$ rpki-client -vvf rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/D8D3FB6414F111F08EE5E32DC4F9AE02.roa File: D8D3FB6414F111F08EE5E32DC4F9AE02.roa (raw, json) Hash identifier: GEYGfhHp17Fn6qCQe2gZ+/51L5wJ5ahCyZcSARhYpHU= Subject key identifier: 05:FB:92:25:7A:32:98:94:CE:E1:08:DA:09:2E:09:63:21:77:61:32 Certificate issuer: /CN=A91592B3/serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Certificate serial: 24B1 Authority key identifier: 3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/D8D3FB6414F111F08EE5E32DC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:13:52 +0000 ROA not before: Wed 09 Apr 2025 03:22:21 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 19905 IP address blocks: 202.40.227.0/24 maxlen: 24 202.40.232.0/24 maxlen: 24 202.40.233.0/24 maxlen: 24 202.40.235.0/24 maxlen: 24 202.40.237.0/24 maxlen: 24 202.40.241.0/24 maxlen: 24 202.40.244.0/24 maxlen: 24 202.40.248.0/24 maxlen: 24 202.40.249.0/24 maxlen: 24 202.40.250.0/24 maxlen: 24 202.40.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9393 (0x24b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91592B3, serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Validity Not Before: Apr 9 03:22:21 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a42d80-aa39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:85:65:b1:00:d0:51:b2:08:fb:ea:b0:99:dd: 07:1a:50:ff:37:fe:d0:6c:ac:54:3b:81:fb:b2:88: 49:60:6c:1b:81:3f:38:09:88:58:f6:95:4b:4d:c8: 93:18:3c:59:28:24:d9:00:4b:2e:2a:9e:c5:7d:87: 3b:98:a3:cf:a4:29:2c:3a:27:f0:86:6b:2e:5e:30: b2:f0:7a:1c:e9:75:07:14:d4:b2:f1:68:cd:7f:8a: 06:35:81:4f:cc:45:2b:ed:6c:65:58:64:64:6b:25: b0:e4:91:6f:e1:6f:37:1b:8e:53:bc:c6:33:ba:a9: e2:ad:50:e7:75:cc:be:1e:90:cf:a6:e7:06:06:dd: 1a:c5:88:82:70:92:57:a3:52:d5:b5:bf:71:88:c9: 90:72:10:43:50:1a:9e:c5:f8:05:9f:33:4d:d7:59: fe:4f:bc:0c:41:fe:88:89:ec:48:47:ea:1b:99:22: ea:0e:29:cd:5c:a3:88:5b:4a:f6:78:7d:38:8d:cb: 82:d6:be:32:1e:f5:ab:26:e6:52:02:f9:82:f8:ba: af:61:af:20:e6:60:74:41:b9:56:f5:df:38:1d:2d: b1:b7:57:26:39:25:11:b1:08:43:d4:c4:bb:ad:b7: 50:be:41:d9:67:7c:8d:8e:86:32:bd:c5:4b:54:d5: eb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:FB:92:25:7A:32:98:94:CE:E1:08:DA:09:2E:09:63:21:77:61:32 X509v3 Authority Key Identifier: keyid:3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/D8D3FB6414F111F08EE5E32DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.40.227.0/24 202.40.232.0/23 202.40.235.0/24 202.40.237.0/24 202.40.241.0/24 202.40.244.0/24 202.40.248.0/22 Signature Algorithm: