$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/E2FEA6DA3E5411EF9B398D2DC4F9AE02.roa File: E2FEA6DA3E5411EF9B398D2DC4F9AE02.roa (raw, json) Hash identifier: JQf03DKtF4s8gNb4T6clUFJaoPr3oWIM7RgNuCy+qtk= Subject key identifier: 67:EF:E8:AD:B6:AC:C5:59:CA:AE:56:8E:04:61:06:0A:A9:EC:41:0E Certificate issuer: /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC Certificate serial: 08CD Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/E2FEA6DA3E5411EF9B398D2DC4F9AE02.roa Signing time: Fri 20 Feb 2026 21:18:46 +0000 ROA not before: Fri 20 Feb 2026 21:18:46 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 7496 IP address blocks: 203.27.226.0/23 maxlen: 24 203.32.8.0/21 maxlen: 24 2405:8800::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 21:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2253 (0x8cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB7AB, serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC Validity Not Before: Feb 20 21:18:46 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6998cfb6-97ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:74:bc:63:2f:9c:85:f1:76:93:e1:35:93:00: 2d:3b:ff:31:30:8f:6d:34:da:97:1d:07:76:7a:ce: 1d:3e:42:56:f5:50:94:f4:b8:4c:3b:64:75:23:62: ea:03:e5:c8:ba:e5:88:a8:82:af:c7:3e:e2:85:1b: 2d:e3:cc:3b:2a:ef:db:40:26:a5:b2:06:29:61:35: 1d:4e:b8:ed:e2:8a:71:2d:81:0c:a6:7e:81:32:35: 29:28:ea:cb:0b:d2:0b:e6:6a:b6:4e:2d:11:e4:e4: 04:40:9b:9a:cc:a0:1e:73:68:5f:bd:d2:c9:36:30: 12:c7:f9:76:be:c3:86:60:82:9d:02:ef:c1:d0:d2: 98:a0:a5:6c:05:29:2a:53:84:69:47:e4:63:db:24: d9:c4:47:fd:c9:df:cc:31:b8:5d:82:9e:db:c0:f5: 5d:23:39:30:4a:bd:e8:06:f4:d9:6b:11:2f:c3:d6: f7:1b:d8:dc:d9:12:ab:80:d6:db:8a:9b:f4:85:e5: 36:18:82:f4:98:38:07:b5:63:39:4f:87:aa:09:5a: 28:95:8d:91:49:a5:ef:62:28:d9:3f:71:82:45:f0: 82:0f:a6:9a:4d:07:8d:cd:4b:3f:95:5e:32:f3:6f: c5:d6:dc:77:e1:a7:65:cf:51:eb:a9:1d:78:37:87: 22:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:EF:E8:AD:B6:AC:C5:59:CA:AE:56:8E:04:61:06:0A:A9:EC:41:0E X509v3 Authority Key Identifier: keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/E2FEA6DA3E5411EF9B398D2DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.27.226.0/23 203.32.8.0/21 IPv6: 2405:8800::/32 Signature Algorithm: sha256WithRSAEncryption b9:69:d0:49:74:23:2f:da:ac:ac:0d:f0:25:98:0e:72:3b:2d: 52:cc:00:71:f3:9d:86:59:51:7c:09:fe:bf:0d:c9:ab:f7:9f: 12:af:0e:ed:38:44:d5:f4:73:5a:84:59:e1:76:05:72:da:1d: d1:18:38:60:6e:05:96:70:2f:10:0d:de:de:52:41:f8:66:10: 67:d5:d1:55:b0:18:17:8f:ae:cb:1a:9d:79:d7:67:01:1c:6b: 79:5d:91:56:e3:ef:04:7d:a0:74:ca:2c:a9:2e:c3:3c:d4:02: ad:cb:82:6d:09:80:b5:56:32:2b:6c:2d:22:30:09:4c:fb:4a: ee:da:48:34:4d:9c:2b:81:f8:eb:03:b8:c9:9d:a5:93:a0:2e: 1c:79:7c:98:67:55:cb:c1:48:35:73:dc:0f:81:d2:4f:e2:7f: 73:71:15:6d:d7:20:3f:b9:e3:94:b5:84:37:76:bf:84:3e:34: 65:47:13:2a:8a:b1:b8:bd:54:8e:00:e8:32:fa:7b:5d:92:a6: 07:7b:c7:94:9b:bd:47:2d:19:15:60:14:a0:a8:0c:5e:c7:ed: 1c:78:8c:83:9d:d7:d9:00:0a:8b:35:a3:b4:36:3c:c4:8a:99: fa:26:e2:0a:7e:e6:52:e2:c2:72:ae:b4:c4:f5:f2:d7:9d:7c: cf:71:d1:35 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICCM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx Q0I3QUIxMTAvBgNVBAUTKDNERTlEM0RGRjZFMDQ4RkQ5MDgxNDY1MDJFNEYwOEU0 NTZGM0Q5QkMwHhcNMjYwMjIwMjExODQ2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTk4Y2ZiNi05N2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA93S8Yy+chfF2k+E1kwAtO/8xMI9tNNqXHQd2es4dPkJW9VCU9LhMO2R1I2Lq A+XIuuWIqIKvxz7ihRst48w7Ku/bQCalsgYpYTUdTrjt4opxLYEMpn6BMjUpKOrL C9IL5mq2Ti0R5OQEQJuazKAec2hfvdLJNjASx/l2vsOGYIKdAu/B0NKYoKVsBSkq U4RpR+Rj2yTZxEf9yd/MMbhdgp7bwPVdIzkwSr3oBvTZaxEvw9b3G9jc2RKrgNbb ipv0heU2GIL0mDgHtWM5T4eqCVoolY2RSaXvYijZP3GCRfCCD6aaTQeNzUs/lV4y 82/F1tx34adlz1HrqR14N4cihQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFGfv6K22 rMVZyq5WjgRhBgqp7EEOMB8GA1UdIwQYMBaAFD3p09/24Ej9kIFGUC5PCORW89m8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjdBQi81Njc4NjU2ODQw MDkxMUVCQTM3NDIyNUJDNEY5QUUwMi9QZW5UM19iZ1NQMlFnVVpRTGs4STVGYnoy YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BlblQzX2JnU1AyUWdVWlFMazhJNUZiejJidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0I3QUIvNTY3ODY1Njg0MDA5MTFFQkEzNzQyMjVCQzRGOUFFMDIvRTJGRUE2REEz RTU0MTFFRjlCMzk4RDJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAHLG+IDBAPLIAgwDQQCAAIwBwMFACQFiAAwDQYJKoZIhvcN AQELBQADggEBALlp0El0Iy/arKwN8CWYDnI7LVLMAHHznYZZUXwJ/r8Nyav3nxKv Du04RNX0c1qEWeF2BXLaHdEYOGBuBZZwLxAN3t5SQfhmEGfV0VWwGBePrssanXnX ZwEca3ldkVbj7wR9oHTKLKkuwzzUAq3Lgm0JgLVWMitsLSIwCUz7Su7aSDRNnCuB +OsDuMmdpZOgLhx5fJhnVcvBSDVz3A+B0k/if3NxFW3XID+545S1hDd2v4Q+NGVH EyqKsbi9VI4A6DL6e12Spgd7x5SbvUctGRVgFKCoDF7H7Rx4jIOd19kACos1o7Q2 PMSKmfom4gp+5lLiwnKutMT18tedfM9x0TU= -----END CERTIFICATE-----Generated at Mon Mar 2 03:59:50 2026 by rpki-client