$ rpki-client -vvf rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/BFEE74284D9811F0930F6465C4F9AE02.roa File: BFEE74284D9811F0930F6465C4F9AE02.roa (raw, json) Hash identifier: PFioeT3RfNJMN0Aadh4UJbKdM8FYKBkK30gvJCKnlcs= Subject key identifier: A3:B2:9D:24:25:AC:81:50:B0:D3:57:20:8C:69:6D:32:A4:A3:DF:D6 Certificate issuer: /CN=A91657FE/serialNumber=C80973D16CCCC9E18C13A688033DC4D0F0E61C4A Certificate serial: 87 Authority key identifier: C8:09:73:D1:6C:CC:C9:E1:8C:13:A6:88:03:3D:C4:D0:F0:E6:1C:4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/BFEE74284D9811F0930F6465C4F9AE02.roa Signing time: Sun 01 Mar 2026 07:08:57 +0000 ROA not before: Fri 20 Jun 2025 05:38:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132584 IP address blocks: 203.56.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.crl rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91657FE, serialNumber=C80973D16CCCC9E18C13A688033DC4D0F0E61C4A Validity Not Before: Jun 20 05:38:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a3e608-fb25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1d:9f:9d:b9:25:3c:23:31:e1:49:2a:88:3d: ab:99:09:94:c3:3b:84:c3:2b:44:3b:42:fb:f8:cd: 62:70:a4:0a:3d:11:ca:81:76:33:f8:2b:63:06:0b: c2:7c:ce:fe:af:21:03:f4:4f:0b:d5:69:47:46:a2: ff:c6:2b:c9:3b:ea:a0:c1:fa:69:90:c8:1f:3e:4d: 67:7f:ac:4d:c0:1b:cb:b0:53:96:4b:92:9d:01:80: 3f:97:33:15:dd:9b:82:f1:33:8b:93:36:6a:d5:fd: 8b:44:75:9c:11:d5:eb:4d:06:fb:f0:3c:92:1a:9e: 75:7a:6a:af:97:e5:71:ee:4a:e0:2e:58:02:84:33: 51:74:bd:2f:b8:58:15:e8:1c:3d:38:41:6c:16:2f: 84:cc:5c:55:43:3f:59:5c:c7:54:5f:13:20:6e:5c: eb:55:35:1b:56:32:90:5b:08:73:5c:60:4a:a8:2f: 3b:c5:1f:71:19:15:fd:f2:f1:7f:42:2d:12:f1:ea: 94:92:5b:81:48:72:60:0a:bc:27:ec:ec:fb:54:48: 28:d1:74:76:0a:2d:b5:ad:a7:0d:8e:bf:d1:6a:4a: 72:9e:d4:4c:bc:4c:ae:63:46:7b:81:2a:03:9a:31: 8a:75:27:2c:36:ed:72:4f:47:47:cb:2c:50:c7:f1: 6b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B2:9D:24:25:AC:81:50:B0:D3:57:20:8C:69:6D:32:A4:A3:DF:D6 X509v3 Authority Key Identifier: keyid:C8:09:73:D1:6C:CC:C9:E1:8C:13:A6:88:03:3D:C4:D0:F0:E6:1C:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/BFEE74284D9811F0930F6465C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.56.195.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:b0:a5:79:a1:b9:34:8b:ed:94:55:73:f8:a1:cc:1d:32:f5: 51:ae:4b:8a:a0:ca:1c:56:bb:17:e4:a7:af:e4:82:28:17:0a: 88:30:ee:8d:77:7f:e5:f5:8c:34:ce:62:49:56:30:d3:d8:3a: ba:29:da:15:24:c7:6c:2d:b3:de:98:ea:e4:34:f1:f5:65:f3: 79:9b:d1:39:7d:d8:49:48:ba:d4:76:44:6f:5f:27:cc:aa:d7: ef:c8:fd:b3:51:4f:2e:d3:2d:57:43:23:d1:91:bb:32:2b:4e: 58:ae:66:46:1a:bb:72:0c:bf:24:e8:76:9c:71:06:e1:f3:db: 2c:a7:ff:5f:1c:5d:da:7d:64:da:e4:b3:73:e8:5a:b7:15:fa: 79:27:db:6a:e0:19:cd:6e:a3:49:99:14:dc:83:9a:03:7b:e0: ac:1d:92:00:6d:24:a1:97:b7:dd:c3:4a:dc:32:04:52:1e:21: 06:a5:5c:fd:da:9d:41:2a:e9:cf:06:f9:91:8d:72:c7:98:60: cc:5a:b1:04:f5:fd:82:b5:60:28:49:41:21:cb:98:b3:23:c5: 4d:a1:21:99:31:00:66:41:72:cb:59:4d:67:d6:f8:3b:de:18: d1:01:b5:2f:ff:77:2d:90:06:f7:6a:7a:d8:6b:23:da:86:f6: af:2b:59:0a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3RkUxMTAvBgNVBAUTKEM4MDk3M0QxNkNDQ0M5RTE4QzEzQTY4ODAzM0RDNEQw RjBFNjFDNEEwHhcNMjUwNjIwMDUzODEwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZTYwOC1mYjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmx2fnbklPCMx4UkqiD2rmQmUwzuEwytEO0L7+M1icKQKPRHKgXYz+CtjBgvC fM7+ryED9E8L1WlHRqL/xivJO+qgwfppkMgfPk1nf6xNwBvLsFOWS5KdAYA/lzMV 3ZuC8TOLkzZq1f2LRHWcEdXrTQb78DySGp51emqvl+Vx7krgLlgChDNRdL0vuFgV 6Bw9OEFsFi+EzFxVQz9ZXMdUXxMgblzrVTUbVjKQWwhzXGBKqC87xR9xGRX98vF/ Qi0S8eqUkluBSHJgCrwn7Oz7VEgo0XR2Ci21racNjr/RakpyntRMvEyuY0Z7gSoD mjGKdScsNu1yT0dHyyxQx/FrFQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKOynSQl rIFQsNNXIIxpbTKko9/WMB8GA1UdIwQYMBaAFMgJc9FszMnhjBOmiAM9xNDw5hxK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTdGRS9DMDg3NTcyMjRE OEIxMUYwOEVBQzU4MjNDNEY5QUUwMi95QWx6MFd6TXllR01FNmFJQXozRTBQRG1I RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lBbHowV3pNeWVHTUU2YUlBejNFMFBEbUhFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjU3RkUvQzA4NzU3MjI0RDhCMTFGMDhFQUM1ODIzQzRGOUFFMDIvQkZFRTc0Mjg0 RDk4MTFGMDkzMEY2NDY1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyzjDMA0GCSqGSIb3DQEBCwUAA4IBAQAfsKV5obk0i+2UVXP4ocwd MvVRrkuKoMocVrsX5Kev5IIoFwqIMO6Nd3/l9Yw0zmJJVjDT2Dq6KdoVJMdsLbPe mOrkNPH1ZfN5m9E5fdhJSLrUdkRvXyfMqtfvyP2zUU8u0y1XQyPRkbsyK05YrmZG GrtyDL8k6HaccQbh89ssp/9fHF3afWTa5LNz6Fq3Ffp5J9tq4BnNbqNJmRTcg5oD e+CsHZIAbSShl7fdw0rcMgRSHiEGpVz92p1BKunPBvmRjXLHmGDMWrEE9f2CtWAo SUEhy5izI8VNoSGZMQBmQXLLWU1n1vg73hjRAbUv/3ctkAb3anrYayPahvavK1kK -----END CERTIFICATE-----Generated at Mon Mar 2 00:23:57 2026 by rpki-client