$ rpki-client -vvf rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/8CBE17540BCF11EF80BE8E0CC4F9AE02.roa File: 8CBE17540BCF11EF80BE8E0CC4F9AE02.roa (raw, json) Hash identifier: v9b/yGtqVwFD8gxkWfJo/P1ZI/EvbUBmOLRUxAaLNxY= Subject key identifier: 67:EC:5B:19:36:63:52:13:91:65:4B:AA:2F:8D:DA:15:ED:18:F3:B2 Certificate issuer: /CN=A91203EB/serialNumber=2F265B0C802473094926890A85124E21B109DA3C Certificate serial: 06D3 Authority key identifier: 2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/8CBE17540BCF11EF80BE8E0CC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:46:53 +0000 ROA not before: Sat 10 May 2025 22:22:49 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 394089 IP address blocks: 114.141.120.0/24 maxlen: 24 114.141.121.0/24 maxlen: 24 114.141.122.0/24 maxlen: 24 114.141.123.0/24 maxlen: 24 114.141.124.0/24 maxlen: 24 114.141.125.0/24 maxlen: 24 114.141.126.0/24 maxlen: 24 114.141.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:58:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1747 (0x6d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203EB, serialNumber=2F265B0C802473094926890A85124E21B109DA3C Validity Not Before: May 10 22:22:49 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a40b0d-df56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:53:79:16:9b:5d:9f:17:0a:92:e2:13:64:09: 58:eb:51:0e:a0:56:44:92:12:c1:f9:14:8f:23:30: 62:56:63:7a:8c:ce:dc:8f:c7:7a:b6:fb:08:47:16: 5d:81:04:f0:4e:dc:2d:c8:c4:66:fd:7d:3a:09:fa: 07:18:15:5b:91:e5:cc:97:f3:22:49:5c:39:d8:e4: 3a:23:00:ad:38:83:0c:2c:14:7f:99:1d:b8:ed:a3: 3f:3f:ef:a8:73:f3:19:35:cc:da:4e:8e:00:80:39: f2:52:29:f4:52:85:8e:82:e1:e8:b9:95:1c:eb:4d: e5:38:ce:ab:30:2a:0d:4c:8a:64:ee:d4:94:b7:52: dc:94:af:40:44:6a:ed:42:79:f6:f3:05:24:99:62: 89:16:80:cf:08:0a:3b:3d:d3:e1:5e:4c:21:32:89: e3:7a:2c:69:d5:23:b7:6a:70:73:bc:42:53:b8:7d: b9:b7:c9:83:31:e2:83:dd:62:32:d0:18:40:9a:b5: 39:c4:79:fe:f8:d8:1c:ba:04:a0:58:fc:ed:aa:cb: 85:ed:0b:f2:0d:c0:95:7c:d0:2f:22:19:12:35:be: 2b:21:95:b5:20:e0:61:fc:1a:81:93:78:d2:15:93: 97:08:26:88:d5:01:26:60:22:d4:a0:78:08:4d:d8: dc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:EC:5B:19:36:63:52:13:91:65:4B:AA:2F:8D:DA:15:ED:18:F3:B2 X509v3 Authority Key Identifier: keyid:2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/8CBE17540BCF11EF80BE8E0CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 114.141.120.0/21 Signature Algorithm: