$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F000862E721A11EFBDE87567C4F9AE02.roa File: F000862E721A11EFBDE87567C4F9AE02.roa (raw, json) Hash identifier: ZkB85awqVertHkbHXCSJoXLHX8N3gSdUA4RqnthJOcA= Subject key identifier: 0C:69:F7:A9:80:7E:EC:82:37:29:BC:B4:D7:25:E4:37:2C:09:6F:3A Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 0271 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F000862E721A11EFBDE87567C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:17:21 +0000 ROA not before: Wed 31 Dec 2025 04:24:50 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 55545 IP address blocks: 202.28.40.0/24 maxlen: 24 202.28.41.0/24 maxlen: 24 202.28.42.0/24 maxlen: 24 202.28.43.0/24 maxlen: 24 2001:3c8:c301::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 625 (0x271) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:50 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a490c1-115a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:86:ce:72:47:8b:f8:ff:79:f4:a2:7b:b0:74: bc:7d:25:9d:be:60:51:08:1c:a8:39:d0:02:01:ad: 98:d5:4b:94:d0:e7:93:8e:f7:b0:e8:77:8b:3a:d0: ad:8f:58:68:f7:d2:0f:cd:82:03:55:35:14:7f:c5: a8:70:0c:52:58:ab:42:73:1e:5d:03:07:53:fd:19: 5c:c0:77:98:a8:2e:b6:12:45:89:ec:9d:5d:a4:18: 62:1a:0a:42:20:19:20:c0:d0:c0:c2:6c:0e:16:ff: 3f:21:0b:d3:2b:5d:52:78:1f:6a:e1:68:95:83:d3: 59:26:aa:fe:60:2d:dd:8c:f8:8e:76:e6:14:ed:13: cd:1e:3f:f5:3e:16:4e:4b:1b:15:eb:37:8b:a4:95: 36:e2:2c:a9:7a:84:b8:78:2d:d2:4e:0a:17:6a:ba: 0a:ac:e1:92:22:f9:88:6d:a3:7d:6c:d2:8c:af:9f: a8:9b:ec:36:38:46:0b:49:7c:61:d2:3d:da:09:b7: 95:7c:c8:e2:c0:9e:06:c1:b1:c9:0c:96:7a:cd:8a: 7b:6c:34:1f:83:2f:88:49:93:39:d5:95:d7:1d:36: 64:38:49:66:f5:38:1b:9b:e4:6f:aa:5b:09:f0:08: 5f:70:68:87:6b:f3:11:4a:60:8a:bc:86:3c:7d:c9: d6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:69:F7:A9:80:7E:EC:82:37:29:BC:B4:D7:25:E4:37:2C:09:6F:3A X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F000862E721A11EFBDE87567C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.28.40.0/22 IPv6: 2001:3c8:c301::/48 Signature Algorithm: sha256WithRSAEncryption a9:a6:cc:ba:78:52:7a:61:c2:8e:1d:6a:19:28:43:b1:27:20: a9:40:12:33:6c:66:91:1c:21:11:30:22:d6:13:fd:3e:83:4c: c2:0b:9a:4f:c8:b0:34:17:f6:57:b8:30:7a:c3:80:d2:b6:9a: 9d:7e:4b:7a:d8:0c:ad:a9:27:91:3f:2d:90:9e:82:fb:b5:64: b7:7c:5c:7c:c0:ba:07:3a:db:97:5c:5f:a0:07:70:9d:ea:24: c1:e2:da:d8:50:f4:8b:05:58:4e:2d:76:8d:8a:bd:0c:cb:2c: 6c:32:f3:cd:0d:9d:88:4e:8a:5f:9d:9d:98:c5:82:62:c6:47: af:fd:c4:ba:3f:01:ef:cb:0f:f1:d7:c3:86:e5:38:ea:f3:9b: d3:0f:cb:31:a3:2a:0c:38:34:4d:c6:8d:b0:20:36:fb:e2:09: ee:14:7e:cb:aa:2f:45:48:0f:43:c9:14:e3:ee:76:89:f6:5d: b3:cf:b5:20:dc:1e:f8:25:0c:4f:e5:ee:59:29:05:88:7f:54: 18:c6:48:9c:88:53:fb:e8:f5:08:59:1b:2a:2e:81:d7:04:27: d0:13:cb:3f:bd:c7:8e:88:51:50:ef:2f:42:6f:40:f2:d2:98: 19:05:84:48:96:71:e7:e7:bf:a8:32:3c:f6:5e:51:2f:f0:28: 11:c9:59:25 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDUwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTBjMS0xMTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmYbOckeL+P959KJ7sHS8fSWdvmBRCByoOdACAa2Y1UuU0OeTjvew6HeLOtCt j1ho99IPzYIDVTUUf8WocAxSWKtCcx5dAwdT/RlcwHeYqC62EkWJ7J1dpBhiGgpC IBkgwNDAwmwOFv8/IQvTK11SeB9q4WiVg9NZJqr+YC3djPiOduYU7RPNHj/1PhZO SxsV6zeLpJU24iypeoS4eC3STgoXaroKrOGSIvmIbaN9bNKMr5+om+w2OEYLSXxh 0j3aCbeVfMjiwJ4GwbHJDJZ6zYp7bDQfgy+ISZM51ZXXHTZkOElm9Tgbm+RvqlsJ 8AhfcGiHa/MRSmCKvIY8fcnW5QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFAxp96mA fuyCNym8tNcl5DcsCW86MB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvRjAwMDg2MkU3 MjFBMTFFRkJERTg3NTY3QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQCyhwoMA8EAgACMAkDBwAgAQPIwwEwDQYJKoZIhvcNAQELBQADggEB AKmmzLp4Unphwo4dahkoQ7EnIKlAEjNsZpEcIREwItYT/T6DTMILmk/IsDQX9le4 MHrDgNK2mp1+S3rYDK2pJ5E/LZCegvu1ZLd8XHzAugc625dcX6AHcJ3qJMHi2thQ 9IsFWE4tdo2KvQzLLGwy880NnYhOil+dnZjFgmLGR6/9xLo/Ae/LD/HXw4blOOrz m9MPyzGjKgw4NE3GjbAgNvviCe4UfsuqL0VID0PJFOPudon2XbPPtSDcHvglDE/l 7lkpBYh/VBjGSJyIU/vo9QhZGyougdcEJ9ATyz+9x46IUVDvL0JvQPLSmBkFhEiW cefnv6gyPPZeUS/wKBHJWSU= -----END CERTIFICATE-----Generated at Mon Mar 2 10:22:44 2026 by rpki-client