$ rpki-client -vvf rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/DD643EBCE00C11ED8C71C709C4F9AE02.roa File: DD643EBCE00C11ED8C71C709C4F9AE02.roa (raw, json) Hash identifier: Wf0tkeHPs4IB8mfGOri8fMJK0QaqR5URQJU73Sfpr+E= Subject key identifier: AF:8C:F6:26:3B:31:7B:15:10:79:72:62:E8:3B:0D:66:83:35:E5:1B Certificate issuer: /CN=A91324D4/serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1 Certificate serial: 06EB Authority key identifier: BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/DD643EBCE00C11ED8C71C709C4F9AE02.roa Signing time: Mon 06 Apr 2026 11:24:29 +0000 ROA not before: Mon 06 Apr 2026 11:24:29 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 150683 IP address blocks: 203.215.163.0/24 maxlen: 24 203.215.167.0/24 maxlen: 24 203.215.169.0/24 maxlen: 24 203.215.171.0/24 maxlen: 24 203.215.174.0/24 maxlen: 24 203.215.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:18:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1771 (0x6eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91324D4, serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1 Validity Not Before: Apr 6 11:24:29 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69d397ed-1db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:68:9b:6b:ec:40:6c:e4:b4:cb:28:7f:7a:ba: 9e:65:eb:ff:21:7e:15:a4:ce:a8:49:de:58:b9:8a: ae:49:d1:7a:a8:1c:b9:a8:39:98:c5:79:e8:aa:27: 75:14:23:d1:4a:5c:70:a6:a8:78:25:e2:a2:4c:78: cf:69:0e:9b:00:3d:0f:67:ae:b4:aa:95:56:c1:2e: e8:f3:1d:45:5e:c3:3e:98:8d:54:86:5d:49:63:9f: f1:86:95:c8:38:48:15:79:d2:bb:d4:32:fd:df:f2: 1f:63:0d:69:43:ec:f0:2b:e3:30:84:9e:db:b7:0c: f7:c9:ef:b0:cc:87:dc:3f:4a:29:db:97:08:ad:1c: 59:3b:93:bb:0c:4b:07:3b:56:d0:9e:ee:38:0e:32: f5:1b:99:85:d4:32:27:4e:e2:fb:ad:ab:d0:c7:75: 09:c9:32:39:e0:a3:8f:8c:28:f4:ef:34:b6:3b:7a: 39:b0:bc:7a:97:90:21:46:b0:32:94:0b:a7:aa:56: 52:6c:2a:db:8a:77:98:84:26:4b:c5:5a:cf:3a:0c: 3b:0b:3e:65:ab:19:86:76:f7:50:30:a9:4c:09:ca: 0f:4d:cb:4c:ad:32:c0:9b:12:12:16:22:8e:5f:5c: f9:bc:1d:4a:05:5c:a4:04:e8:69:61:46:d7:9e:d3: 30:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8C:F6:26:3B:31:7B:15:10:79:72:62:E8:3B:0D:66:83:35:E5:1B X509v3 Authority Key Identifier: keyid:BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/DD643EBCE00C11ED8C71C709C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.215.163.0/24 203.215.167.0/24 203.215.169.0/24 203.215.171.0/24 203.215.174.0/24 203.215.178.0/24 Signature Algorithm: sha256WithRSAEncryption 