$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/218937DC5E5011F0B9404662C4F9AE02.roa File: 218937DC5E5011F0B9404662C4F9AE02.roa (raw, json) Hash identifier: TfhxYXEuzGwCmeMd3nNc0DOls3QWgWihrLMEBQlhbYI= Subject key identifier: E2:70:09:75:5B:CA:3A:FA:F9:7D:67:E2:00:8B:57:2F:85:EE:71:4E Certificate issuer: /CN=A91A2C5D/serialNumber=08777FA381BF258E0CAC37D509EF0BAC70664844 Certificate serial: 80 Authority key identifier: 08:77:7F:A3:81:BF:25:8E:0C:AC:37:D5:09:EF:0B:AC:70:66:48:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/218937DC5E5011F0B9404662C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:58:58 +0000 ROA not before: Wed 31 Dec 2025 03:22:34 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 152139 IP address blocks: 210.87.70.0/23 maxlen: 23 210.87.70.0/24 maxlen: 24 210.87.71.0/24 maxlen: 24 2001:df3:3e40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.crl rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:48:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2C5D, serialNumber=08777FA381BF258E0CAC37D509EF0BAC70664844 Validity Not Before: Dec 31 03:22:34 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a48c72-1971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:98:30:16:4c:c8:6c:4b:76:23:bb:13:7c:7d: e1:dd:48:d2:4d:66:6e:ef:30:bd:2a:2a:3c:37:d3: 38:4d:fc:6d:c5:81:89:f6:44:c0:60:b4:53:0e:b0: c1:1d:aa:73:87:4e:08:a4:d6:90:93:2c:5f:8a:ef: e9:47:3d:95:87:05:f8:14:d8:5c:c3:29:eb:46:41: fc:02:59:20:4d:ba:9d:fa:20:3f:84:ec:b4:1f:8b: 79:5b:b1:97:f8:1e:0a:46:ea:fd:5b:a9:c1:d2:4a: 3f:ad:fc:cf:2f:cb:81:24:02:0e:3e:2c:30:fe:93: 6d:9e:df:6e:6c:1f:7c:59:ea:05:8a:bb:31:08:97: 4d:0d:e0:38:ac:41:07:1b:fb:b4:08:5c:fe:05:ed: e3:ee:04:ad:16:a6:7c:83:07:a4:33:36:c5:08:cf: 35:eb:dc:d0:e1:95:94:82:d3:80:e6:a4:97:7d:d9: a2:87:ab:f0:65:45:2f:17:ed:4d:a4:09:d8:2a:81: cc:85:76:5f:e1:3b:ee:eb:94:88:56:cb:4e:c3:44: b2:64:92:47:4e:16:f7:f9:04:69:23:41:9f:b5:f8: 62:90:c1:e2:c6:33:97:bd:a1:7a:4d:ac:67:02:92: 4e:0d:97:93:09:54:ef:05:fe:b7:37:65:de:e5:7f: 45:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:70:09:75:5B:CA:3A:FA:F9:7D:67:E2:00:8B:57:2F:85:EE:71:4E X509v3 Authority Key Identifier: keyid:08:77:7F:A3:81:BF:25:8E:0C:AC:37:D5:09:EF:0B:AC:70:66:48:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/218937DC5E5011F0B9404662C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 210.87.70.0/23 IPv6: 2001:df3:3e40::/48 Signature Algorithm: sha256WithRSAEncryption 