$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C39CEEAAE17C11EC93AB7473C4F9AE02.roa File: C39CEEAAE17C11EC93AB7473C4F9AE02.roa (raw, json) Hash identifier: tHEHG/caVQ9K1/+ak7AD2NzjFj4563h0/9jvSlrenPI= Subject key identifier: 5A:43:EB:F3:E2:00:3B:96:84:A0:97:18:E9:0B:33:0D:CA:C3:FB:B0 Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19 Certificate serial: 072D Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C39CEEAAE17C11EC93AB7473C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:14:43 +0000 ROA not before: Wed 27 Aug 2025 01:05:35 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 133481 IP address blocks: 203.170.208.0/24 maxlen: 24 203.170.209.0/24 maxlen: 24 203.170.212.0/24 maxlen: 24 203.170.213.0/24 maxlen: 24 203.170.216.0/24 maxlen: 24 203.170.217.0/24 maxlen: 24 203.170.218.0/24 maxlen: 24 203.170.219.0/24 maxlen: 24 203.170.220.0/24 maxlen: 24 203.170.221.0/24 maxlen: 24 203.170.222.0/24 maxlen: 24 203.170.223.0/24 maxlen: 24 203.170.240.0/24 maxlen: 24 203.170.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1837 (0x72d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19 Validity Not Before: Aug 27 01:05:35 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a49023-d6d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:81:3e:1c:be:a8:03:50:3a:9d:b8:60:95:03: 14:0b:b8:fb:55:33:07:35:43:62:d1:e1:60:13:67: 08:47:a7:58:18:16:11:64:85:fb:1a:a2:e2:02:b5: fd:f0:e2:24:26:38:19:e2:23:4e:7a:f2:e6:a5:97: 70:69:10:4f:67:d0:10:1b:bd:e0:f3:82:8f:27:b8: 59:94:7d:7d:af:3c:b6:2e:02:fe:ab:d4:8c:23:91: d9:ff:5c:46:3e:a6:50:60:d7:01:1c:ce:a9:46:43: ac:a3:8a:ff:f7:df:4a:95:37:5b:8f:6e:da:bd:c8: 8c:24:97:d5:58:b2:91:c5:61:00:e7:3d:b4:5f:28: 86:1c:15:06:da:55:24:93:0a:42:e2:35:e8:a1:06: 41:15:2d:c6:1e:69:76:31:48:11:96:1e:36:8a:e6: 34:ac:ec:4d:65:75:3e:70:44:ee:fc:07:bd:bc:61: ea:8a:c2:27:dc:80:33:ab:a4:ab:f4:24:a6:ff:25: 66:e0:ee:85:37:8b:db:5a:98:4d:95:0d:85:84:9d: 3d:60:5b:35:45:e7:71:ed:3c:64:6b:ff:54:89:44: c3:ba:88:0f:71:37:55:e9:12:f4:c2:8c:fa:76:00: a6:7b:00:5c:7a:e8:7e:b3:78:ac:07:5a:ac:78:06: cf:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:43:EB:F3:E2:00:3B:96:84:A0:97:18:E9:0B:33:0D:CA:C3:FB:B0 X509v3 Authority Key Identifier: keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C39CEEAAE17C11EC93AB7473C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.170.208.0/23 203.170.212.0/23 203.170.216.0/21 203.170.240.0/23 Signature Algorithm: sha256WithRSAEncryption 36:63:74:81:80:72:5c:cc:bf:07:42:9d:18:f4:05:10:ac:fc: 