$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/608C129E33E011ED979ED20EC4F9AE02.roa File: 608C129E33E011ED979ED20EC4F9AE02.roa (raw, json) Hash identifier: 6+roL2PbfwWq8y6ta4w/K7qCXrfAWrT67sYJoqqWyCU= Subject key identifier: 30:7B:FC:EA:5F:92:21:7F:5F:C3:B7:B8:74:3D:8D:E1:ED:95:10:26 Certificate issuer: /CN=A91CBF47/serialNumber=326371E399824F8004ED96756819760881B7CD96 Certificate serial: 352C Authority key identifier: 32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/608C129E33E011ED979ED20EC4F9AE02.roa Signing time: Wed 04 Mar 2026 15:10:58 +0000 ROA not before: Wed 04 Mar 2026 15:10:58 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 9313 IP address blocks: 120.29.0.0/20 maxlen: 20 120.29.16.0/20 maxlen: 20 121.50.192.0/20 maxlen: 20 121.50.208.0/21 maxlen: 21 203.10.89.0/24 maxlen: 24 203.13.68.0/24 maxlen: 24 203.13.70.0/24 maxlen: 24 203.22.124.0/23 maxlen: 23 203.22.126.0/24 maxlen: 24 203.22.127.0/24 maxlen: 24 203.30.137.0/24 maxlen: 24 203.144.4.0/22 maxlen: 22 203.144.5.0/24 maxlen: 24 203.144.8.0/21 maxlen: 21 203.144.16.0/21 maxlen: 21 203.144.23.0/24 maxlen: 24 203.144.24.0/21 maxlen: 21 203.144.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13612 (0x352c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBF47, serialNumber=326371E399824F8004ED96756819760881B7CD96 Validity Not Before: Mar 4 15:10:58 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a84b82-5b51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a2:57:b7:44:c4:c9:93:8b:2f:98:99:9b:7b: 5b:a4:10:9f:ef:e0:92:c2:9b:ef:7a:53:b3:7c:7b: 21:b1:12:86:96:e7:61:b0:9f:a7:a6:86:9a:ed:25: 1b:84:ab:db:85:0d:2c:cb:32:60:61:a7:bc:f4:8e: cc:37:4b:de:04:d0:5c:e0:2a:a0:6a:1a:62:e4:b8: 23:1b:3e:98:d7:cd:5a:54:a4:4a:83:a8:26:e6:ce: b6:06:7a:5a:37:45:8a:49:fc:d1:a7:be:9a:2b:73: ad:ac:fc:78:b8:b2:99:ca:17:c1:57:ff:0a:61:28: 4b:55:48:0a:e3:ba:d7:bd:3f:64:66:08:b7:5e:0c: 42:ee:22:12:19:ef:32:5f:1b:fa:46:5c:ce:ea:f6: 36:cb:62:42:25:f9:d9:64:1b:ee:18:be:5e:44:45: 30:9f:6b:c4:d3:01:6b:1f:10:77:9a:09:1d:3c:d6: 46:de:8c:1d:db:a9:7a:82:71:0c:15:75:b1:78:e3: 54:f8:f3:2c:aa:0a:c6:c2:1c:4c:b9:ce:30:6f:93: 00:4c:34:25:c2:80:45:22:3d:bc:83:b1:7a:00:29: 41:73:57:db:fa:97:34:51:30:a8:70:00:e0:89:e2: ed:0d:f9:5e:b3:5c:69:a1:40:5d:c7:ef:75:9e:e6: 19:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:7B:FC:EA:5F:92:21:7F:5F:C3:B7:B8:74:3D:8D:E1:ED:95:10:26 X509v3 Authority Key Identifier: keyid:32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/608C129E33E011ED979ED20EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 120.29.0.0/19 121.50.192.0-121.50.215.255 203.10.89.0/24 203.13.68.0/24 203.13.70.0/24 