$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/350E08F41F1C11ECAD024E53C4F9AE02.roa File: 350E08F41F1C11ECAD024E53C4F9AE02.roa (raw, json) Hash identifier: f5WNiir/xDutuwQ+vK6ySA/zn3JB8xNKvX/jBhoITbc= Subject key identifier: 99:D6:A8:39:07:E5:A1:48:64:08:B7:88:F5:DB:2F:82:31:2F:95:02 Certificate issuer: /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C Certificate serial: 0870 Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/350E08F41F1C11ECAD024E53C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:44:20 +0000 ROA not before: Wed 08 Oct 2025 22:24:26 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 131196 IP address blocks: 202.36.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2160 (0x870) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406AA, serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C Validity Not Before: Oct 8 22:24:26 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a48904-8368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f3:3a:c0:22:ea:e5:08:ac:de:67:9d:1a:41: c6:ba:de:16:ee:90:3a:28:3b:ea:0a:db:1f:be:43: 95:4b:7a:f6:e4:d8:e1:e6:f8:96:a5:fa:b8:53:b6: d3:1e:9e:d8:9a:37:23:02:71:65:14:0c:d4:f5:52: 9b:7c:1b:ee:85:a2:d0:f0:ea:ad:c8:52:1d:c2:20: d8:ce:cf:67:ee:64:33:79:85:be:39:7c:a1:25:1b: 38:04:31:c8:a2:53:1c:86:8a:e9:1f:c4:69:4b:c7: ed:4e:ae:eb:f0:e1:06:b5:22:12:e7:f4:e5:53:73: e9:90:a1:85:70:3b:21:9a:5b:16:43:66:51:f8:ae: ad:11:8a:b3:94:a9:ed:da:f9:01:20:ed:cf:26:d0: 34:cd:28:07:f1:1c:13:49:e8:cd:fb:96:2f:c5:89: cc:6f:f2:18:11:2d:a0:13:58:2e:3c:a4:e6:ee:cb: 6f:08:65:b7:93:c8:cf:f2:9f:94:9c:52:dd:ad:c1: 7d:2d:bd:81:2e:bb:39:8f:ca:ef:f7:04:58:74:62: d7:0d:a8:18:49:72:ed:fa:dd:6e:af:19:c2:20:ac: f5:ac:3b:49:7f:ab:2c:4e:5b:d5:31:b7:59:61:d8: c5:ee:30:8f:2d:e8:76:57:66:16:ab:52:c1:5e:dc: 72:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D6:A8:39:07:E5:A1:48:64:08:B7:88:F5:DB:2F:82:31:2F:95:02 X509v3 Authority Key Identifier: keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/350E08F41F1C11ECAD024E53C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.36.221.0/24 Signature Algorithm: sha256WithRSAEncryption bf:04:37:39:90:82:a3:f2:ea:1f:3c:4d:20:94:ab:02:d5:69: 95:eb:5e:d8:bc:e2:d6:8f:e9:1b:17:00:17:59:4d:f6:ef:8c: 8a:fe:bb:17:a4:d4:cd:e1:42:01:d2:8e:d4:92:90:29:93:bc: 3b:bb:fa:6a:2c:35:b0:00:3b:05:cc:72:d4:8c:02:ac:c3:6e: 53:d3:ae:5b:5e:11:fb:3a:50:95:f2:73:ae:fd:6c:4b:91:a2: 54:b4:b8:53:60:7a:5a:85:dd:c8:1a:4d:a6:4f:95:3d:f9:ad: 6a:76:ac:c9:1c:1a:3d:53:41:86:1b:e3:53:bb:bf:70:04:ac: a5:12:fb:08:0e:ef:ad:48:b4:36:81:39:62:e4:cf:77:3d:39: a1:b2:16:f0:5d:6c:e6:81:e2:8b:34:cf:5a:86:91:e0:0b:0e: e1:13:30:4c:e3:9a:58:3b:5e:4f:9a:19:15:ef:66:ad:fb:d2: f0:0b:00:ba:91:51:58:00:c4:86:16:68:96:01:6e:9a:82:d7: d2:6f:65:d4:16:22:5a:ba:c3:64:62:68:d0:e3:6a:d5:c4:a0: f8:10:b2:e2:17:8e:a4:a4:e3:8a:d5:ff:69:37:4a:14:07:90: 54:2a:fd:10:c1:60:1c:c4:57:37:dd:b5:11:36:50:a2:76:ff: bc:fc:b4:ab -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA2QUExMTAvBgNVBAUTKDMxNTUxM0U1NEFCMEM5OUI4QkNBODQwNDJFMzgzNThC NjBEQjFCMkMwHhcNMjUxMDA4MjIyNDI2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODkwNC04MzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfM6wCLq5Qis3medGkHGut4W7pA6KDvqCtsfvkOVS3r25Njh5viWpfq4U7bT Hp7YmjcjAnFlFAzU9VKbfBvuhaLQ8OqtyFIdwiDYzs9n7mQzeYW+OXyhJRs4BDHI olMchorpH8RpS8ftTq7r8OEGtSIS5/TlU3PpkKGFcDshmlsWQ2ZR+K6tEYqzlKnt 2vkBIO3PJtA0zSgH8RwTSejN+5YvxYnMb/IYES2gE1guPKTm7stvCGW3k8jP8p+U nFLdrcF9Lb2BLrs5j8rv9wRYdGLXDagYSXLt+t1urxnCIKz1rDtJf6ssTlvVMbdZ YdjF7jCPLeh2V2YWq1LBXtxy8wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJnWqDkH 5aFIZAi3iPXbL4IxL5UCMB8GA1UdIwQYMBaAFDFVE+VKsMmbi8qEBC44NYtg2xss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84RjVCQjRGODg2 QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9NVlVUNVVxd3ladUx5b1FFTGpnMWkyRGJH eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01WVVQ1VXF3eVp1THlvUUVMamcxaTJEYkd5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDA2QUEvOEY1QkI0Rjg4NkMxMTFFQkJBQjMxODRCQzRGOUFFMDIvMzUwRTA4RjQx RjFDMTFFQ0FEMDI0RTUzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyiTdMA0GCSqGSIb3DQEBCwUAA4IBAQC/BDc5kIKj8uofPE0glKsC 1WmV617YvOLWj+kbFwAXWU3274yK/rsXpNTN4UIB0o7UkpApk7w7u/pqLDWwADsF zHLUjAKsw25T065bXhH7OlCV8nOu/WxLkaJUtLhTYHpahd3IGk2mT5U9+a1qdqzJ HBo9U0GGG+NTu79wBKylEvsIDu+tSLQ2gTli5M93PTmhshbwXWzmgeKLNM9ahpHg Cw7hEzBM45pYO15PmhkV72at+9LwCwC6kVFYAMSGFmiWAW6agtfSb2XUFiJausNk YmjQ42rVxKD4ELLiF46kpOOK1f9pN0oUB5BUKv0QwWAcxFc33bURNlCidv+8/LSr -----END CERTIFICATE-----Generated at Mon Mar 2 09:14:14 2026 by rpki-client