$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/A355C1A8B6D511F089793D6DC4F9AE02.roa File: A355C1A8B6D511F089793D6DC4F9AE02.roa (raw, json) Hash identifier: h0j3mf/tfCqfATi6s2p0ZWyH9rfUorcBAbjHkKVPs1E= Subject key identifier: AE:B7:66:D5:46:91:52:97:BA:C1:9E:9B:A9:58:FA:7F:BF:56:82:07 Certificate issuer: /CN=A91F8A49/serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85 Certificate serial: 01E3 Authority key identifier: D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/A355C1A8B6D511F089793D6DC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:19:02 +0000 ROA not before: Sat 01 Nov 2025 03:48:33 +0000 ROA not after: Tue 31 Oct 2028 00:00:00 +0000 asID: 134783 IP address blocks: 202.6.120.0/22 maxlen: 24 202.58.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:23:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 483 (0x1e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A49, serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85 Validity Not Before: Nov 1 03:48:33 2025 GMT Not After : Oct 31 00:00:00 2028 GMT Subject: CN=69a458e6-1dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a1:de:7c:d2:be:63:80:21:35:60:8e:5a:cd: 72:06:12:30:2b:e4:75:f1:1f:15:c8:bd:a2:eb:c5: 22:c7:51:c9:06:e9:86:42:9a:08:ea:d4:05:88:4d: 67:76:fd:7b:ce:f5:78:be:f0:75:ff:6e:fa:c5:37: 60:6a:ef:78:85:df:46:40:0d:23:c3:7c:47:00:c4: 46:34:e1:e9:19:4b:19:79:66:c3:a0:40:b7:7e:e8: 80:20:02:26:b1:6b:f5:d9:66:78:52:86:93:6d:b8: 63:09:08:ee:62:47:9d:5d:30:a6:91:29:06:90:32: 6e:5c:4a:89:ad:b6:84:2e:c0:76:a9:76:5f:94:30: c1:92:d2:6b:9c:9e:4f:b2:ff:32:03:6c:67:3c:f7: 69:09:3b:83:12:96:57:05:d1:17:d5:a1:61:a6:78: 99:24:05:e1:92:a1:3e:45:ad:48:f6:e3:fb:7f:8c: e8:be:9f:65:b7:32:02:e5:95:23:80:dd:6b:c8:f9: 1f:b9:86:63:72:c1:b2:41:aa:3f:12:98:66:a2:78: f8:44:28:f2:e6:7a:9a:41:af:89:38:22:b8:c0:94: 1c:e8:b6:f6:38:e3:71:17:16:ce:9f:c3:ae:85:24: 90:5f:da:24:05:0d:d3:51:8d:49:35:cb:ef:57:18: d5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B7:66:D5:46:91:52:97:BA:C1:9E:9B:A9:58:FA:7F:BF:56:82:07 X509v3 Authority Key Identifier: keyid:D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/A355C1A8B6D511F089793D6DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.6.120.0/22 202.58.248.0/22 Signature Algorithm: sha256WithRSAEncryption 65:c3:d4:17:ac:30:8b:fc:f2:08:bb:f1:45:22:3a:46:6a:8c: e0:c8:11:60:21:5d:f9:87:4f:f0:f6:eb:91:8d:9a:7e:6c:61: c6:d0:08:4e:f9:a7:8c:59:ed:71:46:5f:33:f9:86:e4:df:37: 82:f1:7e:93:a3:c0:df:d5:e0:85:32:70:9e:c2:97:a7:23:e4: 06:0b:3f:1a:e7:3a:fa:a8:87:d4:2c:ef:0e:bb:80:da:7a:4c: f0:2e:52:fd:61:d3:1c:47:31:3d:bc:e1:39:81:b3:72:78:68: 58:8d:d1:d0:79:d5:97:b7:53:db:7b:b6:94:b6:a5:ff:3d:be: 25:61:a5:51:27:7e:e0:b0:f4:fb:93:a9:e0:7c:ba:f4:4f:79: 40:58:37:20:82:19:0c:27:42:0f:17:f3:68:d5:69:d1:cd:4d: ad:b7:b1:56:a3:54:bb:95:d4:27:12:86:b5:69:eb:3f:90:61: 30:df:f4:3d:90:3a:58:17:0a:7f:f6:a6:48:0f:3e:fa:ee:43: 94:12:e3:05:5c:f6:1b:b6:52:af:38:ea:ba:ea:cc:cf:85:f7: 13:5e:e3:30:39:df:58:b6:db:82:7b:6a:94:3d:a5:1a:80:fa: 74:4a:9e:78:52:db:6b:d0:51:3d:7d:ed:b3:b5:53:70:4c:97: 8b:b2:08:94 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDkxMTAvBgNVBAUTKEQ1ODcxRTlGQzZGQkRFN0RDNzFCN0U4OTVDOEEwNEMz RDAwMjFEODUwHhcNMjUxMTAxMDM0ODMzWhcNMjgxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NThlNi0xZGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6HefNK+Y4AhNWCOWs1yBhIwK+R18R8VyL2i68Uix1HJBumGQpoI6tQFiE1n dv17zvV4vvB1/276xTdgau94hd9GQA0jw3xHAMRGNOHpGUsZeWbDoEC3fuiAIAIm sWv12WZ4UoaTbbhjCQjuYkedXTCmkSkGkDJuXEqJrbaELsB2qXZflDDBktJrnJ5P sv8yA2xnPPdpCTuDEpZXBdEX1aFhpniZJAXhkqE+Ra1I9uP7f4zovp9ltzIC5ZUj gN1ryPkfuYZjcsGyQao/Ephmonj4RCjy5nqaQa+JOCK4wJQc6Lb2OONxFxbOn8Ou hSSQX9okBQ3TUY1JNcvvVxjVPQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFK63ZtVG kVKXusGem6lY+n+/VoIHMB8GA1UdIwQYMBaAFNWHHp/G+959xxt+iVyKBMPQAh2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0OS80N0QwNDQ2NDQ3 QjcxMUVFOEEwQTlDNDNDNEY5QUUwMi8xWWNlbjhiNzNuM0hHMzZKWElvRXc5QUNI WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFZY2VuOGI3M24zSEczNkpYSW9FdzlBQ0hZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjhBNDkvNDdEMDQ0NjQ0N0I3MTFFRThBMEE5QzQzQzRGOUFFMDIvQTM1NUMxQThC NkQ1MTFGMDg5NzkzRDZEQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCygZ4AwQCyjr4MA0GCSqGSIb3DQEBCwUAA4IBAQBlw9QXrDCL/PII u/FFIjpGaozgyBFgIV35h0/w9uuRjZp+bGHG0AhO+aeMWe1xRl8z+Ybk3zeC8X6T o8Df1eCFMnCewpenI+QGCz8a5zr6qIfULO8Ou4DaekzwLlL9YdMcRzE9vOE5gbNy eGhYjdHQedWXt1Pbe7aUtqX/Pb4lYaVRJ37gsPT7k6ngfLr0T3lAWDcgghkMJ0IP F/No1WnRzU2tt7FWo1S7ldQnEoa1aes/kGEw3/Q9kDpYFwp/9qZIDz767kOUEuMF XPYbtlKvOOq66szPhfcTXuMwOd9YttuCe2qUPaUagPp0Sp54Uttr0FE9fe2ztVNw TJeLsgiU -----END CERTIFICATE-----Generated at Mon Mar 2 09:41:45 2026 by rpki-client