$ rpki-client -vvf rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/2B9ED7AE8C8611F093C24B78C4F9AE02.roa File: 2B9ED7AE8C8611F093C24B78C4F9AE02.roa (raw, json) Hash identifier: bi2iG9oBsC/hNTwCVoxLS7RAbzRZyqyTqSKMjtrttUA= Subject key identifier: 87:0E:7A:4E:2A:F4:69:CE:21:A5:9E:09:54:4B:3F:B8:2B:33:5B:05 Certificate issuer: /CN=A91C09C5/serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276 Certificate serial: 01D1 Authority key identifier: 66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/2B9ED7AE8C8611F093C24B78C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:23:36 +0000 ROA not before: Sat 27 Dec 2025 03:23:22 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 151845 IP address blocks: 113.192.42.0/24 maxlen: 24 113.192.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 465 (0x1d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C09C5, serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276 Validity Not Before: Dec 27 03:23:22 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a43dd8-dab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b9:67:70:18:52:41:98:77:48:29:63:46:73: b3:73:16:81:b0:84:b9:0b:43:de:e7:89:1a:18:dd: 6b:44:fe:d8:f0:a5:d0:86:69:d8:de:41:62:34:8c: e0:d4:a3:d7:58:7b:9d:92:e8:33:55:e8:cf:84:40: 2e:96:20:74:07:d6:e9:66:03:ca:7a:f7:73:92:17: 82:b2:50:d0:e3:f5:85:7e:7a:33:ba:43:e1:c9:0d: 07:cb:b8:d7:15:73:3f:30:57:e4:75:07:24:61:73: 1d:ef:94:e5:f3:27:87:be:c9:e4:d5:5c:74:68:67: 44:28:8c:3b:b7:bd:23:39:c2:e4:9f:5f:79:98:c5: e2:4a:3d:e3:c5:7c:a6:33:7a:1f:c0:4b:e4:aa:d5: c0:34:b7:e2:80:cf:a2:c1:41:c7:68:2f:45:90:22: f9:fb:a6:2d:d5:7a:4a:0a:f6:92:9e:1a:c7:41:2f: 35:a4:02:76:f2:00:55:62:64:b4:45:40:83:c5:72: 74:ff:a3:9b:9b:98:a4:54:03:8c:0b:fa:3a:0f:3f: 90:0f:1c:d6:27:5c:b1:b2:d3:49:bd:2a:76:34:97: 9f:b9:ab:24:bd:7e:3f:1f:dc:5f:cc:64:33:6d:f2: 97:cd:7b:5f:1a:83:0d:3c:e7:ac:3c:81:63:d6:f5: 2b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0E:7A:4E:2A:F4:69:CE:21:A5:9E:09:54:4B:3F:B8:2B:33:5B:05 X509v3 Authority Key Identifier: keyid:66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/2B9ED7AE8C8611F093C24B78C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 113.192.42.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:9d:ec:bf:36:3f:10:86:17:58:77:a9:fd:9c:a7:fd:2a:24: 72:06:28:8a:ee:98:d2:49:0b:e2:25:43:2c:80:ea:02:cb:f1: 19:b7:05:f6:3f:0c:5f:eb:e5:6b:0b:26:44:9b:6f:21:42:1a: f0:84:8e:e6:d4:9a:8e:f0:95:b0:a0:87:d1:99:a7:a5:5f:aa: 13:de:c4:3a:69:80:51:b5:d1:b4:f5:9f:3c:98:f0:87:69:01: 0f:f8:2a:28:b7:ce:e8:e5:6a:c1:37:c3:e6:82:39:13:c4:44: f2:d9:0f:49:0f:43:af:43:ae:e2:ff:9f:d1:6e:67:8b:18:1d: 40:a1:e6:38:56:fb:72:c2:b1:21:b1:6a:e3:26:77:87:0a:dd: ff:26:dc:27:a4:f3:0d:55:05:f2:36:9a:59:80:bd:63:83:17: 86:2f:0e:0a:d2:83:5a:29:aa:5e:8c:62:3f:04:f1:cb:44:4a: 0a:39:92:24:7f:af:49:99:aa:57:09:25:d2:fc:c8:5f:6e:74: 6a:d2:17:62:1a:c8:18:12:17:8e:fa:ab:8e:f2:e3:c3:9c:d0: df:62:be:70:00:a6:c9:90:77:64:3c:80:06:7d:8c:1a:83:50: 89:a2:ec:11:c4:d7:6d:58:cf:83:25:3a:c7:7b:ad:23:c9:0c: 2d:c1:07:4b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA5QzUxMTAvBgNVBAUTKDY2NzYxQ0NEMUI0Qzg4Mzg0RTZBNDA0MDI4Q0Q5QTlG ODA5REUyNzYwHhcNMjUxMjI3MDMyMzIyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0M2RkOC1kYWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjrlncBhSQZh3SCljRnOzcxaBsIS5C0Pe54kaGN1rRP7Y8KXQhmnY3kFiNIzg 1KPXWHudkugzVejPhEAuliB0B9bpZgPKevdzkheCslDQ4/WFfnozukPhyQ0Hy7jX FXM/MFfkdQckYXMd75Tl8yeHvsnk1Vx0aGdEKIw7t70jOcLkn195mMXiSj3jxXym M3ofwEvkqtXANLfigM+iwUHHaC9FkCL5+6Yt1XpKCvaSnhrHQS81pAJ28gBVYmS0 RUCDxXJ0/6Obm5ikVAOMC/o6Dz+QDxzWJ1yxstNJvSp2NJefuaskvX4/H9xfzGQz bfKXzXtfGoMNPOesPIFj1vUrjwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIcOek4q 9GnOIaWeCVRLP7grM1sFMB8GA1UdIwQYMBaAFGZ2HM0bTIg4TmpAQCjNmp+AneJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDlDNS83NEIxNkM3Njk1 OTkxMUVFQkEzQ0IyNzVDNEY5QUUwMi9ablljelJ0TWlEaE9ha0JBS00yYW40Q2Q0 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1puWWN6UnRNaURoT2FrQkFLTTJhbjRDZDRuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzA5QzUvNzRCMTZDNzY5NTk5MTFFRUJBM0NCMjc1QzRGOUFFMDIvMkI5RUQ3QUU4 Qzg2MTFGMDkzQzI0Qjc4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBccAqMA0GCSqGSIb3DQEBCwUAA4IBAQAeney/Nj8QhhdYd6n9nKf9 KiRyBiiK7pjSSQviJUMsgOoCy/EZtwX2Pwxf6+VrCyZEm28hQhrwhI7m1JqO8JWw oIfRmaelX6oT3sQ6aYBRtdG09Z88mPCHaQEP+Coot87o5WrBN8PmgjkTxETy2Q9J D0OvQ67i/5/RbmeLGB1AoeY4VvtywrEhsWrjJneHCt3/JtwnpPMNVQXyNppZgL1j gxeGLw4K0oNaKapejGI/BPHLREoKOZIkf69JmapXCSXS/MhfbnRq0hdiGsgYEheO +quO8uPDnNDfYr5wAKbJkHdkPIAGfYwag1CJouwRxNdtWM+DJTrHe60jyQwtwQdL -----END CERTIFICATE-----Generated at Mon Mar 2 13:49:49 2026 by rpki-client