$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/2E2443CE29CF11F1ADED11F996833773.roa File: 2E2443CE29CF11F1ADED11F996833773.roa (raw, json) Hash identifier: /YTo9EB/J0ugF2nbrB/ty07yqEgw/RHL5BSrl8zCBiQ= Subject key identifier: 66:96:85:10:C1:F9:44:13:07:37:F4:FC:90:8D:C0:43:98:1B:54:FB Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Certificate serial: 2A Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/2E2443CE29CF11F1ADED11F996833773.roa Signing time: Fri 27 Mar 2026 12:51:10 +0000 ROA not before: Fri 27 Mar 2026 12:51:10 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 4760 IP address blocks: 205.252.144.0/21 maxlen: 21 206.161.64.0/20 maxlen: 20 207.176.96.0/20 maxlen: 20 207.226.0.0/20 maxlen: 24 209.9.192.0/20 maxlen: 20 209.9.192.0/24 maxlen: 24 209.9.193.0/24 maxlen: 24 209.9.194.0/24 maxlen: 24 209.9.195.0/24 maxlen: 24 209.9.196.0/24 maxlen: 24 209.9.197.0/24 maxlen: 24 209.9.198.0/23 maxlen: 24 209.9.200.0/24 maxlen: 24 209.9.201.0/24 maxlen: 24 209.9.202.0/24 maxlen: 24 209.9.203.0/24 maxlen: 24 209.9.204.0/24 maxlen: 24 209.9.205.0/24 maxlen: 24 209.9.206.0/24 maxlen: 24 209.9.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 17:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Validity Not Before: Mar 27 12:51:10 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69c67d3e-1496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5c:fb:ea:d8:bc:79:ad:48:4e:64:73:a0:b8: e6:a4:c5:2c:9f:51:54:c0:3e:86:b7:47:8c:78:d9: 41:c7:2e:d0:03:b1:21:80:0b:1b:96:74:fa:c2:b3: ee:fd:cb:ea:f1:8b:d1:53:b1:e8:66:2e:7a:9f:d1: 48:dd:0e:9e:c7:0c:c6:37:30:42:a8:e3:ee:b3:cc: 02:c2:b1:78:2b:5c:a0:ae:61:fa:4d:08:9f:61:89: be:fb:83:8d:7c:33:de:23:9e:7d:eb:83:47:91:8a: f9:93:0b:fc:3c:36:df:91:44:2f:fd:17:4a:55:89: 05:19:27:79:a8:eb:37:0e:b8:09:0e:10:0d:c1:86: 5b:a6:13:c4:c5:81:07:61:6e:ba:68:17:30:ba:34: 56:7e:01:fa:3e:c3:66:f6:b7:96:a9:9b:1a:98:dd: bd:b2:b0:40:52:a8:a9:b3:3c:ac:05:d4:20:f4:d3: 9c:f3:e5:61:cc:3d:00:39:25:cd:54:f3:cc:fb:23: 9c:fb:e6:fe:0a:67:6a:14:7f:38:e7:10:5a:a6:02: c7:a3:17:fa:bc:88:1b:89:01:40:d0:75:1a:cc:84: 84:bf:b9:22:19:71:67:8e:61:98:5b:64:e2:65:f6: 88:33:59:d0:a8:83:aa:a9:9f:26:30:6d:e6:ec:f8: 54:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:96:85:10:C1:F9:44:13:07:37:F4:FC:90:8D:C0:43:98:1B:54:FB X509v3 Authority Key Identifier: keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/2E2443CE29CF11F1ADED11F996833773.roa sbgp-ipAddrBlock: critical IPv4: 205.252.144.0/21 206.161.64.0/20 207.176.96.0/20 207.226.0.0/20 