$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/B1986BCE2E2411EB8AF6BB67C4F9AE02.roa File: B1986BCE2E2411EB8AF6BB67C4F9AE02.roa (raw, json) Hash identifier: iDD/cykx6wIoU1qmgTIgB853kbpj3nssniFazk/0qr0= Subject key identifier: 29:7E:07:20:95:51:2D:08:35:DA:81:4D:EA:B7:AB:F7:D3:A8:CF:35 Certificate issuer: /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE Certificate serial: 0BFC Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/B1986BCE2E2411EB8AF6BB67C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:00:15 +0000 ROA not before: Fri 28 Mar 2025 20:01:56 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 9255 IP address blocks: 203.120.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3068 (0xbfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A2, serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE Validity Not Before: Mar 28 20:01:56 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a4628e-6cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:be:de:aa:ce:42:70:a7:71:ce:25:6e:e5:75: f3:60:a9:bc:a3:af:5d:46:b9:3a:2b:9e:36:7e:38: 92:68:bb:d5:7f:3e:1c:6a:71:1b:16:26:20:09:5a: 27:fd:0b:35:4f:6f:af:97:d2:76:74:f1:88:66:34: e4:67:82:f0:63:33:dc:7b:f1:ce:51:66:f9:c3:ed: 82:1d:f8:5c:1c:a4:3b:cf:47:5a:5e:80:b1:54:1b: 86:76:7d:b5:7a:d4:a1:2c:e8:44:bc:ec:0e:3f:9f: cc:f0:ce:b6:22:05:57:29:88:61:c4:25:71:33:c6: 0a:af:09:bd:38:50:e8:8e:1e:47:bc:21:9b:d5:cd: f3:a9:8f:c1:f8:1e:a5:26:0a:a7:32:e2:67:92:2b: 0c:20:71:ec:ed:11:33:8a:b2:a3:3c:12:18:ff:70: c8:e1:eb:43:b5:5a:48:f6:f0:98:d8:51:9f:75:1b: f2:10:42:44:14:04:38:ec:71:d7:40:7c:6a:c8:a9: 63:85:61:46:0a:e1:df:71:e5:37:1f:41:49:8b:fd: 3d:8f:57:65:5a:90:a9:da:06:92:7c:5a:f8:86:ac: 80:3f:e5:cd:c9:4f:bd:0c:2b:9b:4e:b8:15:c7:c3: 61:5c:43:2a:0b:55:d8:a1:57:88:47:40:79:85:fe: 5e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:7E:07:20:95:51:2D:08:35:DA:81:4D:EA:B7:AB:F7:D3:A8:CF:35 X509v3 Authority Key Identifier: keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/B1986BCE2E2411EB8AF6BB67C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.120.124.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:64:05:de:4d:5c:87:07:a4:93:c2:ef:ab:b6:e5:7e:10:ce: cc:94:04:d8:1d:c3:0e:97:ef:38:56:61:6d:53:d9:24:97:df: c6:1f:de:a3:74:50:1e:5e:ea:8f:a5:7a:b3:0a:e3:a9:7f:96: f9:01:9c:9b:0e:d4:0f:56:46:35:75:52:fb:86:54:33:93:e6: 4d:4e:2b:e8:1b:6c:dc:4d:de:e7:61:29:a2:ba:eb:03:5f:e7: e4:e2:ec:ea:24:64:06:98:22:01:64:bd:07:a7:10:75:32:31: d4:d7:fe:6a:c1:5e:d2:98:26:5c:c2:c9:0d:31:20:b6:69:13: a0:32:ab:fe:94:a1:6f:bc:45:a7:a7:59:89:08:ac:01:b6:2b: 3b:cf:77:67:65:91:53:6d:4b:2f:8f:eb:7e:d1:34:d3:35:cd: 36:01:6f:1f:e8:26:73:4b:34:b6:d7:a8:71:b8:1f:a9:28:b3: 41:2c:50:f8:52:18:6d:e6:3b:4a:d0:c7:81:8f:6a:1e:8a:85: 56:98:4e:40:2f:32:85:0d:75:d2:1d:11:a5:9d:71:31:67:af: 3e:9e:74:5b:31:1f:11:ba:bf:3b:42:9e:43:09:ea:6e:17:d2: c1:20:37:b2:f8:b1:fc:ee:31:0f:9f:c6:8b:84:f0:a8:7f:33: 6f:6f:8e:eb -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICC/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTIxMTAvBgNVBAUTKDkyODdGNkU4MkY4RjNCQTI0RTA5RDlDNjMxNzhBNUMw QjJEQTAxREUwHhcNMjUwMzI4MjAwMTU2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjI4ZS02Y2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0r7eqs5CcKdxziVu5XXzYKm8o69dRrk6K542fjiSaLvVfz4canEbFiYgCVon /Qs1T2+vl9J2dPGIZjTkZ4LwYzPce/HOUWb5w+2CHfhcHKQ7z0daXoCxVBuGdn21 etShLOhEvOwOP5/M8M62IgVXKYhhxCVxM8YKrwm9OFDojh5HvCGb1c3zqY/B+B6l JgqnMuJnkisMIHHs7REzirKjPBIY/3DI4etDtVpI9vCY2FGfdRvyEEJEFAQ47HHX QHxqyKljhWFGCuHfceU3H0FJi/09j1dlWpCp2gaSfFr4hqyAP+XNyU+9DCubTrgV x8NhXEMqC1XYoVeIR0B5hf5eiQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCl+ByCV US0INdqBTeq3q/fTqM81MB8GA1UdIwQYMBaAFJKH9ugvjzuiTgnZxjF4pcCy2gHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMi9CNTc3M0FBQzU5 NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rb2YyNkMtUE82Sk9DZG5HTVhpbHdMTGFB ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tvZjI2Qy1QTzZKT0NkbkdNWGlsd0xMYUFkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODQ3QTIvQjU3NzNBQUM1OTQyMTFFQTkzNkZDRTQzQzRGOUFFMDIvQjE5ODZCQ0Uy RTI0MTFFQjhBRjZCQjY3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAy3h8MA0GCSqGSIb3DQEBCwUAA4IBAQAvZAXeTVyHB6STwu+rtuV+ EM7MlATYHcMOl+84VmFtU9kkl9/GH96jdFAeXuqPpXqzCuOpf5b5AZybDtQPVkY1 dVL7hlQzk+ZNTivoG2zcTd7nYSmiuusDX+fk4uzqJGQGmCIBZL0HpxB1MjHU1/5q wV7SmCZcwskNMSC2aROgMqv+lKFvvEWnp1mJCKwBtis7z3dnZZFTbUsvj+t+0TTT Nc02AW8f6CZzSzS216hxuB+pKLNBLFD4Uhht5jtK0MeBj2oeioVWmE5ALzKFDXXS HRGlnXExZ68+nnRbMR8Rur87Qp5DCepuF9LBIDey+LH87jEPn8aLhPCofzNvb47r -----END CERTIFICATE-----Generated at Mon Mar 2 10:02:09 2026 by rpki-client