$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/8C9FFE4C0F2F11EE85C26C11C4F9AE02.roa File: 8C9FFE4C0F2F11EE85C26C11C4F9AE02.roa (raw, json) Hash identifier: PWWAioFjbRD0RZ1JKf4EHHtcijyh9iQZXrsCU9Myabg= Subject key identifier: 72:10:3F:38:AC:F6:DD:86:13:F8:7E:BF:6B:D1:99:F1:DD:67:65:99 Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Certificate serial: 0FF6 Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/8C9FFE4C0F2F11EE85C26C11C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:46:58 +0000 ROA not before: Wed 14 Jan 2026 18:14:59 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 151326 IP address blocks: 220.232.135.0/24 maxlen: 24 220.232.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 17:43:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4086 (0xff6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFA0, serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Validity Not Before: Jan 14 18:14:59 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a489a2-dfa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:eb:b4:41:18:82:3a:47:c6:aa:f7:1b:67:5c: a9:a3:9f:f8:94:98:64:77:4f:3c:22:bb:a7:99:f4: f2:15:01:c3:e9:90:f6:41:cf:61:fb:83:82:1a:bd: 41:cb:3e:a0:e7:49:ae:4e:d2:46:29:a8:9e:cc:c7: 27:2c:91:b2:24:22:9d:d1:db:41:3d:fa:38:fc:a5: 21:c3:e0:50:34:23:4e:35:5d:85:f5:5e:19:f3:5b: f8:83:e2:01:8c:fa:29:b8:b8:8e:17:59:95:65:c9: 48:42:9a:26:f4:df:fb:20:8c:7d:8d:ea:54:97:4c: ee:8d:f3:4e:49:7d:cc:7b:2b:a0:ee:89:24:a2:a9: d1:db:62:78:54:29:80:a9:4a:9e:51:2c:fa:ce:a6: 55:32:f5:81:68:a7:f8:4b:30:17:5e:79:ae:47:e0: 96:98:5c:a1:7c:6b:9d:e8:58:ea:06:c6:94:45:2c: 46:4e:55:5e:b6:5c:60:bc:c5:b6:b4:e4:76:65:69: 88:3f:1f:e6:0d:76:f1:2a:c2:6b:eb:6b:6e:45:5c: 55:d9:27:b1:d0:17:53:42:8c:7a:2f:d2:71:1e:c0: 32:25:be:54:3f:cf:b5:ce:0d:1d:93:0c:d9:5a:5a: db:69:66:64:2b:38:01:59:68:63:b0:2e:c2:83:00: 47:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:10:3F:38:AC:F6:DD:86:13:F8:7E:BF:6B:D1:99:F1:DD:67:65:99 X509v3 Authority Key Identifier: keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/8C9FFE4C0F2F11EE85C26C11C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 220.232.135.0/24 220.232.158.0/24 Signature Algorithm: sha256WithRSAEncryption 78:bd:64:76:12:7f:1e:6b:9d:2e:cd:8c:73:4a:11:eb:c6:54: 3d:ca:60:d5:47:d5:30:18:3e:6d:4f:87:8b:94:01:92:2a:dd: fb:e1:78:36:5f:a7:d3:1f:33:10:1f:27:30:1a:8f:d9:3e:44: 99:f6:7e:97:da:c8:d6:f5:da:d3:62:80:a3:e4:a9:dc:53:c0: 94:88:55:03:e1:46:2d:b4:61:65:d3:6f:6b:dc:e9:f7:a8:58: 8b:fe:89:28:32:b2:4a:2f:26:a3:d8:2d:08:6e:12:1f:1f:5f: 2e:02:3d:95:d3:f2:9e:d8:d6:00:e5:0a:cf:3d:f6:56:38:3d: ea:84:2a:0f:b2:e3:a4:5e:63:d2:49:6c:21:83:fc:df:3f:e1: de:7c:db:fc:5c:88:41:b7:4e:1e:33:6b:a9:14:c0:be:b8:ae: 74:fa:7a:22:9d:35:4c:bf:85:4c:d8:5b:ce:a7:23:ca:45:40: 35:3a:a7:8c:31:72:77:5d:d0:fd:12:71:84:d5:a3:bd:6d:17: 80:18:8c:5d:96:9f:27:9b:32:3e:93:52:2b:8b:c0:04:6d:83: 69:b6:e2:e9:66:bd:2c:05:19:4a:d9:7b:7a:12:37:5b:cf:9f: 10:b6:e2:3f:95:62:ab:36:91:f3:04:f5:56:87:2d:8a:eb:26: 23:ad:c7:92 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICD/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQTAxMTAvBgNVBAUTKEFERDk0MThGMEY5QjU1RjNCNzM3NkEwOTNEQjExREJB RDNBRUZFQzgwHhcNMjYwMTE0MTgxNDU5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODlhMi1kZmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjOu0QRiCOkfGqvcbZ1ypo5/4lJhkd088IrunmfTyFQHD6ZD2Qc9h+4OCGr1B yz6g50muTtJGKaiezMcnLJGyJCKd0dtBPfo4/KUhw+BQNCNONV2F9V4Z81v4g+IB jPopuLiOF1mVZclIQpom9N/7IIx9jepUl0zujfNOSX3Meyug7okkoqnR22J4VCmA qUqeUSz6zqZVMvWBaKf4SzAXXnmuR+CWmFyhfGud6FjqBsaURSxGTlVetlxgvMW2 tOR2ZWmIPx/mDXbxKsJr62tuRVxV2Sex0BdTQox6L9JxHsAyJb5UP8+1zg0dkwzZ WlrbaWZkKzgBWWhjsC7CgwBHuwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFHIQPzis 9t2GE/h+v2vRmfHdZ2WZMB8GA1UdIwQYMBaAFK3ZQY8Pm1XztzdqCT2xHbrTrv7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xRDY2RDQ4NkQ4 Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9yZGxCanctYlZmTzNOMm9KUGJFZHV0T3Vf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkbEJqdy1iVmZPM04yb0pQYkVkdXRPdV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZGQTAvMUQ2NkQ0ODZEOENCMTFFOUJBRTI0RDIxQzRGOUFFMDIvOEM5RkZFNEMw RjJGMTFFRTg1QzI2QzExQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQA3OiHAwQA3OieMA0GCSqGSIb3DQEBCwUAA4IBAQB4vWR2En8ea50u zYxzShHrxlQ9ymDVR9UwGD5tT4eLlAGSKt374Xg2X6fTHzMQHycwGo/ZPkSZ9n6X 2sjW9drTYoCj5KncU8CUiFUD4UYttGFl029r3On3qFiL/okoMrJKLyaj2C0IbhIf H18uAj2V0/Ke2NYA5QrPPfZWOD3qhCoPsuOkXmPSSWwhg/zfP+HefNv8XIhBt04e M2upFMC+uK50+noinTVMv4VM2FvOpyPKRUA1OqeMMXJ3XdD9EnGE1aO9bReAGIxd lp8nmzI+k1Iri8AEbYNptuLpZr0sBRlK2Xt6Ejdbz58QtuI/lWKrNpHzBPVWhy2K 6yYjrceS -----END CERTIFICATE-----Generated at Fri Mar 13 11:07:01 2026 by rpki-client