$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/943D15902D1011EFBBEBA67BC4F9AE02.roa File: 943D15902D1011EFBBEBA67BC4F9AE02.roa (raw, json) Hash identifier: dPxIUNEqYuFtJskM6HAN9FGSFnQOEAtn06dnZBLnvG8= Subject key identifier: 05:97:4A:CD:4D:D8:54:90:CC:05:C3:82:6D:78:96:BD:C8:E2:4D:52 Certificate issuer: /CN=A91D1216/serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002 Certificate serial: 0455 Authority key identifier: 6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/943D15902D1011EFBBEBA67BC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:39:34 +0000 ROA not before: Wed 10 Dec 2025 23:08:28 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 17551 IP address blocks: 123.50.128.0/20 maxlen: 20 123.50.128.0/21 maxlen: 21 123.50.136.0/22 maxlen: 22 123.50.140.0/22 maxlen: 22 123.50.148.0/22 maxlen: 22 125.254.108.0/23 maxlen: 23 125.254.110.0/23 maxlen: 23 125.254.116.0/23 maxlen: 23 125.254.118.0/23 maxlen: 23 125.254.120.0/21 maxlen: 21 125.254.120.0/22 maxlen: 22 125.254.124.0/22 maxlen: 22 202.169.22.0/24 maxlen: 24 210.56.224.0/22 maxlen: 22 210.56.228.0/23 maxlen: 23 210.56.237.0/24 maxlen: 24 210.56.241.0/24 maxlen: 24 210.56.243.0/24 maxlen: 24 210.56.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1109 (0x455) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1216, serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002 Validity Not Before: Dec 10 23:08:28 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a46bc6-8aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5e:c9:fa:9f:03:84:2d:4c:62:a5:70:ff:09: 7c:83:73:53:9c:42:79:71:32:c8:12:97:5b:83:0b: 0b:32:c4:f3:46:8e:43:85:f4:f3:b6:7d:eb:83:c9: e0:b7:cf:e7:e7:e7:f3:14:18:f0:88:92:a9:2d:cb: b1:01:e2:ad:3c:00:e8:d0:5c:fd:05:30:2c:ad:63: 27:10:07:b1:b9:da:9c:fc:f8:5c:6f:ee:17:40:9b: bd:b4:aa:a4:d6:34:67:89:37:65:26:61:65:2d:d0: 19:ce:d6:19:53:e5:9d:f9:c9:1d:96:5c:86:85:4e: a1:7a:88:fb:b6:e5:13:2a:22:61:71:62:bf:ac:b3: 55:5b:8d:6b:ed:e6:d7:fe:0a:43:d9:11:8e:8f:a2: 55:1e:1d:11:07:a8:47:e4:33:65:26:97:4a:d8:bb: 51:7a:b8:5b:6d:c5:43:a4:f9:b4:d2:66:df:fa:f0: cf:b8:45:72:94:57:60:51:7d:77:8d:4b:2c:67:4a: 14:d1:9d:9a:28:70:b4:03:ca:2b:fb:07:d9:1e:68: b2:49:30:e0:f2:2d:26:1c:bd:67:06:c5:d1:2d:d6: 3a:81:98:61:80:52:ec:4a:ac:be:62:65:2b:d2:ad: f0:9a:15:a1:af:eb:ce:d1:7c:36:e6:74:74:3c:03: c8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:97:4A:CD:4D:D8:54:90:CC:05:C3:82:6D:78:96:BD:C8:E2:4D:52 X509v3 Authority Key Identifier: keyid:6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/943D15902D1011EFBBEBA67BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 123.50.128.0/20 123.50.148.0/22 125.254.108.0/22 125.254.116.0-125.254.127.255 202.169.22.0/24 210.56.224.0-210.56.229.255 210.56.237.0/24 210.56.241.0/24 210.56.243.0/24 210.56.254.