$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/B86FBE4A2E3611EB84E66039C4F9AE02.roa File: B86FBE4A2E3611EB84E66039C4F9AE02.roa (raw, json) Hash identifier: MEq/zqDiqJp2Uun6AMM0CPmEDIvnRItUAgVmjrZYsak= Subject key identifier: C3:C4:E6:FB:4A:2A:CF:B8:58:D6:F3:4C:3D:E9:7E:03:9C:FF:6D:31 Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Certificate serial: 0FFA Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/B86FBE4A2E3611EB84E66039C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:47:01 +0000 ROA not before: Wed 14 Jan 2026 18:15:04 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 19905 IP address blocks: 210.57.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 17:41:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4090 (0xffa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFA0, serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Validity Not Before: Jan 14 18:15:04 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a489a5-cfe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:64:51:a8:42:84:f4:3b:d2:13:ab:51:14:54: 1a:01:d9:59:9b:06:32:3d:dc:44:9f:86:81:cb:e7: 0f:f7:4a:97:f0:1f:e2:0f:f1:3b:81:7b:00:70:52: 87:79:26:09:ce:bd:9a:b0:91:99:d7:9c:17:4a:c0: 17:44:ef:dd:48:33:58:5b:f8:f9:c4:fc:66:d8:d8: b8:12:cd:7f:f2:8e:8b:ea:9f:f0:a0:d8:dd:37:a2: 42:f3:69:9f:b5:55:27:b9:a4:0f:e9:cb:b7:30:4a: 75:f4:c4:b1:0c:8b:f0:f5:1c:d3:a9:e7:1e:77:2b: 9f:5d:5b:67:d1:57:c9:f8:6f:3d:15:33:bc:13:36: 34:e9:15:2f:0d:df:0e:07:0d:f1:6a:12:e4:b0:72: 41:68:15:6f:28:41:27:98:99:67:aa:de:cf:5c:91: 6d:08:aa:61:c8:38:83:4e:78:b8:e4:7c:a5:0d:46: eb:aa:61:d1:51:31:f7:64:a6:99:4d:75:7c:a8:b4: 7d:b0:b6:3f:c7:bd:ce:38:35:32:1e:0a:ac:d9:dd: 4c:53:d8:2a:a7:a8:63:a8:6a:c3:5f:22:c2:b6:3b: 65:7e:72:2f:b1:a0:f5:43:94:c9:9a:95:83:e0:1b: eb:0e:21:ab:17:d8:45:c5:95:df:c1:e4:63:f2:05: ee:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C4:E6:FB:4A:2A:CF:B8:58:D6:F3:4C:3D:E9:7E:03:9C:FF:6D:31 X509v3 Authority Key Identifier: keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/B86FBE4A2E3611EB84E66039C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 210.57.42.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:b6:82:6d:c1:ba:5c:7a:d0:67:8a:22:50:e1:50:b5:41:6f: 98:0d:06:30:d3:74:40:f6:5f:96:60:86:ff:c5:7e:c3:15:dc: f0:34:40:cd:31:1a:e8:8e:73:2e:e6:9f:ec:74:46:cd:31:99: 13:08:de:24:9e:52:c8:a9:be:2c:57:84:d7:cd:17:42:4d:d4: 82:7f:8f:06:39:1b:33:75:ed:dd:d7:e9:fd:d5:68:45:62:a1: 42:4a:91:5e:2e:f7:51:69:25:f3:27:b6:39:65:97:63:5f:75: d1:0b:fa:04:d2:7b:50:72:40:dc:51:a0:f1:98:9c:7f:c1:e7: f7:c5:ed:ab:c0:92:b9:48:2c:17:0e:bb:b6:3a:03:94:7b:9d: 87:03:49:d5:77:27:a1:8d:bf:0a:c0:7b:f5:42:50:3b:53:dd: 2c:49:43:fa:d3:d7:93:9e:97:01:07:4d:f3:19:07:d6:30:75: 28:1b:fe:f0:10:e1:03:61:b5:92:f2:2e:c2:e6:a0:36:db:5d: ef:35:87:98:95:6d:83:e3:30:89:8d:34:97:ab:45:d2:1e:98: 5e:d7:5b:5e:e1:4f:3a:c3:db:72:b2:b1:06:84:8b:0b:bb:87: ca:fd:c2:52:8b:c1:74:22:0c:27:85:c0:bc:f9:37:5c:26:90: 99:ed:5f:da -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICD/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQTAxMTAvBgNVBAUTKEFERDk0MThGMEY5QjU1RjNCNzM3NkEwOTNEQjExREJB RDNBRUZFQzgwHhcNMjYwMTE0MTgxNTA0WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODlhNS1jZmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmmRRqEKE9DvSE6tRFFQaAdlZmwYyPdxEn4aBy+cP90qX8B/iD/E7gXsAcFKH eSYJzr2asJGZ15wXSsAXRO/dSDNYW/j5xPxm2Ni4Es1/8o6L6p/woNjdN6JC82mf tVUnuaQP6cu3MEp19MSxDIvw9RzTqecedyufXVtn0VfJ+G89FTO8EzY06RUvDd8O Bw3xahLksHJBaBVvKEEnmJlnqt7PXJFtCKphyDiDTni45HylDUbrqmHRUTH3ZKaZ TXV8qLR9sLY/x73OODUyHgqs2d1MU9gqp6hjqGrDXyLCtjtlfnIvsaD1Q5TJmpWD 4BvrDiGrF9hFxZXfweRj8gXuOQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMPE5vtK Ks+4WNbzTD3pfgOc/20xMB8GA1UdIwQYMBaAFK3ZQY8Pm1XztzdqCT2xHbrTrv7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xRDY2RDQ4NkQ4 Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9yZGxCanctYlZmTzNOMm9KUGJFZHV0T3Vf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkbEJqdy1iVmZPM04yb0pQYkVkdXRPdV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZGQTAvMUQ2NkQ0ODZEOENCMTFFOUJBRTI0RDIxQzRGOUFFMDIvQjg2RkJFNEEy RTM2MTFFQjg0RTY2MDM5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQA0jkqMA0GCSqGSIb3DQEBCwUAA4IBAQAutoJtwbpcetBniiJQ4VC1 QW+YDQYw03RA9l+WYIb/xX7DFdzwNEDNMRrojnMu5p/sdEbNMZkTCN4knlLIqb4s V4TXzRdCTdSCf48GORszde3d1+n91WhFYqFCSpFeLvdRaSXzJ7Y5ZZdjX3XRC/oE 0ntQckDcUaDxmJx/wef3xe2rwJK5SCwXDru2OgOUe52HA0nVdyehjb8KwHv1QlA7 U90sSUP609eTnpcBB03zGQfWMHUoG/7wEOEDYbWS8i7C5qA2213vNYeYlW2D4zCJ jTSXq0XSHphe11te4U86w9tysrEGhIsLu4fK/cJSi8F0IgwnhcC8+TdcJpCZ7V/a -----END CERTIFICATE-----Generated at Sun Mar 8 03:30:13 2026 by rpki-client