$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/AB988312177211EBAC79CC7EC4F9AE02.roa File: AB988312177211EBAC79CC7EC4F9AE02.roa (raw, json) Hash identifier: n5U2VFCOEQTSOh6nc6suUj77+8ZXZZeQOgQNXBchDAk= Subject key identifier: 2C:E6:D1:38:E4:DA:6A:CB:7F:7F:22:1F:14:DD:9D:28:5B:F6:5A:55 Certificate issuer: /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE Certificate serial: 0BF9 Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/AB988312177211EBAC79CC7EC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:00:12 +0000 ROA not before: Fri 28 Mar 2025 20:01:52 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 45166 IP address blocks: 58.145.227.0/24 maxlen: 24 58.145.229.0/24 maxlen: 24 58.145.230.0/24 maxlen: 24 210.24.208.0/23 maxlen: 24 210.24.210.0/23 maxlen: 23 210.24.210.0/24 maxlen: 24 210.24.211.0/24 maxlen: 24 210.24.236.0/23 maxlen: 23 210.24.236.0/24 maxlen: 24 210.24.237.0/24 maxlen: 24 2400:1700:300::/48 maxlen: 48 2400:1700:301::/48 maxlen: 48 2400:1700:302::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3065 (0xbf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A2, serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE Validity Not Before: Mar 28 20:01:52 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a4628b-bdf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7e:68:63:69:d3:ae:35:8a:47:4a:e7:9d:64: 53:29:de:cf:8f:6c:c9:03:d0:e4:ec:bf:df:9b:df: 73:18:c5:ee:cb:55:67:d1:04:49:66:c9:ff:90:e9: 00:6b:e3:d9:cd:03:79:d6:c4:6d:40:46:3b:da:fb: 5e:0f:48:de:ec:e0:a4:10:26:58:40:c8:7c:bc:bf: 08:c7:ed:50:bf:a9:45:78:3b:ca:cb:14:2b:b3:18: 8a:04:c6:6a:9d:ac:4a:fd:e8:32:5a:36:fa:cf:e4: 6e:f0:3c:66:02:17:7e:04:11:77:7a:09:f2:20:43: 47:5c:74:37:2c:be:9c:07:01:0e:ca:0d:8e:fa:28: c7:4c:39:90:f2:53:eb:99:9e:93:78:23:c9:4f:b9: c0:5d:f7:aa:3f:2a:15:fd:c1:fa:8f:a0:d6:b3:98: b7:14:d5:f9:d1:b6:ae:de:98:3a:1e:dc:d5:08:26: 8c:0a:ff:60:ca:9f:60:34:73:9c:4e:8b:46:34:55: 40:b1:9b:d7:99:6c:c9:bf:57:81:73:b6:f6:84:78: 9b:61:12:36:b0:1b:0b:87:a9:30:a0:ac:6e:a6:b6: a7:88:fd:7e:9b:a7:05:b2:a9:77:7e:bf:46:97:e7: 34:da:15:43:7c:be:03:85:fe:18:7f:74:d2:3c:53: d0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E6:D1:38:E4:DA:6A:CB:7F:7F:22:1F:14:DD:9D:28:5B:F6:5A:55 X509v3 Authority Key Identifier: keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/AB988312177211EBAC79CC7EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 58.145.227.0/24 58.145.229.0-58.145.230.255 210.24.208.0/22 210.24.236.0/23 IPv6: 