$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/BE983208721511EF9D7B9F3DC4F9AE02.roa File: BE983208721511EF9D7B9F3DC4F9AE02.roa (raw, json) Hash identifier: SLfiMRl553w12S7vLhMdEvIbuo2Dpo+TAwzXeFYYRFk= Subject key identifier: B0:1C:56:40:04:22:F4:DE:C0:F6:89:91:DC:E9:A0:C4:86:75:40:45 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 0241 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/BE983208721511EF9D7B9F3DC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:16:38 +0000 ROA not before: Wed 31 Dec 2025 04:24:05 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 132250 IP address blocks: 202.29.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 577 (0x241) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:05 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a49096-61b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b2:45:0c:12:80:ed:45:d1:ce:47:f7:75:93: 8c:44:9b:3e:5b:bc:7b:49:a9:46:c6:17:66:df:b0: 3f:e1:05:9b:2d:b2:fe:c7:48:14:49:15:eb:f9:fe: 7f:c5:c1:df:bc:61:67:fd:bc:7b:0c:ba:b8:a4:a9: 63:f1:77:6e:32:4c:42:77:b5:be:c0:70:a0:fa:09: 9f:e8:33:ac:e8:1a:4b:20:d3:b7:9c:3d:0c:2d:cf: e9:9a:4c:66:b3:80:4d:e6:44:6e:f0:52:2d:ba:0d: 72:06:1c:bf:e2:91:04:95:fa:2f:60:60:b8:f2:c9: 1e:d3:56:1b:0d:70:8f:04:78:6d:1e:41:ce:96:41: e1:e4:8f:69:17:10:e4:a1:5f:ba:c2:b1:af:18:cc: 79:13:5f:cc:1e:c8:49:15:61:49:6e:ee:a3:38:40: 0a:6e:28:1d:0b:17:1e:b1:da:fd:3e:a1:cc:c1:56: dc:7b:70:9c:27:9e:f6:49:1a:70:12:24:85:e8:47: e2:f0:e2:fe:04:2b:0c:b7:af:13:a1:29:bd:51:d2: 07:3b:d2:9d:f6:71:ef:01:fb:e3:f0:58:3b:93:d1: 41:2f:5f:23:0f:34:c3:0b:2e:8c:c6:14:50:2e:de: ec:cc:ff:cd:88:5b:39:83:e4:14:33:01:da:97:c7: 8e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:1C:56:40:04:22:F4:DE:C0:F6:89:91:DC:E9:A0:C4:86:75:40:45 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/BE983208721511EF9D7B9F3DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.29.70.0/24 Signature Algorithm: sha256WithRSAEncryption 82:40:27:af:9a:b4:d0:eb:c0:c0:e2:3b:b2:fc:69:11:d0:16: 6f:2b:0b:bb:df:01:fc:7f:35:78:95:11:3d:8b:e0:fb:28:41: ef:9d:4c:73:8d:ed:0c:74:23:69:05:4c:b0:4e:a4:f9:48:f7: fe:94:4e:43:ef:8a:b0:ff:c8:06:1d:a2:8c:71:b7:ea:9e:16: 37:19:32:87:6b:db:b0:41:c4:c5:31:b2:22:98:1c:e3:bb:81: 85:e9:10:29:77:20:91:08:95:65:4c:45:45:bf:69:75:e9:ff: 04:33:77:04:82:65:88:b6:ee:25:e5:90:11:31:fe:4f:05:93: d6:18:c9:92:14:97:b9:c5:1b:d3:95:f3:a2:2c:c1:6d:9f:82: 1f:6a:9c:69:36:ca:d0:f6:a7:4d:7a:e5:52:35:68:b7:dd:24: 37:7b:70:eb:ff:01:34:fd:10:cd:52:98:06:3a:a1:44:79:4e: e0:56:71:5b:e6:16:96:9f:fc:1b:98:f6:82:35:04:09:9a:2c: 6e:96:d0:8e:39:28:a8:3a:a3:a2:cd:7b:b1:f2:dc:61:70:74: f2:34:67:de:8c:34:69:e9:61:eb:4a:23:64:62:14:69:ec:be: fd:ac:09:b8:cc:ab:e4:39:b7:0c:d2:de:d5:c2:24:0a:9e:78: 90:8c:50:79 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDA1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTA5Ni02MWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1LJFDBKA7UXRzkf3dZOMRJs+W7x7SalGxhdm37A/4QWbLbL+x0gUSRXr+f5/ xcHfvGFn/bx7DLq4pKlj8XduMkxCd7W+wHCg+gmf6DOs6BpLINO3nD0MLc/pmkxm s4BN5kRu8FItug1yBhy/4pEElfovYGC48ske01YbDXCPBHhtHkHOlkHh5I9pFxDk oV+6wrGvGMx5E1/MHshJFWFJbu6jOEAKbigdCxcesdr9PqHMwVbce3CcJ572SRpw EiSF6Efi8OL+BCsMt68ToSm9UdIHO9Kd9nHvAfvj8Fg7k9FBL18jDzTDCy6MxhRQ Lt7szP/NiFs5g+QUMwHal8eOhwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLAcVkAE IvTewPaJkdzpoMSGdUBFMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvQkU5ODMyMDg3 MjE1MTFFRjlEN0I5RjNEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyh1GMA0GCSqGSIb3DQEBCwUAA4IBAQCCQCevmrTQ68DA4juy/GkR 0BZvKwu73wH8fzV4lRE9i+D7KEHvnUxzje0MdCNpBUywTqT5SPf+lE5D74qw/8gG HaKMcbfqnhY3GTKHa9uwQcTFMbIimBzju4GF6RApdyCRCJVlTEVFv2l16f8EM3cE gmWItu4l5ZARMf5PBZPWGMmSFJe5xRvTlfOiLMFtn4IfapxpNsrQ9qdNeuVSNWi3 3SQ3e3Dr/wE0/RDNUpgGOqFEeU7gVnFb5haWn/wbmPaCNQQJmixultCOOSioOqOi zXux8txhcHTyNGfejDRp6WHrSiNkYhRp7L79rAm4zKvkObcM0t7VwiQKnniQjFB5 -----END CERTIFICATE-----Generated at Mon Mar 2 22:20:05 2026 by rpki-client