$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/E4A74BE6255211EB96B9B269C4F9AE02.roa File: E4A74BE6255211EB96B9B269C4F9AE02.roa (raw, json) Hash identifier: aMkNEqH60GsdkUGjn+lnQ/ap/klxHoHPT9GnCCJKBug= Subject key identifier: 07:33:D7:15:9E:71:7D:8E:4B:DE:3C:1D:07:C7:8C:A3:4E:6B:7A:F4 Certificate issuer: /CN=A91B1FA8/serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B Certificate serial: 1404 Authority key identifier: 1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/E4A74BE6255211EB96B9B269C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:20:09 +0000 ROA not before: Tue 04 Mar 2025 17:44:58 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 136943 IP address blocks: 121.200.0.0/24 maxlen: 24 123.253.151.0/24 maxlen: 24 2403:5800:1::/48 maxlen: 48 2403:5800:3::/48 maxlen: 48 2403:5800:1900::/40 maxlen: 40 2403:5800:1900::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5124 (0x1404) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1FA8, serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B Validity Not Before: Mar 4 17:44:58 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a47549-320c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:72:62:66:6b:57:23:2a:31:7b:d1:14:aa:1a: 2f:cb:a6:37:bd:ce:7e:39:42:1b:a3:f9:12:1d:a0: 6b:88:9c:05:06:37:95:4e:bb:b8:e9:20:2d:ab:85: bb:7a:05:03:e2:39:e9:26:cc:39:40:01:7f:ad:87: 4f:83:47:45:f1:98:d7:96:52:21:d1:70:11:51:1a: eb:28:d0:b3:da:1b:c2:e5:5a:93:1d:e7:7f:bd:d2: 45:5f:db:30:fc:c7:4e:55:8d:e1:58:60:2a:a6:fe: 1c:61:77:11:74:ca:93:4f:b5:f2:b7:70:02:4a:82: 94:35:41:be:24:40:de:fe:24:cf:fc:97:5f:dd:07: 1c:04:e7:af:ee:17:d7:11:22:ca:ce:4a:24:d4:51: a7:b2:10:ff:0e:1a:d0:1a:58:29:76:a6:98:08:80: 5e:6f:21:db:0f:60:d1:58:96:fa:8d:d5:10:7f:46: b3:66:54:b7:23:ca:93:f3:46:9d:f3:93:60:b6:a2: aa:0f:6b:87:49:03:2b:29:6c:b8:c1:94:0f:1b:18: 93:7b:4f:65:61:c3:e1:29:66:8a:2d:62:be:4f:37: 44:1f:17:a7:07:83:ac:b1:eb:c7:24:9a:08:b2:99: 97:ea:bc:fb:da:ba:46:55:a1:35:e5:7f:7b:ac:7a: 4c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:33:D7:15:9E:71:7D:8E:4B:DE:3C:1D:07:C7:8C:A3:4E:6B:7A:F4 X509v3 Authority Key Identifier: keyid:1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/E4A74BE6255211EB96B9B269C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 121.200.0.0/24 123.253.151.0/24 IPv6: 2403:5800:1::/48 2403:5800:3::/48 2403:5800:1900::/40 Signature Algorithm: sha256WithRSAEncryption 99:6e:67:fd:08:75:1a:b6:9b:78:fd:62:23:77:d5:e9:2b:ac: 