$ rpki-client -vvf rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/C3F52172A3E611EAA751A46EC4F9AE02.roa File: C3F52172A3E611EAA751A46EC4F9AE02.roa (raw, json) Hash identifier: HjkUEQsav5pUE/WVtKbSKskctR1MphO2V35javK4YnI= Subject key identifier: 0F:A0:96:2A:4E:C4:B6:1E:53:60:82:B8:F5:70:6D:92:5C:35:80:4D Certificate issuer: /CN=A91972B6/serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF Certificate serial: 2098 Authority key identifier: 75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/C3F52172A3E611EAA751A46EC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:57:03 +0000 ROA not before: Wed 18 Feb 2026 17:15:14 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 0 IP address blocks: 123.255.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:04:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8344 (0x2098) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91972B6, serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF Validity Not Before: Feb 18 17:15:14 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a461cf-f3e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4d:7b:c7:dc:20:10:8f:bc:f7:3e:15:20:5a: fe:af:5f:df:be:49:e1:97:93:54:43:f9:63:21:0c: fa:5c:51:ea:79:d5:f5:50:ef:bb:2e:f3:19:06:57: 5e:86:c2:a0:5e:58:1f:89:2e:e1:16:64:e2:33:c6: 3e:d8:cc:d9:7f:90:77:a0:62:28:83:21:99:74:48: c8:36:97:66:eb:bb:51:8a:ea:5a:1d:e7:08:7c:18: 66:57:19:de:5e:39:db:25:ef:b0:60:70:0b:ab:72: 3a:0f:25:88:32:df:7e:da:b2:45:90:82:1c:cd:45: 3c:cb:6c:63:05:55:21:2c:d9:19:1a:d8:8d:63:bc: 39:c1:7e:99:dd:fe:5d:22:86:20:54:0e:81:0b:18: d1:a5:8a:78:f7:2a:b1:1a:e8:35:c6:03:51:d1:01: 28:6b:15:d1:78:a8:84:8c:e0:25:68:63:08:33:de: 96:85:55:cb:d5:b5:d4:02:fb:b4:ad:89:5f:4d:d4: 2c:b0:28:ff:b8:b5:29:b0:35:45:ad:b5:2a:57:65: 3e:11:d7:db:b5:14:08:39:17:16:3a:b2:18:07:7f: 36:e9:c3:79:3d:bf:ca:8e:ed:57:8b:1a:56:bc:e0: 4f:58:b0:be:89:db:65:79:b8:dd:34:e2:4f:c2:d2: 84:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A0:96:2A:4E:C4:B6:1E:53:60:82:B8:F5:70:6D:92:5C:35:80:4D X509v3 Authority Key Identifier: keyid:75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/C3F52172A3E611EAA751A46EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 123.255.88.0/21 Signature Algorithm: sha256WithRSAEncryption 25:2a:dc:84:95:dc:55:2c:06:d4:98:f2:3a:c9:f5:b4:ac:cb: 82:08:af:93:be:91:9e:0d:f2:45:ce:cd:ba:13:4b:3d:fa:69: 46:45:60:b4:fb:64:3b:07:97:d2:32:73:52:23:e5:c7:8e:84: a5:ce:2a:2e:03:38:6e:b1:e1:89:1f:a1:9e:85:2a:0a:21:c2: 7c:2e:56:56:a3:71:9b:d6:d5:06:ee:ba:1c:35:d8:46:d4:9d: 13:65:fa:7f:da:c0:27:ce:ac:12:05:9c:e7:bb:72:a9:9d:a1: cd:2d:7a:c1:a4:de:53:0e:34:12:28:a7:01:5b:a8:28:28:fb: c6:d0:91:51:4d:6d:4d:9a:57:87:68:76:b3:52:fe:a6:73:68: 18:3d:56:22:af:3d:87:12:b9:9b:10:a8:b1:34:f9:b5:27:1a: 58:39:89:b8:32:cf:36:f3:dd:82:e3:eb:c9:01:4f:2e:25:7c: 26:35:ec:90:2d:db:41:09:ba:a3:d1:08:56:40:85:55:e9:5c: 49:c7:89:3c:70:56:ce:91:a0:b6:86:a2:a1:0c:65:f9:bc:f3: 87:81:6e:4f:47:de:4d:da:2d:ab:27:9d:31:63:48:61:95:41: 4b:07:72:9a:65:d6:54:45:a1:b6:c2:9d:a8:de:3e:aa:ad:c2: 56:78:99:8c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICIJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyQjYxMTAvBgNVBAUTKDc1N0NERDk4ODQ0MjAzRTlDQjQxM0Q3RTVDNTgwOEQx NUU1NEIxQ0YwHhcNMjYwMjE4MTcxNTE0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjFjZi1mM2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz017x9wgEI+89z4VIFr+r1/fvknhl5NUQ/ljIQz6XFHqedX1UO+7LvMZBlde hsKgXlgfiS7hFmTiM8Y+2MzZf5B3oGIogyGZdEjINpdm67tRiupaHecIfBhmVxne XjnbJe+wYHALq3I6DyWIMt9+2rJFkIIczUU8y2xjBVUhLNkZGtiNY7w5wX6Z3f5d IoYgVA6BCxjRpYp49yqxGug1xgNR0QEoaxXReKiEjOAlaGMIM96WhVXL1bXUAvu0 rYlfTdQssCj/uLUpsDVFrbUqV2U+EdfbtRQIORcWOrIYB3826cN5Pb/Kju1XixpW vOBPWLC+idtlebjdNOJPwtKECQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFA+glipO xLYeU2CCuPVwbZJcNYBNMB8GA1UdIwQYMBaAFHV83ZiEQgPpy0E9flxYCNFeVLHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzJCNi9GMkI5RTBBNDEz MkExMUU5QUU3N0FEN0JDNEY5QUUwMi9kWHpkbUlSQ0EtbkxRVDEtWEZnSTBWNVVz YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RYemRtSVJDQS1uTFFUMS1YRmdJMFY1VXNjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTcyQjYvRjJCOUUwQTQxMzJBMTFFOUFFNzdBRDdCQzRGOUFFMDIvQzNGNTIxNzJB M0U2MTFFQUE3NTFBNDZFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDe/9YMA0GCSqGSIb3DQEBCwUAA4IBAQAlKtyEldxVLAbUmPI6yfW0 rMuCCK+TvpGeDfJFzs26E0s9+mlGRWC0+2Q7B5fSMnNSI+XHjoSlziouAzhuseGJ H6GehSoKIcJ8LlZWo3Gb1tUG7rocNdhG1J0TZfp/2sAnzqwSBZznu3KpnaHNLXrB pN5TDjQSKKcBW6goKPvG0JFRTW1NmleHaHazUv6mc2gYPVYirz2HErmbEKixNPm1 JxpYOYm4Ms82892C4+vJAU8uJXwmNeyQLdtBCbqj0QhWQIVV6VxJx4k8cFbOkaC2 hqKhDGX5vPOHgW5PR95N2i2rJ50xY0hhlUFLB3KaZdZURaG2wp2o3j6qrcJWeJmM -----END CERTIFICATE-----Generated at Thu Mar 26 03:38:49 2026 by rpki-client