$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F3DC1FD08C5611E792848B4AC4F9AE02.roa File: F3DC1FD08C5611E792848B4AC4F9AE02.roa (raw, json) Hash identifier: gZZzBzDD+TICCubVSPx80rr0Kl1zCE8jx3bcXra60KQ= Subject key identifier: 6B:43:2E:AD:54:FA:AB:CE:5E:1C:F7:D2:9A:63:67:2B:FD:5E:4D:63 Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Certificate serial: 286C Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F3DC1FD08C5611E792848B4AC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:39:05 +0000 ROA not before: Tue 08 Apr 2025 15:53:46 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 24451 IP address blocks: 58.71.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 15:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10348 (0x286c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Validity Not Before: Apr 8 15:53:46 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a487c9-4d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:91:83:e3:79:bf:75:a1:89:8f:7a:aa:13:93: 06:3f:39:9f:d5:1e:d1:bf:70:aa:0d:7b:de:2e:6d: c1:2f:0a:c6:83:f9:b5:01:f6:7b:23:2a:fc:f4:70: 27:ca:dd:99:28:e1:33:4e:d4:de:0e:e6:5c:48:13: bf:1d:3f:c3:9f:fc:e4:0e:58:d0:0b:76:a1:52:da: 0c:5c:cd:b1:c4:24:ef:2f:4e:b4:f8:3c:fa:9f:09: 34:85:cc:03:e0:c6:60:2e:11:1b:41:15:c8:81:1f: e2:83:6c:81:a0:66:d1:56:de:43:8f:a5:56:72:51: 40:12:99:51:90:b9:58:fc:17:ac:00:72:c0:a2:17: 3a:e3:5a:ed:a8:bd:bb:04:a4:d2:98:ac:2f:e6:2e: a8:f5:ed:d9:68:82:a2:51:01:93:3b:b9:2b:61:dc: 3f:b1:02:f7:b8:05:9c:20:ef:68:13:d4:94:e6:c0: d0:e7:b7:ef:52:25:db:38:92:2c:ee:e8:b4:7e:c4: ca:b3:4e:db:cb:6e:68:50:2e:f3:69:f8:ea:b3:ed: 98:c1:b8:da:22:90:7a:35:38:aa:34:0f:c9:5f:1e: 7b:2c:8a:13:35:95:b8:99:cb:72:93:2e:2a:97:47: 27:30:9c:c5:fc:62:7f:73:11:d9:4b:1b:07:f6:ef: 33:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:43:2E:AD:54:FA:AB:CE:5E:1C:F7:D2:9A:63:67:2B:FD:5E:4D:63 X509v3 Authority Key Identifier: keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F3DC1FD08C5611E792848B4AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 58.71.71.0/24 Signature Algorithm: sha256WithRSAEncryption 68:05:c9:fa:bc:e7:04:09:d7:b0:d6:4d:99:ca:68:d0:dd:b7: b4:ec:4c:10:58:7b:77:4b:d0:12:cb:29:c8:37:b5:f3:2c:68: 09:ac:57:35:8d:87:1b:c4:32:b3:39:2d:53:3f:08:9e:b3:06: 62:6b:9a:38:7a:63:2e:76:bf:0d:78:04:94:bb:1b:ea:a9:c2: fd:59:26:18:2c:88:a1:58:42:65:c9:1d:50:32:43:f6:32:22: 2a:e0:71:bb:da:d8:0e:c0:a6:cf:8d:37:7c:e1:81:c1:bd:33: 48:b5:08:fc:7e:1e:c4:9d:f9:1e:93:81:5a:a7:b4:75:2d:e1: 97:dd:20:97:c2:f7:e5:f3:ca:58:52:bf:5a:e8:a4:ec:2b:54: 22:f7:6d:5d:e6:cb:97:79:62:7a:bf:b7:a0:6a:d0:77:0e:87: f3:2c:6b:03:3a:cd:40:e6:a1:e2:a2:22:6e:e1:4f:fc:b4:58: 90:cd:f9:02:85:c5:ff:50:d4:c7:8e:db:bb:70:5c:b0:58:9c: 08:55:d0:cc:57:84:19:cd:3d:28:dc:29:96:5f:46:49:a2:dc: 4e:f6:73:3a:91:53:f7:36:5a:38:6c:d7:90:a5:d9:13:cd:4b: 01:09:ef:26:e6:13:3d:7f:b5:5e:47:ce:62:2d:67:d8:1d:e2: ae:02:9e:7e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICKGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUyNkRCREVGMUIw NDU5MjhBQjgwHhcNMjUwNDA4MTU1MzQ2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODdjOS00ZDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmpGD43m/daGJj3qqE5MGPzmf1R7Rv3CqDXveLm3BLwrGg/m1AfZ7Iyr89HAn yt2ZKOEzTtTeDuZcSBO/HT/Dn/zkDljQC3ahUtoMXM2xxCTvL060+Dz6nwk0hcwD 4MZgLhEbQRXIgR/ig2yBoGbRVt5Dj6VWclFAEplRkLlY/BesAHLAohc641rtqL27 BKTSmKwv5i6o9e3ZaIKiUQGTO7krYdw/sQL3uAWcIO9oE9SU5sDQ57fvUiXbOJIs 7ui0fsTKs07by25oUC7zafjqs+2YwbjaIpB6NTiqNA/JXx57LIoTNZW4mctyky4q l0cnMJzF/GJ/cxHZSxsH9u8zTQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGtDLq1U +qvOXhz30ppjZyv9Xk1jMB8GA1UdIwQYMBaAFF0t0VS13OIft4bFJtve8bBFkoq4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkI3MC8yOTgzNjQ3Qzgz OEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRoLTNoc1VtMjk3eHNFV1Np cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hTM1JWTFhjNGgtM2hzVW0yOTd4c0VXU2lyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REZCNzAvMjk4MzY0N0M4MzhGMTFFNTg2RkM1ODEyQzRGOUFFMDIvRjNEQzFGRDA4 QzU2MTFFNzkyODQ4QjRBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAOkdHMA0GCSqGSIb3DQEBCwUAA4IBAQBoBcn6vOcECdew1k2ZymjQ 3be07EwQWHt3S9ASyynIN7XzLGgJrFc1jYcbxDKzOS1TPwieswZia5o4emMudr8N eASUuxvqqcL9WSYYLIihWEJlyR1QMkP2MiIq4HG72tgOwKbPjTd84YHBvTNItQj8 fh7Enfkek4Fap7R1LeGX3SCXwvfl88pYUr9a6KTsK1Qi921d5suXeWJ6v7egatB3 DofzLGsDOs1A5qHioiJu4U/8tFiQzfkChcX/UNTHjtu7cFywWJwIVdDMV4QZzT0o 3CmWX0ZJotxO9nM6kVP3Nlo4bNeQpdkTzUsBCe8m5hM9f7VeR85iLWfYHeKuAp5+ -----END CERTIFICATE-----Generated at Sun Mar 8 03:20:53 2026 by rpki-client