$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/0FCDEA68113B11F09E3A4157C4F9AE02.roa File: 0FCDEA68113B11F09E3A4157C4F9AE02.roa (raw, json) Hash identifier: t4/ezhxy8Yfpe9cG1UobV4ijgY6RGmsFly/MX9OY10A= Subject key identifier: 58:28:CB:50:BE:53:2F:24:7B:D1:AA:4B:A5:C3:5E:32:AF:08:A2:97 Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Certificate serial: 35DB Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/0FCDEA68113B11F09E3A4157C4F9AE02.roa Signing time: Thu 30 Apr 2026 15:13:07 +0000 ROA not before: Thu 30 Apr 2026 15:13:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38174 IP address blocks: 120.29.234.0/23 maxlen: 24 120.29.239.0/24 maxlen: 24 123.242.244.0/22 maxlen: 24 123.242.252.0/23 maxlen: 24 123.242.254.0/23 maxlen: 24 202.60.60.0/23 maxlen: 23 202.60.60.0/24 maxlen: 24 202.60.61.0/24 maxlen: 24 202.60.62.0/23 maxlen: 24 202.61.10.0/23 maxlen: 23 202.61.10.0/24 maxlen: 24 202.61.11.0/24 maxlen: 24 203.189.180.0/22 maxlen: 24 203.191.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13787 (0x35db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0770, serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Validity Not Before: Apr 30 15:13:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69f37182-1a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:90:65:03:78:04:7a:09:39:a0:38:13:6a:b8: 35:91:62:55:46:a2:66:7e:db:a3:e7:41:e6:27:7a: 3d:84:b1:e5:0a:58:e5:d5:cf:75:02:f5:ce:72:90: 0b:0e:23:c4:55:b6:b1:ab:f4:0e:bf:47:74:62:89: 90:e2:bd:16:ba:08:76:ce:d5:50:78:f2:ff:75:8f: de:c1:c9:b2:a5:1f:65:23:25:b9:c1:d0:38:74:e7: 0c:cd:d9:38:31:7a:23:52:99:6f:94:ab:35:b8:ea: 3b:27:e6:62:bb:61:40:23:c7:d1:94:59:a8:f2:0e: bb:8b:36:45:83:b9:f1:ea:b6:92:d6:0b:57:7d:82: ad:d0:31:07:82:59:cc:39:0e:2a:b1:4f:1a:85:9a: f7:9f:d2:ab:53:77:57:75:28:46:4d:03:6c:06:ee: 3a:cd:43:50:94:7b:4b:00:57:10:ec:b1:56:06:4e: 81:52:39:06:e9:92:74:a5:f0:75:9c:04:26:52:55: 98:ba:c8:01:a4:bd:dc:76:78:ac:6b:8c:31:13:d4: b8:eb:a9:bf:ae:63:9f:b2:a3:46:eb:a4:86:39:ae: 85:b2:75:7e:87:97:e2:5c:32:2e:68:92:ad:9c:13: 21:ed:8e:eb:e0:7d:32:81:a0:35:0e:90:59:10:38: 1e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:28:CB:50:BE:53:2F:24:7B:D1:AA:4B:A5:C3:5E:32:AF:08:A2:97 X509v3 Authority Key Identifier: keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/0FCDEA68113B11F09E3A4157C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 120.29.234.0/23 120.29.239.0/24 123.242.244.0/22 123.242.252.0/22 202.60.60.0/22 202.61.10.0/23 203.189.180.0/22 203.191.34.