$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/725D1810BD0E11EA8CEF0681C4F9AE02.roa File: 725D1810BD0E11EA8CEF0681C4F9AE02.roa (raw, json) Hash identifier: KXODx+nI9I+IBelGkGtFFlSKzu6f9jybWi8Lv3W1Fu8= Subject key identifier: 41:07:A3:F4:30:B6:9B:B5:BF:C7:F8:16:A4:60:F7:0B:E7:A7:B4:B1 Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Certificate serial: 35B1 Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/725D1810BD0E11EA8CEF0681C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:25:56 +0000 ROA not before: Wed 26 Mar 2025 14:50:53 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 19905 IP address blocks: 120.29.232.0/23 maxlen: 24 123.242.240.0/24 maxlen: 24 123.242.241.0/24 maxlen: 24 123.242.242.0/24 maxlen: 24 123.242.243.0/24 maxlen: 24 123.242.248.0/22 maxlen: 24 123.242.252.0/24 maxlen: 24 123.242.253.0/24 maxlen: 24 202.60.60.0/24 maxlen: 24 202.60.61.0/24 maxlen: 24 202.60.62.0/24 maxlen: 24 202.60.63.0/24 maxlen: 24 202.91.136.0/24 maxlen: 24 202.91.137.0/24 maxlen: 24 202.91.138.0/24 maxlen: 24 202.91.139.0/24 maxlen: 24 203.189.176.0/22 maxlen: 24 203.189.180.0/24 maxlen: 24 203.189.181.0/24 maxlen: 24 203.189.182.0/24 maxlen: 24 203.189.183.0/24 maxlen: 24 203.191.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13745 (0x35b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0770, serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Validity Not Before: Mar 26 14:50:53 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a45a84-5bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:90:77:41:27:3d:96:98:65:5b:4e:6a:b1:f9: 93:f1:d1:ab:95:8b:4c:b7:8c:10:d7:51:98:9f:5d: ce:97:55:c2:09:8a:40:aa:0d:f9:ec:87:eb:fb:b0: 3d:7c:fb:88:24:c5:5f:aa:70:93:64:46:2a:fb:7a: a5:85:58:cd:e8:c8:aa:a9:be:b1:21:a8:c4:78:60: 67:37:fa:1f:bb:ce:8b:af:e5:d4:51:9e:90:5c:ad: 74:d9:18:56:4c:03:6c:cf:e6:5a:af:b6:70:d1:6d: 86:b1:60:4c:fb:1c:1e:62:ba:f3:1a:20:21:db:b7: d1:d9:35:89:73:59:0a:06:59:93:5d:c7:f9:2e:b9: f1:3c:81:c2:84:e5:6e:3e:62:e5:13:3e:b7:80:0a: d1:7a:98:25:e5:1e:1c:17:8b:71:3a:4d:0c:30:8a: ce:3e:b4:b2:d8:d0:d9:6a:26:60:11:ee:25:55:87: 59:42:63:af:b2:2c:b2:1c:68:41:6c:78:6b:f3:15: 9d:06:8a:75:98:de:e8:82:d2:fb:17:c6:4e:d6:b4: 91:5e:c7:36:49:7a:a6:6b:73:f6:b2:9e:81:df:2b: 06:63:d2:08:f4:67:14:29:5d:c7:e5:75:26:5c:e3: d5:59:ad:3b:1d:d9:ee:2f:c9:67:74:27:e9:45:95: 89:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:07:A3:F4:30:B6:9B:B5:BF:C7:F8:16:A4:60:F7:0B:E7:A7:B4:B1 X509v3 Authority Key Identifier: keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/725D1810BD0E11EA8CEF0681C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 120.29.232.0/23 123.242.240.0/22 123.242.248.0-123.242.253.255 202.60.60.0/22 202.91.136.0/22 203.189.176.0/21 203.191.34.