$ rpki-client -vvf rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/DD643EBCE00C11ED8C71C709C4F9AE02.roa File: DD643EBCE00C11ED8C71C709C4F9AE02.roa (raw, json) Hash identifier: XhBS8XISfFKFYm/i2g3VuZVNJ/6YSjzLu6944o2vZmU= Subject key identifier: 6A:30:00:D3:AB:2E:65:85:36:32:2E:93:00:0F:80:AA:A7:01:FC:60 Certificate issuer: /CN=A91324D4/serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1 Certificate serial: 06D0 Authority key identifier: BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/DD643EBCE00C11ED8C71C709C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:05:10 +0000 ROA not before: Fri 30 Jan 2026 22:19:13 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 150683 IP address blocks: 203.215.167.0/24 maxlen: 24 203.215.174.0/24 maxlen: 24 203.215.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1744 (0x6d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91324D4, serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1 Validity Not Before: Jan 30 22:19:13 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a471c6-abd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3c:29:2a:4b:7f:fd:00:a7:51:58:89:3e:82: 73:f5:86:fc:66:ff:14:a2:8d:04:42:20:d1:f2:78: b9:ac:53:dd:64:f8:e8:09:b5:57:37:98:c9:3a:5e: 69:16:9b:56:fc:c8:a5:13:00:1a:95:94:cb:7b:29: f4:79:d3:4c:9f:77:97:5f:82:d5:a8:bd:92:ec:18: 8d:a8:04:58:de:99:ce:9e:02:1e:38:59:a1:b9:22: 24:be:79:51:02:98:e8:c6:d4:8d:4d:b1:50:c2:89: 93:f0:18:d3:ba:5f:d3:fb:9d:2c:a9:2a:4a:bd:72: fe:c1:32:2b:57:3c:9d:f1:b3:4b:f0:7e:8a:68:22: db:26:55:ff:38:30:e4:07:4c:44:93:d8:0c:db:76: 01:04:fc:46:9e:5e:d3:7e:f8:52:3a:97:ef:a0:b4: 5f:bc:49:74:15:f1:d1:3d:67:2f:ed:1b:b2:6e:10: 62:6d:a1:41:54:77:70:2d:63:59:fa:fc:55:33:0e: d5:c6:e9:5c:88:fe:1a:17:bb:c9:3e:98:89:c0:2a: a3:8d:13:3d:67:9d:eb:44:95:05:8f:58:20:00:b7: ff:12:86:3b:34:65:2a:70:4f:7f:ee:2d:fe:96:a5: 95:47:07:0e:d8:0b:c1:d4:86:a9:e9:b5:76:64:16: 2b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:30:00:D3:AB:2E:65:85:36:32:2E:93:00:0F:80:AA:A7:01:FC:60 X509v3 Authority Key Identifier: keyid:BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/DD643EBCE00C11ED8C71C709C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.215.167.0/24 203.215.174.0/24 203.215.178.0/24 Signature Algorithm: sha256WithRSAEncryption 11:8f:b6:d8:1e:74:84:21:5f:61:09:54:ae:ff:87:fa:7a:1b: 7c:7c:12:bd:30:d7:94:e3:16:f9:7b:06:68:47:98:69:3a:35: b2:28:8c:9f:e5:0d:7c:38:01:80:c2:5b:61:92:19:9a:be:b7: ac:08:6a:f7:8f:9b:80:ee:23:26:6e:d0:28:cd:a7:02:3b:e3: e4:5d:da:71:54:b2:c3:61:ec:30:87:26:f7:72:da:4f:a3:d5: 5b:53:08:4c:61:00:d2:69:0b:80:03:fc:38:a8:24:80:83:a7: c3:13:33:d7:aa:4b:6c:a1:34:b1:f1:3c:d3:b9:f7:a0:61:28: 1d:ad:be:54:4a:05:ea:44:3e:39:b7:3d:fc:ec:21:28:39:f7: 17:2d:9c:71:ab:86:dc:a5:50:a8:93:9a:48:db:78:c3:61:e6: aa:c6:2f:75:d2:25:6b:7f:78:c8:6b:ca:58:13:ff:65:e7:e1: 38:81:9a:70:67:21:08:d3:95:2d:0d:fb:2b:c8:39:06:16:bb: 48:f9:a7:ef:70:b9:3c:59:88:a7:4a:3f:46:8f:61:2d:d9:65: 7b:46:a5:f8:51:90:38:2e:f3:fc:cc:5b:64:ed:2c:d3:cd:34: 15:1f:0d:27:48:bd:ba:25:be:7c:a7:c5:c2:7f:b4:bb:da:e7: a7:4c:81:b5 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICBtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI0RDQxMTAvBgNVBAUTKEJGNzRFN0U2MTRENEIyMkU0QjdGRTQwQjZCRUNFRkQx NzA1QUNGQzEwHhcNMjYwMTMwMjIxOTEzWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzFjNi1hYmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlzwpKkt//QCnUViJPoJz9Yb8Zv8Uoo0EQiDR8ni5rFPdZPjoCbVXN5jJOl5p FptW/MilEwAalZTLeyn0edNMn3eXX4LVqL2S7BiNqARY3pnOngIeOFmhuSIkvnlR ApjoxtSNTbFQwomT8BjTul/T+50sqSpKvXL+wTIrVzyd8bNL8H6KaCLbJlX/ODDk B0xEk9gM23YBBPxGnl7TfvhSOpfvoLRfvEl0FfHRPWcv7RuybhBibaFBVHdwLWNZ +vxVMw7VxulciP4aF7vJPpiJwCqjjRM9Z53rRJUFj1ggALf/EoY7NGUqcE9/7i3+ lqWVRwcO2AvB1Iap6bV2ZBYrUwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFGowANOr LmWFNjIukwAPgKqnAfxgMB8GA1UdIwQYMBaAFL905+YU1LIuS3/kC2vs79FwWs/B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjRENC8xQTZFNzUxQ0E3 MUYxMUVCODQ4QUYwMzBDNEY5QUUwMi92M1RuNWhUVXNpNUxmLVFMYS16djBYQmF6 OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YzVG41aFRVc2k1TGYtUUxhLXp2MFhCYXo4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzI0RDQvMUE2RTc1MUNBNzFGMTFFQjg0OEFGMDMwQzRGOUFFMDIvREQ2NDNFQkNF MDBDMTFFRDhDNzFDNzA5QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAy9enAwQAy9euAwQAy9eyMA0GCSqGSIb3DQEBCwUAA4IBAQARj7bY HnSEIV9hCVSu/4f6eht8fBK9MNeU4xb5ewZoR5hpOjWyKIyf5Q18OAGAwlthkhma vresCGr3j5uA7iMmbtAozacCO+PkXdpxVLLDYewwhyb3ctpPo9VbUwhMYQDSaQuA A/w4qCSAg6fDEzPXqktsoTSx8TzTufegYSgdrb5USgXqRD45tz387CEoOfcXLZxx q4bcpVCok5pI23jDYeaqxi910iVrf3jIa8pYE/9l5+E4gZpwZyEI05UtDfsryDkG FrtI+afvcLk8WYinSj9Gj2Et2WV7RqX4UZA4LvP8zFtk7SzTzTQVHw0nSL26Jb58 p8XCf7S72uenTIG1 -----END CERTIFICATE-----Generated at Mon Mar 2 03:51:54 2026 by rpki-client