$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/2B1D3BB2305811EA8D5B6479C4F9AE02.roa File: 2B1D3BB2305811EA8D5B6479C4F9AE02.roa (raw, json) Hash identifier: N2Nuak7OaRSEZDR308+upPNTawYHUgYAli3HOQeBT88= Subject key identifier: EF:7C:9C:61:A8:CF:D0:39:9A:A9:D0:86:65:3E:21:89:9C:39:69:0C Certificate issuer: /CN=A91C6B27/serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8 Certificate serial: 0C0C Authority key identifier: 9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/2B1D3BB2305811EA8D5B6479C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:37:05 +0000 ROA not before: Thu 10 Jul 2025 19:28:56 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 55552 IP address blocks: 202.52.42.0/23 maxlen: 23 2001:df0:a5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3084 (0xc0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6B27, serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8 Validity Not Before: Jul 10 19:28:56 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a45d21-f602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:22:08:88:2c:32:ad:81:93:c7:f9:5f:e5:05: bc:b6:e3:85:c6:fd:fc:79:94:9d:38:1a:9f:6b:61: 3a:88:a4:f7:5d:86:69:f8:80:4a:79:37:e8:6f:c3: b6:19:5a:c3:b2:ca:bb:74:e4:dd:50:4e:66:4d:d4: 31:03:39:ed:28:de:e4:c1:88:d6:58:89:a8:3c:da: 9a:71:d5:43:20:00:07:60:75:52:6a:b2:fd:87:e8: 69:e6:61:c3:72:91:e6:20:58:a8:eb:1a:00:9d:70: 2a:76:a0:bf:5f:5a:59:37:e5:d6:c2:7e:5e:8d:35: 0f:37:be:3f:c9:f4:e1:31:39:e0:a6:4d:83:3b:ec: 76:4e:be:1e:5b:b1:87:1e:d7:1f:7f:88:af:c9:97: 65:01:91:2c:a3:c1:7e:e7:52:92:a0:45:90:e4:4b: 43:36:87:93:67:97:18:4e:cc:7c:fc:f8:3b:ee:a8: be:d8:e8:74:59:70:74:68:9b:f5:35:1e:14:22:66: db:86:d3:85:63:6d:13:74:c3:dd:4b:32:7d:a9:7b: 80:bf:61:99:69:02:79:99:23:1c:e1:a2:87:7d:b1: 03:18:c3:90:1f:c6:f6:34:fa:f7:e2:c6:ca:11:be: 0f:11:4c:b6:b3:c7:ee:23:26:41:41:43:96:b8:70: f3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:7C:9C:61:A8:CF:D0:39:9A:A9:D0:86:65:3E:21:89:9C:39:69:0C X509v3 Authority Key Identifier: keyid:9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/2B1D3BB2305811EA8D5B6479C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.52.42.0/23 IPv6: 2001:df0:a5::/48 Signature Algorithm: sha256WithRSAEncryption 91:4e:c2:9a:92:43:4f:c7:93:94:48:49:c7:ba:95:b9:73:3c: e7:b3:b9:8e:f7:f8:75:89:7f:a6:84:8e:8e:85:68:69:aa:d5: bc:f7:87:c8:6a:64:b2:f7:6f:a4:05:a9:d0:14:db:bd:58:fc: 69:6d:7c:ec:43:c2:63:34:98:e2:6d:1f:92:f4:0a:94:33:7c: cf:9b:79:13:cc:b7:27:b8:4c:e7:de:d0:a7:f2:ac:83:54:69: b6:05:bd:85:d7:73:f7:38:65:09:12:18:b2:37:62:da:20:33: 2a:5b:2b:8e:86:ca:6a:fb:45:96:cd:ad:d9:39:cb:31:c3:63: 03:04:24:f1:bb:6f:99:4b:ac:54:a9:62:6e:35:58:2c:f3:57: bb:a8:48:82:c7:44:fb:b9:9b:51:77:e2:7d:59:19:67:e9:80: 5a:5e:82:52:c3:48:96:06:5e:c4:85:7d:09:d7:0c:30:d9:c8: 5e:d7:08:35:bc:e3:65:c1:02:9e:60:5f:5b:61:fc:53:01:25: 87:55:d0:62:23:86:b6:69:20:ed:b3:e2:cf:56:23:20:d5:0d: 36:04:c5:4f:58:c7:0d:23:98:e4:eb:9a:c5:af:ce:cd:cd:3d: 1a:16:4c:8b:e7:78:aa:d7:21:c9:ea:2c:ff:34:b5:f8:8d:7c: f4:79:40:45 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICDAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCMjcxMTAvBgNVBAUTKDlFQ0IyMkFDREUwOTY3QTA1ODM3RTU4RkM3MzFEMzU3 RTM3NjM3RjgwHhcNMjUwNzEwMTkyODU2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWQyMS1mNjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCIIiCwyrYGTx/lf5QW8tuOFxv38eZSdOBqfa2E6iKT3XYZp+IBKeTfob8O2 GVrDssq7dOTdUE5mTdQxAzntKN7kwYjWWImoPNqacdVDIAAHYHVSarL9h+hp5mHD cpHmIFio6xoAnXAqdqC/X1pZN+XWwn5ejTUPN74/yfThMTngpk2DO+x2Tr4eW7GH Htcff4ivyZdlAZEso8F+51KSoEWQ5EtDNoeTZ5cYTsx8/Pg77qi+2Oh0WXB0aJv1 NR4UImbbhtOFY20TdMPdSzJ9qXuAv2GZaQJ5mSMc4aKHfbEDGMOQH8b2NPr34sbK Eb4PEUy2s8fuIyZBQUOWuHDz4wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFO98nGGo z9A5mqnQhmU+IYmcOWkMMB8GA1UdIwQYMBaAFJ7LIqzeCWegWDflj8cx01fjdjf4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkIyNy84MkJGMkJGNDMw NTQxMUVBQUZDOTExNkVDNEY5QUUwMi9uc3Npck40Slo2QllOLVdQeHpIVFYtTjJO X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25zc2lyTjRKWjZCWU4tV1B4ekhUVi1OMk5fZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzZCMjcvODJCRjJCRjQzMDU0MTFFQUFGQzkxMTZFQzRGOUFFMDIvMkIxRDNCQjIz MDU4MTFFQThENUI2NDc5QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQByjQqMA8EAgACMAkDBwAgAQ3wAKUwDQYJKoZIhvcNAQELBQADggEB AJFOwpqSQ0/Hk5RISce6lblzPOezuY73+HWJf6aEjo6FaGmq1bz3h8hqZLL3b6QF qdAU271Y/GltfOxDwmM0mOJtH5L0CpQzfM+beRPMtye4TOfe0KfyrINUabYFvYXX c/c4ZQkSGLI3YtogMypbK46Gymr7RZbNrdk5yzHDYwMEJPG7b5lLrFSpYm41WCzz V7uoSILHRPu5m1F34n1ZGWfpgFpeglLDSJYGXsSFfQnXDDDZyF7XCDW842XBAp5g X1th/FMBJYdV0GIjhrZpIO2z4s9WIyDVDTYExU9Yxw0jmOTrmsWvzs3NPRoWTIvn eKrXIcnqLP80tfiNfPR5QEU= -----END CERTIFICATE-----Generated at Mon Mar 2 09:47:50 2026 by rpki-client