$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/0D6FFE56BA3511ECA20A3817C4F9AE02.roa File: 0D6FFE56BA3511ECA20A3817C4F9AE02.roa (raw, json) Hash identifier: T6idJL8aHggzjv6s1JmSSpHwZuTbLSQAyDk/XLJrS3o= Subject key identifier: 43:4E:A4:96:A9:4F:72:2F:FC:10:65:BA:8A:72:9B:B9:5F:7C:B6:C9 Certificate issuer: /CN=A91DF0EC/serialNumber=DA2B43CC183CA8E0F6A8F6DAA54CDD7306F86228 Certificate serial: 0AA3 Authority key identifier: DA:2B:43:CC:18:3C:A8:E0:F6:A8:F6:DA:A5:4C:DD:73:06:F8:62:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/0D6FFE56BA3511ECA20A3817C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:45:08 +0000 ROA not before: Wed 18 Feb 2026 19:17:14 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 59341 IP address blocks: 123.0.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.crl rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2723 (0xaa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF0EC, serialNumber=DA2B43CC183CA8E0F6A8F6DAA54CDD7306F86228 Validity Not Before: Feb 18 19:17:14 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a46d13-c295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2c:96:0b:63:bc:9c:39:2a:dc:db:24:0c:8a: 09:4d:13:f4:3f:8f:1d:72:49:86:ae:e5:98:27:be: 14:42:7a:0d:e9:32:1f:ef:38:11:98:ef:0c:e2:6e: ac:16:65:83:e2:a8:8b:60:92:c7:bc:c3:13:48:3a: c0:81:43:da:be:fb:4c:03:1e:9e:93:44:b6:da:3f: 1a:b1:8d:d6:d9:ba:9a:76:83:22:75:41:9c:5a:29: c9:93:6f:e9:2d:52:d2:17:b0:e8:e6:a1:73:11:ae: 9b:41:2d:fc:d7:10:aa:a8:dd:9a:f4:da:4a:af:e8: df:d3:0e:77:86:9a:c1:2f:c7:ef:be:ad:e6:e9:33: 9a:4f:af:2f:84:3a:1d:af:79:5d:dc:75:20:65:ab: 9b:6c:29:8e:53:42:a8:9a:1f:31:fc:61:79:38:14: 59:1f:3a:62:ff:9a:53:07:55:56:7c:d9:74:70:de: 34:1f:f7:88:8f:64:72:ab:9a:3f:26:be:35:95:62: 53:da:f3:9f:b7:b5:7d:61:64:47:d5:7b:a8:06:a5: 17:a6:2e:85:f5:ee:85:57:be:8c:49:bf:9f:81:d4: 24:85:9d:76:ef:14:18:6b:6b:d8:ae:14:23:ac:81: 63:cc:16:bc:c8:11:39:b4:6e:d1:76:95:c6:bd:31: 37:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4E:A4:96:A9:4F:72:2F:FC:10:65:BA:8A:72:9B:B9:5F:7C:B6:C9 X509v3 Authority Key Identifier: keyid:DA:2B:43:CC:18:3C:A8:E0:F6:A8:F6:DA:A5:4C:DD:73:06:F8:62:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/0D6FFE56BA3511ECA20A3817C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 123.0.30.0/24 Signature Algorithm: sha256WithRSAEncryption 19:a8:67:01:5e:6f:06:2b:f2:bd:69:32:b2:61:c2:9b:08:5f: 