$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/CF41132A1DE811EB9DE34963C4F9AE02.roa File: CF41132A1DE811EB9DE34963C4F9AE02.roa (raw, json) Hash identifier: JkwlB4IFE4Dgm1EcLQn9CRo6PclYWkjqCYFJJbMHsj0= Subject key identifier: 0C:AB:58:EC:71:A5:81:E1:24:77:CA:FA:37:25:8D:90:23:0E:62:6A Certificate issuer: /CN=A91AB20B/serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808 Certificate serial: 0881 Authority key identifier: 5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/CF41132A1DE811EB9DE34963C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:28:50 +0000 ROA not before: Tue 02 Sep 2025 21:42:08 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 135407 IP address blocks: 110.93.223.0/24 maxlen: 24 110.93.226.0/24 maxlen: 24 110.93.227.0/24 maxlen: 24 110.93.228.0/24 maxlen: 24 110.93.230.0/24 maxlen: 24 110.93.236.0/24 maxlen: 24 110.93.237.0/24 maxlen: 24 110.93.240.0/24 maxlen: 24 110.93.244.0/24 maxlen: 24 110.93.245.0/24 maxlen: 24 110.93.246.0/24 maxlen: 24 110.93.247.0/24 maxlen: 24 117.20.29.0/24 maxlen: 24 119.63.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2177 (0x881) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB20B, serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808 Validity Not Before: Sep 2 21:42:08 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a47752-4424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f4:ce:7e:79:ce:14:a1:56:72:ed:d1:74:12: 65:38:1a:18:f8:ac:bc:ba:34:5a:e2:fe:fd:c0:53: 3a:39:b9:15:18:2e:3e:68:5b:fb:f2:24:44:71:36: 72:5b:09:29:c2:6a:ef:37:10:fe:63:1e:c5:0b:95: 73:84:73:b8:e7:22:86:bc:8d:2f:c4:49:d5:ca:77: 8b:ba:fa:0d:1d:89:37:de:a6:18:49:7e:16:a7:5b: 63:8a:f2:90:69:33:4e:1a:4a:a6:b8:07:ad:af:01: dc:0d:eb:c0:a8:93:f1:e7:98:df:26:98:e9:5f:aa: 7d:8a:e4:81:68:fb:66:d7:4b:a4:1c:ea:70:00:e6: 84:66:74:e3:16:91:a7:00:11:3c:2d:c4:eb:10:f6: 0e:c8:12:6a:e2:ac:5c:4f:62:06:82:fa:5e:23:90: db:5d:65:3a:a7:05:25:09:03:47:1b:f4:2c:b8:c6: 5b:ad:fe:19:9b:54:f6:f3:af:d6:29:31:c4:f8:10: ed:51:2a:78:7b:dd:54:a4:09:6f:3b:07:87:ab:3e: 6b:7b:5d:18:94:2d:09:f4:7c:b1:39:3e:a6:aa:a4: cc:aa:b9:d8:f9:26:c5:f1:eb:5f:e3:26:91:f3:cb: 6e:17:c5:55:91:d2:80:b7:d2:1c:77:51:b9:00:ec: 87:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AB:58:EC:71:A5:81:E1:24:77:CA:FA:37:25:8D:90:23:0E:62:6A X509v3 Authority Key Identifier: keyid:5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/CF41132A1DE811EB9DE34963C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 110.93.223.0/24 110.93.226.0-110.93.228.255 110.93.230.0/24 110.93.236.0/23 110.93.240.0/24 110.93.244.0/22 