$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/71921B808DBD11EBB4566432C4F9AE02.roa File: 71921B808DBD11EBB4566432C4F9AE02.roa (raw, json) Hash identifier: 5/4YUq2O9OTal/tX146cKHyOeYhVIqDbo8MR2WNGJTA= Subject key identifier: 88:16:0F:1F:A7:F8:F6:97:16:4F:FD:6C:E2:0E:92:7B:BD:F8:3E:D5 Certificate issuer: /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Certificate serial: 091B Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/71921B808DBD11EBB4566432C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:12:00 +0000 ROA not before: Tue 02 Dec 2025 21:25:39 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 137536 IP address blocks: 123.200.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2331 (0x91b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB4FE, serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Validity Not Before: Dec 2 21:25:39 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a47360-3031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:16:df:49:09:67:bc:72:1c:c4:9e:92:0f:81: ed:91:d1:e1:34:79:55:65:5b:d7:b8:13:25:3b:15: b8:d1:9c:08:2a:3b:0a:d9:9b:bf:33:11:e1:db:ef: ac:09:63:3b:f4:01:e0:14:b0:94:5c:92:35:d7:06: a6:8f:a4:eb:7a:c2:d1:a5:9a:46:83:72:81:ae:12: d6:c6:1c:dd:1f:de:52:2f:8e:b9:e2:fe:59:03:ef: 93:de:c3:b3:4c:e1:b0:46:26:6b:ce:16:14:a1:d1: ed:74:58:04:98:16:bf:49:f3:fe:bb:aa:9c:95:78: d6:fb:11:8f:a1:1c:07:a0:d7:ca:0c:e2:9e:b1:c9: 02:89:c2:33:1c:69:4e:0d:8d:ad:70:c6:40:58:07: dc:f1:f4:1f:ad:b5:c4:56:af:55:0c:0c:d7:95:1f: b2:67:e3:bc:3d:ec:3f:48:26:58:b0:74:e4:b2:20: 57:0b:b6:8a:04:2b:04:43:35:ae:a7:0f:4e:8c:1a: 99:1f:8f:07:85:89:94:45:66:70:f2:15:52:d7:9e: de:36:52:6f:21:cc:e2:ae:5f:1b:4b:63:e9:d2:49: 5f:99:52:2d:f3:9d:f4:96:65:6c:99:94:b6:1c:1a: a3:09:b2:e7:45:9c:08:20:f1:f6:f6:52:17:20:7a: f8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:16:0F:1F:A7:F8:F6:97:16:4F:FD:6C:E2:0E:92:7B:BD:F8:3E:D5 X509v3 Authority Key Identifier: keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/71921B808DBD11EBB4566432C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 123.200.136.0/24 Signature Algorithm: sha256WithRSAEncryption 58:02:c2:8b:c7:29:9a:0e:bf:06:8f:42:4a:44:61:51:c0:39: 64:e5:c5:af:f9:92:3a:42:05:5b:94:66:f0:33:bd:7e:0f:27: 38:18:66:94:a1:2e:8c:1f:ca:33:61:01:46:6d:97:8e:d5:2c: 5a:7e:c2:d5:98:8a:69:fd:36:63:d8:1f:b8:89:47:df:3b:5a: 4d:42:2a:5f:d3:a7:ec:25:19:f8:a2:c7:ad:b6:e4:21:0f:21: 94:1a:19:8e:4e:d2:45:5b:ee:e6:b4:e3:33:6d:eb:81:45:e5: 53:b3:2a:f8:99:ff:a2:ee:11:f6:d7:f2:c9:de:7e:9b:79:5a: 26:23:d6:99:79:7e:a0:79:ef:6f:ad:14:9a:a0:8e:a3:f2:34: c9:0c:2b:a1:4c:dc:9f:08:b4:64:50:d4:e8:0f:c7:67:d6:86: d4:bb:b9:b9:da:72:92:c0:d5:af:9f:aa:e1:2e:1a:e0:08:bb: 42:a6:85:96:2a:87:dc:15:e9:86:96:28:e7:54:c1:bd:0b:ee: ae:57:00:0d:ca:db:3c:a5:df:e1:95:92:41:27:99:48:46:f9: b1:5b:4e:67:9a:0e:cb:b7:42:d2:0f:49:9f:8a:63:55:0c:30: 6c:d9:08:93:18:88:ad:ea:27:ff:8f:08:df:f3:05:87:c3:92: 2c:3d:2f:69 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0RkUxMTAvBgNVBAUTKDdGNkJFMUQ1QTI3MzBGQzIyN0ZBRkM4OTZEMTM0MzMy NDE3ODMxNzkwHhcNMjUxMjAyMjEyNTM5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzM2MC0zMDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAohbfSQlnvHIcxJ6SD4HtkdHhNHlVZVvXuBMlOxW40ZwIKjsK2Zu/MxHh2++s CWM79AHgFLCUXJI11wamj6TresLRpZpGg3KBrhLWxhzdH95SL4654v5ZA++T3sOz TOGwRiZrzhYUodHtdFgEmBa/SfP+u6qclXjW+xGPoRwHoNfKDOKesckCicIzHGlO DY2tcMZAWAfc8fQfrbXEVq9VDAzXlR+yZ+O8Pew/SCZYsHTksiBXC7aKBCsEQzWu pw9OjBqZH48HhYmURWZw8hVS157eNlJvIczirl8bS2Pp0klfmVIt8530lmVsmZS2 HBqjCbLnRZwIIPH29lIXIHr4dQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIgWDx+n +PaXFk/9bOIOknu9+D7VMB8GA1UdIwQYMBaAFH9r4dWicw/CJ/r8iW0TQzJBeDF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjRGRS9DRjRBMTBFQTg1 RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4SW4tdnlKYlJORE1rRjRN WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YydmgxYUp6RDhJbi12eUpiUk5ETWtGNE1Yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REI0RkUvQ0Y0QTEwRUE4NUUxMTFFQkFGQjUxRTg0QzRGOUFFMDIvNzE5MjFCODA4 REJEMTFFQkI0NTY2NDMyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAe8iIMA0GCSqGSIb3DQEBCwUAA4IBAQBYAsKLxymaDr8Gj0JKRGFR wDlk5cWv+ZI6QgVblGbwM71+Dyc4GGaUoS6MH8ozYQFGbZeO1SxafsLVmIpp/TZj 2B+4iUffO1pNQipf06fsJRn4osettuQhDyGUGhmOTtJFW+7mtOMzbeuBReVTsyr4 mf+i7hH21/LJ3n6beVomI9aZeX6gee9vrRSaoI6j8jTJDCuhTNyfCLRkUNToD8dn 1obUu7m52nKSwNWvn6rhLhrgCLtCpoWWKofcFemGlijnVMG9C+6uVwANyts8pd/h lZJBJ5lIRvmxW05nmg7Lt0LSD0mfimNVDDBs2QiTGIit6if/jwjf8wWHw5IsPS9p -----END CERTIFICATE-----Generated at Mon Mar 2 05:54:43 2026 by rpki-client