$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/02FC3E3C82A511EEA1F2710DC4F9AE02.roa File: 02FC3E3C82A511EEA1F2710DC4F9AE02.roa (raw, json) Hash identifier: 3tWo+TxjvNRfazBkfrqsYl15Cz/V8ipCTw/38p8PqXo= Subject key identifier: B4:DC:FE:78:94:58:DC:E5:62:C3:47:C2:25:4D:A7:BC:ED:90:3A:98 Certificate issuer: /CN=A91B9EC7/serialNumber=306E34FA84DA090C6001B35464BB8C426357D928 Certificate serial: 01B3 Authority key identifier: 30:6E:34:FA:84:DA:09:0C:60:01:B3:54:64:BB:8C:42:63:57:D9:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MG40-oTaCQxgAbNUZLuMQmNX2Sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/02FC3E3C82A511EEA1F2710DC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:01:22 +0000 ROA not before: Tue 11 Nov 2025 01:48:49 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 152110 IP address blocks: 27.124.70.0/23 maxlen: 24 2001:df3:23c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.crl rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MG40-oTaCQxgAbNUZLuMQmNX2Sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:34:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9EC7, serialNumber=306E34FA84DA090C6001B35464BB8C426357D928 Validity Not Before: Nov 11 01:48:49 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a41c82-e3e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:25:5f:7b:24:04:c5:96:fa:73:6a:a0:cd:de: 49:26:e9:ff:1b:c7:4b:28:d8:e3:2c:34:6f:bb:a1: e7:56:a5:ef:8c:a5:a0:78:82:b6:14:36:a7:42:a4: cd:01:8b:d6:01:69:de:33:ef:3e:fe:f8:37:b3:a2: f0:27:d4:24:00:93:24:89:1a:7e:51:35:7c:62:6a: 02:a7:30:cb:dc:9c:99:c3:42:41:df:63:9a:7b:cc: e3:66:e6:06:c8:2c:b5:15:05:10:58:5f:e8:44:e6: 8f:21:e0:5f:0c:3c:23:fb:d6:2b:3f:c7:ba:70:0d: f3:6f:ff:4b:fc:46:d1:5a:0b:75:70:96:7c:b8:34: 31:2e:68:05:64:4a:8f:13:6f:63:57:31:66:24:16: 2c:1b:de:d4:e7:be:a8:83:82:3a:e9:00:0e:af:55: d3:f7:3c:70:a1:7d:52:98:96:b5:89:b9:89:77:3b: 9c:83:b7:73:99:0e:ed:75:f4:19:4c:ea:87:09:11: 4c:62:86:94:7e:69:a7:5f:11:5c:a7:62:14:85:09: 74:f9:da:07:fe:a0:11:d9:f0:56:50:b1:e8:eb:9b: b4:b3:83:23:aa:14:51:ef:c5:bf:69:84:65:22:3c: 9e:b3:49:45:35:54:d3:92:9a:49:79:01:46:3c:bf: 70:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DC:FE:78:94:58:DC:E5:62:C3:47:C2:25:4D:A7:BC:ED:90:3A:98 X509v3 Authority Key Identifier: keyid:30:6E:34:FA:84:DA:09:0C:60:01:B3:54:64:BB:8C:42:63:57:D9:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MG40-oTaCQxgAbNUZLuMQmNX2Sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/02FC3E3C82A511EEA1F2710DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.124.70.0/23 