$ rpki-client -vvf rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/B240CFC23F8A11F0B3F03A67C4F9AE02.roa File: B240CFC23F8A11F0B3F03A67C4F9AE02.roa (raw, json) Hash identifier: aeyFzFXHztpNVjnZlO3gHFxBYSn6/XFI33bCu/pTMTg= Subject key identifier: DD:EB:D2:2E:82:C0:2D:98:5A:92:98:39:E1:87:99:C9:FD:54:B4:42 Certificate issuer: /CN=A91426E8/serialNumber=F3718957050C4BCE14A4EC38EAACEE9C74244C4F Certificate serial: 90 Authority key identifier: F3:71:89:57:05:0C:4B:CE:14:A4:EC:38:EA:AC:EE:9C:74:24:4C:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/B240CFC23F8A11F0B3F03A67C4F9AE02.roa Signing time: Sun 01 Mar 2026 08:09:41 +0000 ROA not before: Mon 02 Jun 2025 08:22:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132504 IP address blocks: 223.27.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.crl rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:50:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91426E8, serialNumber=F3718957050C4BCE14A4EC38EAACEE9C74244C4F Validity Not Before: Jun 2 08:22:18 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a3f445-2fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d0:c6:93:bf:59:08:02:c5:24:7d:c2:af:5d: 6b:47:d6:72:ac:a5:47:98:af:93:ec:be:1c:6c:af: 73:2c:39:fc:d8:e5:96:58:fd:18:d3:5d:0d:ef:fb: f2:62:f8:4d:d3:e0:cf:5d:a8:0e:58:66:d1:32:22: db:bb:5f:69:71:37:bf:ad:03:d5:a3:00:3d:a7:87: b5:c4:bc:0f:27:3c:74:79:f5:61:d7:cd:b0:cf:40: 1e:c3:5e:09:b8:b8:c4:77:66:a0:a3:28:34:cd:07: f1:6f:1c:50:ec:10:fb:fa:5f:c9:da:2c:1b:55:55: 09:1b:49:2b:05:8c:cf:92:12:d6:3f:f8:22:c3:3f: a1:d5:8b:e3:86:33:c8:68:11:08:3f:cf:e8:0a:66: 8b:e2:69:14:82:2f:2a:8e:bf:92:53:63:c2:ea:40: 56:ba:d1:11:18:64:87:18:cb:2b:e9:b2:20:30:86: 5e:a9:32:16:a3:14:5e:90:12:f1:99:8a:e2:2f:30: c2:c4:90:52:fa:a3:63:b5:19:4b:b6:c4:ce:17:fa: 09:b1:96:3b:de:3e:8e:ef:cd:55:61:1a:b3:11:3d: f3:17:09:7f:73:5d:55:57:d0:6d:b7:b8:21:65:1f: 70:aa:16:6f:9e:0f:48:b4:30:7c:25:11:14:66:71: 21:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:EB:D2:2E:82:C0:2D:98:5A:92:98:39:E1:87:99:C9:FD:54:B4:42 X509v3 Authority Key Identifier: keyid:F3:71:89:57:05:0C:4B:CE:14:A4:EC:38:EA:AC:EE:9C:74:24:4C:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/B240CFC23F8A11F0B3F03A67C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 223.27.118.0/23 Signature Algorithm: sha256WithRSAEncryption 20:be:1d:2e:d0:6e:85:80:4c:90:b1:9e:e3:db:df:f1:4c:ae: 