$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/28C73E085EC411F0AFDCEE52C4F9AE02.roa File: 28C73E085EC411F0AFDCEE52C4F9AE02.roa (raw, json) Hash identifier: E+w+5MHO8ewDddMwvBrrEc1lgQdxewrUq+QuhkdbY4w= Subject key identifier: E4:D9:1E:0C:1D:8E:A7:41:C2:9C:CF:32:36:60:7C:C0:13:A7:D1:5F Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Certificate serial: 19CF Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/28C73E085EC411F0AFDCEE52C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:50:43 +0000 ROA not before: Fri 20 Feb 2026 17:14:50 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 18037 IP address blocks: 27.106.200.0/22 maxlen: 22 203.89.64.0/19 maxlen: 19 203.89.67.0/24 maxlen: 24 203.89.73.0/24 maxlen: 24 203.89.90.0/24 maxlen: 24 203.89.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6607 (0x19cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Validity Not Before: Feb 20 17:14:50 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a48a83-16b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bf:12:13:15:20:3b:6b:a8:94:e2:ea:eb:58: bd:97:52:95:bd:01:b7:dd:bf:13:eb:b7:fe:9f:92: 78:5c:87:14:3a:b6:06:fa:74:28:00:bf:89:a2:e1: 4e:10:53:f9:87:a6:d7:e3:d6:6c:24:89:08:94:e9: cf:04:0c:8f:c0:d9:df:00:6f:02:42:71:32:10:e4: 9f:41:73:ae:7b:2b:de:a5:b2:3c:50:fd:04:3e:34: c1:e4:ec:33:90:73:34:e7:d3:e0:52:90:41:18:6a: ca:a4:c3:13:7f:ab:db:c0:8a:98:e4:36:64:30:ba: 44:88:c4:1a:27:95:86:2d:43:bd:8f:76:a2:89:4a: 35:ff:8d:6f:ef:56:db:70:49:65:98:bb:68:87:fa: cb:bb:fc:47:5b:3e:77:3f:de:f9:c5:e0:4c:f4:ee: 8a:3c:9b:4c:e2:d1:e0:0a:b0:9b:3f:b2:76:4b:ba: 34:55:41:e8:77:34:8e:e6:67:9f:5a:1d:39:b3:31: ee:3a:e0:71:1c:cf:73:37:98:5b:41:c3:7a:81:be: 94:fe:58:ad:e3:45:5f:97:cd:fb:ab:28:7c:7b:48: e9:fb:59:67:75:16:e8:64:5f:85:fd:e7:b2:c9:70: c1:78:19:be:6e:78:7d:7a:7d:88:7b:22:42:70:4c: 4c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D9:1E:0C:1D:8E:A7:41:C2:9C:CF:32:36:60:7C:C0:13:A7:D1:5F X509v3 Authority Key Identifier: keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/28C73E085EC411F0AFDCEE52C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.106.200.0/22 203.89.64.0/19 Signature Algorithm: sha256WithRSAEncryption 8b:f5:5f:a1:b5:f7:64:3a:7a:a3:4c:df:a5:4d:db:a1:e4:07: ba:2c:0a:0d:94:0c:e2:b0:de:9d:7b:c6:67:1a:0a:91:65:32: a1:5e:1e:4c:e6:85:a9:65:1b:24:24:72:e6:2c:8c:56:fa:a9: 7e:90:81:54:09:b5:ab:76:d5:b7:20:fd:07:28:1c:ca:c9:2a: ae:4c:79:b3:40:08:55:f3:d0:85:ea:7b:2f:e1:4f:99:38:ad: 97:c4:6e:c7:11:fb:ef:17:8d:a3:70:e4:68:34:69:8f:32:c0: 4f:b9:09:c3:da:0f:c2:35:e2:b4:9a:b4:27:b8:60:ac:17:da: ae:0b:1a:28:9c:a3:ac:78:49:f1:1b:a6:44:a5:a2:16:ed:82: 42:e7:09:38:ec:4d:7f:0e:0b:2b:67:ef:c9:0a:bb:86:9c:fc: 94:60:31:17:05:dc:52:00:1d:8f:5d:c0:75:3c:d1:21:9e:b9: ee:bb:3a:0d:7f:a2:51:59:1c:60:c2:3a:a8:42:97:2e:fd:ef: 3b:71:20:9d:0d:6a:73:2d:da:de:96:fd:7e:eb:58:06:7c:20: 6f:8e:6a:7c:e8:49:6d:de:9b:46:99:b7:3d:87:98:8c:d9:70: 89:d8:cc:d0:df:73:f8:6d:6e:9a:56:f8:7d:f5:a4:c3:51:d0: 65:3c:69:42 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICGc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFM0QxMTAvBgNVBAUTKEM3MjY5QjEyNEM0MjBDNTVFMjlGQjUxRDNDMUIwRDlE NDc2Q0JEMDAwHhcNMjYwMjIwMTcxNDUwWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGE4My0xNmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk78SExUgO2uolOLq61i9l1KVvQG33b8T67f+n5J4XIcUOrYG+nQoAL+JouFO EFP5h6bX49ZsJIkIlOnPBAyPwNnfAG8CQnEyEOSfQXOueyvepbI8UP0EPjTB5Owz kHM059PgUpBBGGrKpMMTf6vbwIqY5DZkMLpEiMQaJ5WGLUO9j3aiiUo1/41v71bb cEllmLtoh/rLu/xHWz53P975xeBM9O6KPJtM4tHgCrCbP7J2S7o0VUHodzSO5mef Wh05szHuOuBxHM9zN5hbQcN6gb6U/lit40Vfl837qyh8e0jp+1lndRboZF+F/eey yXDBeBm+bnh9en2IeyJCcExM6QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFOTZHgwd jqdBwpzPMjZgfMATp9FfMB8GA1UdIwQYMBaAFMcmmxJMQgxV4p+1HTwbDZ1HbL0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUzRC85N0I2RTBDRTc1 REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RGWGluN1VkUEJzTm5VZHN2 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h5YWJFa3hDREZYaW43VWRQQnNOblVkc3ZRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUFFM0QvOTdCNkUwQ0U3NURFMTFFOEI3MDRBMjQ2QzRGOUFFMDIvMjhDNzNFMDg1 RUM0MTFGMEFGRENFRTUyQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCG2rIAwQFy1lAMA0GCSqGSIb3DQEBCwUAA4IBAQCL9V+htfdkOnqj TN+lTduh5Ae6LAoNlAzisN6de8ZnGgqRZTKhXh5M5oWpZRskJHLmLIxW+ql+kIFU CbWrdtW3IP0HKBzKySquTHmzQAhV89CF6nsv4U+ZOK2XxG7HEfvvF42jcORoNGmP MsBPuQnD2g/CNeK0mrQnuGCsF9quCxoonKOseEnxG6ZEpaIW7YJC5wk47E1/Dgsr Z+/JCruGnPyUYDEXBdxSAB2PXcB1PNEhnrnuuzoNf6JRWRxgwjqoQpcu/e87cSCd DWpzLdrelv1+61gGfCBvjmp86Elt3ptGmbc9h5iM2XCJ2MzQ33P4bW6aVvh99aTD UdBlPGlC -----END CERTIFICATE-----Generated at Mon Mar 2 21:10:33 2026 by rpki-client