$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/292A3CF0376511F0A9D2D035C4F9AE02.roa File: 292A3CF0376511F0A9D2D035C4F9AE02.roa (raw, json) Hash identifier: LfCoz7Dnyj7tBchjned94Fjoj2Azlhk3SF6mzP2Fido= Subject key identifier: E2:1C:DD:26:B9:9E:57:3A:DA:2F:2C:7D:1F:AA:98:73:C4:30:6C:66 Certificate issuer: /CN=A91E7FA1/serialNumber=FDE0D8AC88DBFC6ADE67DFFF5A3AC2EF266C5CDC Certificate serial: AC Authority key identifier: FD:E0:D8:AC:88:DB:FC:6A:DE:67:DF:FF:5A:3A:C2:EF:26:6C:5C:DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/292A3CF0376511F0A9D2D035C4F9AE02.roa Signing time: Tue 31 Mar 2026 07:46:09 +0000 ROA not before: Tue 31 Mar 2026 07:46:09 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 1221 IP address blocks: 203.3.100.0/24 maxlen: 24 203.3.101.0/24 maxlen: 24 203.3.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.crl rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7FA1, serialNumber=FDE0D8AC88DBFC6ADE67DFFF5A3AC2EF266C5CDC Validity Not Before: Mar 31 07:46:09 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69cb7bc1-de26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:29:49:01:3f:72:75:31:6b:a2:b3:29:2a:ff: 80:5e:2b:b9:db:54:95:ee:e9:d6:29:59:f8:58:83: d1:42:5d:fa:14:97:de:b9:22:53:0f:86:01:b7:00: d0:77:e1:be:28:e7:bd:9e:9d:ab:df:57:01:b6:8c: 6c:50:9f:d0:e1:1d:d4:40:0b:d6:08:80:3c:74:1b: 18:77:48:c9:b2:1e:ed:6a:ab:f2:f8:b7:40:f3:68: 19:e1:c4:db:b9:f0:cb:56:f1:ee:c1:8b:b3:69:f2: 7a:22:34:7d:f5:00:a0:2d:16:9d:10:16:d1:0e:72: cc:da:7d:6b:aa:03:cc:9c:2c:22:0e:4f:8c:dd:78: 95:9f:20:9b:9e:78:01:d7:87:84:eb:49:b4:52:02: 87:04:bc:20:47:a7:96:2c:bc:e7:51:3f:cc:95:2b: 22:ce:56:9d:84:9f:9d:43:e0:ec:7a:87:a6:40:6d: 72:3c:95:b5:1c:59:9b:4e:1a:41:47:e1:bf:9f:36: e4:c5:83:5b:b2:15:88:40:78:54:57:3f:f5:72:63: 38:65:04:3d:29:cb:fc:16:16:4c:4c:81:44:02:11: 77:eb:1d:ef:1c:6a:87:62:eb:2a:ea:2d:4f:39:70: 24:db:92:9c:28:19:51:ff:c3:c5:14:73:e5:8b:e7: ca:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:1C:DD:26:B9:9E:57:3A:DA:2F:2C:7D:1F:AA:98:73:C4:30:6C:66 X509v3 Authority Key Identifier: keyid:FD:E0:D8:AC:88:DB:FC:6A:DE:67:DF:FF:5A:3A:C2:EF:26:6C:5C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/292A3CF0376511F0A9D2D035C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.3.100.0-203.3.102.255 Signature Algorithm: sha256WithRSAEncryption 0e:d7:ba:91:a3:1f:7d:ec:58:b3:62:1b:db:88:41:54:b7:ab: 