$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/EF3B21E28C5611E792848B4AC4F9AE02.roa File: EF3B21E28C5611E792848B4AC4F9AE02.roa (raw, json) Hash identifier: gPbn3ZlxkJOB2EvSUd7Qu5VCMxsl3O+APXI6TCulcQ0= Subject key identifier: EC:F9:4A:9B:DC:19:71:EF:05:F3:2F:FC:26:EC:E3:DB:16:27:5E:F8 Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Certificate serial: 2855 Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/EF3B21E28C5611E792848B4AC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:38:46 +0000 ROA not before: Tue 08 Apr 2025 15:53:23 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 131180 IP address blocks: 210.213.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 15:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10325 (0x2855) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Validity Not Before: Apr 8 15:53:23 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a487b6-f24f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:33:36:be:fe:a9:01:be:9e:ab:0f:e6:ef:e5: 1b:58:58:11:dc:3d:40:ea:4f:d1:7c:6c:61:37:c7: 02:e3:85:01:13:d2:b6:8a:ba:9c:79:47:da:e1:55: 66:20:ce:a3:3c:3d:b9:b2:00:96:67:a5:1e:f4:ec: 1e:d2:77:c3:4b:1d:35:d3:8f:8c:ac:28:1e:1a:fc: 7b:62:a9:28:fc:5d:2a:00:41:2a:21:a7:fa:9c:ce: 90:07:a1:49:bd:17:da:09:a1:77:a4:3b:3f:1a:03: 03:e9:c7:82:8f:94:99:9a:17:bd:92:72:a4:ca:09: bf:d9:2e:96:c9:bc:6a:84:de:bc:e5:de:87:52:8e: 64:88:c5:93:52:07:66:40:26:1b:81:f4:ef:09:cf: 5f:16:e0:12:76:d7:62:3d:56:20:57:87:5b:c3:09: 99:84:d6:da:a5:6f:cf:81:3b:74:6b:53:71:ea:40: 6b:33:32:7f:ae:5b:87:a6:4e:ba:80:9a:16:f6:8d: 1c:3e:20:88:89:2e:7d:6d:83:35:58:b8:6e:39:76: 9a:17:19:d5:64:e8:f0:85:23:f4:17:4f:09:c0:10: 90:98:94:6c:fd:33:81:39:0e:81:ea:c4:9c:05:d5: f8:b8:d7:36:2c:68:96:a1:57:4a:e1:e1:ec:6a:2d: 28:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F9:4A:9B:DC:19:71:EF:05:F3:2F:FC:26:EC:E3:DB:16:27:5E:F8 X509v3 Authority Key Identifier: keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/EF3B21E28C5611E792848B4AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 210.213.77.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:ab:0b:cb:85:61:a3:bb:91:d1:35:6a:65:8e:cd:22:c6:5d: d5:4c:49:12:07:a3:30:9b:c6:70:77:31:9e:42:b8:1c:ac:3b: af:d5:8c:14:11:71:b0:69:e9:48:35:ae:93:63:63:c7:d8:49: b4:06:7e:d9:bc:ff:dd:3e:c9:c5:7a:36:95:70:f1:9c:3a:74: 72:79:06:c9:87:ed:9d:94:17:58:21:e1:92:9b:3a:a3:74:94: 24:4b:1e:17:30:93:2e:dd:6d:2f:d7:88:ec:b0:f5:94:22:dc: a5:2f:f0:13:2b:86:4c:88:1f:2b:fe:aa:52:d8:99:99:82:e6: 42:48:a4:87:43:43:f8:a3:30:0c:ef:f6:f5:0f:ab:61:e1:db: 16:c3:50:77:93:72:e0:ae:59:d5:ec:32:f9:35:81:79:43:69: f4:4b:5a:fb:ba:02:8e:9e:1c:d1:87:13:cb:50:88:b9:b6:8e: 27:f9:fe:82:71:bb:4b:be:e6:2b:c6:c1:f5:ec:78:cb:0d:40: ad:2e:04:0e:82:53:3b:f8:9a:6f:db:09:1e:a7:43:17:66:36: 8f:62:be:6f:86:ee:d5:a4:e9:e5:57:d7:16:19:f2:3d:8a:fa: c8:32:ae:14:f1:49:1f:d8:69:e1:8d:5b:23:ab:0d:2e:cd:60: 13:82:cd:6c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICKFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUyNkRCREVGMUIw NDU5MjhBQjgwHhcNMjUwNDA4MTU1MzIzWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODdiNi1mMjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjM2vv6pAb6eqw/m7+UbWFgR3D1A6k/RfGxhN8cC44UBE9K2irqceUfa4VVm IM6jPD25sgCWZ6Ue9Owe0nfDSx0104+MrCgeGvx7Yqko/F0qAEEqIaf6nM6QB6FJ vRfaCaF3pDs/GgMD6ceCj5SZmhe9knKkygm/2S6WybxqhN685d6HUo5kiMWTUgdm QCYbgfTvCc9fFuASdtdiPVYgV4dbwwmZhNbapW/PgTt0a1Nx6kBrMzJ/rluHpk66 gJoW9o0cPiCIiS59bYM1WLhuOXaaFxnVZOjwhSP0F08JwBCQmJRs/TOBOQ6B6sSc BdX4uNc2LGiWoVdK4eHsai0o1QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOz5Spvc GXHvBfMv/Cbs49sWJ174MB8GA1UdIwQYMBaAFF0t0VS13OIft4bFJtve8bBFkoq4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkI3MC8yOTgzNjQ3Qzgz OEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRoLTNoc1VtMjk3eHNFV1Np cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hTM1JWTFhjNGgtM2hzVW0yOTd4c0VXU2lyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REZCNzAvMjk4MzY0N0M4MzhGMTFFNTg2RkM1ODEyQzRGOUFFMDIvRUYzQjIxRTI4 QzU2MTFFNzkyODQ4QjRBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQA0tVNMA0GCSqGSIb3DQEBCwUAA4IBAQB7qwvLhWGju5HRNWpljs0i xl3VTEkSB6Mwm8ZwdzGeQrgcrDuv1YwUEXGwaelINa6TY2PH2Em0Bn7ZvP/dPsnF ejaVcPGcOnRyeQbJh+2dlBdYIeGSmzqjdJQkSx4XMJMu3W0v14jssPWUItylL/AT K4ZMiB8r/qpS2JmZguZCSKSHQ0P4ozAM7/b1D6th4dsWw1B3k3LgrlnV7DL5NYF5 Q2n0S1r7ugKOnhzRhxPLUIi5to4n+f6CcbtLvuYrxsH17HjLDUCtLgQOglM7+Jpv 2wkep0MXZjaPYr5vhu7VpOnlV9cWGfI9ivrIMq4U8Ukf2GnhjVsjqw0uzWATgs1s -----END CERTIFICATE-----Generated at Sun Mar 8 03:24:50 2026 by rpki-client