$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F4BF2B68721311EFA9D7CA3AC4F9AE02.roa File: F4BF2B68721311EFA9D7CA3AC4F9AE02.roa (raw, json) Hash identifier: WWy2BY48pOtx7EKpzryP2ckWMAIwSD0BksDoaYEAoJk= Subject key identifier: AC:2E:92:AC:F8:4D:FB:B9:17:E7:9C:88:6F:72:FF:F8:92:6B:10:57 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 026B Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F4BF2B68721311EFA9D7CA3AC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:17:16 +0000 ROA not before: Wed 31 Dec 2025 04:24:44 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 38589 IP address blocks: 202.28.16.0/24 maxlen: 24 202.29.108.0/24 maxlen: 24 202.29.109.0/24 maxlen: 24 2001:3c8:1601::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 04:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 619 (0x26b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:44 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a490bc-241c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4b:df:e1:7b:5b:1b:eb:fc:0d:5d:56:fb:bf: 41:8f:40:49:e3:7c:5e:3c:09:b5:4e:81:f4:89:5d: be:97:94:54:a7:ef:ed:a2:03:fe:18:1d:ce:91:63: b1:0c:9e:20:7c:92:9d:13:60:1f:aa:87:f2:1a:aa: 33:1c:27:4b:e8:66:12:ce:f6:c0:f3:93:7b:c6:81: 9b:ef:af:ad:fb:93:d9:fc:1c:27:92:71:71:1f:86: 8c:59:77:71:02:21:1f:a3:64:ea:36:a7:c9:06:74: 9e:35:c7:5f:e7:e3:3d:54:21:a5:33:3b:7d:0a:c0: c2:31:4d:c1:a7:e5:73:3c:6a:2b:f3:c2:38:f1:24: 18:ab:75:bd:c3:05:03:a6:40:9a:b3:cf:95:f7:9a: 58:29:f1:44:93:14:72:89:44:0b:b2:6e:22:60:02: b1:db:45:52:27:ff:c9:fb:e3:87:77:6c:29:40:af: 57:43:97:a2:e2:90:db:f2:2d:7f:a9:5a:65:35:6d: 7c:18:03:43:f1:35:e8:9f:4c:ce:80:2a:6a:81:7e: 13:66:f6:e6:c0:4b:43:1f:a5:bc:53:9e:5e:cc:ba: 7b:ca:7e:29:66:ca:bf:4a:3b:fd:91:fa:24:88:ac: b5:ca:5f:59:1e:7d:f9:70:45:93:02:01:a4:12:e9: 86:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:2E:92:AC:F8:4D:FB:B9:17:E7:9C:88:6F:72:FF:F8:92:6B:10:57 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F4BF2B68721311EFA9D7CA3AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.28.16.0/24 202.29.108.0/23 IPv6: 2001:3c8:1601::/48 Signature Algorithm: sha256WithRSAEncryption 35:75:e4:5e:ae:61:1e:42:dc:89:f9:79:aa:dc:e9:92:6f:49: 71:f8:56:cd:ea:5f:fa:1a:e0:f4:f1:f9:54:67:6e:69:54:ac: 96:55:47:97:9a:88:c7:f0:a9:b0:d4:0a:a9:60:55:ef:ee:af: e9:a4:0f:1c:f9:d7:e4:49:47:52:f7:92:9c:2f:6f:67:03:60: 49:36:35:77:a0:83:02:d6:e1:cb:d9:5b:ec:35:b9:94:9e:52: a9:6e:13:b2:b2:b4:83:30:5e:d4:98:71:91:68:53:ab:83:c8: 06:d2:38:73:63:a6:40:61:44:22:fd:48:ee:09:5d:a5:93:f1: 26:ae:fd:20:ba:e0:b9:e8:a0:90:8e:46:e7:76:48:be:98:fb: 04:c3:8b:d3:c2:17:9d:37:68:d5:ae:bf:73:51:91:91:85:fb: d4:7a:03:b2:b9:71:83:42:a5:54:c3:68:8d:07:85:6f:fb:2c: e2:59:1f:33:06:27:f9:03:9a:59:06:5d:7f:4b:e7:92:2a:4e: 3d:2f:5b:75:30:ff:4f:56:63:29:7c:70:17:8e:d7:ad:10:dc: 89:84:c3:4a:7c:a0:11:a7:e9:f6:2b:82:0b:7e:98:bb:37:0d: e1:72:5d:63:70:59:7a:27:48:25:fc:70:ce:5e:08:c3:68:27: 8f:99:99:34 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICAmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDQ0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTBiYy0yNDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kvf4XtbG+v8DV1W+79Bj0BJ43xePAm1ToH0iV2+l5RUp+/togP+GB3OkWOx DJ4gfJKdE2AfqofyGqozHCdL6GYSzvbA85N7xoGb76+t+5PZ/BwnknFxH4aMWXdx AiEfo2TqNqfJBnSeNcdf5+M9VCGlMzt9CsDCMU3Bp+VzPGor88I48SQYq3W9wwUD pkCas8+V95pYKfFEkxRyiUQLsm4iYAKx20VSJ//J++OHd2wpQK9XQ5ei4pDb8i1/ qVplNW18GAND8TXon0zOgCpqgX4TZvbmwEtDH6W8U55ezLp7yn4pZsq/Sjv9kfok iKy1yl9ZHn35cEWTAgGkEumGzwIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFKwukqz4 Tfu5F+eciG9y//iSaxBXMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvRjRCRjJCNjg3 MjEzMTFFRkE5RDdDQTNBQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAyhwQAwQByh1sMA8EAgACMAkDBwAgAQPIFgEwDQYJKoZIhvcNAQEL BQADggEBADV15F6uYR5C3In5earc6ZJvSXH4Vs3qX/oa4PTx+VRnbmlUrJZVR5ea iMfwqbDUCqlgVe/ur+mkDxz51+RJR1L3kpwvb2cDYEk2NXeggwLW4cvZW+w1uZSe UqluE7KytIMwXtSYcZFoU6uDyAbSOHNjpkBhRCL9SO4JXaWT8Sau/SC64LnooJCO Rud2SL6Y+wTDi9PCF503aNWuv3NRkZGF+9R6A7K5cYNCpVTDaI0HhW/7LOJZHzMG J/kDmlkGXX9L55IqTj0vW3Uw/09WYyl8cBeO160Q3ImEw0p8oBGn6fYrggt+mLs3 DeFyXWNwWXonSCX8cM5eCMNoJ4+ZmTQ= -----END CERTIFICATE-----Generated at Sun Mar 15 05:53:24 2026 by rpki-client