$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/F3DDF814099A11EAB5891D5BC4F9AE02.roa File: F3DDF814099A11EAB5891D5BC4F9AE02.roa (raw, json) Hash identifier: s6AhJxxW5LLE9RhBQX/8oAxdL1RLL4Y6gJy96ga5JKE= Subject key identifier: 8C:9F:BE:AA:38:4F:3E:26:7C:B7:82:1B:09:88:1C:BE:2C:5F:4E:12 Certificate issuer: /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Certificate serial: 1083 Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/F3DDF814099A11EAB5891D5BC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:31:58 +0000 ROA not before: Fri 28 Feb 2025 19:30:17 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 397239 IP address blocks: 120.29.252.0/24 maxlen: 24 120.29.253.0/24 maxlen: 24 120.29.254.0/24 maxlen: 24 203.17.72.0/24 maxlen: 24 2001:dcd:1::/48 maxlen: 48 2001:dcd:2::/48 maxlen: 48 2001:dcd:3::/48 maxlen: 48 2001:dcd:4::/48 maxlen: 48 2001:dcd:5::/48 maxlen: 48 2001:dcd:6::/48 maxlen: 48 2001:dcd:7::/48 maxlen: 48 2001:dcd:dd05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4227 (0x1083) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91919EA, serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Validity Not Before: Feb 28 19:30:17 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a4861e-b41c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2d:ab:02:0e:dc:0d:fa:04:c7:23:a4:fc:8d: be:c5:bf:99:b6:8b:78:28:51:15:40:74:b9:72:b3: 8d:10:0b:98:af:83:96:1a:9f:67:76:7b:a8:c5:70: 5d:18:fe:5f:5b:b6:45:ff:f0:ba:34:a3:00:e5:a8: 48:21:20:53:17:e8:0d:ed:df:8a:c3:03:57:31:a0: 6d:59:fb:5d:c3:a6:03:2b:cf:3f:2c:7c:2c:45:cd: 5c:0d:05:2d:0b:10:03:a2:78:06:4a:61:de:bb:bd: 93:90:54:81:53:e2:51:31:64:90:cc:82:29:69:2d: c5:49:05:30:6a:61:15:08:dd:0f:ff:1c:d2:5e:bb: 7a:f9:91:6e:cf:98:db:5c:46:b1:40:6e:77:2d:88: 36:ed:2e:c4:6c:f1:2d:fc:93:00:77:3d:47:22:7c: ae:f8:c3:d7:cc:73:ac:43:2d:37:5c:b9:73:d5:9b: ab:12:9e:38:dd:a5:f9:42:4c:28:27:d0:4e:b2:37: 57:57:41:98:31:f0:dd:ee:12:65:2b:58:f2:87:30: 3d:33:53:f2:85:43:f3:76:33:81:bf:45:e0:b0:e5: 20:eb:ae:9c:0f:84:ad:26:59:9a:1c:b2:c1:e8:02: ef:9d:98:ee:ad:70:5b:c2:4e:6b:24:97:fa:8d:60: ce:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9F:BE:AA:38:4F:3E:26:7C:B7:82:1B:09:88:1C:BE:2C:5F:4E:12 X509v3 Authority Key Identifier: keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/F3DDF814099A11EAB5891D5BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 120.29.252.0-120.29.254.255 203.17.72.0/24 IPv6: 2001:dcd:1::-2001:dcd:7:ffff:ffff:ffff:ffff:ffff 2001:dcd:dd05::/48 Signature Algorithm: sha256WithRSAEncryption 