$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/F254F0CE099A11EAB5891D5BC4F9AE02.roa File: F254F0CE099A11EAB5891D5BC4F9AE02.roa (raw, json) Hash identifier: 6ACsZdPKFUc487F0EzvxsAgZQ7NZE8zAut6tK0G1eoc= Subject key identifier: 51:B7:6C:57:AD:EA:33:E9:11:F9:05:BB:45:86:C6:39:88:B1:91:18 Certificate issuer: /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Certificate serial: 107D Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/F254F0CE099A11EAB5891D5BC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:31:53 +0000 ROA not before: Fri 28 Feb 2025 19:30:10 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 397233 IP address blocks: 120.29.252.0/24 maxlen: 24 120.29.253.0/24 maxlen: 24 120.29.254.0/24 maxlen: 24 203.17.72.0/24 maxlen: 24 2001:dcd:1::/48 maxlen: 48 2001:dcd:2::/48 maxlen: 48 2001:dcd:3::/48 maxlen: 48 2001:dcd:4::/48 maxlen: 48 2001:dcd:5::/48 maxlen: 48 2001:dcd:6::/48 maxlen: 48 2001:dcd:7::/48 maxlen: 48 2001:dcd:dd05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4221 (0x107d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91919EA, serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Validity Not Before: Feb 28 19:30:10 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a48618-a98a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:78:64:6f:ba:2c:63:68:06:a1:f9:d1:d1:49: 74:e3:d7:73:88:bc:4c:76:1e:21:63:16:01:ae:83: e2:b2:da:77:00:8b:dd:a5:9a:81:88:0d:5c:16:a1: 58:82:59:28:c1:43:35:d1:71:e4:af:98:6e:58:d7: 49:07:b5:aa:f6:ad:7f:03:ab:5d:25:64:0c:13:17: 52:35:13:7d:93:fb:2a:e4:76:ab:0d:df:10:fd:4e: 18:ed:5d:db:af:8a:fb:09:a3:53:50:50:6e:ec:ec: 0b:46:52:f5:05:e4:06:c5:23:e4:eb:e4:34:87:18: 4d:31:24:7c:21:cd:85:81:39:09:12:b3:62:af:9a: 55:f2:ed:66:87:af:5b:9f:74:34:7b:fe:00:98:c6: 77:1a:b7:b3:4a:3a:36:70:fd:ad:e8:2e:a3:d8:15: 9e:ad:ec:e3:f9:db:63:f9:32:29:ff:e9:3e:53:c2: 5e:8d:b9:f8:7d:2b:73:55:ab:e8:05:de:45:ee:f6: 8e:91:51:f1:28:62:f7:89:45:d7:2a:df:a6:e4:84: 2e:4f:8a:94:28:56:31:e0:d6:2d:3d:c9:16:72:ed: 45:33:52:07:c5:16:62:75:f8:40:36:da:ce:82:63: a5:00:a2:41:4d:4a:e1:dc:2d:16:1e:e8:a1:69:77: 8c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B7:6C:57:AD:EA:33:E9:11:F9:05:BB:45:86:C6:39:88:B1:91:18 X509v3 Authority Key Identifier: keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/F254F0CE099A11EAB5891D5BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 120.29.252.0-120.29.254.255 203.17.72.0/24 IPv6: 2001:dcd:1::-2001:dcd:7:ffff:ffff:ffff:ffff:ffff 2001:dcd:dd05::/48 Signature Algorithm: sha256WithRSAEncryption 