$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/EFDC701A099A11EAB5891D5BC4F9AE02.roa File: EFDC701A099A11EAB5891D5BC4F9AE02.roa (raw, json) Hash identifier: dJN9pm+xebUzbPzTeMWesSzW4O4AJ9g9s9jmnjw0Us4= Subject key identifier: 8B:D1:9A:81:6C:DD:6E:50:8A:AF:2D:4C:FC:20:88:D9:D0:79:BE:26 Certificate issuer: /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Certificate serial: 106B Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/EFDC701A099A11EAB5891D5BC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:31:36 +0000 ROA not before: Fri 28 Feb 2025 19:29:46 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 397215 IP address blocks: 120.29.252.0/24 maxlen: 24 120.29.253.0/24 maxlen: 24 120.29.254.0/24 maxlen: 24 203.17.72.0/24 maxlen: 24 2001:dcd:1::/48 maxlen: 48 2001:dcd:2::/48 maxlen: 48 2001:dcd:3::/48 maxlen: 48 2001:dcd:4::/48 maxlen: 48 2001:dcd:5::/48 maxlen: 48 2001:dcd:6::/48 maxlen: 48 2001:dcd:7::/48 maxlen: 48 2001:dcd:dd05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4203 (0x106b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91919EA, serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Validity Not Before: Feb 28 19:29:46 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a48608-c3d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:57:68:74:65:bf:31:4d:1c:8e:05:fb:80:65: 7e:f0:d5:3a:e4:ec:e8:2a:6d:c3:f8:02:6d:1b:70: 4c:e0:ec:b3:fa:9c:79:65:c2:71:b6:2d:43:f8:10: 53:aa:83:eb:78:34:2a:50:86:3a:99:5d:56:de:80: e9:82:04:d7:7a:e5:05:c9:f4:bb:d1:b7:cc:86:31: d5:a0:08:58:20:13:f3:0e:2d:29:f6:9d:16:09:0b: 88:a3:2e:02:06:35:95:04:86:4c:82:ba:d9:3b:1c: 51:90:c9:50:63:9c:96:b9:16:ed:b5:87:b1:ac:64: 62:e2:03:af:3b:36:31:f9:b8:8a:18:c2:73:bc:f2: ab:1c:5f:16:07:be:df:9d:c6:18:c4:33:65:3c:53: bf:55:6d:4b:0c:03:33:73:4e:71:4c:7f:03:7c:e8: 7a:3d:84:ae:f2:04:3c:07:6b:13:6b:35:1c:e8:f6: 16:fd:0e:89:f6:9e:5f:55:86:d6:04:03:d9:f4:fb: d3:ac:1b:c0:38:00:40:0c:c5:2e:36:48:87:36:30: 77:34:c9:e4:02:8f:74:8c:ce:29:7d:7f:02:18:03: 57:b2:d0:ff:8c:1e:4c:39:3c:00:b8:e7:4f:87:16: cc:ba:1a:64:ea:9a:f9:97:ed:7b:15:8f:d8:6f:9f: 0f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D1:9A:81:6C:DD:6E:50:8A:AF:2D:4C:FC:20:88:D9:D0:79:BE:26 X509v3 Authority Key Identifier: keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/EFDC701A099A11EAB5891D5BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 120.29.252.0-120.29.254.255 203.17.72.0/24 IPv6: 2001:dcd:1::-2001:dcd:7:ffff:ffff:ffff:ffff:ffff 2001:dcd:dd05::/48 Signature Algorithm: sha256WithRSAEncryption 