$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/C2DFDA20DE0611EF9DC6A135C4F9AE02.roa File: C2DFDA20DE0611EF9DC6A135C4F9AE02.roa (raw, json) Hash identifier: yHM3DnwjT+cPJR9y5D69EEWvn7HmBwkRwxEMyaTJ7Sc= Subject key identifier: 6C:F0:75:A5:73:C2:65:2C:7A:59:3C:5A:26:BD:EA:62:58:AA:22:A5 Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Certificate serial: 35B4 Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/C2DFDA20DE0611EF9DC6A135C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:25:59 +0000 ROA not before: Wed 26 Mar 2025 14:50:56 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 38461 IP address blocks: 123.242.240.0/22 maxlen: 24 123.242.248.0/22 maxlen: 24 202.61.8.0/23 maxlen: 24 203.189.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13748 (0x35b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0770, serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Validity Not Before: Mar 26 14:50:56 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a45a87-c9d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:60:09:9f:0a:94:c4:56:e3:ae:55:55:e3:7c: 50:ca:c6:b3:c4:61:97:c5:78:23:5a:ff:83:4e:8b: 60:d6:7b:1b:11:6c:87:b5:57:5a:7b:e2:6d:c1:32: d1:19:f3:66:34:40:59:2e:4c:58:f4:9f:19:9e:2f: ba:86:84:74:dc:a2:89:1a:f7:20:a3:d5:fc:ac:b4: f4:15:91:0f:03:d4:c9:d5:5e:73:ec:34:55:be:e3: 62:0a:b5:2f:ff:17:4a:72:6a:34:3a:8c:2a:72:f9: 9e:ad:43:23:87:07:77:44:90:ac:56:29:cc:71:fc: 83:e5:f4:2b:5c:f7:7e:9b:01:7c:59:7b:8a:96:d4: 2e:82:34:dc:c2:00:ee:33:e4:ce:15:d6:66:0d:42: df:4d:98:cb:13:f9:34:43:b3:c2:f3:75:38:34:71: 42:c3:0f:ae:a2:c3:98:da:e4:83:71:af:87:b6:fe: 83:a8:03:21:4f:93:8f:b4:df:5e:8b:f8:91:6e:19: 5f:4d:e0:fe:83:7e:ff:94:83:8c:3c:57:8b:1b:9a: 26:b1:08:9c:b0:7b:e7:05:66:72:67:36:72:e1:fa: 4e:a1:38:b2:32:41:0c:9a:99:32:7a:f4:32:c7:69: 42:21:e5:0c:b8:04:2c:b5:ab:8c:58:8f:1e:80:0b: c9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F0:75:A5:73:C2:65:2C:7A:59:3C:5A:26:BD:EA:62:58:AA:22:A5 X509v3 Authority Key Identifier: keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/C2DFDA20DE0611EF9DC6A135C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 123.242.240.0/22 123.242.248.0/22 202.61.8.0/23 203.189.176.0/22 Signature Algorithm: sha256WithRSAEncryption 15:9a:31:0e:ab:4b:b4:18:99:83:07:c8:d0:85:2c:a5:bc:78: a8:95:4a:e1:e9:0f:52:96:47:e9:1b:11:96:49:65:62:14:b5: 20:81:c1:10:a8:97:e8:e7:f0:99:d6:20:f7:15:0b:56:34:7a: 7c:66:5b:ce:cd:ba:7a:0c:52:56:c5:ca:3c:e7:37:3b:53:d3: 8f:d7:28:b4:6d:5b:68:99:46:96:05:bc:23:60:ca:35:4c:05: ab:4c:63:51:8b:2c:04:f9:10:ae:a9:05:ab:4c:ab:84:5b:0d: 89:86:a2:09:5f:9b:45:3c:bc:f9:96:73:81:4e:fb:b9:fd:2c: bb:09:7f:2e:c4:4b:7d:ab:e3:54:6b:42:8f:88:35:b1:b7:dd: 5a:cd:45:75:92:2c:a6:37:65:29:28:03:2c:c6:67:1b:8e:59: fc:df:7a:62:98:4a:ee:9f:f1:ad:e1:d0:70:fd:de:08:89:66: 1e:57:d1:a0:a9:5f:f2:1b:7d:dc:3f:0f:68:90:59:b5:f3:d8: c7:30:e7:2a:f6:97:a6:b8:91:08:0b:a5:69:4d:89:f5:0e:9d: 33:eb:c2:81:78:cd:de:7e:56:f8:43:19:f4:b9:4b:e0:63:0a: ac:26:50:2c:52:e2:bd:18:bd:77:3b:f4:28:b9:45:dd:0f:c9: 1f:14:55:b0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICNbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3NzAxMTAvBgNVBAUTKDFENjIyNUFEOTQzRUNBMzg5RkE0QjY2QzE5NzQzNTFF MzRDNDI4RkIwHhcNMjUwMzI2MTQ1MDU2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWE4Ny1jOWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWAJnwqUxFbjrlVV43xQysazxGGXxXgjWv+DTotg1nsbEWyHtVdae+JtwTLR GfNmNEBZLkxY9J8Zni+6hoR03KKJGvcgo9X8rLT0FZEPA9TJ1V5z7DRVvuNiCrUv /xdKcmo0OowqcvmerUMjhwd3RJCsVinMcfyD5fQrXPd+mwF8WXuKltQugjTcwgDu M+TOFdZmDULfTZjLE/k0Q7PC83U4NHFCww+uosOY2uSDca+Htv6DqAMhT5OPtN9e i/iRbhlfTeD+g37/lIOMPFeLG5omsQicsHvnBWZyZzZy4fpOoTiyMkEMmpkyevQy x2lCIeUMuAQstauMWI8egAvJ/wIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFGzwdaVz wmUselk8Wia96mJYqiKlMB8GA1UdIwQYMBaAFB1iJa2UPso4n6S2bBl0NR40xCj7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc3MC9DMzM2ODNCNjFE OEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlqaWZwTFpzR1hRMUhqVEVL UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXSWxyWlEteWppZnBMWnNHWFExSGpURUtQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjA3NzAvQzMzNjgzQjYxRDhFMTFFMjhBOUI1N0VEMDhCMDJDRDIvQzJERkRBMjBE RTA2MTFFRjlEQzZBMTM1QzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQCe/LwAwQCe/L4AwQByj0IAwQCy72wMA0GCSqGSIb3DQEBCwUAA4IB AQAVmjEOq0u0GJmDB8jQhSylvHiolUrh6Q9SlkfpGxGWSWViFLUggcEQqJfo5/CZ 1iD3FQtWNHp8ZlvOzbp6DFJWxco85zc7U9OP1yi0bVtomUaWBbwjYMo1TAWrTGNR iywE+RCuqQWrTKuEWw2JhqIJX5tFPLz5lnOBTvu5/Sy7CX8uxEt9q+NUa0KPiDWx t91azUV1kiymN2UpKAMsxmcbjln833pimErun/Gt4dBw/d4IiWYeV9GgqV/yG33c Pw9okFm189jHMOcq9pemuJEIC6VpTYn1Dp0z68KBeM3eflb4Qxn0uUvgYwqsJlAs UuK9GL13O/QouUXdD8kfFFWw -----END CERTIFICATE-----Generated at Mon Mar 2 17:26:46 2026 by rpki-client