$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ACFAE180970E11EF9CC7623CC4F9AE02.roa File: ACFAE180970E11EF9CC7623CC4F9AE02.roa (raw, json) Hash identifier: bZzolfmbCovbz7YFqFNgPEzhpv1IVZt9wwhhANcwKSA= Subject key identifier: 35:F8:23:1D:92:6C:A8:46:7F:34:5B:67:18:36:8A:11:AE:AE:A9:92 Certificate issuer: /CN=A91F6FC3/serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7 Certificate serial: 3564 Authority key identifier: 66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ACFAE180970E11EF9CC7623CC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:26:19 +0000 ROA not before: Wed 26 Nov 2025 15:00:45 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 9301 IP address blocks: 122.200.164.0/24 maxlen: 24 122.200.165.0/24 maxlen: 24 122.200.168.0/24 maxlen: 24 122.200.169.0/24 maxlen: 24 122.200.173.0/24 maxlen: 24 203.4.162.0/24 maxlen: 24 203.5.127.0/24 maxlen: 24 203.31.57.0/24 maxlen: 24 203.31.101.0/24 maxlen: 24 203.33.71.0/24 maxlen: 24 203.57.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13668 (0x3564) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6FC3, serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7 Validity Not Before: Nov 26 15:00:45 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a45a9b-d5be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:50:d1:10:35:d6:1d:68:40:2d:8b:7f:bd:da: bf:be:62:7e:ee:68:bc:17:c6:82:a6:91:6e:3d:4e: 9b:d8:fb:0a:63:fb:d3:4e:bc:bc:94:fb:5f:ab:ec: 24:d8:4e:df:39:90:23:81:b2:e1:4b:cf:d3:a0:6e: 6d:8e:43:c2:52:1f:3d:93:1c:4a:c5:9a:3e:62:d6: c9:41:d7:27:f3:77:68:ac:b7:f2:46:a5:7f:bd:bb: 32:26:90:f8:7f:ce:2d:ac:e4:b4:5d:c1:85:ba:98: 60:4d:2c:0d:10:9b:29:7c:d1:8d:1f:b2:f9:e7:08: f2:50:ad:f1:49:b8:d0:39:52:04:cf:b8:a0:bd:3e: d6:32:99:7a:1a:55:98:e1:ed:89:35:04:80:ba:66: 6e:74:31:23:d0:92:f1:02:83:bb:e4:25:94:a9:1a: 3e:0f:fc:53:97:9f:e7:d8:6f:2c:8f:6d:f2:40:0d: 9c:b7:5b:0f:7e:d7:d0:e3:37:b6:19:c9:ba:e0:cb: 32:fa:b1:c4:de:3b:6d:66:89:13:95:19:fb:44:e7: ef:23:15:96:eb:1f:ab:29:57:e9:90:a2:f4:ac:7c: 35:4c:09:88:4a:4b:4f:e6:da:74:88:0c:0f:b8:5b: eb:b4:c9:00:26:39:64:65:1f:8e:bc:6a:ad:71:a4: 88:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F8:23:1D:92:6C:A8:46:7F:34:5B:67:18:36:8A:11:AE:AE:A9:92 X509v3 Authority Key Identifier: keyid:66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ACFAE180970E11EF9CC7623CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 122.200.164.0/23 122.200.168.0/23 122.200.173.0/24 203.4.162.0/24 203.5.127.0/24 203.31.57.0/24 203.31.101.0/24 203.33.71.0/24 203.57.79.0/24 Signature