$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/B3811802FED411EA83E4EC37C4F9AE02.roa File: B3811802FED411EA83E4EC37C4F9AE02.roa (raw, json) Hash identifier: uHI9zGOyPbHO2nzTM27Xm1djssKMTZcC2l9JljRs8m0= Subject key identifier: 5D:4D:38:F0:98:F5:AE:F4:FA:10:17:93:F6:69:59:02:A5:01:99:B0 Certificate issuer: /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Certificate serial: 1069 Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/B3811802FED411EA83E4EC37C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:31:35 +0000 ROA not before: Fri 28 Feb 2025 19:29:44 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 38796 IP address blocks: 120.29.248.0/23 maxlen: 23 120.29.250.0/23 maxlen: 23 120.29.255.0/24 maxlen: 24 202.65.14.0/24 maxlen: 24 202.65.15.0/24 maxlen: 24 203.17.72.0/24 maxlen: 24 2001:dcd:9::/48 maxlen: 48 2001:dcd:11::/48 maxlen: 48 2001:dcd:12::/48 maxlen: 48 2001:dcd:30::/48 maxlen: 48 2001:dcd:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4201 (0x1069) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91919EA, serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Validity Not Before: Feb 28 19:29:44 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a48607-a5e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:84:1c:03:99:bd:b7:79:ea:ae:0d:bd:27:4c: a6:12:6c:3d:b5:bb:fe:19:b2:b1:cb:b0:1d:88:9a: 6f:00:6c:2a:13:31:b9:58:c7:f4:db:9a:7e:72:1f: 73:ae:df:20:ed:1c:59:34:cd:70:fc:5f:79:5e:8a: b4:02:28:3c:3a:92:4d:f1:4d:55:c7:1d:73:c1:4c: 95:53:c6:f4:32:ab:6a:aa:ae:bf:22:8c:37:76:cf: 24:f0:a6:14:c3:a9:d2:0d:eb:3c:a7:c7:9f:12:17: 1d:b9:d5:ee:20:f2:6c:f1:54:88:42:a1:60:0e:49: 11:2a:c4:5c:f3:d9:da:5e:08:83:f5:98:bb:38:41: 74:55:57:c5:a6:40:74:71:77:92:f8:59:70:c5:d6: db:dd:7e:c4:e9:3f:25:f8:f7:64:09:bd:db:aa:a0: 5c:70:a7:e7:20:9f:66:e8:ab:c0:5a:d5:cd:81:8d: 6e:a2:4b:55:a6:95:1b:a7:e5:7e:ff:04:e4:1e:44: 3b:cf:84:42:4f:d2:21:02:f6:73:41:a5:f6:53:8a: 8b:35:87:d2:eb:15:72:93:1f:a3:66:8a:b3:7a:bf: 7a:36:4b:8f:52:c0:b5:d2:5c:cd:00:26:96:0f:14: b8:72:02:b1:8e:07:7a:9c:5a:ba:d9:c4:e0:bb:33: 01:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:4D:38:F0:98:F5:AE:F4:FA:10:17:93:F6:69:59:02:A5:01:99:B0 X509v3 Authority Key Identifier: keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/B3811802FED411EA83E4EC37C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 120.29.248.0/22 120.29.255.0/24 202.65.14.0/23 203.17.72.0/24 IPv6: 2001:dcd:9::/48 2001:dcd:11::-2001:dcd:12:ffff:ffff:ffff:ffff:ffff 2001:dcd:30::/48 2001:dcd:40::/48 Signature Algorithm: sha256WithRSAEncryption 