$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/F007DD9AD14B11EEAB2B5281C4F9AE02.roa File: F007DD9AD14B11EEAB2B5281C4F9AE02.roa (raw, json) Hash identifier: j6i+PoG1Un0EKIeMtEcI0TXiM+UyCndPMRvE27Z8cSY= Subject key identifier: 80:DC:CB:BA:4C:1D:F4:3D:96:13:26:3D:EE:C2:46:2A:FF:FD:98:AC Certificate issuer: /CN=A91B7292/serialNumber=C2FC6448564EC6526B91B2FE23B4FD58342D20F4 Certificate serial: 0190 Authority key identifier: C2:FC:64:48:56:4E:C6:52:6B:91:B2:FE:23:B4:FD:58:34:2D:20:F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/F007DD9AD14B11EEAB2B5281C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:10:08 +0000 ROA not before: Fri 09 Jan 2026 04:22:48 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 131164 IP address blocks: 123.108.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:31:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 400 (0x190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7292, serialNumber=C2FC6448564EC6526B91B2FE23B4FD58342D20F4 Validity Not Before: Jan 9 04:22:48 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a456d0-4313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2d:19:9d:3f:ce:49:78:24:d1:d3:20:13:2e: a7:20:27:7c:9c:2f:e4:fc:de:b1:88:06:b5:2e:38: d1:c2:c3:66:ef:9b:2f:e3:cb:f1:3c:d4:e0:35:4a: 08:f5:41:3f:b4:22:9b:3e:19:5e:64:53:84:27:96: d5:c4:2c:7a:d6:ed:17:20:a5:84:36:fb:6b:c1:d7: b2:4e:f6:60:29:87:5e:4e:61:41:ab:a1:17:54:ca: a7:e5:7c:f9:d2:aa:f4:78:de:61:f5:62:49:9a:8d: 35:1a:17:1c:3f:ed:00:d4:18:44:35:6b:67:03:d6: 7a:12:59:a3:4d:29:32:fc:a5:af:0c:65:eb:1a:21: df:66:48:ea:3b:48:ec:52:88:b3:ef:f6:5c:ce:f6: f8:e6:2f:ff:66:f2:27:39:95:e4:66:eb:63:0f:02: 4a:d9:39:4f:88:1b:f5:44:12:81:52:cb:f0:50:b2: c7:5d:a3:75:65:df:ed:0a:d7:d3:14:fc:12:58:29: 26:32:dc:01:ee:04:7a:78:63:6b:0d:a3:fe:f3:6b: 7d:f3:61:d9:b4:44:d0:0f:16:8a:12:7a:d7:cb:05: 7b:ef:58:5a:a6:cc:4d:b8:c9:99:b1:8f:57:a4:49: 9b:54:89:ce:80:79:d2:de:ad:dc:33:aa:5a:72:53: 68:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:DC:CB:BA:4C:1D:F4:3D:96:13:26:3D:EE:C2:46:2A:FF:FD:98:AC X509v3 Authority Key Identifier: keyid:C2:FC:64:48:56:4E:C6:52:6B:91:B2:FE:23:B4:FD:58:34:2D:20:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/F007DD9AD14B11EEAB2B5281C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 123.108.126.0/24 Signature Algorithm: sha256WithRSAEncryption cc:9b:34:79:ad:7e:9c:b3:48:9c:b3:19:52:40:15:ef:7c:f9: ce:bc:5c:ee:07:52:bc:20:20:5d:01:6a:4f:29:14:32:aa:9d: 10:be:eb:a5:0e:f6:71:50:57:6d:1d:ad:fe:e4:82:d1:f5:b8: bd:6c:18:89:7d:cb:23:b2:20:3c:25:32:f8:d3:40:a7:94:38: 91:b8:6c:dd:8e:21:53:29:80:ab:ec:98:e8:61:5d:00:b4:19: f1:a1:9e:26:72:d7:9e:1d:2a:ad:5a:ff:10:62:57:e2:9a:50: cf:4d:cf:25:ba:92:bf:88:8a:37:e3:24:5c:e9:ae:c3:c9:3a: a7:94:37:03:d3:67:32:31:16:9c:57:0e:53:b4:03:ba:7a:41: 66:03:d8:d9:23:69:f7:86:70:aa:6e:54:cc:2d:02:8b:0f:28: 41:8a:71:97:39:4f:d7:c8:40:0f:4a:a7:96:fe:78:d2:bc:6f: ad:01:c1:6f:43:38:44:59:c9:0a:25:7b:4c:ff:29:96:2d:84: 29:81:4e:13:63:a9:44:96:9f:6d:ca:9a:fc:02:99:2f:74:0b: 9c:3b:e3:68:ff:06:11:73:ab:ee:7e:7d:79:4a:93:84:72:e0: 2e:4f:2e:7e:46:30:18:5a:7e:aa:89:bf:0c:c9:3a:ea:af:90: 13:24:df:f9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcyOTIxMTAvBgNVBAUTKEMyRkM2NDQ4NTY0RUM2NTI2QjkxQjJGRTIzQjRGRDU4 MzQyRDIwRjQwHhcNMjYwMTA5MDQyMjQ4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTZkMC00MzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyS0ZnT/OSXgk0dMgEy6nICd8nC/k/N6xiAa1LjjRwsNm75sv48vxPNTgNUoI 9UE/tCKbPhleZFOEJ5bVxCx61u0XIKWENvtrwdeyTvZgKYdeTmFBq6EXVMqn5Xz5 0qr0eN5h9WJJmo01GhccP+0A1BhENWtnA9Z6ElmjTSky/KWvDGXrGiHfZkjqO0js Uoiz7/Zczvb45i//ZvInOZXkZutjDwJK2TlPiBv1RBKBUsvwULLHXaN1Zd/tCtfT FPwSWCkmMtwB7gR6eGNrDaP+82t982HZtETQDxaKEnrXywV771hapsxNuMmZsY9X pEmbVInOgHnS3q3cM6paclNoeQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIDcy7pM HfQ9lhMmPe7CRir//ZisMB8GA1UdIwQYMBaAFML8ZEhWTsZSa5Gy/iO0/Vg0LSD0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzI5Mi8wM0I4OEFEQUQx NEExMUVFOTlERTJCNTJDNEY5QUUwMi93dnhrU0ZaT3hsSnJrYkwtSTdUOVdEUXRJ UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d2eGtTRlpPeGxKcmtiTC1JN1Q5V0RRdElQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjcyOTIvMDNCODhBREFEMTRBMTFFRTk5REUyQjUyQzRGOUFFMDIvRjAwN0REOUFE MTRCMTFFRUFCMkI1MjgxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAe2x+MA0GCSqGSIb3DQEBCwUAA4IBAQDMmzR5rX6cs0icsxlSQBXv fPnOvFzuB1K8ICBdAWpPKRQyqp0QvuulDvZxUFdtHa3+5ILR9bi9bBiJfcsjsiA8 JTL400CnlDiRuGzdjiFTKYCr7JjoYV0AtBnxoZ4mcteeHSqtWv8QYlfimlDPTc8l upK/iIo34yRc6a7DyTqnlDcD02cyMRacVw5TtAO6ekFmA9jZI2n3hnCqblTMLQKL DyhBinGXOU/XyEAPSqeW/njSvG+tAcFvQzhEWckKJXtM/ymWLYQpgU4TY6lElp9t ypr8ApkvdAucO+No/wYRc6vufn15SpOEcuAuTy5+RjAYWn6qib8MyTrqr5ATJN/5 -----END CERTIFICATE-----Generated at Mon Mar 2 05:43:09 2026 by rpki-client