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:88:5d:44:82:d2:a8:5c:aa:7a:7b:49:4d:18:43:1b:85:f2: fc:ab:a4:e8:3a:b8:91:d4:0e:1c:06:92:62:b5:e8:eb:d2:26: 95:5f:53:e7:d3:ad:e2:fe:92:fa:e0:1e:3a:54:a3:00:30:75: b8:d6:87:e0:40:36:b8:d7:ff:e1:e8:ff:9a:3a:47:c7:37:22: ba:da:93:8c:b2:83:55:82:af:ae:01:65:a4:86:5b:53:7e:90: 2a:be:c8:26:55:ec:b8:90:1b:0e:9f:e8:41:b2:a3:b4:8e:bc: 84:3b:f7:d1:e2:e3:9b:d8:e2:05:80:2b:a6:ff:cb:31:bc:2c: fc:c5:91:25:1c:5b:de:7f:b0:31:86:45:a1:61:78:90:86:7d: 66:73:a5:af:46:32:b9:cf:b7:a4:f2:59:eb:50:57:6c:f7:e6: 6f:5e:a1:40:b5:1b:bf:9f:28:65:c8:71:fc:cd:f8:a2:18:0b: 98:be:8e:9b:e1:2c:bc:02:b0:dc:8c:71:be:57:13:57:99:ed: f5:77:00:91:70:14:49:8f:d8:d5:41:4e:e5:23:55:fe:b2:db: 68:30:5f:42:5f:ab:98:5e:ad:a4:0e:15:c7:fb:ec:de:47:f2: 39:44:be:cc:b9:e4:39:70:b2:47:a6:03:17:3a:2d:44:23:c8: ac:42:61:e3 -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgICNdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3NzAxMTAvBgNVBAUTKDFENjIyNUFEOTQzRUNBMzg5RkE0QjY2QzE5NzQzNTFF MzRDNDI4RkIwHhcNMjYwNDMwMTUxMzA3WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWYzNzE4Mi0xYTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZBlA3gEegk5oDgTarg1kWJVRqJmftuj50HmJ3o9hLHlCljl1c91AvXOcpAL DiPEVbaxq/QOv0d0YomQ4r0Wugh2ztVQePL/dY/ewcmypR9lIyW5wdA4dOcMzdk4 MXojUplvlKs1uOo7J+Ziu2FAI8fRlFmo8g67izZFg7nx6raS1gtXfYKt0DEHglnM OQ4qsU8ahZr3n9KrU3dXdShGTQNsBu46zUNQlHtLAFcQ7LFWBk6BUjkG6ZJ0pfB1 nAQmUlWYusgBpL3cdnisa4wxE9S466m/rmOfsqNG66SGOa6FsnV+h5fiXDIuaJKt nBMh7Y7r4H0ygaA1DpBZEDge8wIDAQABo4ICijCCAoYwHQYDVR0OBBYEFFgoy1C+ Uy8ke9GqS6XDXjKvCKKXMB8GA1UdIwQYMBaAFB1iJa2UPso4n6S2bBl0NR40xCj7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc3MC9DMzM2ODNCNjFE OEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlqaWZwTFpzR1hRMUhqVEVL UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXSWxyWlEteWppZnBMWnNHWFExSGpURUtQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjA3NzAvQzMzNjgzQjYxRDhFMTFFMjhBOUI1N0VEMDhCMDJDRDIvMEZDREVBNjgx MTNCMTFGMDlFM0E0MTU3QzRGOUFFMDIucm9hMEkGCCsGAQUFBwEHAQH/BDowODA2 BAIAATAwAwQBeB3qAwQAeB3vAwQCe/L0AwQCe/L8AwQCyjw8AwQByj0KAwQCy720 AwQBy78iMA0GCSqGSIb3DQEBCwUAA4IBAQAuiF1EgtKoXKp6e0lNGEMbhfL8q6To OriR1A4cBpJitejr0iaVX1Pn063i/pL64B46VKMAMHW41ofgQDa41//h6P+aOkfH NyK62pOMsoNVgq+uAWWkhltTfpAqvsgmVey4kBsOn+hBsqO0jryEO/fR4uOb2OIF gCum/8sxvCz8xZElHFvef7AxhkWhYXiQhn1mc6WvRjK5z7ek8lnrUFds9+ZvXqFA tRu/nyhlyHH8zfiiGAuYvo6b4Sy8ArDcjHG+VxNXme31dwCRcBRJj9jVQU7lI1X+ sttoMF9CX6uYXq2kDhXH++zeR/I5RL7MueQ5cLJHpgMXOi1EI8isQmHj -----END CERTIFICATE-----Generated at Wed May 13 10:10:45 2026 by rpki-client