81:95:ff:6e:95:92:4f:3c:2e:8a:61:bc:0d:45:b5:0a:82:f8: 5c:3e:de:48:7c:69:b1:75:d5:bf:8a:d7:d1:1e:e7:08:ed:11: 4f:96:1c:23:eb:fd:58:96:ac:50:57:34:4a:11:27:ae:e6:66: 0d:e0:74:3c:c7:87:25:14:71:9e:86:1b:d8:f8:68:12:f8:01: a9:1f:8e:66:52:b3:86:cd:72:08:fb:d7:1d:38:37:1d:85:4f: 96:8f:f8:55:9a:b1:1c:9b:7b:ed:94:77:a4:14:1c:fc:53:d9: 1b:45:62:06:3d:7b:92:a6:e8:51:8c:50:78:ff:81:2a:53:73: 54:43:01:ef:0f:a1:77:4c:8d:f4:24:90:57:ee:f7:1f:e7:4b: 53:31:53:2c:26:a5:d4:fe:f2:0d:78:f1:87:a4:5a:e4:d1:56: 6b:2e:4e:93:4c:1f:77:0b:af:ae:ac:5b:36:c9:62:01:aa:e5: b8:76:c1:32:81:60:6d:af:d7:17:f4:33:b4:64:3d:66:c1:3a: 4e:35:08:2b:6a:c0:03:44:ea:fe:3c:cd:85:79:6c:ba:5e:20: 89:45:97:b1:ed:06:89:d8:31:88:6b:35:5d:a7:fd:1e:8f:22: 02:4e:e2:ec -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgICFAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGQTgxMTAvBgNVBAUTKDFDNEU5RjNGODAwNTA1QTQwQkExNjVCNkMwMjA0MDVB MjJDNjRCM0IwHhcNMjUwMzA0MTc0NDU4WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzU0OS0zMjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnJiZmtXIyoxe9EUqhovy6Y3vc5+OUIbo/kSHaBriJwFBjeVTru46SAtq4W7 egUD4jnpJsw5QAF/rYdPg0dF8ZjXllIh0XARURrrKNCz2hvC5VqTHed/vdJFX9sw /MdOVY3hWGAqpv4cYXcRdMqTT7Xyt3ACSoKUNUG+JEDe/iTP/Jdf3QccBOev7hfX ESLKzkok1FGnshD/DhrQGlgpdqaYCIBebyHbD2DRWJb6jdUQf0azZlS3I8qT80ad 85NgtqKqD2uHSQMrKWy4wZQPGxiTe09lYcPhKWaKLWK+TzdEHxenB4OssevHJJoI spmX6rz72rpGVaE15X97rHpM5wIDAQABo4ICiDCCAoQwHQYDVR0OBBYEFAcz1xWe cX2OS948HQfHjKNOa3r0MB8GA1UdIwQYMBaAFBxOnz+ABQWkC6FltsAgQFoixks7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9FODYxRkQzQUFG RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9IRTZmUDRBRkJhUUxvV1cyd0NCQVdpTEdT enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hFNmZQNEFGQmFRTG9XVzJ3Q0JBV2lMR1N6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjFGQTgvRTg2MUZEM0FBRkQ5MTFFOEIyRUQ0QzdGQzRGOUFFMDIvRTRBNzRCRTYy NTUyMTFFQjk2QjlCMjY5QzRGOUFFMDIucm9hMEcGCCsGAQUFBwEHAQH/BDgwNjAS BAIAATAMAwQAecgAAwQAe/2XMCAEAgACMBoDBwAkA1gAAAEDBwAkA1gAAAMDBgAk A1gAGTANBgkqhkiG9w0BAQsFAAOCAQEAmW5n/Qh1GrabeP1iI3fV6SusgZX/bpWS TzwuimG8DUW1CoL4XD7eSHxpsXXVv4rX0R7nCO0RT5YcI+v9WJasUFc0ShEnruZm DeB0PMeHJRRxnoYb2PhoEvgBqR+OZlKzhs1yCPvXHTg3HYVPlo/4VZqxHJt77ZR3 pBQc/FPZG0ViBj17kqboUYxQeP+BKlNzVEMB7w+hd0yN9CSQV+73H+dLUzFTLCal 1P7yDXjxh6Ra5NFWay5Ok0wfdwuvrqxbNsliAarluHbBMoFgba/XF/QztGQ9ZsE6 TjUIK2rAA0Tq/jzNhXlsul4giUWXse0GidgxiGs1Xaf9Ho8iAk7i7A== -----END CERTIFICATE-----Generated at Mon Mar 2 03:57:37 2026 by rpki-client