$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/2C0D015EABA211EAB7C51982C4F9AE02.roa File: 2C0D015EABA211EAB7C51982C4F9AE02.roa (raw, json) Hash identifier: OXnUP/JG3w1yEFtXRtB3EemUPot6EKdNnxfAnstSIjI= Subject key identifier: 7F:41:44:E8:C3:49:D8:38:98:09:F4:E0:A1:8C:F6:6C:D6:B2:8B:84 Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Certificate serial: 19CB Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/2C0D015EABA211EAB7C51982C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:50:39 +0000 ROA not before: Fri 20 Feb 2026 17:14:46 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 132433 IP address blocks: 121.54.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6603 (0x19cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Validity Not Before: Feb 20 17:14:46 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a48a7f-f1bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3f:99:19:03:66:1d:6b:e5:5f:69:32:95:91: a7:6c:d7:ba:33:58:66:e0:ea:8c:c6:d8:e2:fb:ac: af:50:7b:37:dd:7f:e3:be:3d:c9:0e:ef:04:0a:51: 70:c2:1d:6b:c9:d9:ae:f3:30:c3:e6:a8:f4:1c:f5: d4:50:3d:4e:2b:2d:1a:b8:b9:ca:5b:0e:c6:ac:2f: 8d:fb:57:29:7e:ae:5c:f0:19:c6:76:c2:b6:89:f3: 99:1a:b6:0c:68:0b:4a:71:cb:c8:ad:7e:33:59:3f: 57:b4:89:29:1a:f7:fb:b7:2c:71:c1:cc:bb:77:1a: 2b:e5:68:03:11:8b:97:12:3f:70:f7:1b:9f:22:39: 19:e6:be:be:f1:80:44:87:ce:4c:22:03:92:61:91: 42:27:a7:41:81:cd:14:d9:9f:ff:a0:89:cd:cf:45: 74:f8:27:cd:47:a0:fb:d3:75:fa:f2:83:91:f5:2d: aa:f0:48:5d:17:2d:52:7f:a2:58:0b:bb:3a:ff:81: 6e:86:72:47:2b:4d:1c:2a:6e:95:b6:d5:39:c5:70: e4:f5:d4:33:62:60:49:0c:cc:a4:67:c8:ad:ba:24: 14:bf:53:39:de:9e:03:31:14:fc:ca:ea:e8:23:0e: cd:7f:17:a9:11:33:a0:70:c3:63:7d:78:fc:6f:d1: 7e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:41:44:E8:C3:49:D8:38:98:09:F4:E0:A1:8C:F6:6C:D6:B2:8B:84 X509v3 Authority Key Identifier: keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/2C0D015EABA211EAB7C51982C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 121.54.140.0/24 Signature Algorithm: sha256WithRSAEncryption 95:83:1b:98:52:12:35:75:fa:28:15:ec:de:c1:a8:6a:4a:c5: 30:7f:c4:75:cc:f2:6f:d4:cc:e5:72:5b:23:78:a5:f8:75:b0: b3:94:27:56:50:27:1f:42:c6:c5:d2:a7:c5:6e:7a:6b:37:60: c2:06:f5:63:42:8f:25:8f:5d:c3:e0:fc:65:1d:c2:30:8b:4f: 00:3d:7d:49:f8:37:5a:d4:2d:5b:93:d5:2e:27:0c:82:b6:88: 61:59:fb:06:33:ae:0a:bd:91:99:82:f4:6d:1c:f2:4d:5a:3f: 53:bc:ea:e4:d9:07:09:e7:36:4d:91:07:af:63:e6:ec:64:b5: 2f:e5:9c:74:aa:5f:a5:bc:81:33:40:f1:9d:e1:16:5b:e0:ac: f2:63:93:9f:d7:97:ed:b4:74:1f:27:29:3c:3b:00:69:b1:58: 00:18:b4:fe:0e:39:20:9b:3d:90:c5:60:d4:f1:28:de:a5:01: fe:29:c4:76:79:6a:f9:1e:cb:49:af:f0:43:bd:11:ab:e2:f4: e5:63:40:4c:9e:ef:88:9f:fd:8a:6d:e8:03:ca:5d:b7:65:b9: 61:f5:98:d4:b2:9f:e7:23:58:84:60:72:ec:45:0e:9b:f4:37: 49:38:d0:fb:72:d7:37:88:fa:5e:cb:fa:70:49:ba:8a:6c:89: cb:07:54:44 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICGcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFM0QxMTAvBgNVBAUTKEM3MjY5QjEyNEM0MjBDNTVFMjlGQjUxRDNDMUIwRDlE NDc2Q0JEMDAwHhcNMjYwMjIwMTcxNDQ2WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGE3Zi1mMWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6j+ZGQNmHWvlX2kylZGnbNe6M1hm4OqMxtji+6yvUHs33X/jvj3JDu8EClFw wh1rydmu8zDD5qj0HPXUUD1OKy0auLnKWw7GrC+N+1cpfq5c8BnGdsK2ifOZGrYM aAtKccvIrX4zWT9XtIkpGvf7tyxxwcy7dxor5WgDEYuXEj9w9xufIjkZ5r6+8YBE h85MIgOSYZFCJ6dBgc0U2Z//oInNz0V0+CfNR6D703X68oOR9S2q8EhdFy1Sf6JY C7s6/4FuhnJHK00cKm6VttU5xXDk9dQzYmBJDMykZ8ituiQUv1M53p4DMRT8yuro Iw7NfxepETOgcMNjfXj8b9F+AwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFH9BROjD Sdg4mAn04KGM9mzWsouEMB8GA1UdIwQYMBaAFMcmmxJMQgxV4p+1HTwbDZ1HbL0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUzRC85N0I2RTBDRTc1 REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RGWGluN1VkUEJzTm5VZHN2 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h5YWJFa3hDREZYaW43VWRQQnNOblVkc3ZRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUFFM0QvOTdCNkUwQ0U3NURFMTFFOEI3MDRBMjQ2QzRGOUFFMDIvMkMwRDAxNUVB QkEyMTFFQUI3QzUxOTgyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAeTaMMA0GCSqGSIb3DQEBCwUAA4IBAQCVgxuYUhI1dfooFezewahq SsUwf8R1zPJv1MzlclsjeKX4dbCzlCdWUCcfQsbF0qfFbnprN2DCBvVjQo8lj13D 4PxlHcIwi08APX1J+Dda1C1bk9UuJwyCtohhWfsGM64KvZGZgvRtHPJNWj9TvOrk 2QcJ5zZNkQevY+bsZLUv5Zx0ql+lvIEzQPGd4RZb4KzyY5Of15fttHQfJyk8OwBp sVgAGLT+Djkgmz2QxWDU8SjepQH+KcR2eWr5HstJr/BDvRGr4vTlY0BMnu+In/2K begDyl23Zblh9ZjUsp/nI1iEYHLsRQ6b9DdJOND7ctc3iPpey/pwSbqKbInLB1RE -----END CERTIFICATE-----Generated at Mon Mar 2 17:41:15 2026 by rpki-client