4f:df:56:4f:05:19:2c:56:e0:ca:05:38:a4:83:18:98:17:17: 8c:d0:9f:ab:a4:1f:47:ba:7a:f4:b4:c5:a7:a0:08:0d:2d:e1: f2:47:9e:d5:69:ff:a3:05:ac:04:89:67:1b:e6:ec:36:81:e3: ae:22:0a:57:40:a0:61:cb:c3:16:a3:4d:f9:53:34:52:f7:80: 54:41:11:7f:10:64:87:51:af:ae:1a:4d:fe:ff:d2:ad:b2:d3: 4b:73:18:37:65:fd:90:2a:e4:95:dc:df:98:d5:6f:c3:99:50: da:1d:a1:50:26:6b:e8:c6:f8:4e:b7:62:2d:e4:d0:bc:e8:08: 11:5d:b9:ee:16:33:27:74:0a:1c:23:7f:e0:06:53:98:c0:dd: 17:9b:38:d3:79:f9:fa:7b:15:56:dc:68:0a:22:eb:fd:ca:e9: 18:44:0c:87:01:db:fb:81:bc:24:9b:7c:28:aa:8c:b7:75:48: c5:13:05:9a:24:14:61:08:ea:74:3a:20:fc:3f:7c:d8:97:b1: 23:b7:c1:05:7b:81:52:36:3b:dd:4f:32:3c:3f:a5:3f:eb:23: dc:c6:4c:7d:ad:87:40:f6:2d:4b:d8:b0:12:96:88:d3:19:d6: 57:c0:ed:d8:ce:77:c0:29:82:f7:41:6c:53:b2:1f:46:d3:f5: 80:da:f3:10 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJDNUQxMTAvBgNVBAUTKDA4Nzc3RkEzODFCRjI1OEUwQ0FDMzdENTA5RUYwQkFD NzA2NjQ4NDQwHhcNMjUxMjMxMDMyMjM0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGM3Mi0xOTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA15gwFkzIbEt2I7sTfH3h3UjSTWZu7zC9Kio8N9M4TfxtxYGJ9kTAYLRTDrDB Hapzh04IpNaQkyxfiu/pRz2VhwX4FNhcwynrRkH8AlkgTbqd+iA/hOy0H4t5W7GX +B4KRur9W6nB0ko/rfzPL8uBJAIOPiww/pNtnt9ubB98WeoFirsxCJdNDeA4rEEH G/u0CFz+Be3j7gStFqZ8gwekMzbFCM8169zQ4ZWUgtOA5qSXfdmih6vwZUUvF+1N pAnYKoHMhXZf4Tvu65SIVstOw0SyZJJHThb3+QRpI0GftfhikMHixjOXvaF6Taxn ApJODZeTCVTvBf63N2Xe5X9FHwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFOJwCXVb yjr6+X1n4gCLVy+F7nFOMB8GA1UdIwQYMBaAFAh3f6OBvyWODKw31QnvC6xwZkhE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkM1RC8zQjlERDQxMDky QzQxMUVFQjUyMUJCNDlDNEY5QUUwMi9DSGRfbzRHX0pZNE1yRGZWQ2U4THJIQm1T RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NIZF9vNEdfSlk0TXJEZlZDZThMckhCbVNFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTJDNUQvM0I5REQ0MTA5MkM0MTFFRUI1MjFCQjQ5QzRGOUFFMDIvMjE4OTM3REM1 RTUwMTFGMEI5NDA0NjYyQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQB0ldGMA8EAgACMAkDBwAgAQ3zPkAwDQYJKoZIhvcNAQELBQADggEB AE/fVk8FGSxW4MoFOKSDGJgXF4zQn6ukH0e6evS0xaegCA0t4fJHntVp/6MFrASJ Zxvm7DaB464iCldAoGHLwxajTflTNFL3gFRBEX8QZIdRr64aTf7/0q2y00tzGDdl /ZAq5JXc35jVb8OZUNodoVAma+jG+E63Yi3k0LzoCBFdue4WMyd0Chwjf+AGU5jA 3RebONN5+fp7FVbcaAoi6/3K6RhEDIcB2/uBvCSbfCiqjLd1SMUTBZokFGEI6nQ6 IPw/fNiXsSO3wQV7gVI2O91PMjw/pT/rI9zGTH2th0D2LUvYsBKWiNMZ1lfA7djO d8ApgvdBbFOyH0bT9YDa8xA= -----END CERTIFICATE-----Generated at Mon Mar 2 11:00:38 2026 by rpki-client