82:38:7f:9e:7d:76:51:2f:b8:87:89:44:eb:c4:20:fd:66:dd: f9:aa:9f:40:e2:d6:0c:98:ed:2f:ee:8b:6f:a3:d2:18:18:fd: 78:a9:78:8a:65:83:4a:64:1d:d0:7c:fc:67:38:59:0b:a7:28: c1:f1:a6:6e:29:c0:40:99:df:c2:74:54:a1:7a:d0:ab:67:4e: 64:ff:08:e7:2e:d6:5b:9d:03:de:52:64:89:78:a7:18:de:61: f1:d9:15:e3:e7:d4:66:fa:5c:69:07:c9:6a:63:fd:d1:49:96: 7f:bc:41:e9:a5:35:6c:6a:4d:13:f3:9a:a1:d2:bc:cb:62:25: df:f4:0e:01:c6:df:fb:79:9c:4f:e1:05:92:09:77:f8:2d:ef: 6e:86:72:b8:12:a7:8a:9c:95:56:b4:a8:c2:54:91:9f:5b:8e: c7:c5:3b:5f:22:27:81:59:bc:6e:3c:88:06:bb:58:cf:6a:b5: 3c:59:e3:af:c6:df:03:c9:30:b6:e3:06:7d:23:c6:b6:b0:e9: db:c8:10:98:76:88:c6:03:d1:8b:86:71:9b:cd:40:fe:ce:04: 3f:56:7d:a6:59:c1:2f:fb:9e:dc:4a:a2:ce:32:96:33:bc:f4: bd:6e:f9:b4:2d:62:52:a0:22:92:e1:7c:8f:19:0e:3f:bd:56: 62:1d:56:3f -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICEGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE5RUExMTAvBgNVBAUTKDdCMDFDQUNDMTcwRkU2QTYxQjIwMzA0MTg1RTg2ODk0 NkRGNzI4NUEwHhcNMjUwMjI4MTkyOTQ0WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODYwNy1hNWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwoQcA5m9t3nqrg29J0ymEmw9tbv+GbKxy7AdiJpvAGwqEzG5WMf025p+ch9z rt8g7RxZNM1w/F95Xoq0Aig8OpJN8U1Vxx1zwUyVU8b0Mqtqqq6/Iow3ds8k8KYU w6nSDes8p8efEhcdudXuIPJs8VSIQqFgDkkRKsRc89naXgiD9Zi7OEF0VVfFpkB0 cXeS+Flwxdbb3X7E6T8l+PdkCb3bqqBccKfnIJ9m6KvAWtXNgY1uoktVppUbp+V+ /wTkHkQ7z4RCT9IhAvZzQaX2U4qLNYfS6xVykx+jZoqzer96NkuPUsC10lzNACaW DxS4cgKxjgd6nFq62cTguzMBPQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFF1NOPCY 9a70+hAXk/ZpWQKlAZmwMB8GA1UdIwQYMBaAFHsByswXD+amGyAwQYXoaJRt9yha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTlFQS82RDQ2M0NGRTA0 RkQxMUVBODJDQ0NBMThDNEY5QUUwMi9ld0hLekJjUDVxWWJJREJCaGVob2xHMzNL Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V3SEt6QmNQNXFZYklEQkJoZWhvbEczM0tGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTE5RUEvNkQ0NjNDRkUwNEZEMTFFQTgyQ0NDQTE4QzRGOUFFMDIvQjM4MTE4MDJG RUQ0MTFFQTgzRTRFQzM3QzRGOUFFMDIucm9hMGgGCCsGAQUFBwEHAQH/BFkwVzAe BAIAATAYAwQCeB34AwQAeB3/AwQBykEOAwQAyxFIMDUEAgACMC8DBwAgAQ3NAAkw EgMHACABDc0AEQMHACABDc0AEgMHACABDc0AMAMHACABDc0AQDANBgkqhkiG9w0B AQsFAAOCAQEAgjh/nn12US+4h4lE68Qg/Wbd+aqfQOLWDJjtL+6Lb6PSGBj9eKl4 imWDSmQd0Hz8ZzhZC6cowfGmbinAQJnfwnRUoXrQq2dOZP8I5y7WW50D3lJkiXin GN5h8dkV4+fUZvpcaQfJamP90UmWf7xB6aU1bGpNE/OaodK8y2Il3/QOAcbf+3mc T+EFkgl3+C3vboZyuBKnipyVVrSowlSRn1uOx8U7XyIngVm8bjyIBrtYz2q1PFnj r8bfA8kwtuMGfSPGtrDp28gQmHaIxgPRi4Zxm81A/s4EP1Z9plnBL/ue3EqizjKW M7z0vW75tC1iUqAikuF8jxkOP71WYh1WPw== -----END CERTIFICATE-----Generated at Mon Mar 2 14:58:25 2026 by rpki-client