:0a:27:1d:fe: bc:ba:e6:89:9d:f8:78:a9:1e:46:50:ad:be:be:5c: f4:14:a3:85:a2:d6:a4:f0:b1:b4:1e:ef:34:a9:46: 38:98:e8:9d:63:ee:f7:23:d6:e0:3d:47:77:18:0d: e5:76:14:02:f2:79:f1:c6:5f:04:7d:65:33:f4:b3: 75:1a:76:9c:ee:be:c7:2f:1e:61:2e:24:46:ac:16: 30:c8:ab:95:58:50:dc:21:a5:bc:d7:86:15:d8:50: 52:19:e6:cf:00:d4:99:89:30:f9:a2:8d:c0:f5:bb: 2f:3a:65:b5:34:21:64:66:34:da:f3:19:05:14:fe: 90:35:ba:3f:b0:95:51:e9:a0:75:02:ab:e8:76:f5: 3d:11:d9:8c:57:dc:31:3f:6f:9b:d3:10:08:0b:bf: 02:c3:fe:f3:4c:b5:4a:46:f5:96:ad:89:76:c2:6c: 1a:35:59:e0:a5:e1:55:52:9c:23:40:65:8e:64:e4: de:8f:00:b6:49:74:e1:06:e0:bf:a5:ef:b2:a9:dc: 44:fd:4f:aa:4d:9f:dc:2d:79:71:5a:fd:e9:79:36: a1:11:53:cd:f9:8c:43:fb:d8:da:84:95:b0:0a:49: 13:51:60:ca:47:f3:51:3c:a1:27:4f:8b:bd:6f:5f: 7f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F0:5D:AB:90:15:92:13:54:BA:BD:24:44:9E:A3:52:74:F1:D5:28 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F0ED627A721311EFA9D7CA3AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.29.8.0/22 IPv6: 2001:3c8:2808::/48 Signature Algorithm: sha256WithRSAEncryption 3a:6e:1d:65:e3:38:b5:b8:df:93:97:3c:1f:55:ca:7e:62:4b: fe:a9:43:5b:95:7e:61:e3:ef:62:dd:99:5e:36:bc:09:2c:1b: 34:c8:fc:d6:a9:fe:3e:0f:82:05:c1:ac:df:c5:b8:11:a4:4c: c7:5d:aa:38:5c:1f:b8:93:c9:5f:93:e8:68:12:75:17:9a:cd: f6:b3:86:78:cd:92:20:35:40:b4:27:2a:f8:12:95:cc:53:6a: 49:3c:c7:2a:4e:83:cd:14:a0:5c:a1:6a:41:06:b2:21:65:b6: 50:f6:48:fe:5e:3c:38:90:59:0c:ea:35:5c:81:6d:6d:6d:db: 7e:c5:c8:82:6a:2f:1c:d8:ae:d0:f2:29:fa:25:42:2c:e3:47: 45:89:d0:fb:6d:45:db:d9:fc:7f:1e:d8:a1:60:3c:e0:f0:c5: ec:83:a3:02:8a:fb:aa:a7:05:f4:4f:09:0d:e0:c2:3f:73:e3: f4:fb:23:1c:04:b6:1f:6b:a9:b4:0d:ff:85:e0:61:64:f6:b4: 58:d6:15:33:13:4a:9e:c9:ae:b3:da:1a:1a:26:bf:ff:25:e9: b0:c6:9c:28:53:76:fa:58:2b:b0:33:41:00:21:6d:11:b6:9c: c3:e6:a9:2f:41:27:12:58:f1:5d:85:25:0a:c6:00:73:b7:9a: 0c:c9:f7:45 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDI4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTBhZC1mNmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqryTkKCKv35M8gonHf68uuaJnfh4qR5GUK2+vlz0FKOFotak8LG0Hu80qUY4 mOidY+73I9bgPUd3GA3ldhQC8nnxxl8EfWUz9LN1Gnac7r7HLx5hLiRGrBYwyKuV WFDcIaW814YV2FBSGebPANSZiTD5oo3A9bsvOmW1NCFkZjTa8xkFFP6QNbo/sJVR 6aB1AqvodvU9EdmMV9wxP2+b0xAIC78Cw/7zTLVKRvWWrYl2wmwaNVngpeFVUpwj QGWOZOTejwC2SXThBuC/pe+yqdxE/U+qTZ/cLXlxWv3peTahEVPN+YxD+9jahJWw CkkTUWDKR/NRPKEnT4u9b19/dQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFMzwXauQ FZITVLq9JESeo1J08dUoMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvRjBFRDYyN0E3 MjEzMTFFRkE5RDdDQTNBQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQCyh0IMA8EAgACMAkDBwAgAQPIKAgwDQYJKoZIhvcNAQELBQADggEB ADpuHWXjOLW435OXPB9Vyn5iS/6pQ1uVfmHj72LdmV42vAksGzTI/Nap/j4PggXB rN/FuBGkTMddqjhcH7iTyV+T6GgSdReazfazhnjNkiA1QLQnKvgSlcxTakk8xypO g80UoFyhakEGsiFltlD2SP5ePDiQWQzqNVyBbW1t237FyIJqLxzYrtDyKfolQizj R0WJ0PttRdvZ/H8e2KFgPODwxeyDowKK+6qnBfRPCQ3gwj9z4/T7IxwEth9rqbQN /4XgYWT2tFjWFTMTSp7JrrPaGhomv/8l6bDGnChTdvpYK7AzQQAhbRG2nMPmqS9B JxJY8V2FJQrGAHO3mgzJ90U= -----END CERTIFICATE-----Generated at Sun Mar 15 05:53:23 2026 by rpki-client