$ rpki-client -vvf rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/0D3A7A803B7311EA80E1F877C4F9AE02.roa File: 0D3A7A803B7311EA80E1F877C4F9AE02.roa (raw, json) Hash identifier: hU7OMHsTj6hL7vgEEXYSl72Q/STHSktutJc1O2+u9S4= Subject key identifier: 8F:38:27:3E:81:08:C0:19:BA:65:64:74:FB:7F:77:E3:D3:87:7B:FE Certificate issuer: /CN=A91555EA/serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Certificate serial: 0BD7 Authority key identifier: 97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/0D3A7A803B7311EA80E1F877C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:57:39 +0000 ROA not before: Wed 06 Aug 2025 19:29:56 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 45273 IP address blocks: 117.104.184.0/24 maxlen: 24 117.104.185.0/24 maxlen: 24 202.52.138.0/24 maxlen: 24 202.52.139.0/24 maxlen: 24 202.90.200.0/24 maxlen: 24 202.90.201.0/24 maxlen: 24 202.90.202.0/24 maxlen: 24 202.90.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3031 (0xbd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91555EA, serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Validity Not Before: Aug 6 19:29:56 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a445d3-1b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e3:f2:8e:b3:58:5e:e4:a8:0b:66:32:3a:88: 54:8c:78:51:dc:e3:b2:65:43:89:4a:84:08:2c:eb: 2e:5d:9f:08:28:ed:62:ae:9d:ba:c3:08:a3:e2:1f: 1b:00:f4:cb:79:ad:96:1e:c9:88:12:b2:41:a4:92: 01:0f:a7:65:c1:ac:65:4f:18:1f:39:a9:cf:9c:5d: 44:22:13:65:40:9c:b4:43:4a:c9:0d:c2:ac:b4:1e: 28:3e:50:d4:d0:99:5c:31:b3:de:8b:2d:c3:56:4e: 13:1e:a7:8c:1b:c7:22:29:ec:bb:b3:4e:da:50:5f: e4:fd:71:fd:5a:52:ed:c5:bd:84:57:0c:9f:0e:13: eb:5f:f8:9a:a1:b6:3a:c1:92:a5:fa:ec:e4:e6:b4: 03:c1:5d:15:9b:db:d0:62:cf:2c:e4:60:d3:cb:5e: 43:ea:c7:e6:72:b2:ec:d4:82:b7:35:61:bd:6e:c6: c7:34:8b:d7:86:0a:13:cd:9e:37:7c:cf:09:ed:10: 85:70:fc:e6:09:a8:79:63:42:a0:84:13:1e:39:c1: e0:e3:c3:46:7b:b6:97:b1:5f:c4:42:3b:9c:66:ab: 8e:c0:77:b5:4c:f0:a5:7c:bc:a2:cc:92:40:66:90: d2:65:bc:90:4e:a9:fc:81:0c:e4:bd:40:fb:1f:24: 84:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:38:27:3E:81:08:C0:19:BA:65:64:74:FB:7F:77:E3:D3:87:7B:FE X509v3 Authority Key Identifier: keyid:97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/0D3A7A803B7311EA80E1F877C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 117.104.184.0/23 202.52.138.0/23 202.90.200.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:de:48:e6:04:c7:52:cb:d4:ff:99:37:3a:6b:08:f7:4e:26: 0d:fa:7b:63:c0:5b:ec:bd:c5:f1:20:c4:3c:36:ee:ef:db:58: 16:28:57:b4:b8:f8:f0:7f:4b:73:8e:ce:a5:ed:ca:51:7b:fe: 67:dd:5a:1d:43:7d:0d:15:bf:ee:b6:21:02:52:89:a1:57:98: e6:7d:1e:dd:8f:59:ea:94:53:62:41:64:6c:c4:6b:68:d5:27: ca:99:53:d8:b1:2f:cc:3e:27:58:61:23:51:9b:8d:2d:49:90: 15:ec:ed:94:d5:3d:b6:67:c3:a7:d3:41:85:5a:7e:e1:d8:d7: 85:18:f8:b6:b6:28:30:d0:81:d4:de:3f:68:ba:96:f1:e0:f0: ad:a7:19:94:e9:49:7b:8f:18:d9:12:01:e8:2f:9c:af:07:fc: 69:6a:db:fc:6c:15:64:4c:34:ba:41:d8:1b:09:43:b3:44:c4: 84:d4:7c:20:3b:e8:8f:e3:4c:6e:81:06:bb:70:c0:a2:bb:9e: 26:33:6e:bb:62:eb:fe:44:6e:99:39:3e:43:df:c7:b8:44:d8: 0c:ce:a2:bb:ca:de:ea:06:99:9e:94:f6:cc:78:b9:03:06:03: 05:e1:3e:81:8c:2e:d6:99:3f:36:fa:b0:fd:84:f9:4b:b0:0a: 0b:e6:57:13 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICC9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU1RUExMTAvBgNVBAUTKDk3OERBRTJDMTBBNzJFRDA0Rjk0MTI4RkZDNUU4Q0I3 RDEwMkVBQ0EwHhcNMjUwODA2MTkyOTU2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDVkMy0xYjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6+PyjrNYXuSoC2YyOohUjHhR3OOyZUOJSoQILOsuXZ8IKO1irp26wwij4h8b APTLea2WHsmIErJBpJIBD6dlwaxlTxgfOanPnF1EIhNlQJy0Q0rJDcKstB4oPlDU 0JlcMbPeiy3DVk4THqeMG8ciKey7s07aUF/k/XH9WlLtxb2EVwyfDhPrX/iaobY6 wZKl+uzk5rQDwV0Vm9vQYs8s5GDTy15D6sfmcrLs1IK3NWG9bsbHNIvXhgoTzZ43 fM8J7RCFcPzmCah5Y0KghBMeOcHg48NGe7aXsV/EQjucZquOwHe1TPClfLyizJJA ZpDSZbyQTqn8gQzkvUD7HySE9wIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFI84Jz6B CMAZumVkdPt/d+PTh3v+MB8GA1UdIwQYMBaAFJeNriwQpy7QT5QSj/xejLfRAurK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTVFQS83QzYwQjlGNjNC NkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0QlBsQktQX0Y2TXQ5RUM2 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w0MnVMQkNuTHRCUGxCS1BfRjZNdDlFQzZzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTU1RUEvN0M2MEI5RjYzQjZFMTFFQUFFNUYxNjZCQzRGOUFFMDIvMEQzQTdBODAz QjczMTFFQTgwRTFGODc3QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQBdWi4AwQByjSKAwQCylrIMA0GCSqGSIb3DQEBCwUAA4IBAQB/3kjm BMdSy9T/mTc6awj3TiYN+ntjwFvsvcXxIMQ8Nu7v21gWKFe0uPjwf0tzjs6l7cpR e/5n3VodQ30NFb/utiECUomhV5jmfR7dj1nqlFNiQWRsxGto1SfKmVPYsS/MPidY YSNRm40tSZAV7O2U1T22Z8On00GFWn7h2NeFGPi2tigw0IHU3j9oupbx4PCtpxmU 6Ul7jxjZEgHoL5yvB/xpatv8bBVkTDS6QdgbCUOzRMSE1HwgO+iP40xugQa7cMCi u54mM267Yuv+RG6ZOT5D38e4RNgMzqK7yt7qBpmelPbMeLkDBgMF4T6BjC7WmT82 +rD9hPlLsAoL5lcT -----END CERTIFICATE-----Generated at Mon Mar 2 12:25:51 2026 by rpki-client