$ rpki-client -vvf rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/D8D3FB6414F111F08EE5E32DC4F9AE02.roa File: D8D3FB6414F111F08EE5E32DC4F9AE02.roa (raw, json) Hash identifier: Z1iMqs+QoYYoJUqVZPJECJ1hNSHdhes92tk2TKS7LP0= Subject key identifier: 4E:F4:1F:A2:ED:60:06:B9:D9:D5:1D:4A:13:1F:31:CB:C2:94:EA:99 Certificate issuer: /CN=A91592B3/serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Certificate serial: 24C4 Authority key identifier: 3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/D8D3FB6414F111F08EE5E32DC4F9AE02.roa Signing time: Mon 30 Mar 2026 16:19:04 +0000 ROA not before: Mon 30 Mar 2026 16:19:04 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 19905 IP address blocks: 202.40.227.0/24 maxlen: 24 202.40.232.0/24 maxlen: 24 202.40.233.0/24 maxlen: 24 202.40.235.0/24 maxlen: 24 202.40.237.0/24 maxlen: 24 202.40.241.0/24 maxlen: 24 202.40.244.0/24 maxlen: 24 202.40.248.0/24 maxlen: 24 202.40.249.0/24 maxlen: 24 202.40.250.0/24 maxlen: 24 202.40.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9412 (0x24c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91592B3, serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Validity Not Before: Mar 30 16:19:04 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69caa277-2bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ca:84:27:56:cd:23:db:f5:a7:36:ae:16:3a: de:bb:42:d6:bf:3e:b6:01:c3:59:d0:e5:35:23:65: 16:ea:39:12:bd:46:45:de:59:29:00:3c:20:33:de: 7a:c5:ff:21:45:0c:0e:6f:61:db:06:e2:1e:70:09: 52:d1:a5:8b:23:5a:b6:9e:8e:c3:93:24:63:dc:be: c9:65:26:9e:c9:69:54:30:25:b6:1a:35:fd:35:b2: 5c:8d:f4:1b:f6:5d:60:d2:ca:c8:8d:7e:8d:b7:b2: 96:ad:3a:9e:67:51:e7:c0:17:2d:41:bc:b8:20:b2: 97:1c:e9:ea:e9:29:6e:65:0d:19:5e:47:96:37:a0: f1:32:3e:ec:70:cf:86:50:5f:32:8d:6b:ff:3e:3b: 41:81:f0:02:d8:3e:15:58:02:85:16:f7:4c:ea:02: de:66:70:cb:7e:64:8f:c8:82:b8:46:c9:48:ae:32: 76:77:96:66:3c:26:3a:49:ec:27:d0:a4:7d:e1:44: f5:97:66:e0:2b:63:a7:1d:c0:0c:39:bf:82:c4:f3: 47:19:99:6d:55:26:60:04:39:f9:bc:74:92:eb:c1: de:d1:f9:75:fe:f7:a8:75:29:a3:85:e3:ce:38:b6: ee:c8:17:56:44:27:20:6a:0b:44:83:88:c7:f9:fe: 41:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F4:1F:A2:ED:60:06:B9:D9:D5:1D:4A:13:1F:31:CB:C2:94:EA:99 X509v3 Authority Key Identifier: keyid:3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/D8D3FB6414F111F08EE5E32DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.40.227.0/24 202.40.232.0/23 202.40.235.0/24 202.40.237.0/24 202.40.241.0/24 202.40.244.0/24 202.40.248.0/22 Signature Algorithm: