$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/64EF221EC29D11EBBAF29939C4F9AE02.roa File: 64EF221EC29D11EBBAF29939C4F9AE02.roa (raw, json) Hash identifier: LqR/UZmLsp/hlnh1P02a45elMJow2MTJH9+YtGc5TI4= Subject key identifier: 29:42:3F:BA:A0:1B:7C:77:0C:F1:F7:EA:6E:67:1D:A0:F7:A3:40:C9 Certificate issuer: /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Certificate serial: 0BB5 Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/64EF221EC29D11EBBAF29939C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:17:40 +0000 ROA not before: Wed 22 Oct 2025 04:09:19 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 132389 IP address blocks: 223.119.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2997 (0xbb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EECAF, serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Validity Not Before: Oct 22 04:09:19 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a482c3-b648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:90:62:19:0c:ca:d8:69:e8:76:ef:95:80:b8: fb:d3:91:01:eb:b0:7b:c6:06:27:cc:73:18:7c:89: 07:a4:02:03:81:49:44:64:5c:16:fe:e5:f6:2f:6f: 9e:51:5a:fa:70:c3:e2:6a:43:af:cc:ef:d3:e8:ff: af:41:5e:5f:9d:d6:57:4b:68:8d:d2:1e:5c:87:b6: 1b:5b:eb:67:3d:7b:98:6a:2f:1a:aa:96:b8:74:5a: 1e:08:9b:12:6c:15:86:86:b8:19:1e:cb:85:66:84: 99:63:2f:47:50:b7:71:c1:6d:24:02:8c:ef:00:e0: ce:fe:8e:de:7c:ff:b1:c8:6e:11:38:76:86:81:88: d1:66:81:d3:0f:56:be:37:40:93:51:bd:c1:76:32: 07:a7:84:2c:5c:07:a9:0f:26:61:71:d5:2f:00:5b: 1e:89:36:d7:f5:4e:a5:90:96:6e:c5:ab:50:8c:e2: 47:60:b8:39:9c:0a:6a:46:44:0d:ee:8c:e5:91:4a: 5e:10:05:82:60:21:98:68:e0:20:c7:31:92:8e:c7: 16:ad:0b:fb:fc:a6:21:ee:00:b5:25:b2:90:d9:7b: 4e:97:3f:bd:9b:d7:c2:1d:86:96:d2:9b:fd:2a:e9: 2a:08:f7:d7:d7:21:96:47:18:07:4b:fd:d6:fd:2d: ac:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:42:3F:BA:A0:1B:7C:77:0C:F1:F7:EA:6E:67:1D:A0:F7:A3:40:C9 X509v3 Authority Key Identifier: keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/64EF221EC29D11EBBAF29939C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 223.119.254.0/24 Signature Algorithm: sha256WithRSAEncryption 81:dd:44:ea:83:52:52:20:d4:c1:8c:ab:f7:5c:21:1f:f8:c5: 69:e2:03:54:df:40:90:df:9d:cb:3b:bc:3e:b5:38:ba:d8:97: 8f:69:01:f1:ae:73:6b:1a:5d:48:2d:19:42:ea:88:98:a7:d9: 60:d0:b8:df:3f:fc:c4:b8:0e:f3:fc:71:04:d4:9c:f7:df:54: b6:2f:5d:cb:69:68:07:34:66:de:b1:a3:e4:53:3b:23:d8:eb: 2c:ea:3d:93:dc:ad:a4:98:cd:4d:f6:2e:04:40:2e:92:30:41: ef:b4:0d:49:a6:d7:fb:01:71:65:47:19:ca:1b:29:32:ef:2b: af:64:47:9a:42:65:d3:b1:ee:16:6d:d1:57:79:b0:ea:9c:ee: bb:fe:ea:7e:16:31:3c:6b:ad:08:d7:03:eb:81:4e:ca:39:e3: 04:38:aa:55:1d:97:77:e9:97:4f:39:5d:60:c8:d3:53:65:e3: cb:e9:07:c9:c3:27:19:54:c1:ef:16:4e:17:fe:3a:a8:4b:16: 91:64:48:3e:24:9c:1d:0e:10:6f:f6:41:6a:c1:70:d4:4b:1e: ad:eb:0a:ef:26:41:e0:9c:20:12:a1:25:db:0f:d5:8a:7c:c6: 93:24:ef:61:e7:a4:12:30:43:16:32:ce:db:1e:ec:de:91:c3: 75:bc:e4:e4 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICC7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDQUYxMTAvBgNVBAUTKDZFQkQzQTI2OTc4NTEyM0FEQzNGNDk2NjM5QUVERkIx MEYzMEQ2MTgwHhcNMjUxMDIyMDQwOTE5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODJjMy1iNjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5JBiGQzK2Gnodu+VgLj705EB67B7xgYnzHMYfIkHpAIDgUlEZFwW/uX2L2+e UVr6cMPiakOvzO/T6P+vQV5fndZXS2iN0h5ch7YbW+tnPXuYai8aqpa4dFoeCJsS bBWGhrgZHsuFZoSZYy9HULdxwW0kAozvAODO/o7efP+xyG4ROHaGgYjRZoHTD1a+ N0CTUb3BdjIHp4QsXAepDyZhcdUvAFseiTbX9U6lkJZuxatQjOJHYLg5nApqRkQN 7ozlkUpeEAWCYCGYaOAgxzGSjscWrQv7/KYh7gC1JbKQ2XtOlz+9m9fCHYaW0pv9 KukqCPfX1yGWRxgHS/3W/S2sEQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFClCP7qg G3x3DPH36m5nHaD3o0DJMB8GA1UdIwQYMBaAFG69OiaXhRI63D9JZjmu37EPMNYY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUNBRi9FRUZERkVBNDVF QTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVqcmNQMGxtT2E3ZnNROHcx aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JyMDZKcGVGRWpyY1AwbG1PYTdmc1E4dzFoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUVDQUYvRUVGREZFQTQ1RUE3MTFFQUE1RTgzMTg0QzRGOUFFMDIvNjRFRjIyMUVD MjlEMTFFQkJBRjI5OTM5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQA33f+MA0GCSqGSIb3DQEBCwUAA4IBAQCB3UTqg1JSINTBjKv3XCEf +MVp4gNU30CQ353LO7w+tTi62JePaQHxrnNrGl1ILRlC6oiYp9lg0LjfP/zEuA7z /HEE1Jz331S2L13LaWgHNGbesaPkUzsj2Oss6j2T3K2kmM1N9i4EQC6SMEHvtA1J ptf7AXFlRxnKGyky7yuvZEeaQmXTse4WbdFXebDqnO67/up+FjE8a60I1wPrgU7K OeMEOKpVHZd36ZdPOV1gyNNTZePL6QfJwycZVMHvFk4X/jqoSxaRZEg+JJwdDhBv 9kFqwXDUSx6t6wrvJkHgnCASoSXbD9WKfMaTJO9h56QSMEMWMs7bHuzekcN1vOTk -----END CERTIFICATE-----Generated at Mon Mar 2 16:08:27 2026 by rpki-client