$ rpki-client -vvf rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/84FDF6D0AABA11EABB84756CC4F9AE02.roa File: 84FDF6D0AABA11EABB84756CC4F9AE02.roa (raw, json) Hash identifier: QVfdEdXCocoSVGgWS+Yl9hl7mgDFeG4r0nSsOh9ZTOM= Subject key identifier: 7B:A1:7D:AF:D6:EC:31:AF:97:A1:C0:21:A1:4A:8D:48:7C:0D:7C:61 Certificate issuer: /CN=A91866D6/serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C Certificate serial: 0997 Authority key identifier: AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/84FDF6D0AABA11EABB84756CC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:01:36 +0000 ROA not before: Thu 22 Jan 2026 20:16:43 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 4858 IP address blocks: 203.90.24.0/22 maxlen: 22 203.90.29.0/24 maxlen: 24 2406:ca00:1::/48 maxlen: 48 2406:ca00:2::/48 maxlen: 48 2406:ca00:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:47:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2455 (0x997) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91866D6, serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C Validity Not Before: Jan 22 20:16:43 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a462e0-6e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:45:6b:24:20:04:41:97:09:e2:f1:b2:ec:e4: e3:64:74:82:54:2f:6a:22:f6:c3:06:a2:2f:46:2d: f4:e8:3c:e6:38:d9:8b:64:a7:94:01:4c:96:7f:34: a5:b7:a7:86:b8:9e:2a:48:09:e7:cc:b1:5c:7f:bd: ea:54:28:f1:7f:84:75:70:18:a6:ae:2c:c3:10:87: da:41:f0:8f:7c:5f:1c:93:98:5a:76:b9:e1:9a:9a: 56:dc:99:65:ba:a5:33:ad:c2:d5:04:fc:7a:29:99: 29:76:94:da:66:3c:4d:1d:eb:f2:fb:1f:0f:53:49: 4c:fc:28:63:40:51:cd:27:5d:45:6e:7e:df:1f:46: 11:e7:44:f6:93:52:08:88:12:4c:7a:00:b5:e6:5a: eb:3b:0d:81:37:0f:42:3e:f8:65:7d:ae:52:9d:d1: 36:42:0d:3c:d3:0e:ee:54:dd:f3:e8:1f:9d:96:66: 0a:8a:7e:02:61:31:07:22:09:77:d3:99:5f:62:b6: f8:5b:b4:88:fa:5f:3b:c1:22:6f:47:43:1f:3c:11: 95:ad:9b:33:a6:8f:77:53:3f:5a:ab:16:1a:71:de: 12:3a:7c:14:a0:5f:c2:49:7f:d2:a9:c4:19:23:a8: 01:7b:76:33:da:78:1a:6e:94:0f:17:fd:69:24:b6: d0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A1:7D:AF:D6:EC:31:AF:97:A1:C0:21:A1:4A:8D:48:7C:0D:7C:61 X509v3 Authority Key Identifier: keyid:AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/84FDF6D0AABA11EABB84756CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.90.24.0/22 203.90.29.0/24 IPv6: 2406:ca00:1::-2406:ca00:3:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 0f:f2:3a:df:36:b5:66:ea:1e:54:ab:2c:fe:be:a6:dd:a2:4d: 