$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/670FF7B429C011F1A3F09FCF91833773.roa File: 670FF7B429C011F1A3F09FCF91833773.roa (raw, json) Hash identifier: xUP7XSpc4JFNaGqOv8kH1G9acfZb1iKUpLORTtA7Q6c= Subject key identifier: B6:E5:0F:18:73:D5:9F:B6:E8:9B:58:FF:10:FC:C9:8E:78:C4:29:5C Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Certificate serial: 5A Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/670FF7B429C011F1A3F09FCF91833773.roa Signing time: Fri 27 Mar 2026 17:14:40 +0000 ROA not before: Fri 27 Mar 2026 17:14:40 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 55034 IP address blocks: 63.217.234.0/24 maxlen: 24 63.217.235.0/24 maxlen: 24 205.252.124.0/22 maxlen: 24 209.8.50.0/24 maxlen: 24 209.8.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 17:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Validity Not Before: Mar 27 17:14:40 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69c6bb00-bf4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:15:7d:48:b5:d2:bb:d6:88:a5:52:40:e1:02: 2d:fc:39:57:96:94:fc:a7:be:05:86:e3:d2:34:ba: fd:3c:64:19:5f:64:8a:54:c4:c2:c1:04:7d:ce:c1: 64:65:26:c4:a0:08:f4:8f:5b:37:fa:45:d3:49:13: 05:28:c6:e1:13:cb:61:e6:e5:ad:bc:95:79:9e:a7: b6:3d:42:1f:6d:79:28:10:36:32:bf:b0:37:f7:7a: 44:e4:22:31:cb:2d:cf:8c:d3:98:c4:b6:01:88:63: a0:7a:06:20:9c:0d:b0:a9:8b:30:c1:f4:85:b2:a1: 12:46:30:b6:06:58:80:85:4b:d7:8d:ac:cb:0d:49: d3:34:49:bc:4c:48:52:0d:e9:c1:aa:e1:40:ec:d7: 40:e0:60:76:6f:b0:89:be:2f:cd:b0:74:23:39:b8: 96:7a:0c:59:58:d3:9a:4a:06:19:51:dc:05:48:6c: 35:a9:6e:1a:dd:8b:29:cc:14:49:f1:4a:6a:fd:ce: fa:27:50:43:76:4f:b7:1d:4b:39:75:ac:4a:cf:da: 40:04:2c:8c:6b:cf:58:b3:6a:0b:eb:f3:b5:af:6a: 20:0e:cf:4e:ab:d4:7e:f9:d6:4e:65:1d:9f:1f:26: 5c:a4:1f:75:f3:8f:75:52:b8:66:9e:58:4a:7b:44: 16:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E5:0F:18:73:D5:9F:B6:E8:9B:58:FF:10:FC:C9:8E:78:C4:29:5C X509v3 Authority Key Identifier: keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/670FF7B429C011F1A3F09FCF91833773.roa sbgp-ipAddrBlock: critical IPv4: 63.217.234.0/23 205.252.124.0/22 209.8.50.0/23 Signature Algorithm: sha256WithRSAEncryption 25:08:e2:eb:a0:32:b8:d0:91:ff:9c:af:fd:02:90:3e:8e:b6: 1e:5e:98:97:91:82:46:a3:c4:fb:10:5f:bd:cd:26:10:85:33: 5a:dd:91:64:14:63:9f:bd:57:89:f8:d9:ad:e0:ac:09:29:ea: 8f:81:6f:34:86:e1:f0:68:24:96:48:10:05:a4:4b:e0:03:71: 55:71:43:89:4f:0d:0c:21:af:b5:82:50:fe:03:69:54:04:d7: 39:46:8b:dc:c4:fd:61:2a:ec:81:41:6c:dd:fe:0d:f4:57:17: d2:70:da:b5:0d:80:e9:cf:9d:7c:8d:75:46:2b:9d:81:dc:8f: 3e:9a:85:04:6d:1d:86:d9:24:3d:74:1a:35:25:74:31:b0:e7: 37:5d:eb:ac:64:e7:d0:d5:f9:96:29:49:5d:aa:c6:d9:37:c5: 94:0b:c4:67:05:cc:c8:db:e4:2f:29:ef:bd:3e:af:36:e4:a7: c8:36:49:1c:72:53:ee:69:82:a3:23:b3:0e:e4:78:d7:8d:c9: 07:22:3c:1c:da:53:bf:43:2a:0b:fa:30:b1:90:f8:47:f4:58: 44:3c:1c:b9:c1:9b:be:53:8d:e5:bf:aa:4a:6f:0c:aa:0c:e4: 19:cb:d0:28:52:4c:b7:b2:c5:71:c6:2f:33:7a:d2:e1:98:3d: c4:63:35:de -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDRBOTExMC8GA1UEBRMoM0Q3QjE1QkQ3N0Q5Qjk3NEUzNzM1OERBNzU0REZFQTky OTFFNjgzQTAeFw0yNjAzMjcxNzE0NDBaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YzZiYjAwLWJmNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDFX1ItdK71oilUkDhAi38OVeWlPynvgWG49I0uv08ZBlfZIpUxMLBBH3OwWRl JsSgCPSPWzf6RdNJEwUoxuETy2Hm5a28lXmep7Y9Qh9teSgQNjK/sDf3ekTkIjHL Lc+M05jEtgGIY6B6BiCcDbCpizDB9IWyoRJGMLYGWICFS9eNrMsNSdM0SbxMSFIN 6cGq4UDs10DgYHZvsIm+L82wdCM5uJZ6DFlY05pKBhlR3AVIbDWpbhrdiynMFEnx Smr9zvonUEN2T7cdSzl1rErP2kAELIxrz1izagvr87WvaiAOz06r1H751k5lHZ8f JlykH3Xzj3VSuGaeWEp7RBb9AgMBAAGjggJsMIICaDAdBgNVHQ4EFgQUtuUPGHPV n7bom1j/EPzJjnjEKVwwHwYDVR0jBBgwFoAUPXsVvXfZuXTjc1jadU3+qSkeaDow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNEE5L0ZEMzcyRTRBMjk0 NTExRjFBN0FBM0VCRDg0RUU1MjhFL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFE by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUFhzVnZYZlp1WFRqYzFqYWRVMy1xU2tlYURvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDRBOS9GRDM3MkU0QTI5NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS82NzBGRjdCNDI5 QzAxMUYxQTNGMDlGQ0Y5MTgzMzc3My5yb2EwKwYIKwYBBQUHAQcBAf8EHDAaMBgE AgABMBIDBAE/2eoDBALN/HwDBAHRCDIwDQYJKoZIhvcNAQELBQADggEBACUI4uug MrjQkf+cr/0CkD6Oth5emJeRgkajxPsQX73NJhCFM1rdkWQUY5+9V4n42a3grAkp 6o+BbzSG4fBoJJZIEAWkS+ADcVVxQ4lPDQwhr7WCUP4DaVQE1zlGi9zE/WEq7IFB bN3+DfRXF9Jw2rUNgOnPnXyNdUYrnYHcjz6ahQRtHYbZJD10GjUldDGw5zdd66xk 59DV+ZYpSV2qxtk3xZQLxGcFzMjb5C8p770+rzbkp8g2SRxyU+5pgqMjsw7keNeN yQciPBzaU79DKgv6MLGQ+Ef0WEQ8HLnBm75TjeW/qkpvDKoM5BnL0ChSTLeyxXHG LzN60uGYPcRjNd4= -----END CERTIFICATE-----Generated at Sat Mar 28 18:53:56 2026 by rpki-client