$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/7DDA28EC8D9511EB9ECE6042C4F9AE02.roa File: 7DDA28EC8D9511EB9ECE6042C4F9AE02.roa (raw, json) Hash identifier: fcJYmXSZeVG/6eLQqu0NVh0YwupBcKyyjG3vFyzIP2U= Subject key identifier: 9E:2C:54:86:11:06:B7:CC:B5:35:4C:8D:26:8F:2E:14:33:7C:8A:0C Certificate issuer: /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B Certificate serial: 3147 Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/7DDA28EC8D9511EB9ECE6042C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:54:13 +0000 ROA not before: Wed 30 Apr 2025 15:52:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 24429 IP address blocks: 116.0.81.0/24 maxlen: 24 116.0.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12615 (0x3147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B Validity Not Before: Apr 30 15:52:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a47d45-398f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:40:85:24:d2:30:e9:85:78:d7:f2:f8:aa:00: 08:d5:cd:c6:7f:54:f8:24:bc:13:83:c9:3e:58:1e: 7e:22:df:23:44:f3:dd:b6:b8:5c:23:11:d8:f9:c8: 09:43:ee:c0:ac:11:1f:ee:12:5d:ee:fa:bb:8c:fe: fe:44:6a:c7:da:03:09:5e:8e:ac:2b:ba:b6:52:e7: 84:c5:b0:a4:a5:64:19:93:e8:b3:5b:32:b4:ad:28: 58:26:0f:06:c4:de:54:b6:8b:32:5b:b7:a7:f0:20: d2:4d:fd:b9:bb:63:a2:5e:a1:bc:7b:0c:01:f2:46: fe:e6:b0:cf:30:01:35:73:48:c9:c5:9b:c0:95:f7: f0:97:62:d3:3b:d4:58:0a:f1:c4:b4:20:25:95:4e: 34:93:0d:40:dd:a1:ba:82:e1:e1:6e:da:8d:5f:e2: 0e:99:11:8f:22:81:ad:19:40:1c:00:26:54:81:57: cf:c5:be:a2:ec:31:b3:10:6d:95:83:84:1b:38:60: 2d:9c:91:d1:f7:f7:42:23:67:b9:8d:65:5d:7e:a4: 1f:b3:4f:ff:d4:d2:09:a8:bc:fd:94:43:39:c7:49: 75:57:8b:10:8d:22:ba:b4:59:5e:38:1c:d8:5f:3d: bc:7b:10:52:b2:ab:cc:c7:fa:31:08:f3:16:bf:2b: aa:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:2C:54:86:11:06:B7:CC:B5:35:4C:8D:26:8F:2E:14:33:7C:8A:0C X509v3 Authority Key Identifier: keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/7DDA28EC8D9511EB9ECE6042C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 116.0.81.0/24 116.0.89.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:74:c0:f2:36:49:52:10:19:81:49:2f:6c:eb:7b:4b:f4:ef: 03:9e:0d:13:22:16:bb:3b:d7:ae:82:ad:35:86:07:d3:73:23: 20:82:4f:c5:b7:ab:a7:5b:38:8e:c3:e6:52:70:55:41:a1:dd: 59:9e:8c:92:ff:66:20:fe:d3:09:e2:fc:a2:5e:4f:a0:fb:75: 50:7f:bd:5d:3b:b6:56:96:e2:a2:4c:cf:af:8d:a7:c6:b6:62: b8:de:19:f6:92:91:a6:bd:be:da:ee:75:c3:ad:be:ab:a4:7d: 83:91:98:51:d9:2c:d3:14:43:a1:4b:f6:be:d7:d7:9a:af:16: a6:e1:e8:95:02:e5:bc:03:32:d1:ed:b9:01:f7:c4:68:93:56: 7a:d4:5f:1c:ed:98:fd:ce:61:cc:74:66:e5:8c:af:9a:e7:c6: 0a:f7:2a:7d:30:69:29:91:6c:e0:95:66:50:1d:f3:7c:33:65: 67:75:d5:28:e0:8e:d9:fa:66:09:ec:2c:d8:2c:d1:58:bb:df: 66:ba:d5:ee:3e:94:94:7b:5e:c6:19:a6:46:0e:bd:47:be:c4: fd:3c:05:70:b0:b8:44:b6:45:df:f6:be:6f:14:74:e7:63:61: 6a:66:45:7d:ff:6f:d4:9f:8c:e7:69:84:ad:a8:7f:86:ab:64: f6:93:ad:3e -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICMUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU1QzgxMTAvBgNVBAUTKEM2NjczRDM2NDhGNDNGNDY3NEY1RjVFQkZDQkZBMzFC Qjk2NEY2NEIwHhcNMjUwNDMwMTU1MjQ5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2Q0NS0zOThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0CFJNIw6YV41/L4qgAI1c3Gf1T4JLwTg8k+WB5+It8jRPPdtrhcIxHY+cgJ Q+7ArBEf7hJd7vq7jP7+RGrH2gMJXo6sK7q2UueExbCkpWQZk+izWzK0rShYJg8G xN5UtosyW7en8CDSTf25u2OiXqG8ewwB8kb+5rDPMAE1c0jJxZvAlffwl2LTO9RY CvHEtCAllU40kw1A3aG6guHhbtqNX+IOmRGPIoGtGUAcACZUgVfPxb6i7DGzEG2V g4QbOGAtnJHR9/dCI2e5jWVdfqQfs0//1NIJqLz9lEM5x0l1V4sQjSK6tFleOBzY Xz28exBSsqvMx/oxCPMWvyuqxwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFJ4sVIYR BrfMtTVMjSaPLhQzfIoMMB8GA1UdIwQYMBaAFMZnPTZI9D9GdPX16/y/oxu5ZPZL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTVDOC85Q0QzRThGNkZG NTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAwWjA5ZlhyX0wtakc3bGs5 a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3htYzlOa2owUDBaMDlmWHJfTC1qRzdsazlrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTU1QzgvOUNEM0U4RjZGRjU4MTFFMkJCNEIyRTNGNTkxMUVBMzIvN0REQTI4RUM4 RDk1MTFFQjlFQ0U2MDQyQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAdABRAwQAdABZMA0GCSqGSIb3DQEBCwUAA4IBAQAsdMDyNklSEBmB SS9s63tL9O8Dng0TIha7O9eugq01hgfTcyMggk/Ft6unWziOw+ZScFVBod1ZnoyS /2Yg/tMJ4vyiXk+g+3VQf71dO7ZWluKiTM+vjafGtmK43hn2kpGmvb7a7nXDrb6r pH2DkZhR2SzTFEOhS/a+19earxam4eiVAuW8AzLR7bkB98Rok1Z61F8c7Zj9zmHM dGbljK+a58YK9yp9MGkpkWzglWZQHfN8M2VnddUo4I7Z+mYJ7CzYLNFYu99mutXu PpSUe17GGaZGDr1HvsT9PAVwsLhEtkXf9r5vFHTnY2FqZkV9/2/Un4znaYStqH+G q2T2k60+ -----END CERTIFICATE-----Generated at Mon Mar 2 04:29:46 2026 by rpki-client