$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/F0735BD8099A11EAB5891D5BC4F9AE02.roa File: F0735BD8099A11EAB5891D5BC4F9AE02.roa (raw, json) Hash identifier: M7I5wkcI9LfVTSOcMYFzaXyDtw1SuGef81NONNoPC2Y= Subject key identifier: C2:D5:18:39:06:40:2C:90:92:BB:46:4C:E0:45:AC:B0:70:4E:B6:B5 Certificate issuer: /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Certificate serial: 106F Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/F0735BD8099A11EAB5891D5BC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:31:40 +0000 ROA not before: Fri 28 Feb 2025 19:29:51 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 397219 IP address blocks: 120.29.252.0/24 maxlen: 24 120.29.253.0/24 maxlen: 24 120.29.254.0/24 maxlen: 24 203.17.72.0/24 maxlen: 24 2001:dcd:1::/48 maxlen: 48 2001:dcd:2::/48 maxlen: 48 2001:dcd:3::/48 maxlen: 48 2001:dcd:4::/48 maxlen: 48 2001:dcd:5::/48 maxlen: 48 2001:dcd:6::/48 maxlen: 48 2001:dcd:7::/48 maxlen: 48 2001:dcd:dd05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4207 (0x106f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91919EA, serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Validity Not Before: Feb 28 19:29:51 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a4860c-3aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:15:3e:a6:34:96:3a:7a:66:83:68:b4:5d:84: 88:f3:f8:ee:0f:db:86:10:74:d2:19:f7:6e:23:90: e6:a9:53:d4:eb:77:3a:30:28:a6:2c:31:85:ed:fd: 62:aa:39:3c:6c:d1:47:93:39:97:e6:5e:8d:30:cd: 5c:c3:59:e2:56:6d:96:1d:4b:31:a2:8b:f9:c8:f1: c3:74:cf:39:7a:15:91:8d:58:1e:ff:7d:1c:80:a3: 2e:5d:cf:2b:8d:5d:29:dd:ed:74:36:47:6f:86:f4: 3d:c8:e5:fa:7c:8d:1c:e0:58:30:76:52:7d:24:8e: 69:26:3b:4a:e7:60:f4:2b:51:0c:a7:96:47:77:7d: 7d:5d:9f:c4:56:7a:08:3a:4e:ae:ba:81:47:42:52: ef:f3:7d:2e:09:19:22:0f:e6:32:46:f2:0b:eb:55: 6c:63:0d:97:4a:05:87:ed:13:88:b8:52:f2:65:35: 2c:2b:b7:a7:1e:c0:cf:5b:29:a7:12:9e:8d:e2:e8: ad:67:c6:ed:5a:9c:c2:15:46:c0:c2:c8:65:f2:75: a8:d4:04:d1:b0:dd:c6:0b:5a:66:1f:98:99:32:aa: 3b:6a:bd:c0:75:9f:8e:5e:0c:ca:51:d5:1f:36:f2: ac:e9:20:e0:03:a9:ea:67:8c:1f:04:6e:99:a6:3f: 64:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D5:18:39:06:40:2C:90:92:BB:46:4C:E0:45:AC:B0:70:4E:B6:B5 X509v3 Authority Key Identifier: keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/F0735BD8099A11EAB5891D5BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 120.29.252.0-120.29.254.255 203.17.72.0/24 IPv6: 2001:dcd:1::-2001:dcd:7:ffff:ffff:ffff:ffff:ffff 2001:dcd:dd05::/48 Signature Algorithm: sha256WithRSAEncryption 