$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/A6C3D8721A9711EC88A50A2CC4F9AE02.roa File: A6C3D8721A9711EC88A50A2CC4F9AE02.roa (raw, json) Hash identifier: yCevESXrLM/arIFe29tQpXXUhc2PnmHIoYfM9qzJyOM= Subject key identifier: 1B:E6:E1:DB:BA:A5:16:BC:7A:EB:97:92:E7:7B:0A:A6:89:CE:F6:6E Certificate issuer: /CN=A91EA623/serialNumber=6CC3860DA987783A50055A51939830F7CD1C826B Certificate serial: 05BF Authority key identifier: 6C:C3:86:0D:A9:87:78:3A:50:05:5A:51:93:98:30:F7:CD:1C:82:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/A6C3D8721A9711EC88A50A2CC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:48:23 +0000 ROA not before: Wed 28 Jan 2026 23:19:31 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 4058 IP address blocks: 202.66.206.0/24 maxlen: 24 202.66.207.0/24 maxlen: 24 202.76.86.0/24 maxlen: 24 202.80.14.0/24 maxlen: 24 202.80.15.0/24 maxlen: 24 202.88.8.0/22 maxlen: 24 202.88.20.0/24 maxlen: 24 202.88.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.crl rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:51:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1471 (0x5bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA623, serialNumber=6CC3860DA987783A50055A51939830F7CD1C826B Validity Not Before: Jan 28 23:19:31 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a47be7-8b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0f:9f:92:0a:69:9a:55:36:cc:5a:b0:3f:dd: 42:1f:2f:df:39:57:be:35:6c:a7:b2:2c:8b:a3:66: 0d:04:61:0b:79:f6:f6:15:e6:4c:a5:ae:40:b3:ed: 7f:17:90:62:5d:5e:65:e4:1a:91:f6:40:2b:d5:67: 75:80:42:83:8c:e9:d1:88:20:01:d4:a2:02:4c:d0: b5:0a:f2:0f:88:97:94:9f:0b:af:1a:a8:43:52:35: 6d:a8:6f:e9:b5:07:f3:3e:ed:45:3f:12:a1:2d:a4: bc:b1:cb:c2:ba:40:ff:95:0b:ea:09:e0:73:3b:81: 02:f5:95:fc:6e:a7:38:dc:9d:38:4d:1a:78:30:8d: 12:ae:fb:50:26:3d:07:af:f1:3d:90:de:1c:17:16: 54:3a:f2:96:aa:da:f5:0a:b6:b7:be:45:c1:29:2d: 43:6d:e6:1b:26:d8:70:ce:58:0d:0b:cc:0f:97:ab: 86:d3:0b:2f:9e:4c:51:e2:61:46:53:af:cc:6c:9c: bb:63:ea:55:3d:03:bd:98:2a:67:f1:17:24:88:f6: 8c:f4:86:07:f7:fb:1e:8e:2a:49:57:d5:f3:cf:d9: ee:f4:db:bf:e3:6d:2d:dc:54:f7:76:70:03:6c:d1: 45:f4:52:93:47:57:66:e3:0c:3e:65:30:54:46:43: 4e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E6:E1:DB:BA:A5:16:BC:7A:EB:97:92:E7:7B:0A:A6:89:CE:F6:6E X509v3 Authority Key Identifier: keyid:6C:C3:86:0D:A9:87:78:3A:50:05:5A:51:93:98:30:F7:CD:1C:82:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/A6C3D8721A9711EC88A50A2CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.66.206.0/23 202.76.86.0/24 202.80.14.0/23 202.88.8.0/22 202.88.20.0/24 