203.22.124.0/22 203.30.137.0/24 203.144.4.0-203.144.31.255 Signature Algorithm: sha256WithRSAEncryption 65:8b:b4:fb:81:3e:1a:fd:98:de:d0:d5:7a:90:de:41:a8:c1: fc:4d:d6:88:dc:d2:01:71:c1:f6:05:3f:cb:74:bd:b0:c4:a0: 8d:db:ee:d5:09:e4:85:05:68:b7:2d:66:fc:2a:43:0d:ec:68: 47:35:45:2d:c4:49:6b:cc:6d:8e:6a:59:44:2d:f6:5b:9d:11: 53:a9:ab:76:59:2d:d4:61:10:6e:e6:b0:bf:2f:58:f2:cd:53: fc:65:d2:d7:ce:69:25:f8:a4:cb:0d:f4:d3:37:3a:02:0f:47: 8a:04:1b:ee:36:8e:f4:7a:07:80:af:57:62:ad:17:1e:8a:a1: bf:fe:10:9b:92:1f:ce:82:09:22:91:03:7d:52:ba:60:5f:f7: a0:ae:60:75:6a:65:49:0a:69:32:69:95:8b:ec:df:c2:ec:ab: e3:b5:6d:01:e3:7f:31:a3:48:37:66:aa:3f:a2:9b:1b:6d:84: 7c:d5:93:22:1a:7b:0b:1e:4c:9a:75:88:7c:07:84:12:db:41: b9:49:9b:38:8f:4a:6b:e9:21:f2:92:a2:6a:4e:51:2a:4a:51: 95:92:b4:04:dc:ec:82:46:96:e4:ce:51:43:7d:6b:ba:c3:05: c4:38:9d:d2:e0:7d:f2:6b:57:14:26:e5:cc:9b:4b:58:c4:1a: fa:32:ce:73 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgICNSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JGNDcxMTAvBgNVBAUTKDMyNjM3MUUzOTk4MjRGODAwNEVEOTY3NTY4MTk3NjA4 ODFCN0NEOTYwHhcNMjYwMzA0MTUxMDU4WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE4NGI4Mi01YjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6JXt0TEyZOLL5iZm3tbpBCf7+CSwpvvelOzfHshsRKGludhsJ+npoaa7SUb hKvbhQ0syzJgYae89I7MN0veBNBc4Cqgahpi5LgjGz6Y181aVKRKg6gm5s62Bnpa N0WKSfzRp76aK3OtrPx4uLKZyhfBV/8KYShLVUgK47rXvT9kZgi3XgxC7iISGe8y Xxv6RlzO6vY2y2JCJfnZZBvuGL5eREUwn2vE0wFrHxB3mgkdPNZG3owd26l6gnEM FXWxeONU+PMsqgrGwhxMuc4wb5MATDQlwoBFIj28g7F6AClBc1fb+pc0UTCocADg ieLtDfles1xpoUBdx+91nuYZiQIDAQABo4ICmjCCApYwHQYDVR0OBBYEFDB7/Opf kiF/X8O3uHQ9jeHtlRAmMB8GA1UdIwQYMBaAFDJjceOZgk+ABO2WdWgZdgiBt82W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkY0Ny8zNzBDQTJDMDFE OEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0QUU3WloxYUJsMkNJRzN6 WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tTng0NW1DVDRBRTdaWjFhQmwyQ0lHM3paWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0JGNDcvMzcwQ0EyQzAxRDhBMTFFMkI3OUIxM0U0MDhCMDJDRDIvNjA4QzEyOUUz M0UwMTFFRDk3OUVEMjBFQzRGOUFFMDIucm9hMFkGCCsGAQUFBwEHAQH/BEowSDBG BAIAATBAAwQFeB0AMAwDBAZ5MsADBAN5MtADBADLClkDBADLDUQDBADLDUYDBALL FnwDBADLHokwDAMEAsuQBAMEBcuQADANBgkqhkiG9w0BAQsFAAOCAQEAZYu0+4E+ Gv2Y3tDVepDeQajB/E3WiNzSAXHB9gU/y3S9sMSgjdvu1QnkhQVoty1m/CpDDexo RzVFLcRJa8xtjmpZRC32W50RU6mrdlkt1GEQbuawvy9Y8s1T/GXS185pJfikyw30 0zc6Ag9HigQb7jaO9HoHgK9XYq0XHoqhv/4Qm5IfzoIJIpEDfVK6YF/3oK5gdWpl SQppMmmVi+zfwuyr47VtAeN/MaNIN2aqP6KbG22EfNWTIhp7Cx5MmnWIfAeEEttB uUmbOI9Ka+kh8pKiak5RKkpRlZK0BNzsgkaW5M5RQ31rusMFxDid0uB98mtXFCbl zJtLWMQa+jLOcw== -----END CERTIFICATE-----Generated at Thu Mar 26 05:38:08 2026 by rpki-client