sha256WithRSAEncryption 88:cc:79:b8:67:3c:dd:80:c7:88:d4:24:5f:9c:e9:ed:57:41: d4:ce:e0:32:80:ee:ca:92:88:54:6d:5c:67:e6:d4:e5:eb:cc: d9:a5:40:fb:1f:fc:14:ac:fb:35:ae:10:ac:15:a6:37:57:fc: 7a:0e:e1:98:77:b6:be:a9:2c:4a:61:ad:55:24:1e:d0:92:eb: d4:e4:25:ad:4e:19:8a:4e:9a:cf:3a:bf:e8:ac:7e:95:7f:0c: 43:df:13:00:83:14:30:65:2f:c0:63:42:b4:91:17:79:e8:f2: 84:88:2d:29:d7:cd:b2:8b:00:cf:af:05:2e:a6:23:4a:74:5c: 61:a4:11:d6:c6:b5:52:01:dd:90:65:40:77:75:f8:ce:1c:e8: 2c:7c:ac:b6:af:0d:4d:f8:ee:15:a1:ae:c7:65:30:17:ec:8d: 67:7c:21:49:59:a9:61:1b:b8:f2:09:23:53:9b:85:02:ba:ad: 94:84:91:1d:89:44:66:87:90:7e:a1:e3:80:6b:65:68:f7:9a: cd:b1:b0:5e:4d:42:0e:01:22:5d:ba:03:78:b6:3b:ae:51:9e: de:0e:75:75:90:a4:2c:d1:38:d7:52:df:ab:da:ec:4f:f2:54: aa:36:b8:50:25:3f:57:6c:ff:b4:df:b5:f7:20:dd:0c:64:b3: 92:1f:b3:85 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgICJMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyQjMxMTAvBgNVBAUTKDNBNUMwODEzQzBGRUQwQTgzQjNERDAxQjdBNUFFMUEx MzA4MjcwMjgwHhcNMjYwMzMwMTYxOTA0WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWNhYTI3Ny0yYmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjsqEJ1bNI9v1pzauFjreu0LWvz62AcNZ0OU1I2UW6jkSvUZF3lkpADwgM956 xf8hRQwOb2HbBuIecAlS0aWLI1q2no7DkyRj3L7JZSaeyWlUMCW2GjX9NbJcjfQb 9l1g0srIjX6Nt7KWrTqeZ1HnwBctQby4ILKXHOnq6SluZQ0ZXkeWN6DxMj7scM+G UF8yjWv/PjtBgfAC2D4VWAKFFvdM6gLeZnDLfmSPyIK4RslIrjJ2d5ZmPCY6Sewn 0KR94UT1l2bgK2OnHcAMOb+CxPNHGZltVSZgBDn5vHSS68He0fl1/veodSmjhePO OLbuyBdWRCcgagtEg4jH+f5BuwIDAQABo4IChDCCAoAwHQYDVR0OBBYEFE70H6Lt YAa52dUdShMfMcvClOqZMB8GA1UdIwQYMBaAFDpcCBPA/tCoOz3QG3pa4aEwgnAo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTJCMy84OTE3RkIyQTVE MEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBLZzdQZEFiZWxyaG9UQ0Nj Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09sd0lFOEQtMEtnN1BkQWJlbHJob1RDQ2NDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTkyQjMvODkxN0ZCMkE1RDBFMTFFNUIzQkVBRDU3QzRGOUFFMDIvRDhEM0ZCNjQx NEYxMTFGMDhFRTVFMzJEQzRGOUFFMDIucm9hMEMGCCsGAQUFBwEHAQH/BDQwMjAw BAIAATAqAwQAyijjAwQByijoAwQAyijrAwQAyijtAwQAyijxAwQAyij0AwQCyij4 MA0GCSqGSIb3DQEBCwUAA4IBAQCIzHm4ZzzdgMeI1CRfnOntV0HUzuAygO7KkohU bVxn5tTl68zZpUD7H/wUrPs1rhCsFaY3V/x6DuGYd7a+qSxKYa1VJB7QkuvU5CWt ThmKTprPOr/orH6VfwxD3xMAgxQwZS/AY0K0kRd56PKEiC0p182yiwDPrwUupiNK dFxhpBHWxrVSAd2QZUB3dfjOHOgsfKy2rw1N+O4Voa7HZTAX7I1nfCFJWalhG7jy CSNTm4UCuq2UhJEdiURmh5B+oeOAa2Vo95rNsbBeTUIOASJdugN4tjuuUZ7eDnV1 kKQs0TjXUt+r2uxP8lSqNrhQJT9XbP+037X3IN0MZLOSH7OF -----END CERTIFICATE-----Generated at Fri Apr 17 06:53:00 2026 by rpki-client