202.88.22.0/24 Signature Algorithm: sha256WithRSAEncryption 15:ca:ac:aa:a4:08:00:c8:6d:55:d2:e4:09:d6:bf:8d:f2:46: c2:d0:cd:52:c7:10:1e:a6:2b:6a:a2:4f:b6:39:62:c5:69:e2: 91:da:f5:87:ce:ef:b0:4c:74:a2:63:b0:b4:4c:50:0d:ea:1c: 19:1e:4d:e4:7b:5c:1e:af:eb:02:7a:38:03:a9:66:2b:e0:66: 91:30:fc:bc:84:79:1c:55:93:99:97:c1:33:d8:e3:d9:af:15: 37:41:9a:af:4b:10:32:5b:9b:06:04:26:86:d4:ea:20:51:21: 74:3f:6a:fc:5e:36:6c:99:c6:a9:85:05:21:6f:5c:9e:d8:f7: 84:64:01:76:17:92:f4:c1:ec:9c:f0:7c:c1:33:42:a1:03:07: 09:5c:57:21:b4:8e:ab:c0:99:b0:75:9a:8d:7e:05:50:f8:8b: 53:1e:9b:dd:4d:0b:f6:ee:00:d9:58:b8:0f:06:be:aa:6f:41: 5f:5f:48:80:50:19:ec:e8:7d:e2:5e:79:00:ae:ea:84:55:be: b4:d6:27:fd:7b:e2:15:ed:0b:1f:a9:7d:ce:e0:aa:19:bf:55: f1:6f:2a:da:88:59:9a:bd:ee:ad:bc:5e:75:b2:0e:db:34:4b: bc:c4:08:07:be:b4:b4:49:9d:47:fe:f9:db:e7:e0:be:dd:ce: 62:a3:c3:42 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICBb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE2MjMxMTAvBgNVBAUTKDZDQzM4NjBEQTk4Nzc4M0E1MDA1NUE1MTkzOTgzMEY3 Q0QxQzgyNkIwHhcNMjYwMTI4MjMxOTMxWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2JlNy04YjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQ+fkgppmlU2zFqwP91CHy/fOVe+NWynsiyLo2YNBGELefb2FeZMpa5As+1/ F5BiXV5l5BqR9kAr1Wd1gEKDjOnRiCAB1KICTNC1CvIPiJeUnwuvGqhDUjVtqG/p tQfzPu1FPxKhLaS8scvCukD/lQvqCeBzO4EC9ZX8bqc43J04TRp4MI0SrvtQJj0H r/E9kN4cFxZUOvKWqtr1Cra3vkXBKS1DbeYbJthwzlgNC8wPl6uG0wsvnkxR4mFG U6/MbJy7Y+pVPQO9mCpn8RckiPaM9IYH9/sejipJV9Xzz9nu9Nu/420t3FT3dnAD bNFF9FKTR1dm4ww+ZTBURkNOAQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFBvm4du6 pRa8euuXkud7CqaJzvZuMB8GA1UdIwQYMBaAFGzDhg2ph3g6UAVaUZOYMPfNHIJr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTYyMy9ERDZCNzUyODA2 MEMxMUVDQUY2NzUwNDNDNEY5QUUwMi9iTU9HRGFtSGVEcFFCVnBSazVndzk4MGNn bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JNT0dEYW1IZURwUUJWcFJrNWd3OTgwY2dtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUE2MjMvREQ2Qjc1MjgwNjBDMTFFQ0FGNjc1MDQzQzRGOUFFMDIvQTZDM0Q4NzIx QTk3MTFFQzg4QTUwQTJDQzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAq BAIAATAkAwQBykLOAwQAykxWAwQBylAOAwQCylgIAwQAylgUAwQAylgWMA0GCSqG SIb3DQEBCwUAA4IBAQAVyqyqpAgAyG1V0uQJ1r+N8kbC0M1SxxAepitqok+2OWLF aeKR2vWHzu+wTHSiY7C0TFAN6hwZHk3ke1wer+sCejgDqWYr4GaRMPy8hHkcVZOZ l8Ez2OPZrxU3QZqvSxAyW5sGBCaG1OogUSF0P2r8XjZsmcaphQUhb1ye2PeEZAF2 F5L0weyc8HzBM0KhAwcJXFchtI6rwJmwdZqNfgVQ+ItTHpvdTQv27gDZWLgPBr6q b0FfX0iAUBns6H3iXnkAruqEVb601if9e+IV7QsfqX3O4KoZv1XxbyraiFmave6t vF51sg7bNEu8xAgHvrS0SZ1H/vnb5+C+3c5io8NC -----END CERTIFICATE-----Generated at Mon Mar 2 03:43:25 2026 by rpki-client