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:0f:9f:d4:64:0b:ed:e1:55:3f:6b:04:19:12:ec:c9:4f:77: 8b:88:15:72:79:a7:77:b8:8f:1b:c3:9d:e5:f1:0f:49:f5:25: 55:6f:59:5d:c9:e5:62:6a:4c:f4:fb:fe:e0:8a:2f:e8:76:ba: ce:cb:b0:de:b2:da:62:5c:e6:dd:63:a2:ec:a9:6d:f8:9f:3c: f1:ec:91:f7:d3:e7:cb:08:70:de:9f:ab:03:30:d1:a8:1b:fc: 83:8f:93:0b:7f:33:63:12:91:4a:2f:bf:68:fb:3c:3a:1e:5b: 73:62:39:49:81:8a:93:87:25:c9:5a:ec:4e:14:99:ab:c6:7f: 25:da:b6:7b:02:7d:9f:e7:b8:48:82:9f:04:cc:f1:e7:ec:07: 66:d7:94:9d:11:60:e6:d5:8b:84:7b:09:dc:51:c9:69:d6:f0: 16:c9:0e:bd:ab:c7:9c:65:3d:79:dd:6c:3d:fd:57:f3:fd:2d: 97:17:fd:a7:99:90:da:fc:21:72:0e:48:c9:64:5a:52:60:c4: a8:7c:28:6d:b0:43:2f:ec:1e:ee:24:b9:4d:45:18:ce:13:6a: 27:01:1c:8e:67:03:0b:2e:fb:4d:8e:b3:c8:ef:df:a9:34:f1: 8f:98:31:75:04:93:ad:97:2a:b0:e1:e5:06:70:d8:70:be:5f: f8:98:da:1e -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgICNbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3NzAxMTAvBgNVBAUTKDFENjIyNUFEOTQzRUNBMzg5RkE0QjY2QzE5NzQzNTFF MzRDNDI4RkIwHhcNMjUwMzI2MTQ1MDUzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWE4NC01YmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0pB3QSc9lphlW05qsfmT8dGrlYtMt4wQ11GYn13Ol1XCCYpAqg357Ifr+7A9 fPuIJMVfqnCTZEYq+3qlhVjN6Miqqb6xIajEeGBnN/ofu86Lr+XUUZ6QXK102RhW TANsz+Zar7Zw0W2GsWBM+xweYrrzGiAh27fR2TWJc1kKBlmTXcf5LrnxPIHChOVu PmLlEz63gArRepgl5R4cF4txOk0MMIrOPrSy2NDZaiZgEe4lVYdZQmOvsiyyHGhB bHhr8xWdBop1mN7ogtL7F8ZO1rSRXsc2SXqma3P2sp6B3ysGY9II9GcUKV3H5XUm XOPVWa07HdnuL8lndCfpRZWJWQIDAQABo4ICjDCCAogwHQYDVR0OBBYEFEEHo/Qw tpu1v8f4FqRg9wvnp7SxMB8GA1UdIwQYMBaAFB1iJa2UPso4n6S2bBl0NR40xCj7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc3MC9DMzM2ODNCNjFE OEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlqaWZwTFpzR1hRMUhqVEVL UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXSWxyWlEteWppZnBMWnNHWFExSGpURUtQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjA3NzAvQzMzNjgzQjYxRDhFMTFFMjhBOUI1N0VEMDhCMDJDRDIvNzI1RDE4MTBC RDBFMTFFQThDRUYwNjgxQzRGOUFFMDIucm9hMEsGCCsGAQUFBwEHAQH/BDwwOjA4 BAIAATAyAwQBeB3oAwQCe/LwMAwDBAN78vgDBAF78vwDBALKPDwDBALKW4gDBAPL vbADBAHLvyIwDQYJKoZIhvcNAQELBQADggEBABoPn9RkC+3hVT9rBBkS7MlPd4uI FXJ5p3e4jxvDneXxD0n1JVVvWV3J5WJqTPT7/uCKL+h2us7LsN6y2mJc5t1jouyp bfifPPHskffT58sIcN6fqwMw0agb/IOPkwt/M2MSkUovv2j7PDoeW3NiOUmBipOH Jcla7E4UmavGfyXatnsCfZ/nuEiCnwTM8efsB2bXlJ0RYObVi4R7CdxRyWnW8BbJ Dr2rx5xlPXndbD39V/P9LZcX/aeZkNr8IXIOSMlkWlJgxKh8KG2wQy/sHu4kuU1F GM4TaicBHI5nAwsu+02Os8jv36k08Y+YMXUEk62XKrDh5QZw2HC+X/iY2h4= -----END CERTIFICATE-----Generated at Mon Mar 2 15:32:45 2026 by rpki-client