6d:2e:ee:e2:a4:e5:2f:cd:06:46:ae:a7:9e:f9:0f:fe:6e:b0: fa:23:c6:09:8e:94:23:12:d2:dd:ee:03:6d:24:e9:ff:97:45: 43:0a:a3:2f:47:85:1e:8e:85:c6:3c:8c:44:1b:b0:ff:20:8c: 8b:b6:71:a1:c9:6b:e3:87:be:b0:3a:42:4a:07:e3:10:59:3e: 1f:5c:9a:20:8e:ff:f6:a3:b3:70:7f:67:81:2f:85:11:56:df: 2f:5a:da:7d:15:52:6e:b0:f6:8c:f6:8c:9d:b7:2a:ac:85:d3: 21:55:b1:dc:c0:0f:dd:55:4b:c6:82:10:6f:16:98:e2:98:60: 67:49:68:b0:62:1a:7c:04:0f:17:ca:b0:cf:af:3f:c4:13:ab: 05:b9:e4:9c:2d:34:bb:ca:36:af:15:77:e7:61:57:44:06:cd: 85:bd:4d:49:d9:63:9d:51:ad:f3:a6:07:f8:be:61:a5:3b:2e: 57:90:b9:80:29:bb:53:4c:aa:78:74:c4:d1:47:b7:9d:74:04: 3d:3c:f8:ce:4a:b0:d4:c4:3d:79:03:f2:17:3e:a7:0c:c6:4b: f9:68:a7:76:ed:46:14:ad:1b:79:16:ef:5b:fd:c2:b4:c4:65: 47:9d:3b:89 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdGQTExMTAvBgNVBAUTKEZERTBEOEFDODhEQkZDNkFERTY3REZGRjVBM0FDMkVG MjY2QzVDREMwHhcNMjYwMzMxMDc0NjA5WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWNiN2JjMS1kZTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlilJAT9ydTFrorMpKv+AXiu521SV7unWKVn4WIPRQl36FJfeuSJTD4YBtwDQ d+G+KOe9np2r31cBtoxsUJ/Q4R3UQAvWCIA8dBsYd0jJsh7taqvy+LdA82gZ4cTb ufDLVvHuwYuzafJ6IjR99QCgLRadEBbRDnLM2n1rqgPMnCwiDk+M3XiVnyCbnngB 14eE60m0UgKHBLwgR6eWLLznUT/MlSsizladhJ+dQ+DseoemQG1yPJW1HFmbThpB R+G/nzbkxYNbshWIQHhUVz/1cmM4ZQQ9Kcv8FhZMTIFEAhF36x3vHGqHYusq6i1P OXAk25KcKBlR/8PFFHPli+fK4wIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFOIc3Sa5 nlc62i8sfR+qmHPEMGxmMB8GA1UdIwQYMBaAFP3g2KyI2/xq3mff/1o6wu8mbFzc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0ZBMS9CRjkwNzRFMjJG QTAxMUYwOEEwNkMwNTdDNEY5QUUwMi9fZURZcklqYl9HcmVaOV9fV2pyQzd5WnNY TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19lRFlySWpiX0dyZVo5X19XanJDN3lac1hOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTdGQTEvQkY5MDc0RTIyRkEwMTFGMDhBMDZDMDU3QzRGOUFFMDIvMjkyQTNDRjAz NzY1MTFGMEE5RDJEMDM1QzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBALLA2QDBADLA2YwDQYJKoZIhvcNAQELBQADggEBAA7XupGjH33s WLNiG9uIQVS3q20u7uKk5S/NBkaup575D/5usPojxgmOlCMS0t3uA20k6f+XRUMK oy9HhR6OhcY8jEQbsP8gjIu2caHJa+OHvrA6QkoH4xBZPh9cmiCO//ajs3B/Z4Ev hRFW3y9a2n0VUm6w9oz2jJ23KqyF0yFVsdzAD91VS8aCEG8WmOKYYGdJaLBiGnwE DxfKsM+vP8QTqwW55JwtNLvKNq8Vd+dhV0QGzYW9TUnZY51RrfOmB/i+YaU7LleQ uYApu1NMqnh0xNFHt510BD08+M5KsNTEPXkD8hc+pwzGS/lop3btRhStG3kW71v9 wrTEZUedO4k= -----END CERTIFICATE-----Generated at Fri Apr 17 16:18:36 2026 by rpki-client