$ rpki-client -vvf rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/9876A6C025B211ECB5356475C4F9AE02.roa File: 9876A6C025B211ECB5356475C4F9AE02.roa (raw, json) Hash identifier: FfVZPUV5HJquVNsdHZZ+Vm7hU9qAb0wTdcSg4+cVr58= Subject key identifier: 26:51:87:1D:B1:F7:48:7E:D0:52:F8:BE:A6:94:59:22:C6:53:62:F7 Certificate issuer: /CN=A91592B3/serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Certificate serial: 24AF Authority key identifier: 3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/9876A6C025B211ECB5356475C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:13:51 +0000 ROA not before: Tue 18 Mar 2025 16:03:21 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 3758 IP address blocks: 202.40.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9391 (0x24af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91592B3, serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Validity Not Before: Mar 18 16:03:21 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a42d7f-3b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6a:a7:a5:5c:e4:6d:71:a1:49:d6:17:b8:6f: b6:52:89:f9:7c:c9:18:df:45:68:07:66:46:20:cf: 6b:00:6e:aa:20:7b:83:ed:73:02:3c:8b:81:93:aa: 5b:b8:3d:b4:55:83:f6:a3:0b:0f:46:6b:6f:03:1a: a5:6c:08:a6:94:34:9b:37:02:f9:eb:ea:e3:c6:9c: d4:9f:9c:c4:6e:63:17:8a:d7:c5:bc:54:4a:58:f0: 90:bd:7f:ab:16:8e:c6:1a:86:62:97:14:b4:5a:12: 46:7e:6f:7e:37:82:57:bf:9c:3d:c7:01:69:74:43: 17:71:51:47:07:ef:85:29:3e:11:04:c8:54:44:6f: 21:83:a9:eb:c0:7f:5b:c0:22:ba:71:f2:53:1e:a1: 9f:bc:a8:e7:58:bb:aa:d2:d7:b1:2c:18:f4:ca:42: fb:da:e0:93:1e:7f:6b:96:02:e8:9a:71:1d:2f:90: 2c:42:60:d4:6c:34:52:e1:f6:06:0c:ca:db:07:e8: 23:87:02:8f:fe:8c:e7:0d:4b:26:40:71:ba:00:65: 6e:9e:12:ab:67:b8:4d:5d:72:ef:3c:cf:09:58:17: 21:d3:05:ac:de:50:62:54:51:e3:45:de:05:20:32: d8:83:5b:48:07:e5:d1:0d:3d:9f:32:39:3e:d1:aa: 6d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:51:87:1D:B1:F7:48:7E:D0:52:F8:BE:A6:94:59:22:C6:53:62:F7 X509v3 Authority Key Identifier: keyid:3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/9876A6C025B211ECB5356475C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.40.224.0/19 Signature Algorithm: sha256WithRSAEncryption 9a:b5:70:e2:d4:f6:f5:26:5c:b8:b5:82:e5:1c:de:cb:81:f7: 71:e7:47:07:1f:9f:44:e1:a6:2d:49:57:6b:ed:ea:68:61:35: 64:dd:96:ec:27:87:e5:9a:31:43:c7:a5:94:07:3c:13:0f:26: d4:5b:eb:15:fd:82:17:ea:37:3c:d4:4c:b8:f7:39:d6:b8:d2: d5:e5:38:a7:21:e8:7d:9b:e2:5d:df:a4:00:b3:c8:21:b9:5d: 90:a2:1d:c4:fa:c1:10:98:23:0f:f0:74:b0:6d:9b:63:79:6a: 5c:a6:35:35:ff:f5:88:f8:6f:b7:72:2c:69:48:80:5e:71:d8: 15:bf:c5:a2:f5:f0:f8:77:6b:d0:d3:ee:0d:49:bf:c8:e2:8d: 2a:60:b1:54:4d:04:8e:6c:e7:70:d8:67:71:d8:ae:3f:ce:6b: 91:59:48:98:a4:b8:9a:47:3e:a4:2c:e3:b3:90:9f:43:4f:b9: 1f:d6:1f:31:1c:7c:91:e9:93:f0:b2:2b:3c:f8:a2:e2:74:08: 63:30:87:47:08:e8:f6:b3:fb:fd:4a:16:b6:9f:49:8a:35:f5: a5:a5:b0:67:47:73:8f:f4:03:6a:46:7c:d0:f0:0c:fa:79:9d: 5d:50:cb:2d:4b:43:c5:94:61:02:34:61:b3:ee:1b:aa:43:c2: e4:0f:90:48 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICJK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyQjMxMTAvBgNVBAUTKDNBNUMwODEzQzBGRUQwQTgzQjNERDAxQjdBNUFFMUEx MzA4MjcwMjgwHhcNMjUwMzE4MTYwMzIxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmQ3Zi0zYjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApmqnpVzkbXGhSdYXuG+2Uon5fMkY30VoB2ZGIM9rAG6qIHuD7XMCPIuBk6pb uD20VYP2owsPRmtvAxqlbAimlDSbNwL56+rjxpzUn5zEbmMXitfFvFRKWPCQvX+r Fo7GGoZilxS0WhJGfm9+N4JXv5w9xwFpdEMXcVFHB++FKT4RBMhURG8hg6nrwH9b wCK6cfJTHqGfvKjnWLuq0texLBj0ykL72uCTHn9rlgLomnEdL5AsQmDUbDRS4fYG DMrbB+gjhwKP/oznDUsmQHG6AGVunhKrZ7hNXXLvPM8JWBch0wWs3lBiVFHjRd4F IDLYg1tIB+XRDT2fMjk+0aptcQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCZRhx2x 90h+0FL4vqaUWSLGU2L3MB8GA1UdIwQYMBaAFDpcCBPA/tCoOz3QG3pa4aEwgnAo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTJCMy84OTE3RkIyQTVE MEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBLZzdQZEFiZWxyaG9UQ0Nj Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09sd0lFOEQtMEtnN1BkQWJlbHJob1RDQ2NDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTkyQjMvODkxN0ZCMkE1RDBFMTFFNUIzQkVBRDU3QzRGOUFFMDIvOTg3NkE2QzAy NUIyMTFFQ0I1MzU2NDc1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQFyijgMA0GCSqGSIb3DQEBCwUAA4IBAQCatXDi1Pb1Jly4tYLlHN7L gfdx50cHH59E4aYtSVdr7epoYTVk3ZbsJ4flmjFDx6WUBzwTDybUW+sV/YIX6jc8 1Ey49znWuNLV5TinIeh9m+Jd36QAs8ghuV2Qoh3E+sEQmCMP8HSwbZtjeWpcpjU1 //WI+G+3cixpSIBecdgVv8Wi9fD4d2vQ0+4NSb/I4o0qYLFUTQSObOdw2Gdx2K4/ zmuRWUiYpLiaRz6kLOOzkJ9DT7kf1h8xHHyR6ZPwsis8+KLidAhjMIdHCOj2s/v9 Sha2n0mKNfWlpbBnR3OP9ANqRnzQ8Az6eZ1dUMstS0PFlGECNGGz7huqQ8LkD5BI -----END CERTIFICATE-----Generated at Mon Mar 2 02:13:30 2026 by rpki-client