$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/3F3E2A10CC6411EDA7970484C4F9AE02.roa File: 3F3E2A10CC6411EDA7970484C4F9AE02.roa (raw, json) Hash identifier: i7fPg095F7w1Gp8Ev4N5gXFYKYbqtFZ/mtpgHv4F5ww= Subject key identifier: 54:AA:F9:DC:E3:42:54:12:8F:0A:45:5B:C1:C8:92:37:41:98:05:C1 Certificate issuer: /CN=A91D1200/serialNumber=38C0B1C58D00DE3F73AD5B5887D4249BDEE7BBA2 Certificate serial: 0245 Authority key identifier: 38:C0:B1:C5:8D:00:DE:3F:73:AD:5B:58:87:D4:24:9B:DE:E7:BB:A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/3F3E2A10CC6411EDA7970484C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:58:57 +0000 ROA not before: Sat 13 Dec 2025 02:01:39 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 134673 IP address blocks: 202.27.212.0/24 maxlen: 24 202.27.247.0/24 maxlen: 24 202.49.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 581 (0x245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1200, serialNumber=38C0B1C58D00DE3F73AD5B5887D4249BDEE7BBA2 Validity Not Before: Dec 13 02:01:39 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a43811-9834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:59:1d:3e:75:1d:49:2c:c7:7f:49:89:09:be: 4b:c9:dd:f7:86:5a:1f:02:7c:af:f1:20:41:75:58: 6a:0f:ab:c7:4b:d5:a1:5d:35:f2:b2:a6:19:98:48: ff:87:54:ad:99:af:0b:1c:e8:54:51:ae:fe:b1:04: a7:60:0b:70:3b:6e:db:b5:8e:49:9c:c4:20:d3:54: 03:0f:b9:65:8d:ae:cd:90:4d:57:3e:a6:c9:25:33: 68:35:38:7d:0b:89:cc:7f:15:32:fd:29:61:d2:43: cd:2a:80:1c:be:9a:80:cb:de:2c:65:ce:9b:37:98: 55:7c:fb:31:8b:ce:f5:f4:70:6e:b8:e6:6e:27:11: c8:78:52:a5:c5:50:d5:bc:da:3b:06:fc:ae:1c:39: dd:d7:fa:f2:d0:5e:da:af:cb:df:7b:01:62:56:1f: ac:f4:ce:ec:dd:dd:a9:e7:8b:bf:32:38:6b:76:a3: a9:5d:d8:7a:92:95:1a:a8:b6:ae:c6:f7:b4:64:51: 6e:2c:6b:ea:1d:8d:cb:f3:dd:0d:cf:1c:73:c0:df: d9:fa:64:01:21:b8:32:23:de:a8:26:5e:45:ae:4e: 11:05:1f:94:2d:19:21:ec:e9:9a:e1:09:3c:3e:c2: d0:ea:f9:78:b7:15:ff:59:4d:ae:e4:13:33:65:9c: e6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AA:F9:DC:E3:42:54:12:8F:0A:45:5B:C1:C8:92:37:41:98:05:C1 X509v3 Authority Key Identifier: keyid:38:C0:B1:C5:8D:00:DE:3F:73:AD:5B:58:87:D4:24:9B:DE:E7:BB:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/3F3E2A10CC6411EDA7970484C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.27.212.0/24 202.27.247.0/24 202.49.183.