3d:ae:62:45:a6:82:2d:c2:0a:67:ae:5b:44:7d:fa:b2:e7:10: 8a:cf:f3:31:f2:e4:4a:e7:16:7a:03:13:1e:d0:39:e8:83:ea: 8e:e4:3a:c1:14:fe:85:c7:f7:61:e5:cc:08:31:05:1d:81:36: f1:43:e7:19:7c:d6:4d:85:18:c0:82:3f:0e:83:b2:87:ab:ee: 4b:24:8a:c0:56:3a:0b:a9:5f:55:6b:92:d6:0f:f9:54:0e:fb: 8c:85:5c:75:dd:3d:5d:02:1a:47:16:77:fc:d5:61:fc:a7:fb: 7d:01:61:6b:f4:ea:2a:97:89:18:d6:80:2c:d6:8d:09:97:c7: 5c:66:85:7b:3e:0f:e5:be:66:94:9d:1d:dc:67:c9:25:6a:4d: 10:cd:60:7b:26:10:30:75:a8:67:fb:8f:1b:c4:4d:f7:af:8f: 3b:1d:69:28:52:c3:7a:37:ae:05:c4:4c:09:09:73:23:32:52: 34:c7:1b:c3:25:97:44:de:bd:73:71:a0:fc:bb:68:a9:c1:e3: c9:e3:8f:c9:54:9b:2e:c1:a2:3e:f5:72:d0:e4:c0:52:0b:b0: 5b:c0:d5:ff:d6:b7:d7:5b:57:37:73:50:ac:bf:c3:ab:f3:58: 4a:51:1b:3a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYwRUMxMTAvBgNVBAUTKERBMkI0M0NDMTgzQ0E4RTBGNkE4RjZEQUE1NENERDcz MDZGODYyMjgwHhcNMjYwMjE4MTkxNzE0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmQxMy1jMjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoyyWC2O8nDkq3NskDIoJTRP0P48dckmGruWYJ74UQnoN6TIf7zgRmO8M4m6s FmWD4qiLYJLHvMMTSDrAgUPavvtMAx6ek0S22j8asY3W2bqadoMidUGcWinJk2/p LVLSF7Do5qFzEa6bQS381xCqqN2a9NpKr+jf0w53hprBL8fvvq3m6TOaT68vhDod r3ld3HUgZaubbCmOU0Komh8x/GF5OBRZHzpi/5pTB1VWfNl0cN40H/eIj2Ryq5o/ Jr41lWJT2vOft7V9YWRH1XuoBqUXpi6F9e6FV76MSb+fgdQkhZ127xQYa2vYrhQj rIFjzBa8yBE5tG7RdpXGvTE3zwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFENOpJap T3Iv/BBluopym7lffLbJMB8GA1UdIwQYMBaAFNorQ8wYPKjg9qj22qVM3XMG+GIo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjBFQy85OTFDRUY3RTc5 NTgxMUVBOTNBRTk2NDZDNEY5QUUwMi8yaXREekJnOHFPRDJxUGJhcFV6ZGN3YjRZ aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJpdER6Qmc4cU9EMnFQYmFwVXpkY3diNFlpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REYwRUMvOTkxQ0VGN0U3OTU4MTFFQTkzQUU5NjQ2QzRGOUFFMDIvMEQ2RkZFNTZC QTM1MTFFQ0EyMEEzODE3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAewAeMA0GCSqGSIb3DQEBCwUAA4IBAQAZqGcBXm8GK/K9aTKyYcKb CF89rmJFpoItwgpnrltEffqy5xCKz/Mx8uRK5xZ6AxMe0Dnog+qO5DrBFP6Fx/dh 5cwIMQUdgTbxQ+cZfNZNhRjAgj8Og7KHq+5LJIrAVjoLqV9Va5LWD/lUDvuMhVx1 3T1dAhpHFnf81WH8p/t9AWFr9Ooql4kY1oAs1o0Jl8dcZoV7Pg/lvmaUnR3cZ8kl ak0QzWB7JhAwdahn+48bxE33r487HWkoUsN6N64FxEwJCXMjMlI0xxvDJZdE3r1z caD8u2ipwePJ44/JVJsuwaI+9XLQ5MBSC7BbwNX/1rfXW1c3c1Csv8Or81hKURs6 -----END CERTIFICATE-----Generated at Mon Mar 2 02:13:50 2026 by rpki-client