$ rpki-client -vvf rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/727850D8D3EF11EFB596E00CC4F9AE02.roa File: 727850D8D3EF11EFB596E00CC4F9AE02.roa (raw, json) Hash identifier: q0DHa5Wl8wyW8RcDFN0Qyu7ppbrZZWsxIyNW/w1xs0Q= Subject key identifier: 98:19:E2:2D:83:AB:FB:55:50:59:E5:E5:CB:B7:E8:F2:02:AF:9A:3F Certificate issuer: /CN=A91D74A6/serialNumber=DC80C85E5101089AB2425D3FC9177985A0125C6E Certificate serial: ED Authority key identifier: DC:80:C8:5E:51:01:08:9A:B2:42:5D:3F:C9:17:79:85:A0:12:5C:6E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/727850D8D3EF11EFB596E00CC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:15:27 +0000 ROA not before: Thu 29 Jan 2026 05:29:43 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 133752 IP address blocks: 64.120.88.0/22 maxlen: 23 64.120.112.0/21 maxlen: 21 64.120.112.0/22 maxlen: 22 64.120.116.0/22 maxlen: 22 64.120.120.0/23 maxlen: 23 172.241.216.0/21 maxlen: 21 209.58.184.0/21 maxlen: 21 209.58.184.0/23 maxlen: 23 209.58.186.0/24 maxlen: 24 209.58.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.crl rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 14:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D74A6, serialNumber=DC80C85E5101089AB2425D3FC9177985A0125C6E Validity Not Before: Jan 29 05:29:43 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a41fcf-cde8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:98:06:b4:c5:f4:7d:db:13:c5:c1:34:60:d2: f2:2d:b3:63:4e:f8:06:71:c7:7e:2f:32:5e:bd:07: fd:71:fe:62:0f:13:3d:09:8e:e6:4b:a3:09:db:3e: 3e:65:7b:9c:c7:e6:2d:4c:5a:8c:46:f2:32:07:40: 59:a8:2b:c1:80:fa:d8:cb:6d:44:e6:56:7b:7f:91: bb:ff:e0:66:9d:f9:47:26:44:1d:bd:0f:67:b8:f2: 47:86:94:c7:40:d8:70:bf:dd:6b:36:e3:5e:18:28: 96:40:41:b9:8b:3b:58:d7:77:4e:7d:32:cd:f3:ad: 00:84:20:75:18:da:1e:6c:b9:49:0e:36:f2:de:a0: 1e:aa:6e:a9:45:cf:c7:6d:1f:c5:f2:78:1e:9b:5c: ee:f7:fd:a4:c1:30:97:7c:99:1b:84:2a:00:25:6d: fe:e9:4e:b9:68:91:dc:c2:31:78:57:75:de:d0:db: 9a:4c:67:64:3c:61:bb:1a:b0:e4:8f:12:c7:b5:4d: 6b:1e:e3:0c:82:54:72:bc:69:e7:6f:f7:7f:87:84: c5:e9:07:e1:da:1e:d7:69:fd:ca:80:00:10:5e:80: 34:c8:5f:94:20:02:2f:df:b8:cc:88:50:96:34:fe: bb:28:07:b7:f8:84:a0:f4:3d:65:15:01:02:02:08: 52:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:19:E2:2D:83:AB:FB:55:50:59:E5:E5:CB:B7:E8:F2:02:AF:9A:3F X509v3 Authority Key Identifier: keyid:DC:80:C8:5E:51:01:08:9A:B2:42:5D:3F:C9:17:79:85:A0:12:5C:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/727850D8D3EF11EFB596E00CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 