2400:1700:300::-2400:1700:302:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 25:00:3a:78:a5:f7:83:af:a7:39:90:e7:d8:74:38:22:36:36: 39:d7:74:83:01:27:f7:d5:45:c6:3d:bc:7a:40:4e:02:40:95: f6:1f:38:b4:5b:74:fa:a5:87:9d:d7:4d:53:24:42:45:05:a5: 4e:09:1e:6e:64:01:13:89:32:08:85:20:b6:ca:b9:f0:19:2f: cc:e3:2e:e2:e3:bc:b6:2b:46:e6:93:e9:54:91:97:fd:78:cf: 95:60:d6:30:75:97:32:b6:ba:bc:01:41:0c:dd:39:ec:5d:b5: 93:75:ed:16:aa:37:f9:63:ce:d0:16:d5:2e:a6:ee:6b:f1:ec: 6b:d8:7b:97:98:c4:13:44:9c:37:df:9f:84:d0:f1:f2:85:fd: e7:9e:9d:13:bd:e5:98:ec:48:9f:13:d0:86:75:9a:82:f8:44: ff:43:62:04:f5:8d:ed:e2:05:be:c6:6f:e0:67:14:b3:70:ef: 72:e9:eb:04:c7:c7:4c:8a:7a:09:2b:a0:26:47:c0:29:d4:8f: 08:9d:5e:71:d3:6f:20:3b:63:b6:34:6a:14:07:71:61:ab:ff: c2:95:f1:3a:4a:40:f8:3e:7d:4b:d9:55:dd:ba:ba:7c:8c:b4: 28:26:32:d5:a5:fc:61:bb:43:14:24:8e:7f:45:c5:e2:81:1d: af:2b:c3:7d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTIxMTAvBgNVBAUTKDkyODdGNkU4MkY4RjNCQTI0RTA5RDlDNjMxNzhBNUMw QjJEQTAxREUwHhcNMjUwMzI4MjAwMTUyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjI4Yi1iZGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqH5oY2nTrjWKR0rnnWRTKd7Pj2zJA9Dk7L/fm99zGMXuy1Vn0QRJZsn/kOkA a+PZzQN51sRtQEY72vteD0je7OCkECZYQMh8vL8Ix+1Qv6lFeDvKyxQrsxiKBMZq naxK/egyWjb6z+Ru8DxmAhd+BBF3egnyIENHXHQ3LL6cBwEOyg2O+ijHTDmQ8lPr mZ6TeCPJT7nAXfeqPyoV/cH6j6DWs5i3FNX50bau3pg6HtzVCCaMCv9gyp9gNHOc TotGNFVAsZvXmWzJv1eBc7b2hHibYRI2sBsLh6kwoKxupraniP1+m6cFsql3fr9G l+c02hVDfL4Dhf4Yf3TSPFPQ7QIDAQABo4IClTCCApEwHQYDVR0OBBYEFCzm0Tjk 2mrLf38iHxTdnShb9lpVMB8GA1UdIwQYMBaAFJKH9ugvjzuiTgnZxjF4pcCy2gHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMi9CNTc3M0FBQzU5 NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rb2YyNkMtUE82Sk9DZG5HTVhpbHdMTGFB ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tvZjI2Qy1QTzZKT0NkbkdNWGlsd0xMYUFkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODQ3QTIvQjU3NzNBQUM1OTQyMTFFQTkzNkZDRTQzQzRGOUFFMDIvQUI5ODgzMTIx NzcyMTFFQkFDNzlDQzdFQzRGOUFFMDIucm9hMFQGCCsGAQUFBwEHAQH/BEUwQzAm BAIAATAgAwQAOpHjMAwDBAA6keUDBAA6keYDBALSGNADBAHSGOwwGQQCAAIwEzAR AwYAJAAXAAMDBwAkABcAAwIwDQYJKoZIhvcNAQELBQADggEBACUAOnil94OvpzmQ 59h0OCI2NjnXdIMBJ/fVRcY9vHpATgJAlfYfOLRbdPqlh53XTVMkQkUFpU4JHm5k AROJMgiFILbKufAZL8zjLuLjvLYrRuaT6VSRl/14z5Vg1jB1lzK2urwBQQzdOexd tZN17RaqN/ljztAW1S6m7mvx7GvYe5eYxBNEnDffn4TQ8fKF/eeenRO95ZjsSJ8T 0IZ1moL4RP9DYgT1je3iBb7Gb+BnFLNw73Lp6wTHx0yKegkroCZHwCnUjwidXnHT byA7Y7Y0ahQHcWGr/8KV8TpKQPg+fUvZVd26unyMtCgmMtWl/GG7QxQkjn9FxeKB Ha8rw30= -----END CERTIFICATE-----Generated at Mon Mar 2 14:58:57 2026 by rpki-client