$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F73A83F4721511EFA7D82D3EC4F9AE02.roa File: F73A83F4721511EFA7D82D3EC4F9AE02.roa (raw, json) Hash identifier: hjBp0t0fBdn9axFJobASrEbbjZ+AwPQeQXGww4R4gos= Subject key identifier: 45:F7:62:5A:68:D4:89:BF:8C:B9:61:BD:CC:60:D1:E8:FD:DB:6D:A4 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 0273 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F73A83F4721511EFA7D82D3EC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:17:23 +0000 ROA not before: Wed 31 Dec 2025 04:24:52 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 9464 IP address blocks: 202.29.144.0/21 maxlen: 21 2001:3c8:9007::/48 maxlen: 48 2001:3c8:9009::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 627 (0x273) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:52 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a490c3-a788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:dc:e5:91:f7:a0:e7:89:f4:85:4a:2c:91:99: 4b:ae:6b:c9:58:b9:ec:31:d5:12:e8:82:98:ce:1e: 34:b6:d5:9d:fb:61:2f:05:68:5a:80:e6:a3:92:71: a8:38:63:18:e4:5c:f5:a8:e2:64:62:d3:f8:d3:1c: f9:53:f5:e6:ca:7f:34:8e:ee:f0:1d:4a:5d:55:5f: c2:5c:1d:6e:19:ab:7b:42:9e:26:ca:c4:ae:07:1e: 65:0e:8b:51:f4:19:e7:f7:43:81:c0:0d:0a:c7:9a: d4:e9:8f:0f:de:a6:5a:ce:6c:3d:19:9f:31:e6:bc: 7a:fd:1b:b8:1a:ec:02:64:5c:77:7e:32:58:04:d6: be:e1:bf:80:09:1c:ec:39:a3:2a:6d:27:32:08:fc: ac:92:2c:e6:15:0d:43:35:7f:a5:85:d0:82:ec:ec: e9:c8:44:c8:52:5a:b6:23:a7:61:eb:54:7e:c5:15: 4a:53:15:03:31:e3:3d:4a:92:57:8e:8c:bd:01:5a: 52:55:71:f6:41:30:7c:2c:c8:37:6e:7a:55:f0:37: e3:8d:37:84:f5:f1:e5:b4:d6:1d:6c:24:81:b9:ad: a8:c4:87:b8:18:a3:6d:dd:f6:81:26:94:9f:ee:e9: 37:2b:fd:1c:38:db:6a:47:79:b6:f3:9f:c5:d7:72: c3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F7:62:5A:68:D4:89:BF:8C:B9:61:BD:CC:60:D1:E8:FD:DB:6D:A4 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F73A83F4721511EFA7D82D3EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.29.144.0/21 IPv6: 2001:3c8:9007::/48 2001:3c8:9009::/48 Signature Algorithm: sha256WithRSAEncryption 49:57:76:34:12:31:cf:07:8a:64:f0:21:b2:d9:7e:69:25:c7: 25:dc:91:61:de:e7:5b:9c:aa:b9:56:85:34:15:81:f2:63:9e: 0d:68:24:24:ec:06:38:69:57:e7:05:dc:77:46:aa:c5:1a:f4: f9:d0:96:5a:e1:21:4b:44:44:95:b9:2a:b9:d9:23:33:13:a4: 13:cc:3d:cf:45:50:27:05:a2:8f:c2:5a:35:a4:37:51:c5:60: f9:9b:f5:af:d6:18:2a:fa:66:e5:96:ab:77:63:19:d2:3a:7d: 03:20:bd:c0:9f:55:64:08:0f:99:8e:fc:48:c9:6e:90:e7:53: 1b:f1:67:1a:4f:b8:47:2f:ab:19:7c:5e:43:3c:4d:22:b2:89: 79:42:9a:86:18:a2:0f:f8:52:1a:9b:28:3c:a1:82:20:d1:f7: 9e:47:ac:90:1d:4a:3c:e6:91:33:e8:18:57:89:5a:a2:d2:49: bc:af:60:83:3c:c7:c1:7f:bc:d3:3b:99:03:27:f6:19:7c:ea: 9e:4d:54:5f:57:30:cf:09:b8:c7:2f:cb:76:0b:f7:20:6b:c6: a2:cc:ff:a3:59:3b:75:87:da:94:d7:f5:fc:b2:ef:86:cb:fa: 13:c0:a9:7f:7c:01:58:64:dd:18:cf:2d:33:bf:e9:49:2a:25: 01:2b:2e:a8 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICAnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDUyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTBjMy1hNzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlNzlkfeg54n0hUoskZlLrmvJWLnsMdUS6IKYzh40ttWd+2EvBWhagOajknGo OGMY5Fz1qOJkYtP40xz5U/Xmyn80ju7wHUpdVV/CXB1uGat7Qp4mysSuBx5lDotR 9Bnn90OBwA0Kx5rU6Y8P3qZazmw9GZ8x5rx6/Ru4GuwCZFx3fjJYBNa+4b+ACRzs OaMqbScyCPyskizmFQ1DNX+lhdCC7OzpyETIUlq2I6dh61R+xRVKUxUDMeM9SpJX joy9AVpSVXH2QTB8LMg3bnpV8DfjjTeE9fHltNYdbCSBua2oxIe4GKNt3faBJpSf 7uk3K/0cONtqR3m285/F13LD+QIDAQABo4ICejCCAnYwHQYDVR0OBBYEFEX3Ylpo 1Im/jLlhvcxg0ej9222kMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvRjczQTgzRjQ3 MjE1MTFFRkE3RDgyRDNFQzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAM BAIAATAGAwQDyh2QMBgEAgACMBIDBwAgAQPIkAcDBwAgAQPIkAkwDQYJKoZIhvcN AQELBQADggEBAElXdjQSMc8HimTwIbLZfmklxyXckWHe51ucqrlWhTQVgfJjng1o JCTsBjhpV+cF3HdGqsUa9PnQllrhIUtERJW5KrnZIzMTpBPMPc9FUCcFoo/CWjWk N1HFYPmb9a/WGCr6ZuWWq3djGdI6fQMgvcCfVWQID5mO/EjJbpDnUxvxZxpPuEcv qxl8XkM8TSKyiXlCmoYYog/4UhqbKDyhgiDR955HrJAdSjzmkTPoGFeJWqLSSbyv YIM8x8F/vNM7mQMn9hl86p5NVF9XMM8JuMcvy3YL9yBrxqLM/6NZO3WH2pTX9fyy 74bL+hPAqX98AVhk3RjPLTO/6UkqJQErLqg= -----END CERTIFICATE-----Generated at Mon Mar 2 05:57:58 2026 by rpki-client