91:6a:1d:5c:da:57:41:77:0c:64:32:d7:27:74:b5:f3:7f:7f: 6f:85:c5:d4:0b:cd:e7:a8:f6:63:e9:79:3a:be:ee:44:2b:bb: 37:b6:01:40:4e:89:06:b0:5a:03:81:f9:b2:29:1c:97:7e:6f: 48:2e:e5:0c:06:7f:64:59:8d:90:07:e6:c1:68:50:92:ab:24: 6b:6f:dc:02:6b:9d:95:80:b9:ba:80:98:ab:1a:86:19:bd:7c: 21:b1:fa:a2:80:41:d0:99:22:b2:2f:04:8c:d6:94:4a:c6:86: 5f:31:78:80:34:40:c7:c0:a0:c9:3a:7c:c5:a3:fc:dc:d1:0c: 1b:df:49:40:c6:17:f5:a1:d3:fc:34:bd:93:3c:8d:15:b3:72: 2f:54:37:ff:17:20:46:f8:e7:7e:ec:49:54:de:a0:0e:50:25: 2a:9a:fa:3d:36:ed:e7:21:f0:82:1b:28:0f:bf:81:72:70:a3: 2d:ec:67:86:d3:2f:e8:10:d8:2c:87:ac:bc:9f:db:a1:ff:72: 38:4c:c1:b3:6c:d7:d0:8f:e3:9d:14:9c:5d:49:78:3f:a3:13: 2f:42:90:9a:7d:c7:81:92:82:d4:7b:1d:f8:85:78:80:b4:22: 9c:a6:d9:b0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI2RTgxMTAvBgNVBAUTKEYzNzE4OTU3MDUwQzRCQ0UxNEE0RUMzOEVBQUNFRTlD NzQyNDRDNEYwHhcNMjUwNjAyMDgyMjE4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZjQ0NS0yZmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2NDGk79ZCALFJH3Cr11rR9ZyrKVHmK+T7L4cbK9zLDn82OWWWP0Y010N7/vy YvhN0+DPXagOWGbRMiLbu19pcTe/rQPVowA9p4e1xLwPJzx0efVh182wz0Aew14J uLjEd2agoyg0zQfxbxxQ7BD7+l/J2iwbVVUJG0krBYzPkhLWP/giwz+h1YvjhjPI aBEIP8/oCmaL4mkUgi8qjr+SU2PC6kBWutERGGSHGMsr6bIgMIZeqTIWoxRekBLx mYriLzDCxJBS+qNjtRlLtsTOF/oJsZY73j6O781VYRqzET3zFwl/c11VV9Btt7gh ZR9wqhZvng9ItDB8JREUZnEhfQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFN3r0i6C wC2YWpKYOeGHmcn9VLRCMB8GA1UdIwQYMBaAFPNxiVcFDEvOFKTsOOqs7px0JExP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjZFOC84RDVBQTE3QTNG NzUxMUYwOTYyMzJBMTFDNEY5QUUwMi84M0dKVndVTVM4NFVwT3c0NnF6dW5IUWtU RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgzR0pWd1VNUzg0VXBPdzQ2cXp1bkhRa1RFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDI2RTgvOEQ1QUExN0EzRjc1MTFGMDk2MjMyQTExQzRGOUFFMDIvQjI0MENGQzIz RjhBMTFGMEIzRjAzQTY3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQB3xt2MA0GCSqGSIb3DQEBCwUAA4IBAQAgvh0u0G6FgEyQsZ7j29/x TK6Rah1c2ldBdwxkMtcndLXzf39vhcXUC83nqPZj6Xk6vu5EK7s3tgFATokGsFoD gfmyKRyXfm9ILuUMBn9kWY2QB+bBaFCSqyRrb9wCa52VgLm6gJirGoYZvXwhsfqi gEHQmSKyLwSM1pRKxoZfMXiANEDHwKDJOnzFo/zc0Qwb30lAxhf1odP8NL2TPI0V s3IvVDf/FyBG+Od+7ElU3qAOUCUqmvo9Nu3nIfCCGygPv4FycKMt7GeG0y/oENgs h6y8n9uh/3I4TMGzbNfQj+OdFJxdSXg/oxMvQpCafceBkoLUex34hXiAtCKcptmw -----END CERTIFICATE-----Generated at Mon Mar 2 13:20:35 2026 by rpki-client