$ rpki-client -vvf rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/9876A6C025B211ECB5356475C4F9AE02.roa File: 9876A6C025B211ECB5356475C4F9AE02.roa (raw, json) Hash identifier: MsKmniAPt2PQV/HaIQt7xSjXSsuc7vmPEbiCsLgiKi0= Subject key identifier: AE:9C:A5:0B:95:61:77:76:A7:2C:30:46:BA:AB:36:BE:39:CB:56:61 Certificate issuer: /CN=A91592B3/serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Certificate serial: 24C5 Authority key identifier: 3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/9876A6C025B211ECB5356475C4F9AE02.roa Signing time: Mon 30 Mar 2026 16:19:05 +0000 ROA not before: Mon 30 Mar 2026 16:19:05 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 3758 IP address blocks: 202.40.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9413 (0x24c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91592B3, serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Validity Not Before: Mar 30 16:19:05 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69caa279-0f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a0:7d:72:21:0b:36:4b:0b:d3:90:bf:27:e1: ef:23:52:5b:6b:51:c5:12:20:32:3d:10:7e:0c:ab: 25:b1:ac:c7:73:01:42:95:90:24:63:46:4d:c9:68: d3:00:59:95:25:64:c5:97:c0:a4:c2:a9:9e:4a:29: e3:a8:45:d5:e3:50:53:66:ca:08:e7:33:78:a6:b3: 33:d9:47:1a:53:18:e5:54:68:ab:bc:ae:ce:e1:96: b7:d9:d3:31:29:3e:fc:6f:04:ac:ab:66:a0:f0:b9: 0f:de:ce:f8:c5:ee:1c:43:0b:f9:4d:da:26:df:31: 8d:41:fa:0d:c3:ef:27:d1:6e:c9:27:64:03:83:69: 2d:42:db:00:e2:e4:06:fc:38:b0:c0:ac:a5:b5:d6: 4a:f2:cf:3e:cc:80:c0:02:63:56:6b:65:fa:4b:e0: b3:b6:c2:85:eb:61:c8:ac:c6:2f:2a:e7:63:d4:30: ce:00:1c:1d:4c:ba:39:77:e4:d8:70:90:c7:0e:20: 18:34:e7:eb:d9:68:44:b5:91:80:8e:f4:4d:b9:64: b1:03:8c:2e:fb:c3:c0:bf:9e:d8:15:30:58:08:6b: b1:fd:ef:d9:80:b2:82:25:cb:a1:2c:52:f3:19:bf: 53:cf:5a:73:0c:01:df:e6:5e:6c:ae:51:e2:62:56: f6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9C:A5:0B:95:61:77:76:A7:2C:30:46:BA:AB:36:BE:39:CB:56:61 X509v3 Authority Key Identifier: keyid:3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/9876A6C025B211ECB5356475C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.40.224.0/19 Signature Algorithm: sha256WithRSAEncryption 3e:2b:54:b2:90:b6:a8:c4:1c:01:1f:9d:da:5a:6a:26:15:a4: e4:6a:54:f0:94:ae:56:5e:31:95:2b:5f:d7:e9:71:64:97:a0: 17:e9:ee:f8:2e:2b:98:25:ca:d3:2a:bf:82:53:f7:f6:44:d7: f7:ef:d8:e1:d2:44:0c:85:bb:74:89:ab:bb:e0:e4:f0:99:64: 6a:37:d1:8c:d7:28:0a:c0:d7:2d:55:ee:0c:55:45:f7:32:b8: 5c:72:c4:dc:22:f1:6d:db:22:38:50:2e:c6:d6:b6:c4:23:72: 3a:98:a9:f2:43:c6:c2:49:08:c9:34:e0:03:4a:4c:ea:22:26: 78:de:b1:ed:80:36:aa:b8:25:6e:9d:f9:95:57:85:09:9f:3d: 73:57:d3:bb:8d:3b:98:6c:42:72:c6:e8:0b:c5:af:96:ef:15: a7:fa:63:60:c3:ca:f9:d0:13:3d:ef:5d:b4:6c:b1:f9:98:19: 1f:e5:4f:4c:53:23:57:d7:c4:fb:45:ab:67:45:4d:27:13:aa: 0c:3e:10:f8:d0:4b:7a:62:fc:97:43:5f:f6:19:16:7c:54:f1: 6d:0e:5d:e1:83:72:24:09:66:15:77:9e:d5:5d:b8:2b:36:a0: bb:3e:da:9b:f5:d6:93:8d:c0:44:15:47:5d:88:79:23:d9:93: a1:24:09:23 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICJMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyQjMxMTAvBgNVBAUTKDNBNUMwODEzQzBGRUQwQTgzQjNERDAxQjdBNUFFMUEx MzA4MjcwMjgwHhcNMjYwMzMwMTYxOTA1WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWNhYTI3OS0wZjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnqB9ciELNksL05C/J+HvI1Jba1HFEiAyPRB+DKslsazHcwFClZAkY0ZNyWjT AFmVJWTFl8CkwqmeSinjqEXV41BTZsoI5zN4prMz2UcaUxjlVGirvK7O4Za32dMx KT78bwSsq2ag8LkP3s74xe4cQwv5Tdom3zGNQfoNw+8n0W7JJ2QDg2ktQtsA4uQG /DiwwKyltdZK8s8+zIDAAmNWa2X6S+CztsKF62HIrMYvKudj1DDOABwdTLo5d+TY cJDHDiAYNOfr2WhEtZGAjvRNuWSxA4wu+8PAv57YFTBYCGux/e/ZgLKCJcuhLFLz Gb9Tz1pzDAHf5l5srlHiYlb2EQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFK6cpQuV YXd2pywwRrqrNr45y1ZhMB8GA1UdIwQYMBaAFDpcCBPA/tCoOz3QG3pa4aEwgnAo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTJCMy84OTE3RkIyQTVE MEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBLZzdQZEFiZWxyaG9UQ0Nj Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09sd0lFOEQtMEtnN1BkQWJlbHJob1RDQ2NDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTkyQjMvODkxN0ZCMkE1RDBFMTFFNUIzQkVBRDU3QzRGOUFFMDIvOTg3NkE2QzAy NUIyMTFFQ0I1MzU2NDc1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQFyijgMA0GCSqGSIb3DQEBCwUAA4IBAQA+K1SykLaoxBwBH53aWmom FaTkalTwlK5WXjGVK1/X6XFkl6AX6e74LiuYJcrTKr+CU/f2RNf379jh0kQMhbt0 iau74OTwmWRqN9GM1ygKwNctVe4MVUX3MrhccsTcIvFt2yI4UC7G1rbEI3I6mKny Q8bCSQjJNOADSkzqIiZ43rHtgDaquCVunfmVV4UJnz1zV9O7jTuYbEJyxugLxa+W 7xWn+mNgw8r50BM97120bLH5mBkf5U9MUyNX18T7RatnRU0nE6oMPhD40Et6YvyX Q1/2GRZ8VPFtDl3hg3IkCWYVd57VXbgrNqC7Ptqb9daTjcBEFUddiHkj2ZOhJAkj -----END CERTIFICATE-----Generated at Fri Apr 17 09:48:31 2026 by rpki-client