117.20.29.0/24 119.63.139.0/24 Signature Algorithm: sha256WithRSAEncryption 90:0e:4e:cc:22:d9:23:5f:a2:32:e6:95:b7:55:59:c8:8a:b8: fc:18:dc:56:6a:af:e0:7c:50:ae:00:e2:cc:af:be:0e:b0:24: 1f:1e:13:ea:b6:d5:29:7d:51:19:6f:bd:70:7d:0c:bb:62:5c: 57:a7:94:ec:17:95:51:da:76:f3:30:04:84:6d:55:08:79:7d: d4:3d:45:c9:18:62:84:d3:19:5c:96:25:ff:7c:c8:83:e3:70: 9f:2b:5c:6b:c1:8f:7c:83:e8:e2:06:eb:28:bb:1a:ab:3d:fd: d9:34:82:0a:eb:a5:8f:fc:02:3b:f7:c1:5a:b8:fc:c6:50:19: 6d:68:95:31:85:1d:55:a0:f5:5d:dc:4f:33:14:0f:f1:04:20: fd:4e:67:91:47:b2:82:25:2f:7d:84:02:93:49:4d:99:48:a5: 8d:21:b2:da:ce:e1:46:ed:c0:4e:bc:df:42:a9:e5:96:8f:54: 95:dd:8c:00:3b:30:e0:53:80:1d:1a:fb:00:80:23:be:fb:87: 97:9e:dd:f5:1b:22:b2:40:d3:9f:0e:42:3a:e1:69:a0:94:b9: 17:05:1e:0e:41:5c:15:42:1d:f3:7e:a3:3d:ce:f6:47:7e:aa: f2:4c:fa:d6:7a:8e:a4:ff:99:92:d4:17:50:48:01:a4:a6:80: eb:ea:a7:62 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgICCIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIyMEIxMTAvBgNVBAUTKDVFQzFBNkFENzZBM0FCRkRDMUUxMzI5RUIyNjM3QzAx ODY0QjQ4MDgwHhcNMjUwOTAyMjE0MjA4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Nzc1Mi00NDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2PTOfnnOFKFWcu3RdBJlOBoY+Ky8ujRa4v79wFM6ObkVGC4+aFv78iREcTZy WwkpwmrvNxD+Yx7FC5VzhHO45yKGvI0vxEnVyneLuvoNHYk33qYYSX4Wp1tjivKQ aTNOGkqmuAetrwHcDevAqJPx55jfJpjpX6p9iuSBaPtm10ukHOpwAOaEZnTjFpGn ABE8LcTrEPYOyBJq4qxcT2IGgvpeI5DbXWU6pwUlCQNHG/QsuMZbrf4Zm1T286/W KTHE+BDtUSp4e91UpAlvOweHqz5re10YlC0J9HyxOT6mqqTMqrnY+SbF8etf4yaR 88tuF8VVkdKAt9Icd1G5AOyHIQIDAQABo4ICkjCCAo4wHQYDVR0OBBYEFAyrWOxx pYHhJHfK+jcljZAjDmJqMB8GA1UdIwQYMBaAFF7Bpq12o6v9weEynrJjfAGGS0gI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjIwQi9CQTcxQjY0ODEy MDMxMUVCQkFBMTk0MTRDNEY5QUUwMi9Yc0dtclhhanFfM0I0VEtlc21OOEFZWkxT QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hzR21yWGFqcV8zQjRUS2VzbU44QVlaTFNBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUIyMEIvQkE3MUI2NDgxMjAzMTFFQkJBQTE5NDE0QzRGOUFFMDIvQ0Y0MTEzMkEx REU4MTFFQjlERTM0OTYzQzRGOUFFMDIucm9hMFEGCCsGAQUFBwEHAQH/BEIwQDA+ BAIAATA4AwQAbl3fMAwDBAFuXeIDBABuXeQDBABuXeYDBAFuXewDBABuXfADBAJu XfQDBAB1FB0DBAB3P4swDQYJKoZIhvcNAQELBQADggEBAJAOTswi2SNfojLmlbdV WciKuPwY3FZqr+B8UK4A4syvvg6wJB8eE+q21Sl9URlvvXB9DLtiXFenlOwXlVHa dvMwBIRtVQh5fdQ9RckYYoTTGVyWJf98yIPjcJ8rXGvBj3yD6OIG6yi7Gqs9/dk0 ggrrpY/8Ajv3wVq4/MZQGW1olTGFHVWg9V3cTzMUD/EEIP1OZ5FHsoIlL32EApNJ TZlIpY0hstrO4UbtwE6830Kp5ZaPVJXdjAA7MOBTgB0a+wCAI777h5ee3fUbIrJA 058OQjrhaaCUuRcFHg5BXBVCHfN+oz3O9kd+qvJM+tZ6jqT/mZLUF1BIAaSmgOvq p2I= -----END CERTIFICATE-----Generated at Tue Mar 3 02:43:05 2026 by rpki-client