02:82:e1:01:cc:cb:1a:11:8d:70:b5:2e:f1:3d:e0:12:31:d3: 32:00:a3:0b:78:7e:08:bd:be:92:29:a8:06:98:ae:bf:af:e7: 80:0e:41:78:c6:2e:2c:fe:35:03:5d:e8:68:e6:76:e2:be:40: 06:51:19:04:50:95:be:07:9f:9f:2a:ff:c2:97:f7:b6:ec:b2: 44:1b:76:b9:32:de:e5:8a:b2:c1:48:5b:31:a7:7a:63:69:0d: f5:7b:59:aa:14:d4:1d:64:d2:b5:8c:18:76:b8:66:12:6c:3a: 14:46:95:17:dd:fe:e2:29:9c:d5:eb:78:f6:0e:b5:12:c4:c8: 6f:80:dd:05:ab:7d:6e:5d:5c:b2:f3:a0:89:28:6c:1f:14:3f: 12:b1:d0:c9:cc:03:1d:af:39:73:af:9b:9e:80:fd:33:d6:1e: 5a:e8:9b:f8:6b:37:77:6c:12:e7:9f:e6:fc:4a:1b:af:d5:79: 3c:eb:d7:f6:0b:74:c7:0a:85:68:20:d7:06:39:9a:9c:9f:b0: c0:18:d7:0c:24:ac:0f:23:22:18:96:45:51:79:b6:2c:7b:ab: f0:a2:f9:e4:84:66:3b:4f:ea:8a:5f:e3:f9:32:7d:64:ed:92: 0c:19:6d:69 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICBy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyQ0ExMTAvBgNVBAUTKDc3QTIwMUM1OEVCM0I0MjA4QzkxQkE3RUNFRDkzNkU1 OTVFNjFBMTkwHhcNMjUwODI3MDEwNTM1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTAyMy1kNmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4E+HL6oA1A6nbhglQMUC7j7VTMHNUNi0eFgE2cIR6dYGBYRZIX7GqLiArX9 8OIkJjgZ4iNOevLmpZdwaRBPZ9AQG73g84KPJ7hZlH19rzy2LgL+q9SMI5HZ/1xG PqZQYNcBHM6pRkOso4r/999KlTdbj27avciMJJfVWLKRxWEA5z20XyiGHBUG2lUk kwpC4jXooQZBFS3GHml2MUgRlh42iuY0rOxNZXU+cETu/Ae9vGHqisIn3IAzq6Sr 9CSm/yVm4O6FN4vbWphNlQ2FhJ09YFs1Redx7Txka/9UiUTDuogPcTdV6RL0woz6 dgCmewBceuh+s3isB1qseAbPVQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFFpD6/Pi ADuWhKCXGOkLMw3Kw/uwMB8GA1UdIwQYMBaAFHeiAcWOs7QgjJG6fs7ZNuWV5hoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9GNUVEQzdGQzhB NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi9kNklCeFk2enRDQ01rYnAtenRrMjVaWG1H aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q2SUJ4WTZ6dENDTWticC16dGsyNVpYbUdoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjYyQ0EvRjVFREM3RkM4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvQzM5Q0VFQUFF MTdDMTFFQzkzQUI3NDczQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQBy6rQAwQBy6rUAwQDy6rYAwQBy6rwMA0GCSqGSIb3DQEBCwUAA4IB AQA2Y3SBgHJczL8HQp0Y9AUQrPwCguEBzMsaEY1wtS7xPeASMdMyAKMLeH4Ivb6S KagGmK6/r+eADkF4xi4s/jUDXeho5nbivkAGURkEUJW+B5+fKv/Cl/e27LJEG3a5 Mt7lirLBSFsxp3pjaQ31e1mqFNQdZNK1jBh2uGYSbDoURpUX3f7iKZzV63j2DrUS xMhvgN0Fq31uXVyy86CJKGwfFD8SsdDJzAMdrzlzr5uegP0z1h5a6Jv4azd3bBLn n+b8Shuv1Xk869f2C3THCoVoINcGOZqcn7DAGNcMJKwPIyIYlkVRebYse6vwovnk hGY7T+qKX+P5Mn1k7ZIMGW1p -----END CERTIFICATE-----Generated at Mon Mar 2 02:05:00 2026 by rpki-client