sha256WithRSAEncryption 14:d7:ba:88:c6:8a:36:d0:cd:7b:61:8a:9f:d3:6c:5b:68:59: c1:fd:06:13:5d:fe:58:6c:38:f1:28:c4:50:e1:a5:df:99:dd: 45:9c:a8:41:b7:f5:14:13:76:4b:1f:9a:85:ab:03:59:37:6e: 0f:4a:9e:c9:78:b6:9b:76:b8:58:30:22:7e:99:44:a8:8f:d6: be:1c:1d:9b:1c:cc:84:fe:4d:62:11:df:9e:5b:6d:52:57:21: e3:6f:ea:f7:55:88:e8:aa:39:28:6e:16:23:71:b4:7f:27:e8: bc:32:92:75:39:bf:3f:d4:ad:e4:dc:27:11:02:c9:f7:a8:0e: 38:92:d9:61:62:2f:9b:6d:c2:ac:c0:db:b0:fc:ac:2f:dd:f7: a9:1f:65:c2:c6:a9:1d:da:ed:8b:67:63:9c:44:4c:03:db:c9: 95:3c:4b:69:67:f1:c6:11:25:90:e1:f8:09:95:5f:4d:ee:fa: b4:bd:b3:9a:be:b7:75:95:ae:13:39:9e:5e:2f:f3:dc:ad:bf: 63:d5:ce:3c:3d:54:76:19:54:5c:0a:be:a0:ef:92:88:e0:c0: c0:34:a9:79:24:ea:cf:ca:e3:93:7b:40:cc:91:55:df:1c:45: 83:ec:a3:6a:ea:e5:08:5a:6d:6b:dd:8c:07:f1:6a:65:39:8a: 49:7d:91:90 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgICJLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyQjMxMTAvBgNVBAUTKDNBNUMwODEzQzBGRUQwQTgzQjNERDAxQjdBNUFFMUEx MzA4MjcwMjgwHhcNMjUwNDA5MDMyMjIxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmQ4MC1hYTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnoVlsQDQUbII++qwmd0HGlD/N/7QbKxUO4H7sohJYGwbgT84CYhY9pVLTciT GDxZKCTZAEsuKp7FfYc7mKPPpCksOifwhmsuXjCy8Hoc6XUHFNSy8WjNf4oGNYFP zEUr7WxlWGRkayWw5JFv4W83G45TvMYzuqnirVDndcy+HpDPpucGBt0axYiCcJJX o1LVtb9xiMmQchBDUBqexfgFnzNN11n+T7wMQf6IiexIR+obmSLqDinNXKOIW0r2 eH04jcuC1r4yHvWrJuZSAvmC+LqvYa8g5mB0QblW9d84HS2xt1cmOSURsQhD1MS7 rbdQvkHZZ3yNjoYyvcVLVNXrdwIDAQABo4IChDCCAoAwHQYDVR0OBBYEFAX7kiV6 MpiUzuEI2gkuCWMhd2EyMB8GA1UdIwQYMBaAFDpcCBPA/tCoOz3QG3pa4aEwgnAo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTJCMy84OTE3RkIyQTVE MEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBLZzdQZEFiZWxyaG9UQ0Nj Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09sd0lFOEQtMEtnN1BkQWJlbHJob1RDQ2NDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTkyQjMvODkxN0ZCMkE1RDBFMTFFNUIzQkVBRDU3QzRGOUFFMDIvRDhEM0ZCNjQx NEYxMTFGMDhFRTVFMzJEQzRGOUFFMDIucm9hMEMGCCsGAQUFBwEHAQH/BDQwMjAw BAIAATAqAwQAyijjAwQByijoAwQAyijrAwQAyijtAwQAyijxAwQAyij0AwQCyij4 MA0GCSqGSIb3DQEBCwUAA4IBAQAU17qIxoo20M17YYqf02xbaFnB/QYTXf5YbDjx KMRQ4aXfmd1FnKhBt/UUE3ZLH5qFqwNZN24PSp7JeLabdrhYMCJ+mUSoj9a+HB2b HMyE/k1iEd+eW21SVyHjb+r3VYjoqjkobhYjcbR/J+i8MpJ1Ob8/1K3k3CcRAsn3 qA44ktlhYi+bbcKswNuw/Kwv3fepH2XCxqkd2u2LZ2OcREwD28mVPEtpZ/HGESWQ 4fgJlV9N7vq0vbOavrd1la4TOZ5eL/Pcrb9j1c48PVR2GVRcCr6g75KI4MDANKl5 JOrPyuOTe0DMkVXfHEWD7KNq6uUIWm1r3YwH8WplOYpJfZGQ -----END CERTIFICATE-----Generated at Mon Mar 2 04:02:18 2026 by rpki-client