64.120.88.0/22 64.120.112.0-64.120.121.255 172.241.216.0/21 209.58.184.0/21 Signature Algorithm: sha256WithRSAEncryption 81:80:06:85:b6:cb:08:0e:7b:68:35:ef:34:bd:16:ac:92:02: 18:26:d2:90:2d:7b:cc:2a:be:4a:a2:ec:e2:77:91:2a:82:76: 77:00:d2:bd:0a:8f:dd:1a:43:5d:3a:d4:27:94:78:de:96:55: e1:68:b7:75:66:f3:ac:d4:41:ce:96:8b:65:63:ff:07:02:b7: 28:bc:b7:68:a5:d1:78:4a:1c:ff:27:48:76:93:6d:fc:c2:02: 33:88:11:01:be:37:7a:1a:6e:aa:00:fa:bc:65:bb:5e:88:dc: fc:10:5c:13:54:5a:ff:18:20:ec:32:d2:10:df:50:76:77:37: ad:74:73:6e:fd:f8:f3:18:f7:4a:dd:08:a3:29:91:37:0a:e6: 98:c8:6a:20:8b:ec:da:49:01:3f:8a:82:2e:14:c0:16:65:87: f7:78:43:2c:62:a5:08:5a:2e:ef:8c:83:77:a8:3d:09:d5:8d: b1:38:50:89:08:cb:0c:7f:3d:2d:ba:c6:0b:fd:43:37:82:a0: 88:0b:c0:f6:a2:86:a0:c6:3a:c4:db:93:5a:93:e9:a3:37:8c: dc:5d:ef:5e:48:b7:a3:d2:8a:23:6b:33:c9:78:20:90:ee:4b: 9a:b8:8c:bb:de:22:fa:ad:99:05:f3:d4:7d:df:2c:89:34:24: 78:28:6d:10 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc0QTYxMTAvBgNVBAUTKERDODBDODVFNTEwMTA4OUFCMjQyNUQzRkM5MTc3OTg1 QTAxMjVDNkUwHhcNMjYwMTI5MDUyOTQzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MWZjZi1jZGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjZgGtMX0fdsTxcE0YNLyLbNjTvgGccd+LzJevQf9cf5iDxM9CY7mS6MJ2z4+ ZXucx+YtTFqMRvIyB0BZqCvBgPrYy21E5lZ7f5G7/+BmnflHJkQdvQ9nuPJHhpTH QNhwv91rNuNeGCiWQEG5iztY13dOfTLN860AhCB1GNoebLlJDjby3qAeqm6pRc/H bR/F8ngem1zu9/2kwTCXfJkbhCoAJW3+6U65aJHcwjF4V3Xe0NuaTGdkPGG7GrDk jxLHtU1rHuMMglRyvGnnb/d/h4TF6Qfh2h7Xaf3KgAAQXoA0yF+UIAIv37jMiFCW NP67KAe3+ISg9D1lFQECAghSIwIDAQABo4ICejCCAnYwHQYDVR0OBBYEFJgZ4i2D q/tVUFnl5cu36PICr5o/MB8GA1UdIwQYMBaAFNyAyF5RAQiaskJdP8kXeYWgElxu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzRBNi83MTcxQkJGMkQx OUMxMUVGODNDRUFEM0NDNEY5QUUwMi8zSURJWGxFQkNKcXlRbDBfeVJkNWhhQVNY RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNJRElYbEVCQ0pxeVFsMF95UmQ1aGFBU1hHNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDc0QTYvNzE3MUJCRjJEMTlDMTFFRjgzQ0VBRDNDQzRGOUFFMDIvNzI3ODUwRDhE M0VGMTFFRkI1OTZFMDBDQzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm BAIAATAgAwQCQHhYMAwDBARAeHADBAFAeHgDBAOs8dgDBAPROrgwDQYJKoZIhvcN AQELBQADggEBAIGABoW2ywgOe2g17zS9FqySAhgm0pAte8wqvkqi7OJ3kSqCdncA 0r0Kj90aQ1061CeUeN6WVeFot3Vm86zUQc6Wi2Vj/wcCtyi8t2il0XhKHP8nSHaT bfzCAjOIEQG+N3oabqoA+rxlu16I3PwQXBNUWv8YIOwy0hDfUHZ3N610c279+PMY 90rdCKMpkTcK5pjIaiCL7NpJAT+Kgi4UwBZlh/d4QyxipQhaLu+Mg3eoPQnVjbE4 UIkIywx/PS26xgv9QzeCoIgLwPaihqDGOsTbk1qT6aM3jNxd715It6PSiiNrM8l4 IJDuS5q4jLveIvqtmQXz1H3fLIk0JHgobRA= -----END CERTIFICATE-----Generated at Mon Mar 2 04:33:28 2026 by rpki-client