$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EE4C9E82721311EFA9D7CA3AC4F9AE02.roa File: EE4C9E82721311EFA9D7CA3AC4F9AE02.roa (raw, json) Hash identifier: fzszWhuEYPJZcHMcBEPQ4pERbU6dHagg+MoxidF8k3g= Subject key identifier: A7:88:0F:BE:ED:17:F8:5B:7D:C8:00:74:88:AA:94:2F:FD:87:98:96 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 0253 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EE4C9E82721311EFA9D7CA3AC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:16:55 +0000 ROA not before: Wed 31 Dec 2025 04:24:22 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 137850 IP address blocks: 202.28.44.0/24 maxlen: 24 202.28.45.0/24 maxlen: 24 202.28.46.0/24 maxlen: 24 202.28.47.0/24 maxlen: 24 2001:3c8:5505::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 595 (0x253) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:22 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a490a7-2805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:11:5a:a2:1e:a1:86:ed:b2:7a:fe:a5:95:ee: 23:4c:d2:54:c1:13:e6:6c:0c:ac:c1:d3:2a:a5:14: d8:53:d3:9d:8a:57:b3:1b:51:78:66:9c:b2:06:08: df:e6:75:92:3a:78:7b:79:db:fe:79:4e:1b:1d:e7: 90:57:6e:17:85:80:ba:f3:58:d7:58:dc:32:c7:ee: 8f:40:a6:f2:7c:e4:36:89:88:4b:8a:7f:3c:ce:46: 64:e8:c1:45:de:6a:9a:94:ba:5a:f8:f4:2b:2a:45: 5d:d4:a3:b2:31:11:98:8a:e3:bc:22:a5:0e:5e:74: 6e:81:ea:17:7a:fd:d8:2b:62:f0:16:26:f8:8b:4f: 59:88:af:49:92:52:b3:72:2f:89:c4:4e:cb:85:2c: a1:2b:10:77:38:05:79:8c:76:69:88:09:d0:9a:cc: 0f:02:9d:0f:f9:12:75:e1:e8:b0:b9:97:72:14:4d: 16:3e:09:fc:7b:29:5e:43:cc:6e:8a:1c:bb:54:b2: a0:2f:08:e8:59:22:2e:0c:03:81:8d:af:ed:98:3b: ed:7a:a9:5d:72:58:54:1f:21:ee:63:f2:94:23:11: 57:9c:9a:76:5a:6e:0a:ce:b0:26:12:c4:58:16:34: dc:58:63:bd:e2:03:e6:41:7c:bd:d8:92:06:66:4a: ff:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:88:0F:BE:ED:17:F8:5B:7D:C8:00:74:88:AA:94:2F:FD:87:98:96 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EE4C9E82721311EFA9D7CA3AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.28.44.0/22 IPv6: 2001:3c8:5505::/48 Signature Algorithm: sha256WithRSAEncryption 32:5b:3d:d5:36:9f:51:40:a1:84:83:16:10:6d:50:87:b3:f1: 85:07:e8:64:8c:77:06:85:1f:f2:83:4f:a7:ef:40:51:37:fb: 74:59:57:0b:d7:1b:74:13:ff:02:c8:02:53:97:df:e8:67:79: ca:de:04:70:14:a3:8b:00:96:05:73:e8:fc:a3:bb:6d:f1:dc: 88:f2:cf:44:ab:44:93:6a:8e:e5:c4:d5:04:09:7f:6e:9a:50: 91:78:9b:10:af:ad:7a:15:d3:b4:28:76:bc:85:3f:c4:f1:98: ce:e9:4c:d4:17:9d:5c:a8:e9:10:3e:50:67:6e:c3:72:d4:4a: 57:d1:02:db:02:0a:f9:dc:23:53:d8:20:cf:8a:9d:91:d3:e9: 34:57:0c:d9:2d:12:1b:f7:51:e9:15:d7:c2:83:e5:2e:db:6b: ed:d3:16:2d:c0:53:ab:65:01:ec:14:2a:13:bf:53:44:41:04: 67:76:50:51:a7:b4:22:bc:77:c1:7c:5d:83:47:50:07:ad:f4: 06:04:fb:1e:f1:33:28:93:28:01:17:b5:ec:99:0b:a6:ec:3a: d8:33:cf:34:75:19:13:05:62:71:07:0b:c4:f1:c1:0b:5b:fb: 40:91:67:70:0e:fc:75:4e:df:8d:95:67:9a:c2:ce:38:cb:da: 7b:8b:11:e4 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDIyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTBhNy0yODA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBFaoh6hhu2yev6lle4jTNJUwRPmbAyswdMqpRTYU9OdilezG1F4ZpyyBgjf 5nWSOnh7edv+eU4bHeeQV24XhYC681jXWNwyx+6PQKbyfOQ2iYhLin88zkZk6MFF 3mqalLpa+PQrKkVd1KOyMRGYiuO8IqUOXnRugeoXev3YK2LwFib4i09ZiK9JklKz ci+JxE7LhSyhKxB3OAV5jHZpiAnQmswPAp0P+RJ14eiwuZdyFE0WPgn8eyleQ8xu ihy7VLKgLwjoWSIuDAOBja/tmDvteqldclhUHyHuY/KUIxFXnJp2Wm4KzrAmEsRY FjTcWGO94gPmQXy92JIGZkr/XwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFKeID77t F/hbfcgAdIiqlC/9h5iWMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvRUU0QzlFODI3 MjEzMTFFRkE5RDdDQTNBQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQCyhwsMA8EAgACMAkDBwAgAQPIVQUwDQYJKoZIhvcNAQELBQADggEB ADJbPdU2n1FAoYSDFhBtUIez8YUH6GSMdwaFH/KDT6fvQFE3+3RZVwvXG3QT/wLI AlOX3+hnecreBHAUo4sAlgVz6Pyju23x3Ijyz0SrRJNqjuXE1QQJf26aUJF4mxCv rXoV07QodryFP8TxmM7pTNQXnVyo6RA+UGduw3LUSlfRAtsCCvncI1PYIM+KnZHT 6TRXDNktEhv3UekV18KD5S7ba+3TFi3AU6tlAewUKhO/U0RBBGd2UFGntCK8d8F8 XYNHUAet9AYE+x7xMyiTKAEXteyZC6bsOtgzzzR1GRMFYnEHC8TxwQtb+0CRZ3AO /HVO342VZ5rCzjjL2nuLEeQ= -----END CERTIFICATE-----Generated at Mon Mar 2 09:26:21 2026 by rpki-client