$ rpki-client -vvf rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/7F8113B6D4DC11F091B5A227C4F9AE02.roa File: 7F8113B6D4DC11F091B5A227C4F9AE02.roa (raw, json) Hash identifier: Kb5ukJ2yV0LLo+vAzqQ8VWRHEE3xT5Y505QcDOL5rkw= Subject key identifier: F1:5A:E6:BB:54:05:74:EA:F4:E7:95:5C:40:1A:D4:E9:B7:71:9A:74 Certificate issuer: /CN=A91D025A/serialNumber=734090EFC37983FD175BE02F4949668A21437221 Certificate serial: 0554 Authority key identifier: 73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/7F8113B6D4DC11F091B5A227C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:06:01 +0000 ROA not before: Tue 09 Dec 2025 08:54:00 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 38224 IP address blocks: 112.109.96.0/19 maxlen: 24 114.31.224.0/20 maxlen: 20 114.31.224.0/23 maxlen: 23 114.31.226.0/23 maxlen: 23 114.31.228.0/23 maxlen: 23 114.31.230.0/23 maxlen: 23 119.252.144.0/20 maxlen: 20 119.252.144.0/21 maxlen: 21 119.252.144.0/24 maxlen: 24 119.252.145.0/24 maxlen: 24 119.252.147.0/24 maxlen: 24 119.252.148.0/24 maxlen: 24 119.252.152.0/24 maxlen: 24 119.252.153.0/24 maxlen: 24 119.252.154.0/23 maxlen: 24 119.252.156.0/22 maxlen: 22 119.252.156.0/24 maxlen: 24 119.252.159.0/24 maxlen: 24 202.137.232.0/21 maxlen: 24 2405:e200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:45:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1364 (0x554) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D025A, serialNumber=734090EFC37983FD175BE02F4949668A21437221 Validity Not Before: Dec 9 08:54:00 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a471f9-5df9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7b:0a:19:b4:2a:9d:53:81:8b:ba:23:30:7a: 77:6c:d4:d6:51:9b:ae:27:2c:c2:ed:6c:c5:5b:f9: ad:d9:ca:5a:0d:b9:d0:0f:bc:07:69:cd:f7:3c:04: 35:ea:b0:c3:ac:89:c8:56:22:ea:a6:fe:42:ab:29: bf:0c:84:17:a3:d5:16:10:28:c4:1a:8d:cc:c9:d7: 7c:1f:52:41:77:4b:18:11:de:fe:a5:a3:06:a1:14: b8:1d:77:56:54:64:e2:eb:fe:3f:4f:ca:8d:37:96: e4:93:56:5c:eb:f6:ec:ca:ee:8c:02:fb:19:0e:72: d5:31:97:57:6c:75:59:40:d4:12:d1:c7:02:ea:24: 24:f7:46:61:ce:5f:3a:8f:d9:b7:1d:b5:23:28:09: cb:72:2d:2a:d1:27:5b:47:ed:32:ba:14:94:2f:51: f5:b9:e8:f8:6c:ba:51:0f:67:79:97:24:93:9a:34: fd:d6:f2:63:4c:6a:37:ea:a7:a5:fe:12:83:b9:0d: 02:b1:e2:40:c3:6d:c6:84:2d:c1:21:ce:2f:56:e9: 95:55:eb:0f:07:b4:ca:86:ed:6b:88:4d:8a:82:53: 5e:42:c4:ed:b6:b5:a4:43:e7:91:6b:52:4c:b6:2a: 9f:a2:c9:d7:01:f8:f4:c1:88:d4:8c:3e:5f:39:ba: 4b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:5A:E6:BB:54:05:74:EA:F4:E7:95:5C:40:1A:D4:E9:B7:71:9A:74 X509v3 Authority Key Identifier: keyid:73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/7F8113B6D4DC11F091B5A227C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 