51:8c:8f:34:ea:ee:6a:57:0b:08:33:ff:f8:d5:ae:dd:08:2c: 62:3b:3c:0c:d4:aa:5d:3c:06:bb:e5:5e:10:18:ed:97:7e:58: 85:4d:c5:4b:c9:3b:1a:ea:f8:d5:d6:e9:44:4c:0a:c3:03:db: 0b:3a:74:4d:ba:56:bf:dd:c9:d0:40:9e:44:7b:69:d8:e5:a7: 0d:d0:6e:39:fd:ff:cc:15:33:8e:1b:b2:16:64:d9:fc:d0:51: 3d:8e:2b:f3:34:f3:ec:4d:fe:db:7b:d6:f6:53:0d:40:c8:c7: 5d:ab:af:ac:f2:99:d8:bc:17:c4:6b:45:13:a6:cc:04:14:e5: 38:e8:3e:e2:b7:b0:fc:3d:c2:6e:08:cb:a7:2d:27:af:64:06: cd:e9:58:16:bd:9f:ed:48:80:7a:e2:32:21:af:a2:e2:18:ee: b6:b1:63:e6:31:92:57:f4:ea:2c:73:9b:6f:52:5b:d7:89:9f: 72:05:dd:21:b2:5a:2d:a9:a0:ef:e6:b4:05:53:16:e7:02:b3: 85:d3:0e:c3:ed:9f:29:0d:e9:a8:d6:8b:22:de:08:98:3c:9b: 56:28:30:19:12:ca:88:e7:2c:3e:1c:5a:f8:86:87:cb:a5:7f: 2c:e3:83:d4:a3:a4:3b:d6:d8:63:a6:58:1b:78:6b:5f:d3:b7: fd:bc:76:6c -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgICEGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE5RUExMTAvBgNVBAUTKDdCMDFDQUNDMTcwRkU2QTYxQjIwMzA0MTg1RTg2ODk0 NkRGNzI4NUEwHhcNMjUwMjI4MTkyOTQ2WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODYwOC1jM2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA61dodGW/MU0cjgX7gGV+8NU65OzoKm3D+AJtG3BM4Oyz+px5ZcJxti1D+BBT qoPreDQqUIY6mV1W3oDpggTXeuUFyfS70bfMhjHVoAhYIBPzDi0p9p0WCQuIoy4C BjWVBIZMgrrZOxxRkMlQY5yWuRbttYexrGRi4gOvOzYx+biKGMJzvPKrHF8WB77f ncYYxDNlPFO/VW1LDAMzc05xTH8DfOh6PYSu8gQ8B2sTazUc6PYW/Q6J9p5fVYbW BAPZ9PvTrBvAOABADMUuNkiHNjB3NMnkAo90jM4pfX8CGANXstD/jB5MOTwAuOdP hxbMuhpk6pr5l+17FY/Yb58PsQIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFIvRmoFs 3W5Qiq8tTPwgiNnQeb4mMB8GA1UdIwQYMBaAFHsByswXD+amGyAwQYXoaJRt9yha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTlFQS82RDQ2M0NGRTA0 RkQxMUVBODJDQ0NBMThDNEY5QUUwMi9ld0hLekJjUDVxWWJJREJCaGVob2xHMzNL Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V3SEt6QmNQNXFZYklEQkJoZWhvbEczM0tGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTE5RUEvNkQ0NjNDRkUwNEZEMTFFQTgyQ0NDQTE4QzRGOUFFMDIvRUZEQzcwMUEw OTlBMTFFQUI1ODkxRDVCQzRGOUFFMDIucm9hMFIGCCsGAQUFBwEHAQH/BEMwQTAa BAIAATAUMAwDBAJ4HfwDBAB4Hf4DBADLEUgwIwQCAAIwHTASAwcAIAENzQABAwcD IAENzQAAAwcAIAENzd0FMA0GCSqGSIb3DQEBCwUAA4IBAQBRjI806u5qVwsIM//4 1a7dCCxiOzwM1KpdPAa75V4QGO2XfliFTcVLyTsa6vjV1ulETArDA9sLOnRNula/ 3cnQQJ5Ee2nY5acN0G45/f/MFTOOG7IWZNn80FE9jivzNPPsTf7be9b2Uw1AyMdd q6+s8pnYvBfEa0UTpswEFOU46D7it7D8PcJuCMunLSevZAbN6VgWvZ/tSIB64jIh r6LiGO62sWPmMZJX9Oosc5tvUlvXiZ9yBd0hslotqaDv5rQFUxbnArOF0w7D7Z8p Demo1osi3giYPJtWKDAZEsqI5yw+HFr4hofLpX8s44PUo6Q71thjplgbeGtf07f9 vHZs -----END CERTIFICATE-----Generated at Mon Mar 2 17:06:34 2026 by rpki-client