67:2b:b5:ba:71:10:58:89:c6:ee:6c:81:58:78:5d:5e:a5:e3: 7a:f5:e6:47:fb:22:5a:db:f4:44:d2:a6:73:fd:3e:06:16:29: 0c:4a:43:e4:2a:e4:87:19:25:0b:57:86:91:82:ff:92:59:91: dc:85:0c:3d:b3:cb:36:7c:08:79:ce:e2:d4:e3:a9:e9:ea:b4: 8e:17:7a:5d:25:94:8e:ad:28:db:c0:b9:3a:c3:6f:8b:ef:bd: 1d:e2:d2:db:de:b1:40:f2:01:95:69:b6:8d:90:03:98:64:c6: b0:2c:44:d3:c1:5a:71:29:1e:81:94:b7:ad:3e:24:0d:ac:c8: da:bb:2d:20:26:23:f7:55:fd:c7:a1:6c:1b:e6:c3:4e:23:2f: 15:84:0f:1a:11:e5:58:9b:52:df:2c:14:15:ac:f2:25:12:13: 3e:c7:84:1a:05:2c:cd:17:d1:44:4e:2f:8f:76:88:71:53:48: b8:53:7c:9f:f8:b1:49:c3:8a:64:20:9f:8d:9f:b8:24:c3:82: 8a:23:98:b0:48:dd:68:14:19:6c:1c:90:26:b4:6b:f4:e0:0e: 9a:7d:01:42:f4:cf:cf:7f:37:d1:4b:16:a9:01:82:9f:6a:51: c4:6d:91:6a:99:83:c1:42:ea:4e:18:97:5b:10:a8:98:57:b3: ee:f7:ae:70 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgICEG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE5RUExMTAvBgNVBAUTKDdCMDFDQUNDMTcwRkU2QTYxQjIwMzA0MTg1RTg2ODk0 NkRGNzI4NUEwHhcNMjUwMjI4MTkyOTUxWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODYwYy0zYWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthU+pjSWOnpmg2i0XYSI8/juD9uGEHTSGfduI5DmqVPU63c6MCimLDGF7f1i qjk8bNFHkzmX5l6NMM1cw1niVm2WHUsxoov5yPHDdM85ehWRjVge/30cgKMuXc8r jV0p3e10NkdvhvQ9yOX6fI0c4FgwdlJ9JI5pJjtK52D0K1EMp5ZHd319XZ/EVnoI Ok6uuoFHQlLv830uCRkiD+YyRvIL61VsYw2XSgWH7ROIuFLyZTUsK7enHsDPWymn Ep6N4uitZ8btWpzCFUbAwshl8nWo1ATRsN3GC1pmH5iZMqo7ar3AdZ+OXgzKUdUf NvKs6SDgA6nqZ4wfBG6Zpj9k9wIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFMLVGDkG QCyQkrtGTOBFrLBwTra1MB8GA1UdIwQYMBaAFHsByswXD+amGyAwQYXoaJRt9yha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTlFQS82RDQ2M0NGRTA0 RkQxMUVBODJDQ0NBMThDNEY5QUUwMi9ld0hLekJjUDVxWWJJREJCaGVob2xHMzNL Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V3SEt6QmNQNXFZYklEQkJoZWhvbEczM0tGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTE5RUEvNkQ0NjNDRkUwNEZEMTFFQTgyQ0NDQTE4QzRGOUFFMDIvRjA3MzVCRDgw OTlBMTFFQUI1ODkxRDVCQzRGOUFFMDIucm9hMFIGCCsGAQUFBwEHAQH/BEMwQTAa BAIAATAUMAwDBAJ4HfwDBAB4Hf4DBADLEUgwIwQCAAIwHTASAwcAIAENzQABAwcD IAENzQAAAwcAIAENzd0FMA0GCSqGSIb3DQEBCwUAA4IBAQBnK7W6cRBYicbubIFY eF1epeN69eZH+yJa2/RE0qZz/T4GFikMSkPkKuSHGSULV4aRgv+SWZHchQw9s8s2 fAh5zuLU46np6rSOF3pdJZSOrSjbwLk6w2+L770d4tLb3rFA8gGVabaNkAOYZMaw LETTwVpxKR6BlLetPiQNrMjauy0gJiP3Vf3HoWwb5sNOIy8VhA8aEeVYm1LfLBQV rPIlEhM+x4QaBSzNF9FETi+PdohxU0i4U3yf+LFJw4pkIJ+Nn7gkw4KKI5iwSN1o FBlsHJAmtGv04A6afQFC9M/PfzfRSxapAYKfalHEbZFqmYPBQupOGJdbEKiYV7Pu 965w -----END CERTIFICATE-----Generated at Mon Mar 2 13:33:00 2026 by rpki-client