$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/50AF1E205CD411EEBADBCF7DC4F9AE02.roa File: 50AF1E205CD411EEBADBCF7DC4F9AE02.roa (raw, json) Hash identifier: e3yNZFVgkQCVhCm/QmSqoyQKXUJmq53Q3jA7sKU7YTQ= Subject key identifier: 80:7C:02:B4:A8:A3:E9:7B:22:C1:9A:A9:7D:B2:67:28:87:FA:BD:E1 Certificate issuer: /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Certificate serial: 02F3 Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/50AF1E205CD411EEBADBCF7DC4F9AE02.roa Signing time: Tue 17 Mar 2026 01:34:45 +0000 ROA not before: Tue 17 Mar 2026 01:34:45 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 3758 IP address blocks: 166.120.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 755 (0x2f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B47, serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Validity Not Before: Mar 17 01:34:45 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69b8afb5-a674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4d:46:6e:50:15:f5:8b:43:ce:76:7c:55:b8: 9e:37:23:fd:6c:81:82:c3:d6:a9:d4:ec:b4:42:b8: 75:11:10:d2:35:80:80:ab:fa:1d:e2:4e:74:e9:b1: 24:97:00:4b:55:27:86:a9:6a:58:84:6a:18:a0:90: a0:1a:b2:78:59:75:e5:77:d7:dc:d2:c9:c0:b4:a8: 28:fc:27:8a:d0:be:bc:92:f7:2a:32:cf:f0:b0:dd: 52:46:9c:81:d0:03:08:da:05:ab:5c:d7:6d:f8:3b: 1e:76:a6:69:c3:8a:12:8e:1a:11:c9:66:66:40:96: 52:19:04:3a:30:2c:98:08:61:73:cf:0c:86:44:d4: 01:5a:61:a0:47:9c:1e:a6:b3:41:70:91:10:d0:72: 32:3e:33:6f:75:8d:21:b8:24:d6:8a:ac:00:8c:dd: be:d7:1b:0a:ba:1e:be:62:26:e9:e5:9f:84:5a:02: 14:94:87:25:2d:7f:70:b3:41:2c:5d:49:56:1e:47: 84:31:aa:7b:a3:ad:e5:bc:dc:4c:8b:d8:6e:f3:11: 0a:b8:6b:ee:63:86:4e:82:a3:88:12:98:aa:b9:d0: 33:a9:67:4c:c8:55:da:72:36:e0:31:56:b5:15:8a: de:3d:f1:e6:af:59:cc:bf:de:38:92:39:85:14:bc: dc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:7C:02:B4:A8:A3:E9:7B:22:C1:9A:A9:7D:B2:67:28:87:FA:BD:E1 X509v3 Authority Key Identifier: keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/50AF1E205CD411EEBADBCF7DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 166.120.129.0/24 Signature Algorithm: sha256WithRSAEncryption 01:b4:d1:ce:a7:94:bc:91:89:9b:2c:ea:f2:06:9d:4c:b7:6c: 30:41:b6:cc:7b:2c:6c:e8:58:6b:e0:e9:73:06:64:ab:2a:ff: 53:14:e9:8d:b2:95:cc:20:2f:b2:29:c3:77:d3:75:28:02:5c: e7:1e:ab:f0:2f:ed:08:d4:84:14:1d:bb:70:24:2f:a1:3c:de: 31:86:9c:31:63:b5:84:f2:04:fc:28:bb:8e:e6:f6:5f:5b:35: 81:58:9f:d4:c4:38:fe:69:b4:30:ab:bf:cc:47:f7:77:20:bc: 78:d0:f9:73:9a:2a:89:69:79:1b:15:93:ba:71:96:ba:26:30: 20:3a:a6:0d:d6:2e:7f:af:da:51:ee:b0:2d:3c:f1:a8:11:58: 1c:3d:f3:ee:29:10:14:62:9f:54:d9:47:b7:8a:05:dc:61:4d: 93:06:dd:f4:3b:43:49:c8:6f:8b:96:0d:40:e4:ef:db:51:c1: 11:86:da:c0:ef:be:42:c1:ee:0c:d2:57:90:38:71:5b:81:c9: 02:35:ff:7d:59:c8:6d:9b:e8:fe:80:09:c8:45:b9:82:84:13: bc:de:71:98:97:0a:cd:8c:59:fc:1f:3b:1e:74:75:cd:00:8f: 3f:86:8d:5c:53:54:b5:de:59:64:44:44:02:b4:d2:84:92:a8: a4:7d:c4:86 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNDcxMTAvBgNVBAUTKDE3RDVGRTMyM0VCRkQ5QThEMzQ0RTc3QjczNzk5QThF NzU2MjQzNTIwHhcNMjYwMzE3MDEzNDQ1WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWI4YWZiNS1hNjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzk1GblAV9YtDznZ8VbieNyP9bIGCw9ap1Oy0Qrh1ERDSNYCAq/od4k506bEk lwBLVSeGqWpYhGoYoJCgGrJ4WXXld9fc0snAtKgo/CeK0L68kvcqMs/wsN1SRpyB 0AMI2gWrXNdt+DsedqZpw4oSjhoRyWZmQJZSGQQ6MCyYCGFzzwyGRNQBWmGgR5we prNBcJEQ0HIyPjNvdY0huCTWiqwAjN2+1xsKuh6+Yibp5Z+EWgIUlIclLX9ws0Es XUlWHkeEMap7o63lvNxMi9hu8xEKuGvuY4ZOgqOIEpiqudAzqWdMyFXacjbgMVa1 FYrePfHmr1nMv944kjmFFLzc5wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIB8ArSo o+l7IsGaqX2yZyiH+r3hMB8GA1UdIwQYMBaAFBfV/jI+v9mo00Tne3N5mo51YkNS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI0Ny9FODhFOUM3RTMz QUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJhalRST2Q3YzNtYWpuVmlR MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Y5WC1NajZfMmFqVFJPZDdjM21ham5WaVExSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjJCNDcvRTg4RTlDN0UzM0FGMTFFREI2MTA3NDM0QzRGOUFFMDIvNTBBRjFFMjA1 Q0Q0MTFFRUJBREJDRjdEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQApniBMA0GCSqGSIb3DQEBCwUAA4IBAQABtNHOp5S8kYmbLOryBp1M t2wwQbbMeyxs6Fhr4OlzBmSrKv9TFOmNspXMIC+yKcN303UoAlznHqvwL+0I1IQU HbtwJC+hPN4xhpwxY7WE8gT8KLuO5vZfWzWBWJ/UxDj+abQwq7/MR/d3ILx40Plz miqJaXkbFZO6cZa6JjAgOqYN1i5/r9pR7rAtPPGoEVgcPfPuKRAUYp9U2Ue3igXc YU2TBt30O0NJyG+Llg1A5O/bUcERhtrA775Cwe4M0leQOHFbgckCNf99Wchtm+j+ gAnIRbmChBO83nGYlwrNjFn8HzsedHXNAI8/ho1cU1S13llkREQCtNKEkqikfcSG -----END CERTIFICATE-----Generated at Thu Mar 26 12:17:16 2026 by rpki-client