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:e2:a9:0d:41:b6:7b:27:3b:88:ce:1a:63:a1:24:ef:02:bc: 24:95:df:e3:26:64:2c:94:19:4d:b4:04:23:95:d4:8d:dc:67: 9c:ae:2d:53:40:62:28:83:ba:18:c2:a4:9e:12:5e:9c:50:a1: 09:ab:52:0e:69:b4:50:22:d9:d4:c7:71:76:ac:88:27:de:a1: 23:b0:ff:58:5e:0f:0e:de:66:cc:41:d9:3d:9a:53:db:91:64: c7:6c:42:b7:6f:d2:c2:02:cf:13:32:ac:72:ae:35:cf:b4:f5: 20:a4:7b:ff:d6:c9:a4:5a:a7:17:f0:29:52:18:74:9c:a9:3a: ae:3c:2d:a2:47:ed:ab:64:0c:2c:4a:89:8d:c3:b4:66:12:9b: 33:56:31:b0:28:07:00:25:d2:bc:ad:e5:39:54:c5:1f:a7:97: 31:66:76:b5:4d:4b:c1:ea:94:8e:6c:bd:a7:8d:d8:02:0c:0b: 13:b2:fb:03:75:b6:22:fa:ac:77:6b:e6:ed:32:7f:0b:7b:0c: 76:08:be:30:29:7b:fe:be:0c:27:aa:eb:14:b6:6b:8b:9c:dc: 31:68:89:07:59:a6:7e:96:9c:18:a3:c6:89:3a:c2:fd:30:50: 7f:60:87:ae:99:a5:dd:03:59:2d:b7:16:a4:88:29:9a:fb:64: 94:4b:42:c4 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyMTYxMTAvBgNVBAUTKDZEQkQ1QzREMDEyMUZDQjMxOEU3OEM0NTFCNkY1Njcz MjA5ODYwMDIwHhcNMjUxMjEwMjMwODI4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmJjNi04YWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzl7J+p8DhC1MYqVw/wl8g3NTnEJ5cTLIEpdbgwsLMsTzRo5DhfTztn3rg8ng t8/n5+fzFBjwiJKpLcuxAeKtPADo0Fz9BTAsrWMnEAexudqc/Phcb+4XQJu9tKqk 1jRniTdlJmFlLdAZztYZU+Wd+ckdllyGhU6heoj7tuUTKiJhcWK/rLNVW41r7ebX /gpD2RGOj6JVHh0RB6hH5DNlJpdK2LtRerhbbcVDpPm00mbf+vDPuEVylFdgUX13 jUssZ0oU0Z2aKHC0A8or+wfZHmiySTDg8i0mHL1nBsXRLdY6gZhhgFLsSqy+YmUr 0q3wmhWhr+vO0Xw25nR0PAPIEQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFAWXSs1N 2FSQzAXDgm14lr3I4k1SMB8GA1UdIwQYMBaAFG29XE0BIfyzGOeMRRtvVnMgmGAC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIxNi9EQzc4MjY4Q0I5 NEIxMUVDODMyQjc0MTlDNEY5QUUwMi9iYjFjVFFFaF9MTVk1NHhGRzI5V2N5Q1lZ QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JiMWNUUUVoX0xNWTU0eEZHMjlXY3lDWVlBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDEyMTYvREM3ODI2OENCOTRCMTFFQzgzMkI3NDE5QzRGOUFFMDIvOTQzRDE1OTAy RDEwMTFFRkJCRUJBNjdCQzRGOUFFMDIucm9hMGUGCCsGAQUFBwEHAQH/BFYwVDBS BAIAATBMAwQEezKAAwQCezKUAwQCff5sMAwDBAJ9/nQDBAd9/gADBADKqRYwDAME BdI44AMEAdI45AMEANI47QMEANI48QMEANI48wMEAdI4/jANBgkqhkiG9w0BAQsF AAOCAQEAiuKpDUG2eyc7iM4aY6Ek7wK8JJXf4yZkLJQZTbQEI5XUjdxnnK4tU0Bi KIO6GMKknhJenFChCatSDmm0UCLZ1MdxdqyIJ96hI7D/WF4PDt5mzEHZPZpT25Fk x2xCt2/SwgLPEzKscq41z7T1IKR7/9bJpFqnF/ApUhh0nKk6rjwtokftq2QMLEqJ jcO0ZhKbM1YxsCgHACXSvK3lOVTFH6eXMWZ2tU1LweqUjmy9p43YAgwLE7L7A3W2 Ivqsd2vm7TJ/C3sMdgi+MCl7/r4MJ6rrFLZri5zcMWiJB1mmfpacGKPGiTrC/TBQ f2CHrpml3QNZLbcWpIgpmvtklEtCxA== -----END CERTIFICATE-----Generated at Mon Mar 2 02:18:58 2026 by rpki-client