62:52:7d:3e:98:4d:37:03:d8:65:78:e0:37:c9:e6:c8:a6:45: b5:6f:8c:a4:f1:16:f3:21:2c:8e:3b:ec:88:3e:63:dc:ae:62: d0:9f:8e:42:32:b9:48:f8:04:a0:bb:87:4c:0f:db:94:d8:9d: be:9f:93:70:9a:c2:74:f6:e4:0d:ea:e3:e1:95:97:27:01:97: 89:1b:f7:3a:74:77:d4:ec:8e:61:23:49:ec:80:a7:14:db:20: ff:e1:39:bb:f6:e4:35:6d:18:c2:1d:fb:ed:37:f0:2d:08:14: 42:e4:d3:66:57:22:bc:66:1b:4c:70:ad:43:80:95:43:e5:51: aa:3f:f4:61:c5:b3:6e:06:3f:ec:bf:01:11:9b:30:2d:48:ca: 26:fc:5f:a1:b4:de:bf:f7:95:91:91:cf:68:03:9d:05:7d:cb: ba:ef:fa:ab:79:25:aa:d4:5d:dc:e2:ab:34:2b:64:f3:38:5b: 45:f4:82:63:a3:5a:7c:0a:68:4c:6d:81:28:64:5a:eb:ce:c2: aa:45:56:a0:d8:fc:8e:8b:16:05:2d:42:2b:1a:96:8c:9c:a2: a6:b4:bf:2d:39:b2:77:1f:38:aa:33:9e:70:cb:d8:19:66:0d: e3:27:d9:6c:06:39:a6:2d:22:1e:5b:39:18:48:cd:a8:34:eb: 6a:da:7a:4c -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgICEH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE5RUExMTAvBgNVBAUTKDdCMDFDQUNDMTcwRkU2QTYxQjIwMzA0MTg1RTg2ODk0 NkRGNzI4NUEwHhcNMjUwMjI4MTkzMDEwWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODYxOC1hOThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3hkb7osY2gGofnR0Ul049dziLxMdh4hYxYBroPistp3AIvdpZqBiA1cFqFY glkowUM10XHkr5huWNdJB7Wq9q1/A6tdJWQMExdSNRN9k/sq5HarDd8Q/U4Y7V3b r4r7CaNTUFBu7OwLRlL1BeQGxSPk6+Q0hxhNMSR8Ic2FgTkJErNir5pV8u1mh69b n3Q0e/4AmMZ3GrezSjo2cP2t6C6j2BWerezj+dtj+TIp/+k+U8Jejbn4fStzVavo Bd5F7vaOkVHxKGL3iUXXKt+m5IQuT4qUKFYx4NYtPckWcu1FM1IHxRZidfhANtrO gmOlAKJBTUrh3C0WHuihaXeMjQIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFFG3bFet 6jPpEfkFu0WGxjmIsZEYMB8GA1UdIwQYMBaAFHsByswXD+amGyAwQYXoaJRt9yha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTlFQS82RDQ2M0NGRTA0 RkQxMUVBODJDQ0NBMThDNEY5QUUwMi9ld0hLekJjUDVxWWJJREJCaGVob2xHMzNL Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V3SEt6QmNQNXFZYklEQkJoZWhvbEczM0tGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTE5RUEvNkQ0NjNDRkUwNEZEMTFFQTgyQ0NDQTE4QzRGOUFFMDIvRjI1NEYwQ0Uw OTlBMTFFQUI1ODkxRDVCQzRGOUFFMDIucm9hMFIGCCsGAQUFBwEHAQH/BEMwQTAa BAIAATAUMAwDBAJ4HfwDBAB4Hf4DBADLEUgwIwQCAAIwHTASAwcAIAENzQABAwcD IAENzQAAAwcAIAENzd0FMA0GCSqGSIb3DQEBCwUAA4IBAQBiUn0+mE03A9hleOA3 yebIpkW1b4yk8RbzISyOO+yIPmPcrmLQn45CMrlI+ASgu4dMD9uU2J2+n5NwmsJ0 9uQN6uPhlZcnAZeJG/c6dHfU7I5hI0nsgKcU2yD/4Tm79uQ1bRjCHfvtN/AtCBRC 5NNmVyK8ZhtMcK1DgJVD5VGqP/RhxbNuBj/svwERmzAtSMom/F+htN6/95WRkc9o A50Ffcu67/qreSWq1F3c4qs0K2TzOFtF9IJjo1p8CmhMbYEoZFrrzsKqRVag2PyO ixYFLUIrGpaMnKKmtL8tObJ3HziqM55wy9gZZg3jJ9lsBjmmLSIeWzkYSM2oNOtq 2npM -----END CERTIFICATE-----Generated at Mon Mar 2 14:58:25 2026 by rpki-client