$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/EDD4DB0CEDB211EFB0D2622AC4F9AE02.roa File: EDD4DB0CEDB211EFB0D2622AC4F9AE02.roa (raw, json) Hash identifier: 94RDx70LG5IyD7ln6nyWmw3CJGIuGdny8kRccYnNuHk= Subject key identifier: C0:7D:A9:75:65:1B:7A:3C:7B:0A:C1:47:0C:38:AF:85:2F:B0:EC:F6 Certificate issuer: /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C Certificate serial: 087E Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/EDD4DB0CEDB211EFB0D2622AC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:44:33 +0000 ROA not before: Wed 14 Jan 2026 11:55:32 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 132231 IP address blocks: 202.150.96.0/20 maxlen: 24 202.150.112.0/20 maxlen: 24 202.189.172.0/23 maxlen: 24 202.189.174.0/24 maxlen: 24 202.189.175.0/24 maxlen: 24 2403:c900::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2174 (0x87e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406AA, serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C Validity Not Before: Jan 14 11:55:32 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a48910-8d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:44:71:ae:59:b4:c4:81:85:70:eb:d1:e8:b4: bb:cb:b7:a7:a5:62:7f:6b:25:92:b6:52:4e:e0:e5: 9c:f3:55:97:7f:aa:36:7d:ff:9f:e8:bc:3f:8f:93: 17:c3:be:06:ea:ed:0f:85:aa:c8:95:41:49:c3:0f: f9:bf:f3:18:5e:ee:52:d9:3f:41:41:20:46:b8:2c: 3c:aa:30:e8:8d:ae:6b:89:48:ef:22:1f:ef:64:82: fa:f3:ed:b8:ac:64:de:53:4f:06:6d:83:32:3a:d3: e5:ce:f4:37:96:86:18:cc:a8:99:39:6d:ed:3f:0f: ed:af:38:2a:4f:09:fe:b1:50:7d:b0:a1:a5:1f:10: 55:59:8f:5d:b7:8c:b0:f8:d1:83:4c:b7:c0:9f:96: 36:97:07:43:db:94:41:c3:cf:b4:f4:40:da:c5:50: 22:0b:8e:d9:0c:5c:33:d7:b3:14:91:8a:88:54:9a: 04:04:ca:b4:bb:95:d8:0a:fb:d1:5c:19:b0:dc:bb: 4c:18:c6:90:24:4f:6b:0a:7b:0d:5f:c6:f6:85:49: e5:a5:98:13:7f:9c:3a:47:cd:cc:00:9a:3e:19:21: 00:14:3e:d6:20:07:ce:ca:93:87:40:6f:4c:bf:8d: c0:5f:00:3e:bd:25:45:96:5b:c3:6f:b5:06:5e:9c: 78:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:7D:A9:75:65:1B:7A:3C:7B:0A:C1:47:0C:38:AF:85:2F:B0:EC:F6 X509v3 Authority Key Identifier: keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/EDD4DB0CEDB211EFB0D2622AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.150.96.0/19 202.189.172.0/22 IPv6: 2403:c900::/32 Signature Algorithm: sha256WithRSAEncryption 74:1d:f6:43:08:2a:c5:5a:49:80:cd:37:71:65:b5:c7:90:97: cd:b6:2c:ea:6d:11:90:17:30:56:9c:bf:1f:f5:4e:38:f5:2f: cb:fe:bb:12:63:87:0a:e4:49:10:e0:44:00:68:ef:fc:93:87: a8:e4:7e:d9:bf:68:5e:92:69:8e:f7:93:87:be:4c:fc:45:6f: 7a:84:61:86:c3:90:ec:fb:26:89:52:2b:d1:0e:2f:60:1d:7d: ed:d7:70:77:6f:52:b2:d6:0b:0e:46:00:34:63:62:63:6b:46: 9a:92:d0:03:e5:85:3b:96:44:8f:a4:6a:7e:b1:c7:a1:23:89: 3c:9c:e6:a5:5f:0c:be:5d:46:7d:e1:de:eb:7f:77:11:18:e8: 98:08:4c:15:da:36:0a:24:fe:8f:9b:60:4e:30:9c:45:74:20: 3c:b4:51:5b:cd:60:f6:48:81:44:d2:3e:f8:c2:54:f5:b1:0d: 42:7b:17:e3:9e:4f:d7:07:bd:4d:60:15:dd:90:e9:69:f5:41: e3:d2:a3:fe:80:5b:b6:51:6d:01:57:d9:6c:0e:e4:56:58:f4: a9:2b:7e:ea:90:54:85:e7:07:dc:bf:60:a5:6f:cb:77:fa:5f: 53:d2:c1:08:c0:f0:a4:4e:8d:07:3a:0d:2f:76:69:e9:30:90: 19:85:01:27 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA2QUExMTAvBgNVBAUTKDMxNTUxM0U1NEFCMEM5OUI4QkNBODQwNDJFMzgzNThC NjBEQjFCMkMwHhcNMjYwMTE0MTE1NTMyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODkxMC04ZDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtERxrlm0xIGFcOvR6LS7y7enpWJ/ayWStlJO4OWc81WXf6o2ff+f6Lw/j5MX w74G6u0PharIlUFJww/5v/MYXu5S2T9BQSBGuCw8qjDoja5riUjvIh/vZIL68+24 rGTeU08GbYMyOtPlzvQ3loYYzKiZOW3tPw/trzgqTwn+sVB9sKGlHxBVWY9dt4yw +NGDTLfAn5Y2lwdD25RBw8+09EDaxVAiC47ZDFwz17MUkYqIVJoEBMq0u5XYCvvR XBmw3LtMGMaQJE9rCnsNX8b2hUnlpZgTf5w6R83MAJo+GSEAFD7WIAfOypOHQG9M v43AXwA+vSVFllvDb7UGXpx4FQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFMB9qXVl G3o8ewrBRww4r4UvsOz2MB8GA1UdIwQYMBaAFDFVE+VKsMmbi8qEBC44NYtg2xss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84RjVCQjRGODg2 QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9NVlVUNVVxd3ladUx5b1FFTGpnMWkyRGJH eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01WVVQ1VXF3eVp1THlvUUVMamcxaTJEYkd5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDA2QUEvOEY1QkI0Rjg4NkMxMTFFQkJBQjMxODRCQzRGOUFFMDIvRURENERCMENF REIyMTFFRkIwRDI2MjJBQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQFypZgAwQCyr2sMA0EAgACMAcDBQAkA8kAMA0GCSqGSIb3DQEBCwUA A4IBAQB0HfZDCCrFWkmAzTdxZbXHkJfNtizqbRGQFzBWnL8f9U449S/L/rsSY4cK 5EkQ4EQAaO/8k4eo5H7Zv2hekmmO95OHvkz8RW96hGGGw5Ds+yaJUivRDi9gHX3t 13B3b1Ky1gsORgA0Y2Jja0aaktAD5YU7lkSPpGp+scehI4k8nOalXwy+XUZ94d7r f3cRGOiYCEwV2jYKJP6Pm2BOMJxFdCA8tFFbzWD2SIFE0j74wlT1sQ1Cexfjnk/X B71NYBXdkOlp9UHj0qP+gFu2UW0BV9lsDuRWWPSpK37qkFSF5wfcv2Clb8t3+l9T 0sEIwPCkTo0HOg0vdmnpMJAZhQEn -----END CERTIFICATE-----Generated at Mon Mar 2 09:13:19 2026 by rpki-client