209.9.192.0/20 Signature Algorithm: sha256WithRSAEncryption c2:c7:67:37:1e:71:ee:9a:16:96:b7:e2:8b:55:3b:74:2d:94: 7d:a8:eb:01:8b:1b:7c:65:ff:d2:dd:fe:bc:73:9d:cc:44:cb: b7:6a:95:f6:80:87:cb:ad:c0:0a:85:0a:24:c8:b5:5e:ef:eb: b7:97:a1:09:97:78:ef:71:3d:a6:9f:c2:9f:6e:61:47:76:6d: 3c:6c:02:f8:75:63:48:20:54:0f:d1:10:8a:12:62:bd:c6:43: 33:96:b9:d0:c1:5b:de:04:f5:72:48:47:d0:dc:0a:42:30:bf: 3d:5a:48:a2:46:ff:57:77:b3:b9:c8:0e:89:33:97:5d:ed:94: d5:16:29:e5:df:69:45:74:98:10:24:6a:ba:e3:33:64:bb:2e: d0:07:98:b6:04:70:46:aa:02:fe:ac:f9:be:3c:bf:88:5b:99: 32:7e:f9:06:0b:b1:7a:cf:9b:93:65:a1:f1:fd:51:e8:f6:8d: 01:da:36:dc:ce:0f:5b:d0:b6:6a:e1:aa:6c:ab:b3:a1:2a:b3: e0:32:96:c6:8a:93:71:04:a1:be:6f:af:06:32:f9:0b:8b:ca: 68:28:70:ed:be:70:8d:94:ed:2e:91:f4:43:e7:9a:94:1d:e5: 29:e8:f3:7f:cd:01:b7:b7:19:8b:93:ca:bb:48:93:8b:64:1f: 2d:bb:a5:85 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDRBOTExMC8GA1UEBRMoM0Q3QjE1QkQ3N0Q5Qjk3NEUzNzM1OERBNzU0REZFQTky OTFFNjgzQTAeFw0yNjAzMjcxMjUxMTBaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YzY3ZDNlLTE0OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgXPvq2Lx5rUhOZHOguOakxSyfUVTAPoa3R4x42UHHLtADsSGACxuWdPrCs+79 y+rxi9FTsehmLnqf0UjdDp7HDMY3MEKo4+6zzALCsXgrXKCuYfpNCJ9hib77g418 M94jnn3rg0eRivmTC/w8Nt+RRC/9F0pViQUZJ3mo6zcOuAkOEA3BhlumE8TFgQdh brpoFzC6NFZ+Afo+w2b2t5apmxqY3b2ysEBSqKmzPKwF1CD005zz5WHMPQA5Jc1U 88z7I5z75v4KZ2oUfzjnEFqmAsejF/q8iBuJAUDQdRrMhIS/uSIZcWeOYZhbZOJl 9ogzWdCog6qpnyYwbebs+FSZAgMBAAGjggJ4MIICdDAdBgNVHQ4EFgQUZpaFEMH5 RBMHN/T8kI3AQ5gbVPswHwYDVR0jBBgwFoAUPXsVvXfZuXTjc1jadU3+qSkeaDow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNEE5L0ZEMzcyRTRBMjk0 NTExRjFBN0FBM0VCRDg0RUU1MjhFL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFE by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUFhzVnZYZlp1WFRqYzFqYWRVMy1xU2tlYURvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDRBOS9GRDM3MkU0QTI5NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS8yRTI0NDNDRTI5 Q0YxMUYxQURFRDExRjk5NjgzMzc3My5yb2EwNwYIKwYBBQUHAQcBAf8EKDAmMCQE AgABMB4DBAPN/JADBATOoUADBATPsGADBATP4gADBATRCcAwDQYJKoZIhvcNAQEL BQADggEBAMLHZzcece6aFpa34otVO3QtlH2o6wGLG3xl/9Ld/rxzncxEy7dqlfaA h8utwAqFCiTItV7v67eXoQmXeO9xPaafwp9uYUd2bTxsAvh1Y0ggVA/REIoSYr3G QzOWudDBW94E9XJIR9DcCkIwvz1aSKJG/1d3s7nIDokzl13tlNUWKeXfaUV0mBAk arrjM2S7LtAHmLYEcEaqAv6s+b48v4hbmTJ++QYLsXrPm5NlofH9Uej2jQHaNtzO D1vQtmrhqmyrs6Eqs+AylsaKk3EEob5vrwYy+QuLymgocO2+cI2U7S6R9EPnmpQd 5Sno83/NAbe3GYuTyrtIk4tkHy27pYU= -----END CERTIFICATE-----Generated at Sat Mar 28 18:53:09 2026 by rpki-client