03:4b:7e:f0:cf:4d:17:24:ed:07:b4:9c:cd:89:01:66:e5:92: 5d:32:4a:06:fe:7a:d7:31:f9:2e:52:8b:a8:3a:74:93:88:4f: 50:3f:fe:9f:91:88:07:28:fc:5f:eb:09:99:70:3c:04:f3:e0: 48:72:14:e2:1c:f8:f9:6a:40:29:8e:12:11:fa:58:3d:5d:12: 8a:7e:32:ac:fd:06:1e:58:34:5c:0d:92:a7:78:bf:a6:46:e1: eb:62:25:ad:f1:d1:80:2b:0f:6f:5e:99:b1:ee:20:77:1f:06: b8:c2:c6:f0:75:a4:32:04:a1:36:3f:a8:fa:f8:0a:ac:1b:bc: 86:de:11:10:60:b9:e1:b7:80:dd:d3:9e:c3:4f:4c:0c:b6:df: 6e:e3:49:d4:16:2a:4f:0f:db:c5:b3:c1:ad:52:f2:9d:e5:6e: 8a:87:23:38:14:9e:fc:49:b4:ba:c8:d8:cc:af:4f:cd:f2:81: 20:b5:96:ba:19:e2:1b:f0:b8:30:cc:15:f9:ba:1e:4b:01:23: fb:86:4e:8a:4c:ce:97:16:61:61:8f:10:6f:0d:14:be:d3:aa: b5:ed:86:b3:82:9b:a2:9a:9b:2c:56:34:6f:43:75:f8:e3:5e: 61:6a:20:c8 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgICCZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY2RDYxMTAvBgNVBAUTKEFFMDBDMUEyQzAzNDJBNzE1MjgzNTQ0RUQ2NUI0NjE4 NjU4MkYyNkMwHhcNMjYwMTIyMjAxNjQzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjJlMC02ZTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykVrJCAEQZcJ4vGy7OTjZHSCVC9qIvbDBqIvRi306DzmONmLZKeUAUyWfzSl t6eGuJ4qSAnnzLFcf73qVCjxf4R1cBimrizDEIfaQfCPfF8ck5hadrnhmppW3Jll uqUzrcLVBPx6KZkpdpTaZjxNHevy+x8PU0lM/ChjQFHNJ11Fbn7fH0YR50T2k1II iBJMegC15lrrOw2BNw9CPvhlfa5SndE2Qg080w7uVN3z6B+dlmYKin4CYTEHIgl3 05lfYrb4W7SI+l87wSJvR0MfPBGVrZszpo93Uz9aqxYacd4SOnwUoF/CSX/SqcQZ I6gBe3Yz2ngabpQPF/1pJLbQVQIDAQABo4ICgjCCAn4wHQYDVR0OBBYEFHuhfa/W 7DGvl6HAIaFKjUh8DXxhMB8GA1UdIwQYMBaAFK4AwaLANCpxUoNUTtZbRhhlgvJs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjZENi85QTU2Q0MyRUFB QjkxMUVBOTRENjgxNkJDNEY5QUUwMi9yZ0RCb3NBMEtuRlNnMVJPMWx0R0dHV0M4 bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JnREJvc0EwS25GU2cxUk8xbHRHR0dXQzhtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODY2RDYvOUE1NkNDMkVBQUI5MTFFQTk0RDY4MTZCQzRGOUFFMDIvODRGREY2RDBB QUJBMTFFQUJCODQ3NTZDQzRGOUFFMDIucm9hMEEGCCsGAQUFBwEHAQH/BDIwMDAS BAIAATAMAwQCy1oYAwQAy1odMBoEAgACMBQwEgMHACQGygAAAQMHAiQGygAAADAN BgkqhkiG9w0BAQsFAAOCAQEAD/I63za1ZuoeVKss/r6m3aJNA0t+8M9NFyTtB7Sc zYkBZuWSXTJKBv561zH5LlKLqDp0k4hPUD/+n5GIByj8X+sJmXA8BPPgSHIU4hz4 +WpAKY4SEfpYPV0Sin4yrP0GHlg0XA2Sp3i/pkbh62IlrfHRgCsPb16Zse4gdx8G uMLG8HWkMgShNj+o+vgKrBu8ht4REGC54beA3dOew09MDLbfbuNJ1BYqTw/bxbPB rVLyneVuiocjOBSe/Em0usjYzK9PzfKBILWWuhniG/C4MMwV+boeSwEj+4ZOikzO lxZhYY8Qbw0UvtOqte2Gs4KbopqbLFY0b0N1+ONeYWogyA== -----END CERTIFICATE-----Generated at Thu Mar 26 16:00:02 2026 by rpki-client