$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/EDA1B0D8A1CE11EDA692F359C4F9AE02.roa File: EDA1B0D8A1CE11EDA692F359C4F9AE02.roa (raw, json) Hash identifier: f0nSJ61GA5QPVsLKjddcC0wfT/tT/FK1nC1PrxX8MeQ= Subject key identifier: 3A:02:E4:42:5A:00:73:40:FA:DC:FA:B0:22:77:27:16:D4:17:C1:D1 Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Certificate serial: 289C Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/EDA1B0D8A1CE11EDA692F359C4F9AE02.roa Signing time: Tue 31 Mar 2026 16:19:50 +0000 ROA not before: Tue 31 Mar 2026 16:19:50 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 14499 IP address blocks: 27.110.129.0/24 maxlen: 24 122.55.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10396 (0x289c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Validity Not Before: Mar 31 16:19:50 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69cbf426-e2d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:8c:c8:66:d9:63:5a:47:6a:99:37:77:fc:30: 36:7d:8d:c6:0a:d8:2e:85:5b:6f:3c:62:4c:bc:76: 33:17:fb:5a:50:5b:42:01:53:38:bd:9a:2b:f4:c3: 81:60:c8:e2:3b:7d:da:d5:31:3c:cd:fb:ab:a0:73: 36:19:a0:90:60:18:ab:7d:8f:eb:fa:2f:6a:84:1b: e0:11:51:d3:61:e0:b1:c4:8d:ce:b1:95:d9:54:e7: cb:10:07:c1:5d:f2:f4:72:26:dd:69:38:27:e5:0b: 73:1a:95:27:52:bb:2a:e8:ea:4c:75:0a:e8:63:7e: 15:d5:95:57:6f:b3:5e:5e:a5:14:5a:d2:35:a4:2e: 66:1a:87:63:b9:43:36:e4:49:56:90:52:d4:da:33: dc:bb:80:4d:c6:2b:1f:d1:b1:1d:50:9c:4e:71:4a: e3:6d:ce:04:a9:9e:bc:1f:cc:99:fc:9b:d4:89:f6: 19:b9:5e:2a:dd:0f:30:6b:c3:63:35:0f:ae:6c:37: ae:74:f5:3a:f8:49:28:e9:27:c9:97:06:51:3d:2f: e0:49:12:32:5e:62:cd:3c:89:da:0c:a0:28:2c:e3: 42:70:2b:f3:89:0d:ed:a5:8a:2f:6f:e1:1f:06:65: 4b:91:60:4a:52:ca:88:85:65:8e:76:15:6b:c2:ea: 2a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:02:E4:42:5A:00:73:40:FA:DC:FA:B0:22:77:27:16:D4:17:C1:D1 X509v3 Authority Key Identifier: keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/EDA1B0D8A1CE11EDA692F359C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.110.129.0/24 122.55.92.0/24 Signature Algorithm: sha256WithRSAEncryption 39:9b:bd:0f:3e:86:06:81:d2:b7:97:d0:2a:84:4e:db:c3:ee: a1:0a:66:8d:cd:cf:cb:30:a6:22:dd:ee:a4:4c:d2:0d:2d:24: 45:03:85:fb:53:db:2f:ea:29:20:f2:90:db:8e:7f:b9:c0:cd: f6:6c:1d:a5:2c:a9:b8:cc:1d:94:91:10:32:2b:06:72:e2:13: 78:bc:d1:d3:c8:67:85:0d:76:d1:fd:15:47:8e:04:23:bc:86: ed:f1:b4:ee:cf:b7:91:6c:a0:4a:98:4f:05:7e:b3:11:8a:a6: 07:cc:6e:c5:72:b8:a6:be:b5:98:c1:87:94:61:fc:1e:f6:61: 46:b2:b1:05:6b:72:93:9a:63:24:ff:e8:91:ef:66:bc:f7:91: ba:4e:21:56:29:12:cc:df:03:73:62:62:e1:6b:8a:c2:ab:b9: f3:4b:78:9e:eb:97:8c:a1:62:e9:a1:fa:82:a3:17:91:cc:60: c9:72:c1:dd:b6:a6:61:86:08:a5:4d:fa:e3:44:7e:5f:38:e6: 5f:de:59:db:62:61:e4:d5:a8:5c:98:2d:f0:0f:e0:22:9b:67: cd:83:a7:0a:8c:f2:db:9f:78:63:9d:12:fb:75:34:23:e5:c6: e9:d3:0e:6d:c4:3f:ce:8d:35:89:65:5a:46:e0:62:7e:3c:f1: f5:e0:7e:7a -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICKJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUyNkRCREVGMUIw NDU5MjhBQjgwHhcNMjYwMzMxMTYxOTUwWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWNiZjQyNi1lMmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+IzIZtljWkdqmTd3/DA2fY3GCtguhVtvPGJMvHYzF/taUFtCAVM4vZor9MOB YMjiO33a1TE8zfuroHM2GaCQYBirfY/r+i9qhBvgEVHTYeCxxI3OsZXZVOfLEAfB XfL0cibdaTgn5QtzGpUnUrsq6OpMdQroY34V1ZVXb7NeXqUUWtI1pC5mGodjuUM2 5ElWkFLU2jPcu4BNxisf0bEdUJxOcUrjbc4EqZ68H8yZ/JvUifYZuV4q3Q8wa8Nj NQ+ubDeudPU6+Eko6SfJlwZRPS/gSRIyXmLNPInaDKAoLONCcCvziQ3tpYovb+Ef BmVLkWBKUsqIhWWOdhVrwuoqbQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFDoC5EJa AHNA+tz6sCJ3JxbUF8HRMB8GA1UdIwQYMBaAFF0t0VS13OIft4bFJtve8bBFkoq4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkI3MC8yOTgzNjQ3Qzgz OEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRoLTNoc1VtMjk3eHNFV1Np cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hTM1JWTFhjNGgtM2hzVW0yOTd4c0VXU2lyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REZCNzAvMjk4MzY0N0M4MzhGMTFFNTg2RkM1ODEyQzRGOUFFMDIvRURBMUIwRDhB MUNFMTFFREE2OTJGMzU5QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAG26BAwQAejdcMA0GCSqGSIb3DQEBCwUAA4IBAQA5m70PPoYGgdK3 l9AqhE7bw+6hCmaNzc/LMKYi3e6kTNINLSRFA4X7U9sv6ikg8pDbjn+5wM32bB2l LKm4zB2UkRAyKwZy4hN4vNHTyGeFDXbR/RVHjgQjvIbt8bTuz7eRbKBKmE8FfrMR iqYHzG7FcrimvrWYwYeUYfwe9mFGsrEFa3KTmmMk/+iR72a895G6TiFWKRLM3wNz YmLha4rCq7nzS3ie65eMoWLpofqCoxeRzGDJcsHdtqZhhgilTfrjRH5fOOZf3lnb YmHk1ahcmC3wD+Aim2fNg6cKjPLbn3hjnRL7dTQj5cbp0w5txD/OjTWJZVpG4GJ+ PPH14H56 -----END CERTIFICATE-----Generated at Fri Apr 17 15:27:11 2026 by rpki-client