$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/608C129E33E011ED979ED20EC4F9AE02.roa File: 608C129E33E011ED979ED20EC4F9AE02.roa (raw, json) Hash identifier: adJY449EqbBfKZNBnDEn5pmiGXVlnPAFaSWVUv9nD0M= Subject key identifier: 30:85:01:F9:CD:21:CE:A7:13:CA:CC:0C:2D:99:23:52:68:66:C0:3F Certificate issuer: /CN=A91CBF47/serialNumber=326371E399824F8004ED96756819760881B7CD96 Certificate serial: 3526 Authority key identifier: 32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/608C129E33E011ED979ED20EC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:45:41 +0000 ROA not before: Mon 10 Mar 2025 15:00:38 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 9313 IP address blocks: 120.29.0.0/20 maxlen: 20 120.29.16.0/20 maxlen: 20 121.50.192.0/20 maxlen: 20 121.50.208.0/21 maxlen: 21 203.10.89.0/24 maxlen: 24 203.13.68.0/24 maxlen: 24 203.13.70.0/24 maxlen: 24 203.22.124.0/23 maxlen: 23 203.22.126.0/24 maxlen: 24 203.22.127.0/24 maxlen: 24 203.30.137.0/24 maxlen: 24 203.144.4.0/22 maxlen: 22 203.144.5.0/24 maxlen: 24 203.144.8.0/21 maxlen: 21 203.144.16.0/21 maxlen: 21 203.144.23.0/24 maxlen: 24 203.144.24.0/21 maxlen: 21 203.144.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:09:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13606 (0x3526) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBF47, serialNumber=326371E399824F8004ED96756819760881B7CD96 Validity Not Before: Mar 10 15:00:38 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a45115-7180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:41:36:7d:ed:c5:83:2c:ea:48:98:45:d5:5b: 62:f3:72:e2:16:44:63:4c:c5:ab:b6:dc:b3:34:12: 14:b0:a9:af:1b:41:6a:a5:82:57:b0:be:fd:61:93: 12:76:04:8b:d4:6e:a9:73:6f:cf:fc:c1:e8:2e:48: d7:b6:81:ec:5e:86:48:15:a8:41:dc:71:4b:eb:42: 60:5d:db:a1:fa:53:21:a9:c6:50:94:40:64:1c:bc: 74:f8:b5:0f:91:d0:e2:b9:4c:cd:e4:cd:90:fb:78: 26:f4:b5:17:8c:85:d8:41:58:f1:e2:58:33:ad:f4: cd:50:be:f2:cf:37:6b:49:23:7b:88:4f:2b:a7:02: 33:a0:33:cb:3a:9f:7d:f2:da:e6:bb:19:2b:33:a2: 55:a7:ad:77:39:c1:51:9a:63:f4:4a:64:0b:96:94: b7:57:67:6a:fb:30:18:f9:63:cc:35:b6:01:c6:0f: 67:a3:05:ce:71:7c:8e:57:52:d8:40:71:4d:c3:bd: 33:9a:a3:06:bf:00:af:8d:47:46:81:8b:44:70:ae: 5b:76:4c:34:55:d6:08:ec:5e:91:59:fc:95:36:8c: b1:6f:92:a7:5e:07:82:92:90:3f:83:8a:da:45:61: e3:06:1b:c8:9e:8b:e2:70:20:85:e4:47:a9:de:9f: 20:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:85:01:F9:CD:21:CE:A7:13:CA:CC:0C:2D:99:23:52:68:66:C0:3F X509v3 Authority Key Identifier: keyid:32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/608C129E33E011ED979ED20EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 120.29.0.0/19 121.50.192.0-121.50.215.255 203.10.89.0/24 