$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/CFF0FFB002CC11E6AA35863CC4F9AE02.roa File: CFF0FFB002CC11E6AA35863CC4F9AE02.roa (raw, json) Hash identifier: Tc0OP8h4p96K0lAWOjeLDMbCL1ZxKDKH+Zne0effYn4= Subject key identifier: 31:9B:EF:EA:3D:45:45:4A:7C:07:9C:9A:DE:0A:2E:04:6A:00:78:D5 Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 262E Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/CFF0FFB002CC11E6AA35863CC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:53:03 +0000 ROA not before: Mon 04 Aug 2025 16:24:32 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 56095 IP address blocks: 120.28.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9774 (0x262e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Aug 4 16:24:32 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a48b0e-3496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:5b:70:7c:f9:38:28:41:ef:39:9e:b1:ab:8d: a4:f0:f7:6b:49:f7:f4:f4:82:5a:b6:0f:17:0e:66: d7:0d:bd:b7:b1:15:24:2d:f2:93:18:4e:28:dd:19: a5:a1:9b:45:a9:6e:85:4d:7d:fb:40:ad:89:91:ad: 5a:07:55:1a:68:dd:a1:a8:f0:2c:97:c3:17:e6:be: bd:3f:e8:06:00:90:32:d2:6d:cf:0e:c8:87:bd:3a: e1:b8:76:6e:de:98:0b:5b:61:f5:7f:54:e1:e8:eb: 27:4c:57:6a:11:ec:32:ba:f1:ee:ac:b3:de:4a:75: db:8c:35:1c:e4:7c:9d:e7:a0:f8:9f:f7:5c:28:64: f3:0f:95:c3:14:58:a0:da:38:d6:63:47:90:a3:ed: 65:e8:c1:73:2d:6b:49:d5:2d:19:c4:ca:de:da:4f: 6a:bb:60:8f:f3:7c:e7:2a:c6:6e:b0:dd:37:7d:32: 55:ec:e3:fa:0b:24:d1:10:b5:5b:1a:1b:73:a8:cb: 8f:ae:18:19:1c:6c:ca:2b:d6:b8:82:00:c1:b5:79: 69:37:07:78:0c:d4:9f:8c:82:45:66:64:09:b8:2b: e3:86:82:02:13:a8:c3:49:37:1e:36:df:bc:95:94: ec:27:64:a1:d4:a2:fb:28:c3:8c:68:27:19:6b:12: 15:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9B:EF:EA:3D:45:45:4A:7C:07:9C:9A:DE:0A:2E:04:6A:00:78:D5 X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/CFF0FFB002CC11E6AA35863CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 120.28.16.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:46:5e:4c:cd:c9:bf:40:2e:72:a7:64:f6:51:47:d9:8d:56: ce:35:5a:4b:89:e2:14:6a:d9:a9:99:5a:2b:9f:9e:30:66:be: 57:a5:31:8c:13:ee:b6:d8:e3:fa:3f:05:97:67:9e:05:01:24: d2:0f:8e:bd:90:ba:d9:07:36:23:ff:d9:92:18:f5:56:04:37: 4b:f4:e1:d6:5a:d0:bf:b0:26:8e:dc:86:d8:63:7b:c8:9b:2e: b8:74:ec:d9:f7:4a:ad:ff:0a:b3:6a:7a:9e:43:e2:de:35:0d: bf:cf:9b:66:fc:86:2c:4a:c6:f8:8d:6a:30:ae:bd:37:23:61: da:66:69:a9:87:58:da:a3:49:8b:ce:5a:3c:3e:82:75:61:7e: 97:e3:9f:a7:22:1a:ac:f0:fa:d0:c2:13:c9:e9:00:e0:94:a1: eb:f5:9b:c3:89:1b:83:ac:05:a8:0c:88:a7:04:39:c9:38:fd: e1:22:61:69:ad:28:35:32:33:1e:42:06:50:40:1c:5b:b9:71: 77:f2:3b:f2:24:fa:47:d0:ed:52:18:06:80:09:ee:04:07:28: 11:f0:ce:2a:c9:0e:19:7a:0b:4e:db:1d:20:cc:c6:30:7f:12: 46:8c:0f:31:19:be:09:e4:fd:40:d5:8e:61:4c:5e:29:d2:09: 58:a0:42:4a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICJi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjUwODA0MTYyNDMyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGIwZS0zNDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA51twfPk4KEHvOZ6xq42k8PdrSff09IJatg8XDmbXDb23sRUkLfKTGE4o3Rml oZtFqW6FTX37QK2Jka1aB1UaaN2hqPAsl8MX5r69P+gGAJAy0m3PDsiHvTrhuHZu 3pgLW2H1f1Th6OsnTFdqEewyuvHurLPeSnXbjDUc5Hyd56D4n/dcKGTzD5XDFFig 2jjWY0eQo+1l6MFzLWtJ1S0ZxMre2k9qu2CP83znKsZusN03fTJV7OP6CyTRELVb GhtzqMuPrhgZHGzKK9a4ggDBtXlpNwd4DNSfjIJFZmQJuCvjhoICE6jDSTceNt+8 lZTsJ2Sh1KL7KMOMaCcZaxIVwwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDGb7+o9 RUVKfAecmt4KLgRqAHjVMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDYyMDcvRkU3NTYzNDAwMkNCMTFFNjg2NUI4RjNCQzRGOUFFMDIvQ0ZGMEZGQjAw MkNDMTFFNkFBMzU4NjNDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAeBwQMA0GCSqGSIb3DQEBCwUAA4IBAQCLRl5Mzcm/QC5yp2T2UUfZ jVbONVpLieIUatmpmVorn54wZr5XpTGME+622OP6PwWXZ54FASTSD469kLrZBzYj /9mSGPVWBDdL9OHWWtC/sCaO3IbYY3vImy64dOzZ90qt/wqzanqeQ+LeNQ2/z5tm /IYsSsb4jWowrr03I2HaZmmph1jao0mLzlo8PoJ1YX6X45+nIhqs8PrQwhPJ6QDg lKHr9ZvDiRuDrAWoDIinBDnJOP3hImFprSg1MjMeQgZQQBxbuXF38jvyJPpH0O1S GAaACe4EBygR8M4qyQ4ZegtO2x0gzMYwfxJGjA8xGb4J5P1A1Y5hTF4p0glYoEJK -----END CERTIFICATE-----Generated at Mon Mar 2 05:52:17 2026 by rpki-client