$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/CF49BBDAD33811EDAAE97C1BC4F9AE02.roa File: CF49BBDAD33811EDAAE97C1BC4F9AE02.roa (raw, json) Hash identifier: ceLqZQ73SghK/xtHTxJaD1QRAAXRbW/0PReyJbkouJk= Subject key identifier: BC:50:3F:DE:82:34:4A:5B:5C:7F:A0:44:CC:42:F0:87:49:D3:41:C7 Certificate issuer: /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Certificate serial: 05D4 Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/CF49BBDAD33811EDAAE97C1BC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:26:54 +0000 ROA not before: Mon 22 Sep 2025 16:35:23 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 8987 IP address blocks: 213.170.156.0/24 maxlen: 24 213.170.157.0/24 maxlen: 24 213.170.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 14:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1492 (0x5d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Validity Not Before: Sep 22 16:35:23 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a476de-1713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:18:be:f7:20:ab:c5:d0:64:a7:3d:27:08:dc: 8c:da:60:cf:17:d3:9a:86:73:a5:a8:ba:39:7d:a1: fd:c8:60:3a:77:66:71:07:70:3a:c4:ad:32:ea:71: 0e:c4:c9:f4:03:6b:6c:09:0e:94:48:a0:db:f4:08: f5:2f:9a:94:21:da:0f:5f:cd:51:92:dc:30:dc:7c: 4f:e6:83:ab:cb:62:ba:9b:9d:c2:66:53:a8:85:52: 4c:78:96:53:4b:c0:1a:0c:29:e5:f5:c6:f7:e9:60: 07:d5:23:80:1b:26:2a:39:a6:32:36:bf:03:6b:f9: 9c:04:e7:1d:4b:64:27:9f:09:2f:52:98:c6:e5:7d: 3c:00:54:6e:bc:fd:94:62:16:2d:a2:a6:8f:65:c2: 2d:7a:d3:5e:69:07:4a:d5:e6:1a:1d:27:60:3c:03: 96:3a:75:d5:eb:c7:3b:5d:37:6f:57:4b:5b:e4:94: b6:e6:8e:fb:38:22:92:80:1f:d7:c1:ab:3b:ae:e2: b9:18:8c:7f:db:a0:9a:8f:e5:72:41:cd:87:47:30: 70:de:b1:d4:72:99:89:62:d5:1a:fc:04:a9:fb:9a: e0:1c:66:12:a8:4f:1c:0a:9e:75:77:2e:09:16:a2: 01:8c:8f:19:c0:03:e0:87:41:80:b9:1d:58:db:99: 8b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:50:3F:DE:82:34:4A:5B:5C:7F:A0:44:CC:42:F0:87:49:D3:41:C7 X509v3 Authority Key Identifier: keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/CF49BBDAD33811EDAAE97C1BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 213.170.156.0-213.170.158.255 Signature Algorithm: sha256WithRSAEncryption 6f:6c:62:27:f8:30:7c:60:89:b8:2d:bd:bc:70:eb:21:76:85: 98:03:0e:f4:1f:a2:91:eb:c6:f7:7c:b5:a8:df:bd:9c:c9:76: 51:ad:94:99:e1:ee:7e:bf:c9:67:85:30:b7:02:2f:03:67:fb: 82:cb:a9:f0:e7:1a:95:69:54:73:46:c1:f4:51:69:5d:20:32: ec:b8:27:85:9f:fa:6d:6c:35:e7:78:46:ac:2a:8f:1f:a3:20: b7:a0:be:db:84:54:8a:76:7f:64:6c:89:ce:67:2c:09:cb:07: 83:42:56:cb:78:e3:b6:7f:89:3c:bf:7f:22:6e:89:15:39:fb: 28:3b:63:5f:2c:69:cb:24:0c:07:26:84:09:77:7a:b6:2d:6a: 0f:af:74:e6:3f:20:29:c0:d6:ff:c5:22:b6:f9:c9:a2:91:c4: d2:ec:6b:38:e8:10:59:42:6c:f2:9a:e2:28:1c:35:49:1a:7b: 28:02:81:2d:3c:ed:b5:39:a5:b5:d2:1f:bf:7f:f0:9b:ce:8e: 7e:d2:b6:c6:e4:c1:ad:86:c3:3c:2e:62:2a:e6:ac:f6:1b:33: 6a:0f:f3:75:99:e1:0e:ab:a8:fc:c9:75:01:ed:cd:96:88:a1: 58:d8:f7:3c:e1:ee:77:82:b0:b9:69:1c:22:17:34:f4:29:16: 2f:3b:07:48 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICBdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKEFEQjk4OTc4RkQ3NTFGOTlEOUE4RUIyQUU3MkQzQzBD NTUwNDUzQTQwHhcNMjUwOTIyMTYzNTIzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzZkZS0xNzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3hi+9yCrxdBkpz0nCNyM2mDPF9OahnOlqLo5faH9yGA6d2ZxB3A6xK0y6nEO xMn0A2tsCQ6USKDb9Aj1L5qUIdoPX81Rktww3HxP5oOry2K6m53CZlOohVJMeJZT S8AaDCnl9cb36WAH1SOAGyYqOaYyNr8Da/mcBOcdS2QnnwkvUpjG5X08AFRuvP2U YhYtoqaPZcItetNeaQdK1eYaHSdgPAOWOnXV68c7XTdvV0tb5JS25o77OCKSgB/X was7ruK5GIx/26Caj+VyQc2HRzBw3rHUcpmJYtUa/ASp+5rgHGYSqE8cCp51dy4J FqIBjI8ZwAPgh0GAuR1Y25mLXQIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFLxQP96C NEpbXH+gRMxC8IdJ00HHMB8GA1UdIwQYMBaAFK25iXj9dR+Z2ajrKuctPAxVBFOk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS9FQUM3RUVBMDEx MkQxMUVDOEQ4NzA1N0RDNEY5QUUwMi9yYm1KZVAxMUg1blpxT3NxNXkwOERGVUVV NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3JibUplUDExSDVuWnFPc3E1eTA4REZVRVU2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RENEMDkvRUFDN0VFQTAxMTJEMTFFQzhEODcwNTdEQzRGOUFFMDIvQ0Y0OUJCREFE MzM4MTFFREFBRTk3QzFCQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBALVqpwDBADVqp4wDQYJKoZIhvcNAQELBQADggEBAG9sYif4MHxg ibgtvbxw6yF2hZgDDvQfopHrxvd8tajfvZzJdlGtlJnh7n6/yWeFMLcCLwNn+4LL qfDnGpVpVHNGwfRRaV0gMuy4J4Wf+m1sNed4Rqwqjx+jILegvtuEVIp2f2Rsic5n LAnLB4NCVst447Z/iTy/fyJuiRU5+yg7Y18sacskDAcmhAl3erYtag+vdOY/ICnA 1v/FIrb5yaKRxNLsazjoEFlCbPKa4igcNUkaeygCgS087bU5pbXSH79/8JvOjn7S tsbkwa2GwzwuYirmrPYbM2oP83WZ4Q6rqPzJdQHtzZaIoVjY9zzh7neCsLlpHCIX NPQpFi87B0g= -----END CERTIFICATE-----Generated at Mon Mar 2 02:07:26 2026 by rpki-client