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:60:93:0d:57:37:10:a7:56:9d:fc:11:26:e7:1d:69:b0:79: 40:55:16:8f:50:29:6c:3a:b3:71:12:ea:a5:f1:77:ec:7a:40: 9d:d5:38:56:99:8c:06:68:b2:ca:1f:f3:eb:92:90:bd:5a:d9: 26:82:44:21:04:78:7e:b2:2c:5f:13:17:0a:04:2d:d8:f4:b2: de:71:b0:26:d8:93:07:45:ea:6b:d0:e6:d2:55:e6:de:7c:aa: 25:22:09:0e:76:a3:a8:e8:13:37:b1:58:8e:83:2b:6e:f6:88: b1:a7:fd:3c:0e:cc:bf:84:4e:8f:4f:48:81:52:e6:e6:a2:26: 80:04:a8:8c:74:11:cf:2e:ce:45:01:ca:d5:96:c6:7d:99:a3: ff:b2:cc:5c:47:c7:cc:c5:a2:e6:d3:f6:97:82:79:b2:bf:26: 1f:e9:ac:62:65:40:bb:9f:38:0c:3b:c5:e9:da:81:9c:ba:3e: 8c:c2:4c:75:0e:6d:7a:09:14:90:19:2e:0f:d7:b3:a7:7a:53: 0d:9b:4b:fe:54:7c:89:f6:4c:09:cd:6f:09:fe:2c:3a:2e:f5: f0:9a:96:9b:09:27:d1:bf:4b:70:e5:f7:f2:4e:bc:9d:7e:89: d2:f6:d7:5f:40:7c:7b:de:e5:6f:d0:94:da:88:bc:0f:2f:4d: 98:69:34:36 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyMDAxMTAvBgNVBAUTKDM4QzBCMUM1OEQwMERFM0Y3M0FENUI1ODg3RDQyNDlC REVFN0JCQTIwHhcNMjUxMjEzMDIwMTM5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzgxMS05ODM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1kdPnUdSSzHf0mJCb5Lyd33hlofAnyv8SBBdVhqD6vHS9WhXTXysqYZmEj/ h1Stma8LHOhUUa7+sQSnYAtwO27btY5JnMQg01QDD7llja7NkE1XPqbJJTNoNTh9 C4nMfxUy/Slh0kPNKoAcvpqAy94sZc6bN5hVfPsxi8719HBuuOZuJxHIeFKlxVDV vNo7BvyuHDnd1/ry0F7ar8vfewFiVh+s9M7s3d2p54u/MjhrdqOpXdh6kpUaqLau xve0ZFFuLGvqHY3L890NzxxzwN/Z+mQBIbgyI96oJl5Frk4RBR+ULRkh7Oma4Qk8 PsLQ6vl4txX/WU2u5BMzZZzmEwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFFSq+dzj QlQSjwpFW8HIkjdBmAXBMB8GA1UdIwQYMBaAFDjAscWNAN4/c61bWIfUJJve57ui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIwMC9GNUE5NTJFMEND MDMxMUVEQTk3QUNBNURDNEY5QUUwMi9PTUN4eFkwQTNqOXpyVnRZaDlRa205N251 NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09NQ3h4WTBBM2o5enJWdFloOVFrbTk3bnU2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDEyMDAvRjVBOTUyRTBDQzAzMTFFREE5N0FDQTVEQzRGOUFFMDIvM0YzRTJBMTBD QzY0MTFFREE3OTcwNDg0QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAyhvUAwQAyhv3AwQAyjG3MA0GCSqGSIb3DQEBCwUAA4IBAQCeYJMN VzcQp1ad/BEm5x1psHlAVRaPUClsOrNxEuql8XfsekCd1ThWmYwGaLLKH/PrkpC9 WtkmgkQhBHh+sixfExcKBC3Y9LLecbAm2JMHRepr0ObSVebefKolIgkOdqOo6BM3 sViOgytu9oixp/08Dsy/hE6PT0iBUubmoiaABKiMdBHPLs5FAcrVlsZ9maP/ssxc R8fMxaLm0/aXgnmyvyYf6axiZUC7nzgMO8Xp2oGcuj6Mwkx1Dm16CRSQGS4P17On elMNm0v+VHyJ9kwJzW8J/iw6LvXwmpabCSfRv0tw5ffyTrydfonS9tdfQHx73uVv 0JTaiLwPL02YaTQ2 -----END CERTIFICATE-----Generated at Mon Mar 2 22:34:40 2026 by rpki-client