112.109.96.0/19 114.31.224.0/20 119.252.144.0/20 202.137.232.0/21 IPv6: 2405:e200::/32 Signature Algorithm: sha256WithRSAEncryption b1:ee:a8:ae:92:76:66:0e:56:1a:fd:3b:8b:74:76:bc:40:02: d8:4e:76:e1:55:04:7c:68:e5:a2:7d:96:6c:1f:17:b8:11:8a: 85:1f:42:f1:5d:ac:3b:78:84:2a:88:8e:57:50:b8:11:1c:4c: a3:a5:24:8f:25:fe:11:27:32:68:c3:19:3b:cf:92:0d:0a:b4: 1d:37:9c:5c:3d:dc:73:01:f2:8c:10:7b:f2:1e:4b:7b:7c:10: 4a:87:a1:95:20:07:a7:9c:52:68:61:0c:48:04:cb:02:fa:70: e5:90:f3:06:fe:f4:8b:3e:86:d0:68:ed:0d:06:45:9d:29:00: 80:14:2c:a5:a6:e7:c4:81:1e:48:53:fd:a5:12:cd:50:9a:cf: 99:0a:ec:fa:f2:3a:68:45:09:07:2c:e8:84:e3:f8:cc:91:cd: d8:4a:6f:36:b0:16:33:4f:91:d0:2f:46:82:ec:b2:bc:ed:65: cf:dd:05:20:51:89:03:b0:3d:f7:63:3b:40:8e:6c:98:5f:3c: 54:5d:c8:2c:0c:08:06:b6:3e:bf:b3:99:4f:20:f7:bd:d8:92: b7:d9:dd:54:61:3a:7c:39:77:f0:4f:69:fd:b2:a1:86:82:11: 4a:c5:b0:0d:73:77:05:de:e5:b5:a2:b4:51:1e:78:48:ea:2b: 3e:de:98:10 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICBVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAyNUExMTAvBgNVBAUTKDczNDA5MEVGQzM3OTgzRkQxNzVCRTAyRjQ5NDk2NjhB MjE0MzcyMjEwHhcNMjUxMjA5MDg1NDAwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzFmOS01ZGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnsKGbQqnVOBi7ojMHp3bNTWUZuuJyzC7WzFW/mt2cpaDbnQD7wHac33PAQ1 6rDDrInIViLqpv5Cqym/DIQXo9UWECjEGo3Mydd8H1JBd0sYEd7+paMGoRS4HXdW VGTi6/4/T8qNN5bkk1Zc6/bsyu6MAvsZDnLVMZdXbHVZQNQS0ccC6iQk90Zhzl86 j9m3HbUjKAnLci0q0SdbR+0yuhSUL1H1uej4bLpRD2d5lySTmjT91vJjTGo36qel /hKDuQ0CseJAw23GhC3BIc4vVumVVesPB7TKhu1riE2KglNeQsTttrWkQ+eRa1JM tiqfosnXAfj0wYjUjD5fObpLfwIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFPFa5rtU BXTq9OeVXEAa1Om3cZp0MB8GA1UdIwQYMBaAFHNAkO/DeYP9F1vgL0lJZoohQ3Ih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDI1QS9ENUVGMUE5MDMw QUQxMUVDOTVCMTVEMThDNEY5QUUwMi9jMENRNzhONWdfMFhXLUF2U1VsbWlpRkRj aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2MwQ1E3OE41Z18wWFctQXZTVWxtaWlGRGNpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDAyNUEvRDVFRjFBOTAzMEFEMTFFQzk1QjE1RDE4QzRGOUFFMDIvN0Y4MTEzQjZE NERDMTFGMDkxQjVBMjI3QzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQFcG1gAwQEch/gAwQEd/yQAwQDyonoMA0EAgACMAcDBQAkBeIAMA0G CSqGSIb3DQEBCwUAA4IBAQCx7qiuknZmDlYa/TuLdHa8QALYTnbhVQR8aOWifZZs Hxe4EYqFH0LxXaw7eIQqiI5XULgRHEyjpSSPJf4RJzJowxk7z5INCrQdN5xcPdxz AfKMEHvyHkt7fBBKh6GVIAennFJoYQxIBMsC+nDlkPMG/vSLPobQaO0NBkWdKQCA FCylpufEgR5IU/2lEs1Qms+ZCuz68jpoRQkHLOiE4/jMkc3YSm82sBYzT5HQL0aC 7LK87WXP3QUgUYkDsD33YztAjmyYXzxUXcgsDAgGtj6/s5lPIPe92JK32d1UYTp8 OXfwT2n9sqGGghFKxbANc3cF3uW1orRRHnhI6is+3pgQ -----END CERTIFICATE-----Generated at Mon Mar 2 06:55:23 2026 by rpki-client