83:87:f5:f3:28:93:ef:13:3e:60:c9:02:07:d7:8c:2f:4f:6a: 6a:85:52:98:1c:4e:54:91:da:c4:df:ab:4c:78:7e:d2:13:64: 26:c4:49:8c:a4:75:8b:b8:cf:04:55:67:1c:e8:52:8c:d3:8d: c1:f3:26:47:5d:93:d9:e2:67:77:9e:5e:d6:a0:eb:a5:91:f4: f5:c9:77:be:38:1f:a0:ac:11:fe:fe:8b:1e:e2:b8:5b:60:4f: fe:aa:ce:57:4b:31:0f:b0:35:22:b3:d7:91:98:2d:fd:bc:d3: a7:c3:71:63:69:32:f4:e4:5d:fa:c9:88:72:5f:2a:5e:1e:e6: 84:bf:fd:11:7f:3b:65:97:78:ad:0d:f9:b3:1f:a1:2b:71:d7: 9e:cf:b5:f5:18:d9:e6:05:7e:6a:c4:d3:e2:16:f1:da:f3:af: d9:ae:2f:f7:9d:7f:95:ae:c2:aa:fa:4e:56:b4:43:57:b1:27: b8:68:35:e3:62:8c:8a:da:39:76:2e:af:c2:4f:36:4d:da:ad: 5b:2b:71:25:1a:cd:37:6d:44:95:2c:d6:23:ec:a1:03:f9:39: 43:9e:01:4f:3b:b5:83:9c:2a:92:a4:ee:fe:e3:b2:a1:68:ed: a6:4a:b9:02:42:08:5b:70:7f:56:f7:32:98:2d:77:32:d6:78: 9a:1d:27:ad -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICBuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI0RDQxMTAvBgNVBAUTKEJGNzRFN0U2MTRENEIyMkU0QjdGRTQwQjZCRUNFRkQx NzA1QUNGQzEwHhcNMjYwNDA2MTEyNDI5WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWQzOTdlZC0xZGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmiba+xAbOS0yyh/erqeZev/IX4VpM6oSd5YuYquSdF6qBy5qDmYxXnoqid1 FCPRSlxwpqh4JeKiTHjPaQ6bAD0PZ660qpVWwS7o8x1FXsM+mI1Uhl1JY5/xhpXI OEgVedK71DL93/IfYw1pQ+zwK+MwhJ7btwz3ye+wzIfcP0op25cIrRxZO5O7DEsH O1bQnu44DjL1G5mF1DInTuL7ravQx3UJyTI54KOPjCj07zS2O3o5sLx6l5AhRrAy lAunqlZSbCrbineYhCZLxVrPOgw7Cz5lqxmGdvdQMKlMCcoPTctMrTLAmxISFiKO X1z5vB1KBVykBOhpYUbXntMwaQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFK+M9iY7 MXsVEHlyYug7DWaDNeUbMB8GA1UdIwQYMBaAFL905+YU1LIuS3/kC2vs79FwWs/B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjRENC8xQTZFNzUxQ0E3 MUYxMUVCODQ4QUYwMzBDNEY5QUUwMi92M1RuNWhUVXNpNUxmLVFMYS16djBYQmF6 OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YzVG41aFRVc2k1TGYtUUxhLXp2MFhCYXo4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzI0RDQvMUE2RTc1MUNBNzFGMTFFQjg0OEFGMDMwQzRGOUFFMDIvREQ2NDNFQkNF MDBDMTFFRDhDNzFDNzA5QzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAq BAIAATAkAwQAy9ejAwQAy9enAwQAy9epAwQAy9erAwQAy9euAwQAy9eyMA0GCSqG SIb3DQEBCwUAA4IBAQCDh/XzKJPvEz5gyQIH14wvT2pqhVKYHE5UkdrE36tMeH7S E2QmxEmMpHWLuM8EVWcc6FKM043B8yZHXZPZ4md3nl7WoOulkfT1yXe+OB+grBH+ /ose4rhbYE/+qs5XSzEPsDUis9eRmC39vNOnw3FjaTL05F36yYhyXypeHuaEv/0R fztll3itDfmzH6Ercdeez7X1GNnmBX5qxNPiFvHa86/Zri/3nX+VrsKq+k5WtENX sSe4aDXjYoyK2jl2Lq/CTzZN2q1bK3ElGs03bUSVLNYj7KED+TlDngFPO7WDnCqS pO7+47KhaO2mSrkCQghbcH9W9zKYLXcy1niaHSet -----END CERTIFICATE-----Generated at Fri Apr 17 20:12:30 2026 by rpki-client