$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/A4C78624D4CC11F083620C83C4F9AE02.roa File: A4C78624D4CC11F083620C83C4F9AE02.roa (raw, json) Hash identifier: 2zyppsSURTOn3zdsXlXSIBSh5cgiacXxcTYDO0urYho= Subject key identifier: 64:33:7F:4B:0C:3B:0C:0B:69:B9:A8:35:38:3F:A4:19:AA:02:8E:4F Certificate issuer: /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Certificate serial: 35F6 Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/A4C78624D4CC11F083620C83C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:45:05 +0000 ROA not before: Tue 09 Dec 2025 07:25:40 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 147027 IP address blocks: 1.179.227.0/24 maxlen: 24 125.24.252.0/24 maxlen: 24 2001:ec0:8a5::/48 maxlen: 48 2001:ec0:400c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:24:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13814 (0x35f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF4FE, serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Validity Not Before: Dec 9 07:25:40 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a48931-cb99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:57:53:e0:1c:89:6f:4a:d8:83:53:f3:d5:9c: 4a:67:01:df:48:28:5a:bd:4c:02:2b:d7:19:46:88: 58:ee:66:21:cc:5e:8b:48:0d:29:62:70:57:28:3a: ac:63:13:1b:bb:e8:f8:f7:d1:bd:5c:d0:44:92:82: 80:72:c0:89:7e:c2:4a:05:71:61:f4:91:98:d9:bd: 45:bd:7d:82:05:fe:64:82:59:95:55:7b:93:0d:cd: 17:15:f2:bb:67:e5:6e:58:78:fd:43:19:e2:9f:2b: af:a0:ae:72:c5:78:fa:11:46:e5:92:0e:dd:ac:43: 07:bc:d6:a0:ab:3d:00:db:a4:be:f4:38:4f:4d:cb: c1:76:c8:50:12:84:ac:83:df:9c:c2:7b:d6:89:94: ae:35:d9:c8:68:d2:40:47:63:36:17:74:bd:22:eb: 10:40:8f:b6:2d:7d:95:0b:e5:76:be:90:04:ad:46: 55:3f:12:e5:c1:c5:3d:a7:27:b9:14:f3:55:c1:bb: 28:d0:a3:2e:c6:91:93:81:d9:d6:00:6d:68:ee:7a: 4d:8a:cd:a9:22:8d:52:bb:39:62:e8:e5:45:57:ef: 31:6f:48:64:0f:90:c3:7a:38:c4:dd:34:6e:c1:77: 7d:2e:92:a2:0c:23:e4:29:a2:1c:42:77:58:09:6a: f4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:33:7F:4B:0C:3B:0C:0B:69:B9:A8:35:38:3F:A4:19:AA:02:8E:4F X509v3 Authority Key Identifier: keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/A4C78624D4CC11F083620C83C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 1.179.227.0/24 125.24.252.0/24 IPv6: 2001:ec0:8a5::/48 2001:ec0:400c::/48 Signature Algorithm: sha256WithRSAEncryption 23:3c:5e:75:1b:07:4f:a3:50:db:f5:4a:77:ec:78:4a:bf:64: ae:2a:79:b3:bc:8e:a3:04:51:ad:78:81:b2:08:c5:54:b9:e1: 8c:a9:ab:19:cd:ed:91:ba:ed:5e:ad:72:8d:97:02:0b:b7:27: ce:ae:c9:b0:37:5f:b8:c8:9e:47:33:57:a3:39:63:c9:ed:4c: ba:31:2e:bf:e8:e9:40:e7:95:7b:0a:93:5d:ff:3a:67:88:af: 3e:9c:db:39:33:47:b7:8f:1c:bf:3a:6b:f2:35:d1:47:0f:dc: 0e:b2:56:7a:55:d2:8d:b0:b1:2a:a5:d4:74:0a:56:0c:5d:8f: 8b:3d:a0:87:d6:84:3d:79:03:a7:a4:c7:77:ac:32:92:58:c3: 01:1b:01:f6:aa:f8:a3:f3:db:bc:4b:c5:56:02:7a:b9:70:4b: d8:91:c2:5c:33:db:7c:79:fa:3c:a6:55:61:53:9a:ae:db:18: 46:d5:ae:b7:79:7d:93:57:43:df:b1:f5:4a:9c:2e:0c:d5:aa: 6f:cc:44:a5:40:8c:2b:08:cb:ce:06:1f:0b:bb:45:e3:03:a2: 55:32:b3:8c:1c:b4:b9:ca:a8:d0:5d:6f:f2:a6:5a:b9:9c:94: e4:d7:c0:28:95:fe:83:be:04:37:18:73:c9:1c:88:b6:63:0c: fa:39:3b:a5 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICNfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y0RkUxMTAvBgNVBAUTKDE2QjU2NEI3NThERkNENTJDNUNFODkxMTkyRTMxQjcx NUIxQ0JGRTgwHhcNMjUxMjA5MDcyNTQwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODkzMS1jYjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuldT4ByJb0rYg1Pz1ZxKZwHfSChavUwCK9cZRohY7mYhzF6LSA0pYnBXKDqs YxMbu+j499G9XNBEkoKAcsCJfsJKBXFh9JGY2b1FvX2CBf5kglmVVXuTDc0XFfK7 Z+VuWHj9QxninyuvoK5yxXj6EUblkg7drEMHvNagqz0A26S+9DhPTcvBdshQEoSs g9+cwnvWiZSuNdnIaNJAR2M2F3S9IusQQI+2LX2VC+V2vpAErUZVPxLlwcU9pye5 FPNVwbso0KMuxpGTgdnWAG1o7npNis2pIo1Suzli6OVFV+8xb0hkD5DDejjE3TRu wXd9LpKiDCPkKaIcQndYCWr0hQIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFGQzf0sM OwwLabmoNTg/pBmqAo5PMB8GA1UdIwQYMBaAFBa1ZLdY381Sxc6JEZLjG3FbHL/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjRGRS9CQTEzMTI0RTFE ODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpWTEZ6b2tSa3VNYmNWc2N2 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyVmt0MWpmelZMRnpva1JrdU1iY1ZzY3YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0Y0RkUvQkExMzEyNEUxRDg1MTFFMkE3Nzk5OURDMDhCMDJDRDIvQTRDNzg2MjRE NENDMTFGMDgzNjIwQzgzQzRGOUFFMDIucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAS BAIAATAMAwQAAbPjAwQAfRj8MBgEAgACMBIDBwAgAQ7ACKUDBwAgAQ7AQAwwDQYJ KoZIhvcNAQELBQADggEBACM8XnUbB0+jUNv1SnfseEq/ZK4qebO8jqMEUa14gbII xVS54YypqxnN7ZG67V6tco2XAgu3J86uybA3X7jInkczV6M5Y8ntTLoxLr/o6UDn lXsKk13/OmeIrz6c2zkzR7ePHL86a/I10UcP3A6yVnpV0o2wsSql1HQKVgxdj4s9 oIfWhD15A6ekx3esMpJYwwEbAfaq+KPz27xLxVYCerlwS9iRwlwz23x5+jymVWFT mq7bGEbVrrd5fZNXQ9+x9UqcLgzVqm/MRKVAjCsIy84GHwu7ReMDolUys4wctLnK qNBdb/KmWrmclOTXwCiV/oO+BDcYc8kciLZjDPo5O6U= -----END CERTIFICATE-----Generated at Mon Mar 2 04:00:01 2026 by rpki-client