$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/85750E9429B911F1A805AEF28F833773.roa File: 85750E9429B911F1A805AEF28F833773.roa (raw, json) Hash identifier: auPSTIw5f+LjJofnwKeEm6Ok//XK0NnQHOUksBcly2I= Subject key identifier: C9:B4:00:20:0C:5E:FB:76:80:C5:BA:AC:00:94:6A:CC:31:64:3B:1D Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Certificate serial: 03 Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/85750E9429B911F1A805AEF28F833773.roa Signing time: Fri 27 Mar 2026 08:47:01 +0000 ROA not before: Fri 27 Mar 2026 08:47:01 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 33245 IP address blocks: 205.252.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 17:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Validity Not Before: Mar 27 08:47:01 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69c64405-d51e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e0:0e:3b:78:1a:2f:72:36:26:45:9c:63:fb: 1b:b5:11:c7:0d:0c:7f:67:ab:8f:d1:b7:47:f4:13: 27:df:e8:27:40:62:9b:f1:ef:ac:74:62:e6:93:b4: ab:7d:f2:5f:f2:f9:6e:14:58:35:c5:ee:39:72:3b: 48:fc:6b:dc:29:59:19:ce:ea:9f:f2:2a:90:9e:03: 5d:2e:27:da:10:d7:98:6c:38:20:8a:08:90:dc:d9: 27:95:a1:e9:4d:2f:6e:58:a8:3d:bb:90:5f:8a:98: 57:46:a2:b3:de:f1:f6:9c:0f:9b:2e:15:64:64:77: e7:2c:ea:1d:4a:88:f5:91:af:b5:27:ec:19:8e:b8: 69:ad:c6:43:7b:9f:82:68:c1:84:bf:17:f3:60:cd: df:e4:61:a6:07:d1:6f:6d:87:3f:17:38:6d:58:55: 28:ca:89:4b:1b:80:6d:85:bd:2a:d7:97:26:3b:f8: b5:11:8c:1c:9a:92:db:48:57:e6:99:69:6c:bb:cf: ef:85:3b:c6:08:86:a1:97:60:94:a8:7a:66:1e:9d: 37:0e:55:6e:40:99:c3:1a:3d:e9:96:66:c7:46:09: 0d:44:cb:ba:80:2c:75:80:fa:7e:1b:b5:59:05:12: a9:94:32:b8:61:78:df:70:1f:3b:e2:58:2e:02:20: 16:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B4:00:20:0C:5E:FB:76:80:C5:BA:AC:00:94:6A:CC:31:64:3B:1D X509v3 Authority Key Identifier: keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/85750E9429B911F1A805AEF28F833773.roa sbgp-ipAddrBlock: critical IPv4: 205.252.129.0/24 Signature Algorithm: sha256WithRSAEncryption aa:4e:da:75:ef:8d:44:d2:14:44:28:91:a8:10:b3:92:2f:d0: 3c:8c:56:1b:57:0a:37:a6:21:b4:c6:53:34:4a:9a:fc:f1:0d: 05:6d:07:6a:8e:90:0e:28:6a:13:b2:75:b4:0b:19:1c:d9:11: f9:98:95:e8:5f:ea:e3:cb:5e:ef:85:19:06:8d:1a:a1:a2:30: c4:55:3c:4f:67:20:60:cc:11:9c:09:96:3b:97:6e:26:af:7e: d7:b4:96:95:77:b6:cc:2a:7e:a5:69:09:8a:f2:50:48:65:03: 92:0a:e2:1b:71:b5:7e:fe:81:ca:b1:e3:03:a7:c5:79:19:96: 1c:2f:d7:98:02:bb:dd:da:67:82:b0:e0:c4:5c:79:c4:22:32: be:c1:1c:52:80:d7:ef:ce:07:95:42:58:55:fd:95:14:a8:fc: ef:a9:eb:cb:9a:67:45:5b:88:6f:b7:b6:14:75:56:b7:26:5f: 18:57:78:74:4f:cf:0a:38:d4:0b:b1:78:37:b7:d9:e1:82:88: 9a:d0:47:10:84:6d:7f:80:70:a8:a0:6a:4d:22:32:eb:db:aa: e0:43:a7:ee:a3:5c:dc:92:f3:c0:39:90:99:46:91:96:fd:08: bf:98:6a:2b:83:50:3a:23:89:8f:09:d9:d5:80:40:55:ca:8a: 50:74:94:9f -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDRBOTExMC8GA1UEBRMoM0Q3QjE1QkQ3N0Q5Qjk3NEUzNzM1OERBNzU0REZFQTky OTFFNjgzQTAeFw0yNjAzMjcwODQ3MDFaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YzY0NDA1LWQ1MWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDP4A47eBovcjYmRZxj+xu1EccNDH9nq4/Rt0f0Eyff6CdAYpvx76x0YuaTtKt9 8l/y+W4UWDXF7jlyO0j8a9wpWRnO6p/yKpCeA10uJ9oQ15hsOCCKCJDc2SeVoelN L25YqD27kF+KmFdGorPe8facD5suFWRkd+cs6h1KiPWRr7Un7BmOuGmtxkN7n4Jo wYS/F/Ngzd/kYaYH0W9thz8XOG1YVSjKiUsbgG2FvSrXlyY7+LURjByakttIV+aZ aWy7z++FO8YIhqGXYJSoemYenTcOVW5AmcMaPemWZsdGCQ1Ey7qALHWA+n4btVkF EqmUMrhheN9wHzviWC4CIBbTAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUybQAIAxe +3aAxbqsAJRqzDFkOx0wHwYDVR0jBBgwFoAUPXsVvXfZuXTjc1jadU3+qSkeaDow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNEE5L0ZEMzcyRTRBMjk0 NTExRjFBN0FBM0VCRDg0RUU1MjhFL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFE by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUFhzVnZYZlp1WFRqYzFqYWRVMy1xU2tlYURvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDRBOS9GRDM3MkU0QTI5NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS84NTc1MEU5NDI5 QjkxMUYxQTgwNUFFRjI4RjgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADN/IEwDQYJKoZIhvcNAQELBQADggEBAKpO2nXvjUTSFEQokagQs5Iv 0DyMVhtXCjemIbTGUzRKmvzxDQVtB2qOkA4oahOydbQLGRzZEfmYlehf6uPLXu+F GQaNGqGiMMRVPE9nIGDMEZwJljuXbiavfte0lpV3tswqfqVpCYryUEhlA5IK4htx tX7+gcqx4wOnxXkZlhwv15gCu93aZ4Kw4MRcecQiMr7BHFKA1+/OB5VCWFX9lRSo /O+p68uaZ0VbiG+3thR1VrcmXxhXeHRPzwo41AuxeDe32eGCiJrQRxCEbX+AcKig ak0iMuvbquBDp+6jXNyS88A5kJlGkZb9CL+YaiuDUDojiY8J2dWAQFXKilB0lJ8= -----END CERTIFICATE-----Generated at Sat Mar 28 18:54:25 2026 by rpki-client