Algorithm: sha256WithRSAEncryption 92:a4:35:f9:f8:b6:41:10:7c:e9:80:bd:12:87:95:d6:04:38: 92:e4:f4:d0:ee:be:c6:ef:90:56:61:18:e8:84:84:6b:fc:e6: 63:51:0b:ca:18:47:04:33:fe:9d:78:f2:45:a0:ed:0e:46:6c: f8:ec:aa:96:c4:04:cf:e9:b4:c3:14:45:70:38:9a:d1:17:50: 33:30:31:6f:62:88:20:12:33:91:8b:b8:68:c2:19:b9:a5:74: 27:a9:a2:8c:77:9b:28:ed:5b:80:d3:8e:6e:e4:b8:36:14:e7: 8b:93:ef:a9:6f:fb:74:eb:88:6e:83:6d:16:51:3a:75:da:e1: 1c:0e:9d:8c:e6:5a:92:5f:d0:1e:6e:cc:45:84:49:3e:e7:85: 7e:bb:a2:df:41:eb:c9:26:06:10:ee:c0:7f:db:fa:85:3e:df: 92:c0:d0:de:a4:03:4e:ea:6b:d4:0b:2d:9f:e5:06:8b:4e:64: aa:7e:9d:5b:14:dc:19:8d:f2:58:1b:25:20:d7:3e:b5:06:51: a6:d3:06:3f:b2:73:10:13:0c:b0:8a:7d:3e:70:b4:22:78:0b: 0d:9b:5e:ea:06:05:8b:07:90:56:fa:b7:b0:4f:96:a8:91:45: 9b:b7:6c:e9:87:73:50:50:61:9d:47:c4:bd:d3:ab:16:cb:2a: 45:28:87:90 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgICNWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZGQzMxMTAvBgNVBAUTKDY2MDI1OTc2Qjc1RjVDMjlGNDJDMUQ4MENGNDg4OEY3 RDQ2MDU4RDcwHhcNMjUxMTI2MTUwMDQ1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWE5Yi1kNWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnlDREDXWHWhALYt/vdq/vmJ+7mi8F8aCppFuPU6b2PsKY/vTTry8lPtfq+wk 2E7fOZAjgbLhS8/ToG5tjkPCUh89kxxKxZo+YtbJQdcn83dorLfyRqV/vbsyJpD4 f84trOS0XcGFuphgTSwNEJspfNGNH7L55wjyUK3xSbjQOVIEz7igvT7WMpl6GlWY 4e2JNQSAumZudDEj0JLxAoO75CWUqRo+D/xTl5/n2G8sj23yQA2ct1sPftfQ4ze2 Gcm64Msy+rHE3jttZokTlRn7ROfvIxWW6x+rKVfpkKL0rHw1TAmISktP5tp0iAwP uFvrtMkAJjlkZR+OvGqtcaSIDQIDAQABo4ICkDCCAowwHQYDVR0OBBYEFDX4Ix2S bKhGfzRbZxg2ihGurqmSMB8GA1UdIwQYMBaAFGYCWXa3X1wp9CwdgM9IiPfUYFjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkZDMy9GQzkwNzgwMjFE OTIxMUUyQjNCQzJDRjYwOEIwMkNEMi9aZ0paZHJkZlhDbjBMQjJBejBpSTk5UmdX TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnSlpkcmRmWENuMExCMkF6MGlJOTlSZ1dOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjZGQzMvRkM5MDc4MDIxRDkyMTFFMkIzQkMyQ0Y2MDhCMDJDRDIvQUNGQUUxODA5 NzBFMTFFRjlDQzc2MjNDQzRGOUFFMDIucm9hME8GCCsGAQUFBwEHAQH/BEAwPjA8 BAIAATA2AwQBesikAwQBesioAwQAesitAwQAywSiAwQAywV/AwQAyx85AwQAyx9l AwQAyyFHAwQAyzlPMA0GCSqGSIb3DQEBCwUAA4IBAQCSpDX5+LZBEHzpgL0Sh5XW BDiS5PTQ7r7G75BWYRjohIRr/OZjUQvKGEcEM/6dePJFoO0ORmz47KqWxATP6bTD FEVwOJrRF1AzMDFvYoggEjORi7howhm5pXQnqaKMd5so7VuA045u5Lg2FOeLk++p b/t064hug20WUTp12uEcDp2M5lqSX9AebsxFhEk+54V+u6LfQevJJgYQ7sB/2/qF Pt+SwNDepANO6mvUCy2f5QaLTmSqfp1bFNwZjfJYGyUg1z61BlGm0wY/snMQEwyw in0+cLQieAsNm17qBgWLB5BW+rewT5aokUWbt2zph3NQUGGdR8S906sWyypFKIeQ -----END CERTIFICATE-----Generated at Thu Mar 26 08:28:42 2026 by rpki-client