$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/A87BC510622E11EC92E1870CC4F9AE02.roa File: A87BC510622E11EC92E1870CC4F9AE02.roa (raw, json) Hash identifier: ILh6gBpWmKd6LulzCB0yMdg50i5ZW69Oilb8luyg8cA= Subject key identifier: D7:E8:16:51:AA:CE:00:0D:28:41:56:E3:BB:9B:C2:B2:6A:6D:73:94 Certificate issuer: /CN=A91EEB30/serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC Certificate serial: 04C3 Authority key identifier: 19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/A87BC510622E11EC92E1870CC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:59:31 +0000 ROA not before: Sun 27 Jul 2025 00:35:44 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 38259 IP address blocks: 122.248.0.0/20 maxlen: 20 122.248.0.0/24 maxlen: 24 122.248.1.0/24 maxlen: 24 202.84.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1219 (0x4c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEB30, serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC Validity Not Before: Jul 27 00:35:44 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a40e03-295f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:65:a5:1e:74:5c:0c:bf:fa:e5:fa:aa:60:79: 88:3b:c2:57:75:94:12:55:5c:f7:90:98:90:d0:87: 5c:3b:6d:a0:8b:99:80:8a:3f:c6:a9:ca:db:97:f1: b5:c6:c9:2c:38:88:56:e7:6e:cb:4f:4c:b7:22:c1: 8a:52:ff:ae:ce:ba:38:cf:cb:24:e7:13:e4:93:93: 8b:b1:6c:ef:d8:f3:b9:a5:82:bb:6d:e6:74:ef:e4: 17:9d:63:4d:98:6c:11:60:b1:81:8a:cc:42:81:f0: 29:fd:cf:43:86:a8:43:67:26:a5:9a:98:9e:e5:ba: d9:e1:88:2d:7b:25:0d:a8:c2:86:9e:99:fe:a7:ee: 83:92:f2:77:bb:ab:dd:65:bb:f8:b9:8d:95:07:64: ea:29:90:51:e3:cf:5d:78:ce:13:62:e3:80:11:d6: 99:0c:2d:60:bc:33:cf:24:44:dc:f0:14:f5:b1:2f: 7b:f5:37:31:79:2c:05:ac:95:0c:b5:ea:23:a9:ee: a5:a6:27:13:a1:7a:c2:7f:d4:22:b9:38:61:dc:db: 74:ca:ed:bb:1c:60:a0:67:33:67:24:3f:cd:8d:af: 14:49:d9:f3:ac:c4:c6:87:6e:b2:9d:43:49:58:53: 5c:47:89:80:9b:08:1a:2f:83:4b:67:6a:df:b1:a9: 9f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E8:16:51:AA:CE:00:0D:28:41:56:E3:BB:9B:C2:B2:6A:6D:73:94 X509v3 Authority Key Identifier: keyid:19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/A87BC510622E11EC92E1870CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 122.248.0.0/20 202.84.64.0/21 Signature Algorithm: sha256WithRSAEncryption 26:54:0a:e3:2d:29:88:e4:ba:47:00:31:d9:0d:ce:74:15:fc: 94:4e:28:5c:92:c0:15:b7:75:6b:6a:3d:88:37:be:b4:6a:03: bd:02:f1:e3:a5:f0:ff:3a:68:25:e3:66:20:51:85:01:bb:22: ea:29:cb:bc:83:6d:24:f6:4c:98:be:bf:10:67:8f:25:e7:43: 92:48:49:97:0b:77:fa:f1:1d:4c:d6:e2:b4:62:92:39:77:ef: 30:8c:f1:51:7b:3c:e3:5d:6f:7b:13:f5:30:17:52:3c:a3:2a: fa:5a:b9:93:4b:de:45:90:5f:85:75:a0:74:62:57:0c:c5:c4: 5c:ec:e6:05:b6:8c:0c:d9:0b:00:4f:ce:c5:68:72:06:d0:5a: d4:1a:ba:02:a8:5a:36:79:b4:d1:13:c6:a9:0f:0a:3e:6a:bd: d5:72:b1:38:80:0b:e0:f5:f6:50:34:30:f5:31:b4:a5:8b:f8: 57:0c:f8:3f:85:8d:26:84:0d:d8:65:f0:6b:44:f6:59:ef:87: 3c:2b:eb:3b:5f:94:54:ba:9c:25:33:1f:be:07:fa:c2:df:58: 83:d1:4b:03:30:26:0a:f2:f4:59:32:0b:1c:37:bd:c5:e0:14: 83:d2:fd:0a:d8:c2:ee:9a:c0:5a:44:fb:20:70:18:0f:71:7d: b3:b6:63:20 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVCMzAxMTAvBgNVBAUTKDE5QUUzMUY5NTQ4MTdCQUU2MjA4QzM3MjExMDhCOEU4 RkY4QjNGQkMwHhcNMjUwNzI3MDAzNTQ0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGUwMy0yOTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2WlHnRcDL/65fqqYHmIO8JXdZQSVVz3kJiQ0IdcO22gi5mAij/Gqcrbl/G1 xsksOIhW527LT0y3IsGKUv+uzro4z8sk5xPkk5OLsWzv2PO5pYK7beZ07+QXnWNN mGwRYLGBisxCgfAp/c9DhqhDZyalmpie5brZ4YgteyUNqMKGnpn+p+6DkvJ3u6vd Zbv4uY2VB2TqKZBR489deM4TYuOAEdaZDC1gvDPPJETc8BT1sS979TcxeSwFrJUM teojqe6lpicToXrCf9QiuThh3Nt0yu27HGCgZzNnJD/Nja8USdnzrMTGh26ynUNJ WFNcR4mAmwgaL4NLZ2rfsamf+QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFNfoFlGq zgANKEFW47ubwrJqbXOUMB8GA1UdIwQYMBaAFBmuMflUgXuuYgjDchEIuOj/iz+8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUIzMC85RENFQjYzODYy MkMxMUVDODE4RUEwMEJDNEY5QUUwMi9HYTR4LVZTQmU2NWlDTU55RVFpNDZQLUxQ N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dhNHgtVlNCZTY1aUNNTnlFUWk0NlAtTFA3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUVCMzAvOURDRUI2Mzg2MjJDMTFFQzgxOEVBMDBCQzRGOUFFMDIvQTg3QkM1MTA2 MjJFMTFFQzkyRTE4NzBDQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQEevgAAwQDylRAMA0GCSqGSIb3DQEBCwUAA4IBAQAmVArjLSmI5LpH ADHZDc50FfyUTihcksAVt3Vraj2IN760agO9AvHjpfD/Omgl42YgUYUBuyLqKcu8 g20k9kyYvr8QZ48l50OSSEmXC3f68R1M1uK0YpI5d+8wjPFRezzjXW97E/UwF1I8 oyr6WrmTS95FkF+FdaB0YlcMxcRc7OYFtowM2QsAT87FaHIG0FrUGroCqFo2ebTR E8apDwo+ar3VcrE4gAvg9fZQNDD1MbSli/hXDPg/hY0mhA3YZfBrRPZZ74c8K+s7 X5RUupwlMx++B/rC31iD0UsDMCYK8vRZMgscN73F4BSD0v0K2MLumsBaRPsgcBgP cX2ztmMg -----END CERTIFICATE-----Generated at Thu Mar 26 08:57:20 2026 by rpki-client