sha256WithRSAEncryption 57:01:39:7b:95:d2:7a:70:48:d2:74:d7:84:42:ec:2a:88:79: f7:b7:f8:01:8e:ab:86:45:ae:26:f4:f2:41:18:17:5b:79:99: b4:5c:d2:82:c6:c7:d4:b7:8a:3c:ed:ae:23:fd:1c:ae:f7:9c: 47:8d:94:66:ab:44:c9:f6:cc:95:68:7f:4b:f7:d3:74:bf:8c: 66:0c:6a:ae:72:6f:82:b0:91:0a:9c:9b:95:c9:d7:fa:80:4d: 31:e1:8a:9e:3b:b9:29:37:69:88:d9:aa:8b:47:07:2e:96:a5: 73:8a:cf:e2:2b:f5:10:9e:5d:cc:d3:46:c0:91:19:0b:be:e0: 05:4a:6a:3f:24:27:05:f7:4c:64:bf:76:e1:0d:40:cc:2f:87: bf:b1:86:24:01:0a:08:c2:ce:22:5d:3b:7f:ea:53:81:ef:7d: 7a:d7:03:17:46:7a:c4:87:80:db:f1:14:1f:d8:e1:e0:8f:af: f9:16:34:9a:40:d6:7a:04:65:dd:f1:ea:46:ca:46:ef:de:91: ff:09:29:1c:c6:b4:2d:aa:79:4d:fc:66:6d:fc:6f:00:0b:ae: 4f:d7:a2:80:ca:af:ea:9f:40:bc:76:f7:84:2f:a6:f0:85:d3: d4:4e:77:a7:b0:47:69:39:e4:6c:7a:a6:a4:8b:c5:23:a0:07: 3f:7d:c7:27 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzRUIxMTAvBgNVBAUTKDJGMjY1QjBDODAyNDczMDk0OTI2ODkwQTg1MTI0RTIx QjEwOURBM0MwHhcNMjUwNTEwMjIyMjQ5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGIwZC1kZjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlN5FptdnxcKkuITZAlY61EOoFZEkhLB+RSPIzBiVmN6jM7cj8d6tvsIRxZd gQTwTtwtyMRm/X06CfoHGBVbkeXMl/MiSVw52OQ6IwCtOIMMLBR/mR247aM/P++o c/MZNczaTo4AgDnyUin0UoWOguHouZUc603lOM6rMCoNTIpk7tSUt1LclK9ARGrt Qnn28wUkmWKJFoDPCAo7PdPhXkwhMonjeixp1SO3anBzvEJTuH25t8mDMeKD3WIy 0BhAmrU5xHn++NgcugSgWPztqsuF7QvyDcCVfNAvIhkSNb4rIZW1IOBh/BqBk3jS FZOXCCaI1QEmYCLUoHgITdjcLwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGfsWxk2 Y1ITkWVLqi+N2hXtGPOyMB8GA1UdIwQYMBaAFC8mWwyAJHMJSSaJCoUSTiGxCdo8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNFQi9GMzYyMkU3NDk3 NjkxMUVCQUJDNzc0ODZDNEY5QUUwMi9MeVpiRElBa2N3bEpKb2tLaFJKT0liRUoy ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x5WmJESUFrY3dsSkpva0toUkpPSWJFSjJqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjAzRUIvRjM2MjJFNzQ5NzY5MTFFQkFCQzc3NDg2QzRGOUFFMDIvOENCRTE3NTQw QkNGMTFFRjgwQkU4RTBDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDco14MA0GCSqGSIb3DQEBCwUAA4IBAQBXATl7ldJ6cEjSdNeEQuwq iHn3t/gBjquGRa4m9PJBGBdbeZm0XNKCxsfUt4o87a4j/Ryu95xHjZRmq0TJ9syV aH9L99N0v4xmDGqucm+CsJEKnJuVydf6gE0x4YqeO7kpN2mI2aqLRwculqVzis/i K/UQnl3M00bAkRkLvuAFSmo/JCcF90xkv3bhDUDML4e/sYYkAQoIws4iXTt/6lOB 73161wMXRnrEh4Db8RQf2OHgj6/5FjSaQNZ6BGXd8epGykbv3pH/CSkcxrQtqnlN /GZt/G8AC65P16KAyq/qn0C8dveEL6bwhdPUTnensEdpOeRseqaki8UjoAc/fccn -----END CERTIFICATE-----Generated at Thu Mar 26 10:13:13 2026 by rpki-client