$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/ACEBC29CC5B911EBB41FAF2DC4F9AE02.roa File: ACEBC29CC5B911EBB41FAF2DC4F9AE02.roa (raw, json) Hash identifier: hEvbM2TDCEqoCuZAHKQXjeGPqQdN31EzYyfXKDjCAtg= Subject key identifier: 4B:42:EF:58:AA:95:25:DB:8A:37:23:62:20:7C:A7:78:A7:C1:08:58 Certificate issuer: /CN=A91D40BF/serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283 Certificate serial: 07FB Authority key identifier: BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/ACEBC29CC5B911EBB41FAF2DC4F9AE02.roa Signing time: Thu 12 Mar 2026 21:28:21 +0000 ROA not before: Thu 12 Mar 2026 21:28:21 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 0 IP address blocks: 202.0.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 21:28:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2043 (0x7fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D40BF, serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283 Validity Not Before: Mar 12 21:28:21 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69b32ff5-5b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8b:26:ff:01:4f:da:5e:c7:d8:f9:bd:e5:fd: 51:b1:7c:af:07:e4:7d:45:2c:50:fa:a4:15:2e:ab: f3:5a:f9:26:6c:74:53:77:6d:2c:b0:4b:c4:73:13: 4c:b8:f7:54:13:b4:76:dd:8f:19:a2:cd:61:2a:19: eb:22:0f:0a:0f:14:40:9e:e1:66:86:1a:7d:26:f9: 11:9e:24:7e:61:9d:ff:ad:d3:23:f4:fa:b1:c2:4a: 0f:5a:aa:b2:0a:5b:e2:6f:d6:9a:0d:dc:59:10:6a: 81:c4:be:89:59:b2:7d:42:3e:bd:ab:53:a8:e9:61: 7e:7e:6a:c2:d8:c5:e4:e4:78:a0:87:09:51:08:62: 07:db:6a:90:bd:1d:ee:c6:70:56:f8:f4:64:33:d1: 79:78:97:7a:da:90:1a:d5:30:41:ab:a3:8a:5b:38: 4f:8f:75:f3:62:b2:d3:ff:9a:bf:b1:0b:0a:f9:51: 68:85:62:49:9c:3b:19:d2:1e:f9:0f:3d:04:92:2d: a0:16:15:3b:df:ca:06:6f:e6:5d:67:ca:1d:55:c5: 30:01:a8:a0:79:44:a0:99:9d:d8:a4:b2:f8:e5:f9: b4:03:3d:f5:30:29:e9:92:9e:be:4b:bc:ba:59:4b: ab:b0:fb:7e:34:24:63:fd:e6:e5:89:de:06:1e:16: cb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:42:EF:58:AA:95:25:DB:8A:37:23:62:20:7C:A7:78:A7:C1:08:58 X509v3 Authority Key Identifier: keyid:BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/ACEBC29CC5B911EBB41FAF2DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.0.104.0/24 Signature Algorithm: sha256WithRSAEncryption b4:f4:1e:bc:de:32:ba:0b:98:c1:ed:b2:5a:02:48:a1:d1:73: cc:fd:17:dc:86:45:24:08:99:b6:ea:6b:ff:95:1c:06:02:64: 37:c2:50:d5:c3:3b:a1:72:f8:85:74:be:89:69:db:bf:06:aa: 4b:9f:02:b6:36:42:09:c7:b3:e0:4f:71:9b:55:d9:c9:a3:6b: 15:db:99:ab:aa:fc:29:74:8d:a3:80:82:02:c4:18:52:cc:db: fb:c0:eb:72:71:47:f6:06:90:a3:2a:07:41:9d:c2:62:21:c9: 61:4d:05:89:6d:de:49:74:83:0f:39:bf:41:3d:76:f9:ea:b9: 5b:cf:9a:18:d7:5e:31:60:f6:8b:15:ee:f3:65:24:56:52:7f: 66:81:f2:7e:65:0c:71:22:ee:7a:1c:41:90:69:3e:39:4a:42: ba:55:f5:87:45:50:f3:3c:12:a7:2c:1d:47:e2:e7:13:59:a2: 94:95:73:a3:ba:34:cd:18:ea:f3:98:ef:4a:7a:6a:01:78:0d: 43:59:7f:63:aa:58:cb:c3:c6:02:a8:80:ea:cd:72:f1:94:9b: 92:3c:74:e4:cb:29:8f:90:c3:9e:2f:d7:83:f4:3a:b7:d1:29: b6:bf:48:49:ea:b7:30:65:50:bf:f6:b2:cd:00:d6:eb:5e:73: 4f:71:69:0c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICB/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQwQkYxMTAvBgNVBAUTKEJFNDYzRkMxOTE5QjQxNDJCMjM4MjgxMzgyN0ZCNzE2 RDZFRTkyODMwHhcNMjYwMzEyMjEyODIxWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWIzMmZmNS01YjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIsm/wFP2l7H2Pm95f1RsXyvB+R9RSxQ+qQVLqvzWvkmbHRTd20ssEvEcxNM uPdUE7R23Y8Zos1hKhnrIg8KDxRAnuFmhhp9JvkRniR+YZ3/rdMj9PqxwkoPWqqy Clvib9aaDdxZEGqBxL6JWbJ9Qj69q1Oo6WF+fmrC2MXk5HighwlRCGIH22qQvR3u xnBW+PRkM9F5eJd62pAa1TBBq6OKWzhPj3XzYrLT/5q/sQsK+VFohWJJnDsZ0h75 Dz0Eki2gFhU738oGb+ZdZ8odVcUwAaigeUSgmZ3YpLL45fm0Az31MCnpkp6+S7y6 WUursPt+NCRj/eblid4GHhbLAQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEtC71iq lSXbijcjYiB8p3inwQhYMB8GA1UdIwQYMBaAFL5GP8GRm0FCsjgoE4J/txbW7pKD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDBCRi8yN0I3QTI4NDI0 QzAxMUVCQjYyQjQzODdDNEY5QUUwMi92a1lfd1pHYlFVS3lPQ2dUZ24tM0Z0YnVr b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZrWV93WkdiUVVLeU9DZ1Rnbi0zRnRidWtvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDQwQkYvMjdCN0EyODQyNEMwMTFFQkI2MkI0Mzg3QzRGOUFFMDIvQUNFQkMyOUND NUI5MTFFQkI0MUZBRjJEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAygBoMA0GCSqGSIb3DQEBCwUAA4IBAQC09B683jK6C5jB7bJaAkih 0XPM/RfchkUkCJm26mv/lRwGAmQ3wlDVwzuhcviFdL6Jadu/BqpLnwK2NkIJx7Pg T3GbVdnJo2sV25mrqvwpdI2jgIICxBhSzNv7wOtycUf2BpCjKgdBncJiIclhTQWJ bd5JdIMPOb9BPXb56rlbz5oY114xYPaLFe7zZSRWUn9mgfJ+ZQxxIu56HEGQaT45 SkK6VfWHRVDzPBKnLB1H4ucTWaKUlXOjujTNGOrzmO9KemoBeA1DWX9jqljLw8YC qIDqzXLxlJuSPHTkyymPkMOeL9eD9Dq30Sm2v0hJ6rcwZVC/9rLNANbrXnNPcWkM -----END CERTIFICATE-----Generated at Fri Mar 13 08:50:56 2026 by rpki-client