IPv6: 2001:df3:23c0::/48 Signature Algorithm: sha256WithRSAEncryption 9a:84:98:fc:db:7b:66:2d:37:d7:7b:2e:07:cd:8f:b7:3d:20: 50:64:60:1a:bf:9c:62:c8:50:9f:f4:aa:9f:18:cc:f7:91:23: c4:ee:ad:95:56:65:39:eb:98:af:eb:38:92:41:6f:8e:53:d9: 31:45:f9:f4:c2:17:18:0d:fa:08:df:11:d0:0a:20:ec:87:a5: fc:f7:48:c5:9c:f9:05:6f:e3:a3:61:b4:53:42:66:32:35:1d: f0:ad:e6:a7:b3:70:36:25:64:21:46:c9:1a:0c:58:ee:c0:fa: e8:84:61:f1:53:69:25:d7:24:12:ab:be:2b:37:43:80:c2:f2: f6:86:d2:cc:b2:42:87:45:39:ac:93:7c:b0:62:45:d1:27:26: 99:2f:f2:79:30:7d:1a:80:d6:f4:66:7d:c5:d8:b7:84:2d:78: f3:b9:63:68:23:1c:ad:a2:61:4a:04:80:75:31:15:b4:ff:7b: fb:6e:41:f8:d1:e5:82:78:e3:5b:0b:c1:0e:55:56:96:e9:6d: 77:25:0d:d7:7f:89:23:49:3d:d2:51:5e:08:0a:e6:11:21:10: 60:71:7c:eb:bc:d9:95:15:99:1f:e7:94:6d:db:9e:16:ad:a0: 71:b9:15:6b:09:a8:12:d2:3d:22:49:64:e9:bc:44:83:0e:3d: 89:e7:fd:2f -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFQzcxMTAvBgNVBAUTKDMwNkUzNEZBODREQTA5MEM2MDAxQjM1NDY0QkI4QzQy NjM1N0Q5MjgwHhcNMjUxMTExMDE0ODQ5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MWM4Mi1lM2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1CVfeyQExZb6c2qgzd5JJun/G8dLKNjjLDRvu6HnVqXvjKWgeIK2FDanQqTN AYvWAWneM+8+/vg3s6LwJ9QkAJMkiRp+UTV8YmoCpzDL3JyZw0JB32Oae8zjZuYG yCy1FQUQWF/oROaPIeBfDDwj+9YrP8e6cA3zb/9L/EbRWgt1cJZ8uDQxLmgFZEqP E29jVzFmJBYsG97U576og4I66QAOr1XT9zxwoX1SmJa1ibmJdzucg7dzmQ7tdfQZ TOqHCRFMYoaUfmmnXxFcp2IUhQl0+doH/qAR2fBWULHo65u0s4MjqhRR78W/aYRl Ijyes0lFNVTTkppJeQFGPL9whQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFLTc/niU WNzlYsNHwiVNp7ztkDqYMB8GA1UdIwQYMBaAFDBuNPqE2gkMYAGzVGS7jEJjV9ko MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUVDNy9FNjNGMkY4QTgy QTMxMUVFOUIxMTczNTdDNEY5QUUwMi9NRzQwLW9UYUNReGdBYk5VWkx1TVFtTlgy U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01HNDAtb1RhQ1F4Z0FiTlVaTHVNUW1OWDJTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjlFQzcvRTYzRjJGOEE4MkEzMTFFRTlCMTE3MzU3QzRGOUFFMDIvMDJGQzNFM0M4 MkE1MTFFRUExRjI3MTBEQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBG3xGMA8EAgACMAkDBwAgAQ3zI8AwDQYJKoZIhvcNAQELBQADggEB AJqEmPzbe2YtN9d7LgfNj7c9IFBkYBq/nGLIUJ/0qp8YzPeRI8TurZVWZTnrmK/r OJJBb45T2TFF+fTCFxgN+gjfEdAKIOyHpfz3SMWc+QVv46NhtFNCZjI1HfCt5qez cDYlZCFGyRoMWO7A+uiEYfFTaSXXJBKrvis3Q4DC8vaG0syyQodFOayTfLBiRdEn Jpkv8nkwfRqA1vRmfcXYt4QtePO5Y2gjHK2iYUoEgHUxFbT/e/tuQfjR5YJ441sL wQ5VVpbpbXclDdd/iSNJPdJRXggK5hEhEGBxfOu82ZUVmR/nlG3bnhatoHG5FWsJ qBLSPSJJZOm8RIMOPYnn/S8= -----END CERTIFICATE-----Generated at Mon Mar 2 11:36:14 2026 by rpki-client