$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/FEDAEBD8932711F0B9305C4FC4F9AE02.roa File: FEDAEBD8932711F0B9305C4FC4F9AE02.roa (raw, json) Hash identifier: oLPGAtInmgg8LJAGqD2eTzOmv35jtP5ZiQradw61X2A= Subject key identifier: 28:47:E7:83:2D:A5:92:C0:08:05:03:8E:16:68:00:48:A4:70:8B:2C Certificate issuer: /CN=A91D3794/serialNumber=30E589288EB65002510C877B466ABE19753BDBCE Certificate serial: 223F Authority key identifier: 30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/FEDAEBD8932711F0B9305C4FC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:16:33 +0000 ROA not before: Fri 30 Jan 2026 16:13:43 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 31898 IP address blocks: 27.111.92.0/22 maxlen: 24 43.245.52.0/22 maxlen: 24 203.17.36.0/24 maxlen: 24 203.170.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 15:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8767 (0x223f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3794, serialNumber=30E589288EB65002510C877B466ABE19753BDBCE Validity Not Before: Jan 30 16:13:43 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a48281-8541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5f:f8:bc:f8:1a:77:fb:df:fe:60:38:bd:a3: 82:84:4c:49:de:ad:b6:25:87:17:25:40:bf:4f:f9: 31:32:76:30:2e:ae:25:3a:df:24:24:ab:ca:ea:2f: 05:5f:59:43:cd:d9:bc:dd:37:37:c1:72:e4:56:95: 68:c0:f4:88:6d:1e:87:b4:7e:63:f5:2a:b4:1e:f0: 94:c2:be:42:0d:1b:38:6b:d6:23:ae:ce:15:a1:1d: 4d:fa:5c:f5:bb:d1:f9:47:0d:d9:26:69:aa:54:c7: 08:61:a2:19:7b:33:6c:48:75:02:88:11:49:bb:b6: bd:f7:a7:a1:48:fa:a2:d2:48:9b:80:b2:a9:0f:93: 5c:50:0f:cd:93:67:b0:1c:6a:6a:ac:d0:1c:af:d3: d5:a6:20:64:a9:bf:e4:30:aa:c8:9c:00:95:7d:a7: 04:5d:17:17:a2:01:6f:91:49:cd:89:dd:2a:e1:6b: d4:74:71:2c:08:76:10:5e:50:8c:54:e9:79:c4:d8: 17:eb:55:28:8d:87:d7:9d:61:be:d1:9e:86:c2:78: 20:df:ae:81:d9:67:4c:fb:ae:d1:b2:14:8e:cf:5e: f0:ea:bc:c1:ca:99:d0:4f:ca:47:33:50:ad:d8:34: 9a:ab:40:14:ff:13:ac:66:ee:3c:d2:3e:47:76:71: 80:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:47:E7:83:2D:A5:92:C0:08:05:03:8E:16:68:00:48:A4:70:8B:2C X509v3 Authority Key Identifier: keyid:30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/FEDAEBD8932711F0B9305C4FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.111.92.0/22 43.245.52.0/22 203.17.36.0/24 203.170.80.0/21 Signature Algorithm: sha256WithRSAEncryption 8f:13:c1:73:90:3b:0b:53:db:48:f5:5c:3b:d7:b2:09:a4:43: ff:46:f8:5b:f4:92:84:10:b2:40:f6:40:58:43:89:73:d2:82: 79:95:53:e1:20:31:a5:3e:0e:f7:a7:98:27:42:b7:b3:be:24: ff:4d:a9:cb:53:86:25:0f:04:d3:19:6c:6a:fd:c9:db:c5:de: f9:05:81:5d:f8:da:2c:b5:55:b5:e0:65:92:f8:37:e8:26:7c: 81:c6:40:19:d3:c9:8a:78:f9:48:4d:38:b4:81:15:6d:a9:b7: a1:54:09:db:9a:d4:a8:15:26:ad:f3:af:05:42:9f:ed:b8:33: 1f:d2:bf:09:dc:40:8c:4f:b9:e2:7d:5c:43:53:4d:66:2f:c2: dd:c2:1a:bf:9a:5f:b3:49:ab:d1:c4:03:73:ce:ad:fd:f2:29: aa:94:84:fc:4f:57:b6:ac:18:34:56:b2:48:f1:b5:63:73:dc: 33:a6:2e:3f:91:db:4f:d0:10:de:c6:40:70:89:39:38:33:3f: 10:9f:a3:42:73:3b:d6:d4:0a:83:b6:7b:a8:89:79:bf:ec:7b: de:eb:5c:a3:c7:f2:f2:cf:83:7d:28:3b:de:b0:e5:31:6b:94: 63:6b:3b:9d:77:50:ad:44:e8:2f:1c:6f:42:37:24:b2:36:f9: 54:cf:17:43 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICIj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3OTQxMTAvBgNVBAUTKDMwRTU4OTI4OEVCNjUwMDI1MTBDODc3QjQ2NkFCRTE5 NzUzQkRCQ0UwHhcNMjYwMTMwMTYxMzQzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODI4MS04NTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzF/4vPgad/vf/mA4vaOChExJ3q22JYcXJUC/T/kxMnYwLq4lOt8kJKvK6i8F X1lDzdm83Tc3wXLkVpVowPSIbR6HtH5j9Sq0HvCUwr5CDRs4a9Yjrs4VoR1N+lz1 u9H5Rw3ZJmmqVMcIYaIZezNsSHUCiBFJu7a996ehSPqi0kibgLKpD5NcUA/Nk2ew HGpqrNAcr9PVpiBkqb/kMKrInACVfacEXRcXogFvkUnNid0q4WvUdHEsCHYQXlCM VOl5xNgX61UojYfXnWG+0Z6Gwngg366B2WdM+67RshSOz17w6rzBypnQT8pHM1Ct 2DSaq0AU/xOsZu480j5HdnGAKQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFChH54Mt pZLACAUDjhZoAEikcIssMB8GA1UdIwQYMBaAFDDliSiOtlACUQyHe0Zqvhl1O9vO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzc5NC8yMEZFNTYxNkU5 OEYxMUU1QTNERERDNjZDNEY5QUUwMi9NT1dKS0k2MlVBSlJESWQ3Um1xLUdYVTcy ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PV0pLSTYyVUFKUkRJZDdSbXEtR1hVNzI4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDM3OTQvMjBGRTU2MTZFOThGMTFFNUEzREREQzY2QzRGOUFFMDIvRkVEQUVCRDg5 MzI3MTFGMEI5MzA1QzRGQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQCG29cAwQCK/U0AwQAyxEkAwQDy6pQMA0GCSqGSIb3DQEBCwUAA4IB AQCPE8FzkDsLU9tI9Vw717IJpEP/Rvhb9JKEELJA9kBYQ4lz0oJ5lVPhIDGlPg73 p5gnQrezviT/TanLU4YlDwTTGWxq/cnbxd75BYFd+NostVW14GWS+DfoJnyBxkAZ 08mKePlITTi0gRVtqbehVAnbmtSoFSat868FQp/tuDMf0r8J3ECMT7nifVxDU01m L8Ldwhq/ml+zSavRxANzzq398imqlIT8T1e2rBg0VrJI8bVjc9wzpi4/kdtP0BDe xkBwiTk4Mz8Qn6NCczvW1AqDtnuoiXm/7Hve61yjx/Lyz4N9KDvesOUxa5Rjazud d1CtROgvHG9CNySyNvlUzxdD -----END CERTIFICATE-----Generated at Sun Mar 22 14:54:40 2026 by rpki-client