$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/2C3F5F0C1CB711EAAA03506DC4F9AE02.roa File: 2C3F5F0C1CB711EAAA03506DC4F9AE02.roa (raw, json) Hash identifier: o/o66p/U3D3MQGtDRIKgSC/dUgJBKahXAPkNnwuL3l4= Subject key identifier: 47:63:4F:4A:6D:00:14:92:8B:D1:9E:4F:6B:2E:15:FA:BC:2F:88:C1 Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Certificate serial: 0FFB Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/2C3F5F0C1CB711EAAA03506DC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:47:02 +0000 ROA not before: Wed 14 Jan 2026 18:15:04 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 23930 IP address blocks: 125.252.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4091 (0xffb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFA0, serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Validity Not Before: Jan 14 18:15:04 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a489a6-2b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0a:28:e0:cc:f9:00:78:9e:64:a2:7a:10:d2: 49:ee:36:dc:c0:f7:e3:75:8a:ce:62:e2:7c:91:1a: dd:56:c8:81:3e:d0:03:e2:29:f5:a2:bc:d4:b6:10: c5:a7:31:c5:cf:96:46:da:77:ed:97:ff:85:9e:31: 64:4a:d8:00:ea:a0:62:e3:ca:b0:ef:36:3d:17:78: 0a:0a:bc:86:d5:c1:33:57:03:8e:f3:79:c0:42:cf: e4:d7:2a:44:d6:10:28:5e:d3:04:d2:82:ad:a0:42: db:d8:da:c7:e8:66:b4:cc:fe:48:09:c9:ef:0e:12: c7:a0:2a:85:d5:26:05:3c:29:a6:b0:14:61:af:2d: 17:1b:3a:73:a5:be:d1:09:69:88:01:7b:0c:ff:8d: 11:e3:8b:1f:49:59:e7:f0:5d:9b:11:08:7f:74:d8: d2:e7:30:bf:45:63:23:cb:d4:df:63:8f:70:65:9b: 51:b4:33:e3:9f:d8:66:18:2a:1e:57:2f:b0:11:39: 63:b3:57:44:d7:92:e4:31:53:28:26:fa:89:9f:98: 5d:be:84:e8:8b:3c:a0:26:9f:cd:9d:92:53:da:31: 76:7f:05:8d:db:4f:a3:f2:2a:4f:95:c5:c9:e9:ea: eb:08:0e:a1:00:d3:17:a4:c1:2d:fd:4f:f0:2d:d7: d1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:63:4F:4A:6D:00:14:92:8B:D1:9E:4F:6B:2E:15:FA:BC:2F:88:C1 X509v3 Authority Key Identifier: keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/2C3F5F0C1CB711EAAA03506DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 125.252.99.0/24 Signature Algorithm: sha256WithRSAEncryption 55:98:de:84:2c:64:1c:7a:6b:25:ea:a1:99:b5:39:e8:11:39: 2b:ba:f2:bb:fc:77:32:87:3b:fe:0f:49:39:41:91:92:72:d3: cb:1a:60:d6:2d:d4:58:97:29:28:f0:db:5a:e0:23:b3:a6:19: 36:9f:e9:3e:e9:8f:31:ec:ba:ec:98:b0:32:2b:57:c2:b5:bd: b7:cd:32:be:ae:09:fe:d4:51:1c:f3:ce:40:59:0f:8e:25:cd: d5:0e:19:e0:2a:94:39:f5:d8:ff:72:60:36:60:57:54:25:9c: 58:17:5b:da:c9:d1:39:21:b3:90:e1:85:b4:6d:85:aa:93:16: 0c:cd:9e:9b:c7:5b:02:f2:c5:0a:3e:bb:26:ab:bd:ca:a0:4c: 3e:fb:88:14:f1:ef:e8:d8:1b:9a:79:ad:66:5c:5c:52:16:4c: 15:45:d2:26:70:e7:89:5e:d0:59:bb:02:f3:f5:bb:d5:16:3d: c6:9d:76:1d:c9:c0:d6:90:3a:53:ec:d9:dd:8b:38:e1:b7:5c: d8:98:47:5f:a4:b6:d5:81:85:c1:af:3d:6f:ec:65:22:3d:56: 56:e1:37:28:21:13:71:6c:d4:1f:b7:cd:3f:69:66:e4:12:4f: 9d:dd:55:ae:a5:a5:46:45:28:ad:c6:aa:85:65:f3:e3:50:28: 3c:f2:90:44 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICD/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQTAxMTAvBgNVBAUTKEFERDk0MThGMEY5QjU1RjNCNzM3NkEwOTNEQjExREJB RDNBRUZFQzgwHhcNMjYwMTE0MTgxNTA0WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODlhNi0yYjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApgoo4Mz5AHieZKJ6ENJJ7jbcwPfjdYrOYuJ8kRrdVsiBPtAD4in1orzUthDF pzHFz5ZG2nftl/+FnjFkStgA6qBi48qw7zY9F3gKCryG1cEzVwOO83nAQs/k1ypE 1hAoXtME0oKtoELb2NrH6Ga0zP5ICcnvDhLHoCqF1SYFPCmmsBRhry0XGzpzpb7R CWmIAXsM/40R44sfSVnn8F2bEQh/dNjS5zC/RWMjy9TfY49wZZtRtDPjn9hmGCoe Vy+wETljs1dE15LkMVMoJvqJn5hdvoToizygJp/NnZJT2jF2fwWN20+j8ipPlcXJ 6errCA6hANMXpMEt/U/wLdfRLQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEdjT0pt ABSSi9GeT2suFfq8L4jBMB8GA1UdIwQYMBaAFK3ZQY8Pm1XztzdqCT2xHbrTrv7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xRDY2RDQ4NkQ4 Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9yZGxCanctYlZmTzNOMm9KUGJFZHV0T3Vf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkbEJqdy1iVmZPM04yb0pQYkVkdXRPdV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZGQTAvMUQ2NkQ0ODZEOENCMTFFOUJBRTI0RDIxQzRGOUFFMDIvMkMzRjVGMEMx Q0I3MTFFQUFBMDM1MDZEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAffxjMA0GCSqGSIb3DQEBCwUAA4IBAQBVmN6ELGQcemsl6qGZtTno ETkruvK7/Hcyhzv+D0k5QZGSctPLGmDWLdRYlyko8Nta4COzphk2n+k+6Y8x7Lrs mLAyK1fCtb23zTK+rgn+1FEc885AWQ+OJc3VDhngKpQ59dj/cmA2YFdUJZxYF1va ydE5IbOQ4YW0bYWqkxYMzZ6bx1sC8sUKPrsmq73KoEw++4gU8e/o2Buaea1mXFxS FkwVRdImcOeJXtBZuwLz9bvVFj3GnXYdycDWkDpT7Nndizjht1zYmEdfpLbVgYXB rz1v7GUiPVZW4TcoIRNxbNQft80/aWbkEk+d3VWupaVGRSitxqqFZfPjUCg88pBE -----END CERTIFICATE-----Generated at Mon Mar 2 05:42:23 2026 by rpki-client