$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F214B8B0721311EFA9D7CA3AC4F9AE02.roa File: F214B8B0721311EFA9D7CA3AC4F9AE02.roa (raw, json) Hash identifier: 7TIBmlTYaD7Y6NZvnssfIT7NnWPsGLOyt+KIBRQvg6o= Subject key identifier: 33:16:40:43:EF:66:2F:D5:38:B9:9A:19:2D:49:23:A9:B8:62:E2:18 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 025C Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F214B8B0721311EFA9D7CA3AC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:17:02 +0000 ROA not before: Wed 31 Dec 2025 04:24:30 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 149503 IP address blocks: 202.29.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 604 (0x25c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:30 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a490ae-4f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:05:50:d6:21:8d:71:c1:04:78:44:62:e5:3c: 49:26:a0:c9:fd:19:4b:e2:43:dc:a6:47:79:07:38: 58:9e:4e:77:8d:69:58:a8:66:0c:b6:ab:15:b4:a9: 3e:f0:e1:df:d4:8f:76:80:ff:ff:fb:15:77:2d:ba: 93:15:6a:e9:ae:cb:93:d7:49:a1:cb:cd:53:aa:5c: f2:46:5d:4a:77:ad:7a:5c:0e:d8:77:e5:1d:df:da: 4f:1b:02:2e:63:7c:5f:1a:78:1f:fe:20:49:eb:d7: 53:ce:65:db:60:02:d1:f8:bb:52:7d:c7:fd:e1:c8: 37:69:3d:e9:a9:70:23:a4:fc:ae:c9:d2:9e:67:30: da:4e:da:55:7e:33:d3:3c:5a:82:11:bf:7e:e1:c2: 7e:62:68:78:ac:9c:e4:de:34:a1:27:f9:62:dd:15: 9e:4a:7d:6a:31:a4:ad:80:7f:6d:27:ea:54:a3:fb: 3f:f9:43:7f:77:94:21:3c:88:a0:56:6d:5d:f9:17: 5f:97:18:4f:99:54:c8:b7:8e:62:fd:60:ce:55:6d: cb:9b:45:b4:85:d2:a6:bc:e0:27:94:87:e2:8c:11: ab:ae:9a:ff:2c:aa:36:70:e9:ec:f7:84:b4:1d:8b: 96:f8:75:c8:3b:39:85:71:7d:a8:79:d0:08:77:bf: ce:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:16:40:43:EF:66:2F:D5:38:B9:9A:19:2D:49:23:A9:B8:62:E2:18 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F214B8B0721311EFA9D7CA3AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.29.86.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:62:12:34:2c:00:b3:f2:a9:26:70:cb:32:87:a4:09:23:14: e0:51:51:1c:01:74:9d:12:8a:b0:0b:aa:47:25:5b:bb:63:c1: 8b:7b:f9:c9:0d:50:95:65:de:b0:c4:ad:d9:e3:4f:64:bd:99: 80:d3:70:27:ff:5a:e5:7a:b8:9f:da:18:05:51:44:62:14:e7: 3e:9c:dd:73:b4:54:b2:8d:99:15:49:23:81:30:53:91:ee:fd: a7:8d:bc:3a:67:82:a1:bd:39:09:86:74:96:50:82:f4:6d:e5: 70:53:9b:19:61:c2:4f:02:fe:15:5f:09:cd:51:23:00:b1:bf: df:76:0f:5a:36:d0:fc:ef:3e:07:7d:5b:34:af:1d:43:24:9b: 4c:56:35:76:e1:5d:4d:99:dc:ff:3c:90:65:aa:b0:af:7d:3e: 29:89:d3:7f:2b:5b:5f:e1:fe:12:77:23:4a:94:57:91:13:17: 89:b9:d1:1a:67:6b:f3:a7:cc:d0:9b:17:97:fd:12:7e:72:8d: d5:de:91:8f:d2:70:03:64:c0:5f:23:a9:e9:9f:ce:1f:6c:9b: 8f:8f:db:11:ca:27:2c:ae:9a:b9:20:89:32:ca:4f:d6:9f:42: 84:14:c3:e5:93:4f:ab:25:99:cd:ed:44:47:53:3e:17:87:73: e0:f8:4b:28 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDMwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTBhZS00ZjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQVQ1iGNccEEeERi5TxJJqDJ/RlL4kPcpkd5BzhYnk53jWlYqGYMtqsVtKk+ 8OHf1I92gP//+xV3LbqTFWrprsuT10mhy81TqlzyRl1Kd616XA7Yd+Ud39pPGwIu Y3xfGngf/iBJ69dTzmXbYALR+LtSfcf94cg3aT3pqXAjpPyuydKeZzDaTtpVfjPT PFqCEb9+4cJ+Ymh4rJzk3jShJ/li3RWeSn1qMaStgH9tJ+pUo/s/+UN/d5QhPIig Vm1d+RdflxhPmVTIt45i/WDOVW3Lm0W0hdKmvOAnlIfijBGrrpr/LKo2cOns94S0 HYuW+HXIOzmFcX2oedAId7/OXQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDMWQEPv Zi/VOLmaGS1JI6m4YuIYMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvRjIxNEI4QjA3 MjEzMTFFRkE5RDdDQTNBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyh1WMA0GCSqGSIb3DQEBCwUAA4IBAQCdYhI0LACz8qkmcMsyh6QJ IxTgUVEcAXSdEoqwC6pHJVu7Y8GLe/nJDVCVZd6wxK3Z409kvZmA03An/1rlerif 2hgFUURiFOc+nN1ztFSyjZkVSSOBMFOR7v2njbw6Z4KhvTkJhnSWUIL0beVwU5sZ YcJPAv4VXwnNUSMAsb/fdg9aNtD87z4HfVs0rx1DJJtMVjV24V1Nmdz/PJBlqrCv fT4pidN/K1tf4f4SdyNKlFeRExeJudEaZ2vzp8zQmxeX/RJ+co3V3pGP0nADZMBf I6npn84fbJuPj9sRyicsrpq5IIkyyk/Wn0KEFMPlk0+rJZnN7URHUz4Xh3Pg+Eso -----END CERTIFICATE-----Generated at Mon Mar 2 06:53:02 2026 by rpki-client