$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/87EFB95AC01811EF90CE8B0EC4F9AE02.roa File: 87EFB95AC01811EF90CE8B0EC4F9AE02.roa (raw, json) Hash identifier: C9kDwfmBiY6vCRGQDDyB4fRaHn0qARnsMTPVrfiPE3w= Subject key identifier: 86:CD:3C:26:67:AC:A4:FB:BE:1B:04:97:B2:A6:2B:1C:E8:44:7B:C3 Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Certificate serial: 35B3 Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/87EFB95AC01811EF90CE8B0EC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:25:58 +0000 ROA not before: Wed 26 Mar 2025 14:50:55 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 38015 IP address blocks: 120.29.232.0/23 maxlen: 24 123.242.248.0/22 maxlen: 22 203.189.176.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13747 (0x35b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0770, serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Validity Not Before: Mar 26 14:50:55 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a45a86-1f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dc:96:48:f2:7b:2d:69:2d:cb:f5:c1:c2:00: 1f:40:93:2c:30:5b:8d:83:8b:b7:0f:b9:f6:05:93: 3d:df:98:0e:2d:81:a9:cd:5a:d7:98:c2:ca:e1:e5: e8:c0:f7:cd:68:3d:88:93:77:aa:41:83:f0:bc:62: c8:e7:ca:2c:c6:c4:78:b8:c2:7d:64:29:17:9a:13: 02:6a:03:66:a5:be:27:2f:13:74:09:3c:1b:a8:60: 32:2a:01:74:88:5e:c6:c4:cf:8c:68:9d:1b:d8:dd: 97:d2:20:b4:9f:24:27:f4:58:bd:60:22:2e:4a:18: 57:3d:2a:12:ae:a9:7f:18:83:e9:2c:4e:ac:4f:cf: e8:7a:ab:0d:55:8b:3e:fb:4e:32:46:29:5b:c3:c5: 01:1a:90:d0:75:7d:10:d5:75:e4:ec:02:eb:cc:9b: fb:99:65:2e:8f:aa:32:82:7d:a5:72:10:af:bc:87: 71:87:05:93:8a:11:7a:31:70:4b:1c:de:38:cb:fd: fe:4d:23:a3:7a:f3:6a:53:fa:eb:fc:58:65:6a:8a: da:bc:7c:f7:0d:bf:1e:25:1c:97:ba:ff:6c:d8:ea: 62:ee:90:c5:9c:ba:6b:71:e0:2e:2e:20:cb:70:ac: c7:f1:5b:8e:b5:57:8b:3a:58:28:94:d9:59:00:05: 8a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:CD:3C:26:67:AC:A4:FB:BE:1B:04:97:B2:A6:2B:1C:E8:44:7B:C3 X509v3 Authority Key Identifier: keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/87EFB95AC01811EF90CE8B0EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 120.29.232.0/23 123.242.248.0/22 203.189.176.0/22 Signature Algorithm: sha256WithRSAEncryption 43:6b:56:22:8c:db:22:99:f4:dc:d4:80:27:3f:d8:be:f4:07: 76:1f:98:90:f7:53:f5:44:4b:24:10:85:22:d1:ea:b7:00:18: c1:51:5c:29:cc:31:b9:d0:29:2f:bc:e9:3b:6c:94:1d:70:d5: 9d:71:8a:63:b6:ca:37:08:d4:4b:a4:75:01:0f:4d:79:58:fa: ff:75:89:38:6f:25:95:5d:13:dd:55:02:62:9a:c5:24:8a:c5: ce:09:3d:21:89:00:d6:44:d6:b7:eb:cd:ad:75:01:12:ad:4d: 9c:05:cc:c2:79:e2:a5:a9:0d:4c:ad:b1:44:a4:70:fa:f4:d4: 42:60:8a:a5:3f:3a:5c:40:54:72:bb:96:0f:97:b2:6f:df:51: 4f:da:ad:31:44:06:2d:c6:29:8b:25:70:d3:2c:c8:f9:c7:ec: ba:0c:2b:7e:2f:5d:fc:df:cd:61:05:aa:a0:a3:b2:56:e1:02: 45:4c:af:14:fb:08:7d:8a:71:43:0a:e4:b1:cc:37:41:5f:1b: 7e:59:21:ca:7e:33:9e:e0:65:d0:69:87:67:dc:fd:ab:09:f4: e8:63:87:05:dc:4d:8e:d3:b9:e0:7e:cc:c8:48:43:b4:6e:1e: fd:42:96:0a:3e:0a:f2:fe:15:27:b2:38:f0:33:f9:74:55:9a: b4:72:f1:f4 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICNbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3NzAxMTAvBgNVBAUTKDFENjIyNUFEOTQzRUNBMzg5RkE0QjY2QzE5NzQzNTFF MzRDNDI4RkIwHhcNMjUwMzI2MTQ1MDU1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWE4Ni0xZjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9yWSPJ7LWkty/XBwgAfQJMsMFuNg4u3D7n2BZM935gOLYGpzVrXmMLK4eXo wPfNaD2Ik3eqQYPwvGLI58osxsR4uMJ9ZCkXmhMCagNmpb4nLxN0CTwbqGAyKgF0 iF7GxM+MaJ0b2N2X0iC0nyQn9Fi9YCIuShhXPSoSrql/GIPpLE6sT8/oeqsNVYs+ +04yRilbw8UBGpDQdX0Q1XXk7ALrzJv7mWUuj6oygn2lchCvvIdxhwWTihF6MXBL HN44y/3+TSOjevNqU/rr/FhlaoravHz3Db8eJRyXuv9s2Opi7pDFnLprceAuLiDL cKzH8VuOtVeLOlgolNlZAAWKiQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFIbNPCZn rKT7vhsEl7KmKxzoRHvDMB8GA1UdIwQYMBaAFB1iJa2UPso4n6S2bBl0NR40xCj7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc3MC9DMzM2ODNCNjFE OEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlqaWZwTFpzR1hRMUhqVEVL UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXSWxyWlEteWppZnBMWnNHWFExSGpURUtQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjA3NzAvQzMzNjgzQjYxRDhFMTFFMjhBOUI1N0VEMDhCMDJDRDIvODdFRkI5NUFD MDE4MTFFRjkwQ0U4QjBFQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQBeB3oAwQCe/L4AwQCy72wMA0GCSqGSIb3DQEBCwUAA4IBAQBDa1Yi jNsimfTc1IAnP9i+9Ad2H5iQ91P1REskEIUi0eq3ABjBUVwpzDG50CkvvOk7bJQd cNWdcYpjtso3CNRLpHUBD015WPr/dYk4byWVXRPdVQJimsUkisXOCT0hiQDWRNa3 682tdQESrU2cBczCeeKlqQ1MrbFEpHD69NRCYIqlPzpcQFRyu5YPl7Jv31FP2q0x RAYtximLJXDTLMj5x+y6DCt+L138381hBaqgo7JW4QJFTK8U+wh9inFDCuSxzDdB Xxt+WSHKfjOe4GXQaYdn3P2rCfToY4cF3E2O07ngfszISEO0bh79QpYKPgry/hUn sjjwM/l0VZq0cvH0 -----END CERTIFICATE-----Generated at Mon Mar 2 11:54:53 2026 by rpki-client