$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F54A05F8721311EFA9D7CA3AC4F9AE02.roa File: F54A05F8721311EFA9D7CA3AC4F9AE02.roa (raw, json) Hash identifier: rwOV3IpdrwgwL+FOVV7rkPp2RqN3C9GgNS1H/J+hKpI= Subject key identifier: 5D:0B:BC:2B:48:8C:C6:34:3F:AC:1F:4F:03:7D:58:EE:51:D4:3F:17 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 0278 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F54A05F8721311EFA9D7CA3AC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:17:27 +0000 ROA not before: Wed 31 Dec 2025 04:24:57 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 9562 IP address blocks: 202.28.32.0/24 maxlen: 24 202.28.33.0/24 maxlen: 24 202.28.34.0/24 maxlen: 24 202.28.35.0/24 maxlen: 24 2001:3c8:a701::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 632 (0x278) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:57 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a490c7-40be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c7:c6:41:2b:4c:c0:e0:06:3b:47:7e:99:ec: 05:86:5f:da:96:54:e1:67:08:41:30:cd:bb:00:12: 06:cf:44:3b:b7:98:6b:ee:2b:57:c1:de:30:47:b8: 6c:04:b1:a8:d8:e1:97:dc:61:51:3e:82:4a:1f:18: d7:c3:aa:a1:80:0b:89:7d:11:cb:09:1b:a3:47:81: 14:72:7c:a4:05:90:09:3e:d1:cb:5d:6a:36:b9:b5: c6:cb:96:0c:93:59:f5:fa:fc:d0:51:2f:d6:a1:d4: 9a:5a:aa:84:3c:28:a7:af:85:b7:bd:6b:2e:c5:f9: 79:b1:28:ca:b3:b4:bc:9e:3e:1c:b8:44:c3:c7:45: 02:84:a6:21:aa:97:97:0e:e9:b1:af:ea:61:fe:3e: 4e:0d:6d:fa:44:70:81:8e:20:9a:57:6d:0e:7d:b0: de:92:28:dd:51:ff:12:22:cb:b7:f4:7f:54:5d:92: 33:91:f4:0d:1f:5e:17:a5:6b:62:82:1b:d3:ba:e4: fa:bb:a7:4b:33:2e:05:85:9a:6b:cb:e1:e7:c9:ac: a1:cc:c2:b0:5e:c7:6e:f7:7b:02:ea:43:1a:04:f9: 0b:5b:bd:8b:68:e6:64:29:bb:ce:6f:06:93:06:a3: bf:30:b7:2e:e9:87:6b:be:de:72:c3:46:90:d4:5e: bb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0B:BC:2B:48:8C:C6:34:3F:AC:1F:4F:03:7D:58:EE:51:D4:3F:17 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F54A05F8721311EFA9D7CA3AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.28.32.0/22 IPv6: 2001:3c8:a701::/48 Signature Algorithm: sha256WithRSAEncryption 29:04:89:ac:94:9a:ce:07:27:e8:3a:e1:03:6d:cf:20:b4:a6: 71:40:1e:90:39:7a:92:8d:bd:1d:be:7c:23:11:f1:80:c2:f4: eb:89:14:5d:7a:0e:58:49:e6:36:e3:cd:0b:9f:82:68:d5:3d: 21:5a:26:84:f4:d2:c4:c1:30:bb:ef:80:04:43:4f:72:6c:30: 41:a1:c0:b5:58:fd:fd:73:3e:1a:d4:7c:28:3c:b4:b9:94:7a: 57:02:c6:5e:15:3b:c5:6f:28:46:a7:ff:55:32:42:17:84:24: ce:d3:db:6a:f0:8b:d2:92:da:49:b6:49:50:fe:40:09:1f:14: ef:20:bb:af:19:19:e8:6c:b8:32:de:53:32:18:02:03:d7:b6: 1b:d4:0f:1a:e8:44:c5:a0:b5:83:50:c0:06:3a:6e:96:f6:8a: 4a:39:39:38:25:21:fe:7c:c8:3f:a1:4b:a7:03:e4:0d:e4:95: b7:e7:a3:2e:58:30:e0:ea:57:fa:c8:10:05:89:0c:48:fe:28: 73:b4:3b:95:b2:ad:37:ac:a4:c6:d0:6e:15:27:1d:68:45:88: 2a:f6:d8:73:ff:95:a6:21:61:45:af:af:e6:01:fe:54:ca:9a: a7:b0:84:93:9b:e3:1f:2d:d4:90:4d:86:9b:20:1a:64:e8:7a: 72:54:45:ba -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDU3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTBjNy00MGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlsfGQStMwOAGO0d+mewFhl/allThZwhBMM27ABIGz0Q7t5hr7itXwd4wR7hs BLGo2OGX3GFRPoJKHxjXw6qhgAuJfRHLCRujR4EUcnykBZAJPtHLXWo2ubXGy5YM k1n1+vzQUS/WodSaWqqEPCinr4W3vWsuxfl5sSjKs7S8nj4cuETDx0UChKYhqpeX Dumxr+ph/j5ODW36RHCBjiCaV20OfbDekijdUf8SIsu39H9UXZIzkfQNH14XpWti ghvTuuT6u6dLMy4FhZpry+HnyayhzMKwXsdu93sC6kMaBPkLW72LaOZkKbvObwaT BqO/MLcu6Ydrvt5yw0aQ1F67gwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFF0LvCtI jMY0P6wfTwN9WO5R1D8XMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvRjU0QTA1Rjg3 MjEzMTFFRkE5RDdDQTNBQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQCyhwgMA8EAgACMAkDBwAgAQPIpwEwDQYJKoZIhvcNAQELBQADggEB ACkEiayUms4HJ+g64QNtzyC0pnFAHpA5epKNvR2+fCMR8YDC9OuJFF16DlhJ5jbj zQufgmjVPSFaJoT00sTBMLvvgARDT3JsMEGhwLVY/f1zPhrUfCg8tLmUelcCxl4V O8VvKEan/1UyQheEJM7T22rwi9KS2km2SVD+QAkfFO8gu68ZGehsuDLeUzIYAgPX thvUDxroRMWgtYNQwAY6bpb2iko5OTglIf58yD+hS6cD5A3klbfnoy5YMODqV/rI EAWJDEj+KHO0O5WyrTespMbQbhUnHWhFiCr22HP/laYhYUWvr+YB/lTKmqewhJOb 4x8t1JBNhpsgGmToenJURbo= -----END CERTIFICATE-----Generated at Mon Mar 2 12:02:10 2026 by rpki-client