6b:62:56:1a:71:73:6f:5a:85:8b:0f:49:5c:9f:41:fa:29:31: b7:c6:15:53:ae:4a:c8:fd:46:50:b4:3f:5b:ae:b5:37:37:9f: d5:96:6c:1b:36:3d:38:25:bf:0d:9f:a4:45:66:6f:7d:57:00: ab:f5:59:32:ec:fc:48:49:eb:4b:b6:8c:de:48:7c:f4:81:f1: d9:25:ce:dc:f3:46:e2:81:fb:e3:49:03:14:b0:3e:4c:48:b8: 5c:ea:f1:45:b9:c1:ab:38:04:7e:27:4c:ee:b1:11:cf:69:fe: a6:4e:1a:77:74:d9:cf:48:6a:0d:49:f0:bd:8e:3c:b0:1f:a0: e8:25:e3:be:12:91:ec:f7:4c:7a:a4:c9:db:c6:35:a5:4d:e9: 4a:88:24:21:7f:b0:27:d2:8d:40:df:00:29:23:d2:3a:46:d7: 24:95:d6:f8:1e:62:88:c7:9d:6c:46:aa:55:e3:bd:3d:d1:41: 08:d9:47:1a:ab:f9:14:ed:8d:d4:f2:e0:c8:a6:a6:ca:7d:71: c3:d1:0b:6a:b2:1d:86:03:7c:a4:31:17:4d:15:cd:42:62:e4: b2:03:77:ba:42:4e:e1:52:27:44:26:0d:9d:16:bd:fb:32:97: 94:59:92:0b:f6:42:c2:91:61:18:46:de:61:c1:af:c4:63:be: 6f:49:85:be -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgICEIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE5RUExMTAvBgNVBAUTKDdCMDFDQUNDMTcwRkU2QTYxQjIwMzA0MTg1RTg2ODk0 NkRGNzI4NUEwHhcNMjUwMjI4MTkzMDE3WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODYxZS1iNDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqi2rAg7cDfoExyOk/I2+xb+Ztot4KFEVQHS5crONEAuYr4OWGp9ndnuoxXBd GP5fW7ZF//C6NKMA5ahIISBTF+gN7d+KwwNXMaBtWftdw6YDK88/LHwsRc1cDQUt CxADongGSmHeu72TkFSBU+JRMWSQzIIpaS3FSQUwamEVCN0P/xzSXrt6+ZFuz5jb XEaxQG53LYg27S7EbPEt/JMAdz1HInyu+MPXzHOsQy03XLlz1ZurEp443aX5Qkwo J9BOsjdXV0GYMfDd7hJlK1jyhzA9M1PyhUPzdjOBv0XgsOUg666cD4StJlmaHLLB 6ALvnZjurXBbwk5rJJf6jWDO6wIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFIyfvqo4 Tz4mfLeCGwmIHL4sX04SMB8GA1UdIwQYMBaAFHsByswXD+amGyAwQYXoaJRt9yha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTlFQS82RDQ2M0NGRTA0 RkQxMUVBODJDQ0NBMThDNEY5QUUwMi9ld0hLekJjUDVxWWJJREJCaGVob2xHMzNL Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V3SEt6QmNQNXFZYklEQkJoZWhvbEczM0tGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTE5RUEvNkQ0NjNDRkUwNEZEMTFFQTgyQ0NDQTE4QzRGOUFFMDIvRjNEREY4MTQw OTlBMTFFQUI1ODkxRDVCQzRGOUFFMDIucm9hMFIGCCsGAQUFBwEHAQH/BEMwQTAa BAIAATAUMAwDBAJ4HfwDBAB4Hf4DBADLEUgwIwQCAAIwHTASAwcAIAENzQABAwcD IAENzQAAAwcAIAENzd0FMA0GCSqGSIb3DQEBCwUAA4IBAQBrYlYacXNvWoWLD0lc n0H6KTG3xhVTrkrI/UZQtD9brrU3N5/VlmwbNj04Jb8Nn6RFZm99VwCr9Vky7PxI SetLtozeSHz0gfHZJc7c80bigfvjSQMUsD5MSLhc6vFFucGrOAR+J0zusRHPaf6m Thp3dNnPSGoNSfC9jjywH6DoJeO+EpHs90x6pMnbxjWlTelKiCQhf7An0o1A3wAp I9I6Rtckldb4HmKIx51sRqpV47090UEI2Ucaq/kU7Y3U8uDIpqbKfXHD0Qtqsh2G A3ykMRdNFc1CYuSyA3e6Qk7hUidEJg2dFr37MpeUWZIL9kLCkWEYRt5hwa/EY75v SYW+ -----END CERTIFICATE-----Generated at Mon Mar 2 14:59:02 2026 by rpki-client