$ rpki-client -vvf rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/579FE34A0BF211EF8B0F9C81C4F9AE02.roa File: 579FE34A0BF211EF8B0F9C81C4F9AE02.roa (raw, json) Hash identifier: I0WpDgMmllreaPhV65poRHSHDSmFE5dRW9kHHGyYH/U= Subject key identifier: 3B:A0:F5:81:DC:85:38:15:0A:A3:48:91:04:EF:1D:EC:EB:FA:A9:01 Certificate issuer: /CN=A91203EB/serialNumber=2F265B0C802473094926890A85124E21B109DA3C Certificate serial: 06D4 Authority key identifier: 2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/579FE34A0BF211EF8B0F9C81C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:46:54 +0000 ROA not before: Sat 10 May 2025 22:22:50 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 396982 IP address blocks: 114.141.120.0/24 maxlen: 24 114.141.121.0/24 maxlen: 24 114.141.122.0/24 maxlen: 24 114.141.123.0/24 maxlen: 24 114.141.124.0/24 maxlen: 24 114.141.125.0/24 maxlen: 24 114.141.126.0/24 maxlen: 24 114.141.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:39:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1748 (0x6d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203EB, serialNumber=2F265B0C802473094926890A85124E21B109DA3C Validity Not Before: May 10 22:22:50 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a40b0e-cbfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6c:ca:3a:b3:7d:b1:69:b4:49:c4:d5:09:14: 79:42:78:f3:29:81:23:7f:cc:33:21:4f:1d:f6:7a: 0a:4d:d7:bf:9f:e6:d0:fc:e4:47:94:a8:63:5c:c0: 77:a9:61:66:62:66:70:a4:8e:40:3b:70:b5:d8:06: 40:0a:94:9a:d2:d1:25:c4:36:42:06:42:86:df:78: 23:8a:6f:43:f3:bf:6e:f5:5b:46:b8:60:88:a9:38: c0:f5:c9:16:1f:29:17:2b:4f:e4:cd:51:8d:54:69: e7:cd:f4:82:2b:92:66:7a:7d:82:da:8f:a4:4c:65: a4:d2:4f:f4:8a:89:15:fd:84:76:33:cc:77:bc:76: a8:16:0e:d3:29:32:11:05:49:45:f4:a1:8b:9f:1f: ce:3b:65:b7:ea:0e:7d:eb:e4:f8:08:60:e1:47:c5: 21:61:87:59:14:5f:89:c6:c2:5d:df:b3:2f:b4:81: 45:3f:2d:87:e0:28:69:3d:94:56:a0:ba:90:b3:1d: ab:2c:30:1e:c0:89:a3:37:e8:8b:19:61:ca:14:0d: 03:db:92:7e:d7:d2:f6:7f:e6:e7:08:67:5e:c2:c2: ba:06:4e:03:ea:76:3d:3b:23:9a:aa:ff:68:82:0b: 99:ca:68:72:cd:06:41:b3:0e:46:40:d4:b3:37:51: 96:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A0:F5:81:DC:85:38:15:0A:A3:48:91:04:EF:1D:EC:EB:FA:A9:01 X509v3 Authority Key Identifier: keyid:2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/579FE34A0BF211EF8B0F9C81C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 114.141.120.0/21 Signature Algorithm: sha256WithRSAEncryption 46:5c:16:14:f4:b6:77:96:aa:df:55:57:ea:84:69:67:38:a2: 87:ec:81:42:ca:8d:19:2a:81:25:04:c3:89:10:a7:33:e2:66: 88:85:ac:03:41:71:d0:38:f3:3f:b8:b0:2b:37:eb:a6:a2:18: f7:06:34:c4:d4:b6:a8:75:22:09:16:42:92:1b:5b:ee:25:38: 70:a3:f9:98:7a:99:df:0a:c7:31:70:a7:c1:13:f4:9f:a6:47: 36:3e:f5:e9:a8:8f:03:24:1a:e5:17:1c:68:66:d1:9c:83:c3: bf:98:e9:f8:ca:49:bb:33:da:20:11:48:03:4a:ab:37:24:07: f6:c4:4b:cd:be:6a:60:c5:38:ee:77:31:aa:32:46:d5:c9:37: 9f:3f:76:af:13:48:4c:f3:2b:fe:b7:c9:43:ab:fa:7d:97:e0: 8d:a8:59:09:aa:ae:45:8d:fc:f3:6c:58:bc:8b:63:25:f5:7d: 86:4e:d8:44:8e:6f:b0:0e:a3:d7:6d:28:61:a4:db:01:00:06: d1:01:3c:62:48:f8:88:a1:aa:72:5b:ae:29:5a:ce:70:39:56: fb:0f:04:4d:03:4a:f0:89:61:bb:b4:f9:ca:41:d6:ba:90:ec: 02:75:6b:9e:bd:d8:6a:d1:e3:3f:1c:59:19:b2:b4:33:35:09: 78:7f:f1:ef -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzRUIxMTAvBgNVBAUTKDJGMjY1QjBDODAyNDczMDk0OTI2ODkwQTg1MTI0RTIx QjEwOURBM0MwHhcNMjUwNTEwMjIyMjUwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGIwZS1jYmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2zKOrN9sWm0ScTVCRR5QnjzKYEjf8wzIU8d9noKTde/n+bQ/ORHlKhjXMB3 qWFmYmZwpI5AO3C12AZACpSa0tElxDZCBkKG33gjim9D879u9VtGuGCIqTjA9ckW HykXK0/kzVGNVGnnzfSCK5Jmen2C2o+kTGWk0k/0iokV/YR2M8x3vHaoFg7TKTIR BUlF9KGLnx/OO2W36g596+T4CGDhR8UhYYdZFF+JxsJd37MvtIFFPy2H4ChpPZRW oLqQsx2rLDAewImjN+iLGWHKFA0D25J+19L2f+bnCGdewsK6Bk4D6nY9OyOaqv9o gguZymhyzQZBsw5GQNSzN1GW4wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDug9YHc hTgVCqNIkQTvHezr+qkBMB8GA1UdIwQYMBaAFC8mWwyAJHMJSSaJCoUSTiGxCdo8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNFQi9GMzYyMkU3NDk3 NjkxMUVCQUJDNzc0ODZDNEY5QUUwMi9MeVpiRElBa2N3bEpKb2tLaFJKT0liRUoy ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x5WmJESUFrY3dsSkpva0toUkpPSWJFSjJqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjAzRUIvRjM2MjJFNzQ5NzY5MTFFQkFCQzc3NDg2QzRGOUFFMDIvNTc5RkUzNEEw QkYyMTFFRjhCMEY5QzgxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDco14MA0GCSqGSIb3DQEBCwUAA4IBAQBGXBYU9LZ3lqrfVVfqhGln OKKH7IFCyo0ZKoElBMOJEKcz4maIhawDQXHQOPM/uLArN+umohj3BjTE1LaodSIJ FkKSG1vuJThwo/mYepnfCscxcKfBE/Sfpkc2PvXpqI8DJBrlFxxoZtGcg8O/mOn4 ykm7M9ogEUgDSqs3JAf2xEvNvmpgxTjudzGqMkbVyTefP3avE0hM8yv+t8lDq/p9 l+CNqFkJqq5FjfzzbFi8i2Ml9X2GTthEjm+wDqPXbShhpNsBAAbRATxiSPiIoapy W64pWs5wOVb7DwRNA0rwiWG7tPnKQda6kOwCdWuevdhq0eM/HFkZsrQzNQl4f/Hv -----END CERTIFICATE-----Generated at Mon Mar 2 11:54:56 2026 by rpki-client