$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/3BE907D6178411EC83735974C4F9AE02.roa File: 3BE907D6178411EC83735974C4F9AE02.roa (raw, json) Hash identifier: tFk/h7QxdaaYpeNdRusqQ5yvBEm+neo77X+gkWKcJG0= Subject key identifier: A7:E4:E9:48:C6:E9:44:C7:82:A3:1B:B2:4D:A7:A2:97:60:5A:1E:EC Certificate issuer: /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB Certificate serial: 069A Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/3BE907D6178411EC83735974C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:37:20 +0000 ROA not before: Sun 03 Aug 2025 00:06:35 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 9738 IP address blocks: 61.88.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1690 (0x69a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB Validity Not Before: Aug 3 00:06:35 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a4875f-f4cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b3:56:52:e4:0b:02:1f:e6:1b:2d:ce:bf:7e: 44:00:de:04:c7:78:4e:c3:94:4b:87:05:44:36:fe: 56:a3:a6:63:11:9d:46:65:c1:42:e4:29:21:dd:09: 6a:7e:0d:7f:c6:1e:b3:41:8d:ae:5c:17:f7:26:a6: 40:8c:10:0a:9f:89:af:6d:77:04:f6:81:04:30:17: 37:98:6c:29:74:dd:fb:67:87:d7:13:f1:18:ec:17: 00:5a:d7:6e:f1:b6:8a:bc:cf:da:e3:e7:15:47:8b: 17:f6:77:6d:b4:1f:93:75:a2:27:cb:92:b4:81:98: 0c:bf:bb:6c:81:2a:5c:db:dc:c9:b3:fd:e4:45:6b: ca:21:ba:81:d3:a6:5f:bb:f4:98:d7:9a:6d:67:58: 8d:17:5c:4c:9e:41:f4:e4:8b:93:3f:14:f4:5b:4e: e7:ca:7f:ec:89:04:79:97:84:b3:db:5f:77:31:fa: 20:18:f6:82:ea:29:87:48:02:dd:05:f9:09:a8:d0: e4:06:a2:d0:0e:0b:a1:f0:6a:70:35:26:da:3d:98: 29:85:2e:91:46:42:ad:74:c7:29:95:03:7c:03:7a: 1f:20:62:07:48:84:1c:dd:40:02:9e:ae:af:de:ec: 30:e7:9b:84:d2:93:ea:85:c8:24:22:0d:e2:d1:cc: 05:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E4:E9:48:C6:E9:44:C7:82:A3:1B:B2:4D:A7:A2:97:60:5A:1E:EC X509v3 Authority Key Identifier: keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/3BE907D6178411EC83735974C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 61.88.58.0/24 Signature Algorithm: sha256WithRSAEncryption a7:df:39:4c:96:37:99:19:77:23:4f:7e:91:e2:7a:b9:d3:be: 4a:61:2a:2b:57:80:8f:55:3c:8d:e6:a0:75:d6:8c:71:c7:84: 90:01:4c:63:b2:58:f2:67:80:b1:21:bb:6a:92:32:6b:57:2c: b2:9d:06:93:f2:fc:7f:4f:be:a4:e5:26:9b:ce:5f:69:2d:41: 65:bd:63:55:db:90:9a:44:7e:b7:fe:ec:76:48:cc:71:c6:8a: 18:42:0a:d1:48:7b:56:8c:78:d9:90:03:ef:44:c6:8a:d1:6c: 22:ca:5c:e6:01:cd:86:f4:d6:14:a1:b1:24:74:17:a3:b1:dc: 3d:90:4d:b9:41:d3:c9:95:c4:4e:c2:b2:91:e5:7b:3a:aa:3b: c5:e0:81:3c:f5:0b:9e:4e:55:6e:b5:29:43:76:41:6f:60:fd: 4e:db:0d:f0:25:6a:9c:cf:d5:79:f3:95:44:fd:4b:e4:07:72: e4:a1:33:bb:84:ab:3c:8a:c7:8b:08:d1:89:a7:f7:3e:40:d6: 18:7a:4d:5e:e2:eb:70:64:bc:d0:10:9e:2a:23:0d:65:fa:f9: 22:4e:8d:9f:29:7c:57:9a:cb:21:e4:09:2e:33:d2:be:9b:24: e8:2e:00:45:59:71:33:70:d2:0f:c9:38:d6:5c:6f:ad:77:56: 2e:db:3a:d2 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE0QjExMTAvBgNVBAUTKDYxNzE0MzJENTU5NENCM0Y2MDhEM0JFMEY1MjYwMEJC RUM0NkU1RkIwHhcNMjUwODAzMDAwNjM1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODc1Zi1mNGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLNWUuQLAh/mGy3Ov35EAN4Ex3hOw5RLhwVENv5Wo6ZjEZ1GZcFC5Ckh3Qlq fg1/xh6zQY2uXBf3JqZAjBAKn4mvbXcE9oEEMBc3mGwpdN37Z4fXE/EY7BcAWtdu 8baKvM/a4+cVR4sX9ndttB+TdaIny5K0gZgMv7tsgSpc29zJs/3kRWvKIbqB06Zf u/SY15ptZ1iNF1xMnkH05IuTPxT0W07nyn/siQR5l4Sz2193MfogGPaC6imHSALd BfkJqNDkBqLQDguh8GpwNSbaPZgphS6RRkKtdMcplQN8A3ofIGIHSIQc3UACnq6v 3uww55uE0pPqhcgkIg3i0cwF9QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKfk6UjG 6UTHgqMbsk2nopdgWh7sMB8GA1UdIwQYMBaAFGFxQy1VlMs/YI074PUmALvsRuX7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTRCMS84NDE4OTIyNkZC RTQxMUVCODJCNjI2NEZDNEY5QUUwMi9ZWEZETFZXVXl6OWdqVHZnOVNZQXUteEc1 ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lYRkRMVldVeXo5Z2pUdmc5U1lBdS14RzVmcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTE0QjEvODQxODkyMjZGQkU0MTFFQjgyQjYyNjRGQzRGOUFFMDIvM0JFOTA3RDYx Nzg0MTFFQzgzNzM1OTc0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAPVg6MA0GCSqGSIb3DQEBCwUAA4IBAQCn3zlMljeZGXcjT36R4nq5 075KYSorV4CPVTyN5qB11oxxx4SQAUxjsljyZ4CxIbtqkjJrVyyynQaT8vx/T76k 5Sabzl9pLUFlvWNV25CaRH63/ux2SMxxxooYQgrRSHtWjHjZkAPvRMaK0Wwiylzm Ac2G9NYUobEkdBejsdw9kE25QdPJlcROwrKR5Xs6qjvF4IE89QueTlVutSlDdkFv YP1O2w3wJWqcz9V585VE/UvkB3LkoTO7hKs8iseLCNGJp/c+QNYYek1e4utwZLzQ EJ4qIw1l+vkiTo2fKXxXmssh5AkuM9K+myToLgBFWXEzcNIPyTjWXG+td1Yu2zrS -----END CERTIFICATE-----Generated at Mon Mar 2 08:03:53 2026 by rpki-client