203.13.68.0/24 203.13.70.0/24 203.22.124.0/22 203.30.137.0/24 203.144.4.0-203.144.31.255 Signature Algorithm: sha256WithRSAEncryption 15:18:83:58:92:0e:a0:5a:01:bf:ba:a3:64:b2:ee:4b:c4:fe: fa:50:4c:b0:06:64:c9:a3:61:b0:94:86:c4:82:f9:3f:e4:e0: 04:8a:ce:e9:17:72:4e:a8:a3:72:5d:54:dc:11:7e:98:23:59: c8:a0:14:c4:5d:95:5d:72:58:16:55:41:e6:05:6b:1a:51:66: 52:0f:50:f8:ee:2e:4a:be:6e:23:f7:55:2a:cc:cf:90:45:1f: 51:13:8f:dd:cc:54:da:6d:3d:01:1c:df:3f:c4:fa:31:f2:95: c7:1c:24:7b:01:6f:6f:43:b8:02:a8:6f:c8:b4:0d:c7:b9:95: 02:ab:3a:da:35:9b:83:22:e4:7a:14:c6:af:d4:62:35:96:d0: d5:11:8f:81:2e:c0:af:2e:fa:72:55:05:5d:5f:73:52:41:6a: 73:31:73:cd:43:41:b8:60:a2:09:ac:d2:3b:12:7e:19:0e:bf: b8:88:23:d1:59:97:11:61:93:e1:5e:1a:ae:7e:db:2b:49:d1: 9c:4e:5d:e5:7d:8c:c6:11:6e:eb:52:39:d3:77:1f:22:1d:49: 77:09:9f:df:11:a6:b6:63:79:41:e4:8b:c7:3d:ad:a1:fa:a9: 74:06:6c:99:a6:40:23:ba:f6:bb:e4:5a:46:97:c3:0e:08:ac: f8:c1:70:ae -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgICNSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JGNDcxMTAvBgNVBAUTKDMyNjM3MUUzOTk4MjRGODAwNEVEOTY3NTY4MTk3NjA4 ODFCN0NEOTYwHhcNMjUwMzEwMTUwMDM4WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTExNS03MTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEE2fe3FgyzqSJhF1Vti83LiFkRjTMWrttyzNBIUsKmvG0FqpYJXsL79YZMS dgSL1G6pc2/P/MHoLkjXtoHsXoZIFahB3HFL60JgXduh+lMhqcZQlEBkHLx0+LUP kdDiuUzN5M2Q+3gm9LUXjIXYQVjx4lgzrfTNUL7yzzdrSSN7iE8rpwIzoDPLOp99 8trmuxkrM6JVp613OcFRmmP0SmQLlpS3V2dq+zAY+WPMNbYBxg9nowXOcXyOV1LY QHFNw70zmqMGvwCvjUdGgYtEcK5bdkw0VdYI7F6RWfyVNoyxb5KnXgeCkpA/g4ra RWHjBhvInovicCCF5Eep3p8gmwIDAQABo4ICmjCCApYwHQYDVR0OBBYEFDCFAfnN Ic6nE8rMDC2ZI1JoZsA/MB8GA1UdIwQYMBaAFDJjceOZgk+ABO2WdWgZdgiBt82W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkY0Ny8zNzBDQTJDMDFE OEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0QUU3WloxYUJsMkNJRzN6 WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tTng0NW1DVDRBRTdaWjFhQmwyQ0lHM3paWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0JGNDcvMzcwQ0EyQzAxRDhBMTFFMkI3OUIxM0U0MDhCMDJDRDIvNjA4QzEyOUUz M0UwMTFFRDk3OUVEMjBFQzRGOUFFMDIucm9hMFkGCCsGAQUFBwEHAQH/BEowSDBG BAIAATBAAwQFeB0AMAwDBAZ5MsADBAN5MtADBADLClkDBADLDUQDBADLDUYDBALL FnwDBADLHokwDAMEAsuQBAMEBcuQADANBgkqhkiG9w0BAQsFAAOCAQEAFRiDWJIO oFoBv7qjZLLuS8T++lBMsAZkyaNhsJSGxIL5P+TgBIrO6RdyTqijcl1U3BF+mCNZ yKAUxF2VXXJYFlVB5gVrGlFmUg9Q+O4uSr5uI/dVKszPkEUfUROP3cxU2m09ARzf P8T6MfKVxxwkewFvb0O4AqhvyLQNx7mVAqs62jWbgyLkehTGr9RiNZbQ1RGPgS7A ry76clUFXV9zUkFqczFzzUNBuGCiCazSOxJ+GQ6/uIgj0VmXEWGT4V4arn7bK0nR nE5d5X2MxhFu61I503cfIh1Jdwmf3xGmtmN5QeSLxz2tofqpdAZsmaZAI7r2u+Ra RpfDDgis+MFwrg== -----END CERTIFICATE-----Generated at Mon Mar 2 04:07:43 2026 by rpki-client