$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/204E25DADE9711EC9289256FC4F9AE02.roa File: 204E25DADE9711EC9289256FC4F9AE02.roa (raw, json) Hash identifier: wQFXOHbg2Z/wpPJ9TnmZXROX64QfJ+PPtIlFy3T1TuI= Subject key identifier: 01:7C:5B:A1:57:2D:BF:C0:F1:85:80:FF:B0:23:C1:E6:BC:B9:E5:D4 Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Certificate serial: 04E7 Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/204E25DADE9711EC9289256FC4F9AE02.roa Signing time: Sun 08 Feb 2026 02:08:39 +0000 ROA not before: Sun 08 Feb 2026 02:08:39 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 205960 IP address blocks: 103.254.72.0/22 maxlen: 22 103.254.73.0/24 maxlen: 24 103.254.74.0/24 maxlen: 24 192.51.188.0/24 maxlen: 24 192.197.113.0/24 maxlen: 24 199.212.57.0/24 maxlen: 24 204.52.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 00:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1255 (0x4e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB81, serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Validity Not Before: Feb 8 02:08:39 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6987f027-3fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:34:22:89:42:29:62:60:06:df:90:b7:89:6a: 7b:b4:f9:2b:e2:b7:74:0b:d5:a5:dd:16:c6:42:31: 88:b7:cd:ef:c1:8b:b2:47:fe:32:37:75:5b:d3:db: 33:06:8d:96:65:ce:ab:43:48:cc:69:ba:13:5d:8d: 7a:d7:cb:c4:d0:bc:a2:10:e7:9f:23:67:81:23:06: dc:0d:7b:49:13:54:9b:d2:1f:2f:53:80:8e:d5:78: 71:93:43:df:61:ea:d7:28:18:33:73:92:18:1f:4a: 5f:2c:02:71:80:a2:7b:9e:5b:68:5c:11:f6:82:9e: e5:b9:fe:6e:c6:60:2e:ae:65:bd:a3:e4:4f:ba:6e: 9a:22:6a:1d:80:0b:b3:8d:b6:a8:18:dd:e8:4a:d8: 5d:2c:0f:b6:1c:8d:83:f9:31:7b:2f:1f:7d:ac:8a: 6b:ce:75:d1:e9:5c:84:53:21:69:95:fc:cb:76:74: f5:06:4e:b2:88:42:55:9b:5c:57:a6:37:67:90:ce: 5f:2f:1b:dd:01:1c:49:d9:54:47:8d:f6:53:fa:20: 3f:58:e4:ab:98:46:ef:8c:a5:b4:03:46:0a:81:76: 76:57:d5:07:93:7d:a8:83:4d:09:5f:2f:e9:5f:93: f5:a5:2c:59:48:9d:ab:32:1c:0f:b4:84:b9:dd:33: 9b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7C:5B:A1:57:2D:BF:C0:F1:85:80:FF:B0:23:C1:E6:BC:B9:E5:D4 X509v3 Authority Key Identifier: keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/204E25DADE9711EC9289256FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.254.72.0/22 192.51.188.0/24 192.197.113.0/24 199.212.57.0/24 204.52.191.0/24 Signature Algorithm: sha256WithRSAEncryption 10:b3:2f:8d:5c:6b:7b:37:e0:2a:e0:d3:f0:f5:63:c7:73:3d: d6:78:f6:4c:63:e3:5a:66:d0:d9:77:69:5f:bb:cc:27:d7:fc: e7:a1:3f:3a:29:a6:4d:06:a6:61:bf:cf:16:84:3a:d5:f4:1f: e4:16:93:16:4c:77:57:55:d7:df:a2:22:ed:59:80:73:4c:92: 15:2a:0f:ca:a2:b7:bc:b6:c5:b1:10:31:6e:55:c8:af:0c:b0: e6:4d:a4:b7:a2:4a:fa:63:a4:5b:46:6b:ea:89:fa:ce:ad:94: c3:7a:3c:33:6f:dd:4a:26:3a:80:0c:dd:ad:78:14:f8:33:db: 41:e6:f3:38:cf:51:8d:10:ab:8c:af:c2:46:11:9f:ae:f9:47: 89:c3:62:90:a7:fc:8b:6a:de:a9:7e:e3:59:d7:de:bf:21:c5: 78:35:c2:03:c4:5f:59:7a:eb:df:3c:9a:33:6e:4e:b4:d4:f9: b4:0c:8e:e5:79:54:4d:86:5e:7e:01:63:de:c1:7b:3a:ef:c3: 31:1c:b8:b0:88:2e:87:97:94:b9:1c:46:bf:e6:88:94:b7:ba: 45:52:77:5d:2e:3f:63:fc:c1:f1:1d:d0:01:07:0f:27:a1:9e: 1d:d8:42:df:34:f8:57:1d:50:08:d9:17:54:a2:53:34:e0:37: fb:0e:9d:8c -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICBOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx REVCODExMTAvBgNVBAUTKDc3NzY2MTJBNDNDMjJEMEE2NkI4RjEzNjgwQjMwNThC RUQ1RDk4OTIwHhcNMjYwMjA4MDIwODM5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTg3ZjAyNy0zZmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTQiiUIpYmAG35C3iWp7tPkr4rd0C9Wl3RbGQjGIt83vwYuyR/4yN3Vb09sz Bo2WZc6rQ0jMaboTXY1618vE0LyiEOefI2eBIwbcDXtJE1Sb0h8vU4CO1Xhxk0Pf YerXKBgzc5IYH0pfLAJxgKJ7nltoXBH2gp7luf5uxmAurmW9o+RPum6aImodgAuz jbaoGN3oSthdLA+2HI2D+TF7Lx99rIprznXR6VyEUyFplfzLdnT1Bk6yiEJVm1xX pjdnkM5fLxvdARxJ2VRHjfZT+iA/WOSrmEbvjKW0A0YKgXZ2V9UHk32og00JXy/p X5P1pSxZSJ2rMhwPtIS53TObvQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFAF8W6FX Lb/A8YWA/7Ajwea8ueXUMB8GA1UdIwQYMBaAFHd2YSpDwi0KZrjxNoCzBYvtXZiS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUI4MS9DRjk2NjNDNjcw RjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xRcG11UEUyZ0xNRmktMWRt SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QzWmhLa1BDTFFwbXVQRTJnTE1GaS0xZG1KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REVCODEvQ0Y5NjYzQzY3MEY3MTFFQ0IzMThFNDNBQzRGOUFFMDIvMjA0RTI1REFE RTk3MTFFQzkyODkyNTZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAJn/kgDBADAM7wDBADAxXEDBADH1DkDBADMNL8wDQYJKoZI hvcNAQELBQADggEBABCzL41ca3s34Crg0/D1Y8dzPdZ49kxj41pm0Nl3aV+7zCfX /OehPzoppk0GpmG/zxaEOtX0H+QWkxZMd1dV19+iIu1ZgHNMkhUqD8qit7y2xbEQ MW5VyK8MsOZNpLeiSvpjpFtGa+qJ+s6tlMN6PDNv3UomOoAM3a14FPgz20Hm8zjP UY0Qq4yvwkYRn675R4nDYpCn/Itq3ql+41nX3r8hxXg1wgPEX1l66988mjNuTrTU +bQMjuV5VE2GXn4BY97BezrvwzEcuLCILoeXlLkcRr/miJS3ukVSd10uP2P8wfEd 0AEHDyehnh3YQt80+FcdUAjZF1SiUzTgN/sOnYw= -----END CERTIFICATE-----Generated at Mon Mar 2 02:18:30 2026 by rpki-client