$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F7C832A8721511EFA7D82D3EC4F9AE02.roa File: F7C832A8721511EFA7D82D3EC4F9AE02.roa (raw, json) Hash identifier: FGef3aZDaZ2D4+ZO+fspymmP4XmyvYE1l2K9mxh+Yqo= Subject key identifier: A2:FF:4B:25:BB:D8:8E:F0:83:B8:AE:E4:CD:48:70:3B:10:12:EE:E6 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 0274 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F7C832A8721511EFA7D82D3EC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:17:24 +0000 ROA not before: Wed 31 Dec 2025 04:24:52 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 9475 IP address blocks: 202.28.68.0/24 maxlen: 24 202.28.69.0/24 maxlen: 24 202.28.70.0/24 maxlen: 24 202.28.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 628 (0x274) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:52 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a490c4-2a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:49:52:34:18:4c:c7:57:12:04:3c:5f:7d:1b: 00:5b:f1:dc:99:2f:a4:03:2d:2d:4b:72:2e:13:59: e3:97:06:4e:8d:e5:9e:49:a3:02:41:01:84:3e:ab: 65:c1:2f:49:e5:eb:7d:27:5b:92:b1:1c:ad:11:d9: 64:dd:5f:7a:b8:95:df:0a:0f:a2:49:54:ea:c3:d8: a6:a8:8f:b1:0f:55:5e:50:22:9f:fb:90:da:23:50: 60:ed:d2:d2:4b:98:35:1f:d2:5e:21:bc:92:85:ea: 8e:bf:86:98:88:ce:e2:9c:a3:04:4d:41:00:b0:53: f6:3d:f6:60:2d:3b:95:8d:00:2e:74:5c:41:28:09: 40:9f:e6:08:29:24:aa:55:36:1a:99:13:71:18:4f: 57:2f:16:69:01:3e:5b:75:3a:fc:43:80:25:d4:04: af:a4:ad:57:df:3e:1b:dc:98:3b:ca:38:82:2c:47: 46:9c:20:01:95:4a:5a:ac:1f:ea:52:b8:5e:d2:84: 18:1f:26:f7:58:84:3e:d2:ea:23:c2:fc:cf:bc:8b: 39:45:0a:3a:84:93:9b:67:4e:1a:4b:4d:a0:56:75: 55:43:ca:45:24:37:1a:e3:c0:c5:3f:ba:bb:67:ff: 90:87:c3:24:31:b8:ec:0b:32:27:b4:9f:47:41:f5: 8c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FF:4B:25:BB:D8:8E:F0:83:B8:AE:E4:CD:48:70:3B:10:12:EE:E6 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F7C832A8721511EFA7D82D3EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.28.68.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:c5:df:18:88:96:e4:8d:c6:eb:f4:55:64:30:4d:6e:bc:03: 44:28:27:cb:5c:0c:53:7a:8c:90:0a:26:46:a5:98:3a:f7:95: 1e:ab:98:ff:ce:47:fd:eb:00:b1:1e:12:47:8b:20:c6:7c:54: b3:47:ce:b6:38:af:2b:79:ac:71:0f:c7:16:ee:bb:98:0d:bf: e3:eb:5c:75:77:f2:6b:0c:80:31:9f:34:f2:91:36:13:0a:eb: a0:8a:66:dc:92:33:cd:44:be:0c:77:2f:c8:bf:d9:14:85:1a: 0c:0a:46:f5:1b:b8:bd:3c:b7:28:b1:ff:36:62:3d:8f:32:e7: 2e:cb:cc:2a:82:72:6b:df:bd:f6:8f:8d:05:83:0f:65:98:b7: 2f:8f:a9:6f:7e:67:9e:e0:a9:95:cb:e1:04:d1:fc:80:0d:96: ae:d8:c5:fb:19:33:6f:07:30:e6:dc:87:cb:29:d6:20:4d:64: 0a:bd:38:30:83:e8:63:b1:46:4d:d6:51:04:7c:94:f8:2a:23: 6c:3f:29:8b:8a:a0:15:3f:36:de:f1:3e:47:9a:fb:c8:db:d9: 26:a2:88:f1:e3:ef:d9:0d:c6:d1:e6:a4:3a:2b:01:7f:28:1c: cc:1b:bc:5e:e1:fb:f6:61:3b:5a:13:dc:13:48:38:cf:c5:e3: 55:3e:2f:ee -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDUyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTBjNC0yYTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxklSNBhMx1cSBDxffRsAW/HcmS+kAy0tS3IuE1njlwZOjeWeSaMCQQGEPqtl wS9J5et9J1uSsRytEdlk3V96uJXfCg+iSVTqw9imqI+xD1VeUCKf+5DaI1Bg7dLS S5g1H9JeIbySheqOv4aYiM7inKMETUEAsFP2PfZgLTuVjQAudFxBKAlAn+YIKSSq VTYamRNxGE9XLxZpAT5bdTr8Q4Al1ASvpK1X3z4b3Jg7yjiCLEdGnCABlUparB/q Urhe0oQYHyb3WIQ+0uojwvzPvIs5RQo6hJObZ04aS02gVnVVQ8pFJDca48DFP7q7 Z/+Qh8MkMbjsCzIntJ9HQfWMoQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKL/SyW7 2I7wg7iu5M1IcDsQEu7mMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvRjdDODMyQTg3 MjE1MTFFRkE3RDgyRDNFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCyhxEMA0GCSqGSIb3DQEBCwUAA4IBAQBvxd8YiJbkjcbr9FVkME1u vANEKCfLXAxTeoyQCiZGpZg695Ueq5j/zkf96wCxHhJHiyDGfFSzR862OK8reaxx D8cW7ruYDb/j61x1d/JrDIAxnzTykTYTCuugimbckjPNRL4Mdy/Iv9kUhRoMCkb1 G7i9PLcosf82Yj2PMucuy8wqgnJr3732j40Fgw9lmLcvj6lvfmee4KmVy+EE0fyA DZau2MX7GTNvBzDm3IfLKdYgTWQKvTgwg+hjsUZN1lEEfJT4KiNsPymLiqAVPzbe 8T5HmvvI29kmoojx4+/ZDcbR5qQ6KwF/KBzMG7xe4fv2YTtaE9wTSDjPxeNVPi/u -----END CERTIFICATE-----Generated at Mon Mar 2 06:41:46 2026 by rpki-client