$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/3ED710C68DB811E98ACC9F7EC4F9AE02.roa File: 3ED710C68DB811E98ACC9F7EC4F9AE02.roa (raw, json) Hash identifier: folYHW0Gwg29Q/Y88gdrsYlLi/YxqwtkEzwH995b74w= Subject key identifier: 35:E4:EA:C3:2C:F3:E4:95:22:51:E9:AF:2C:2C:B5:66:BF:FF:BC:1E Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Certificate serial: 3678 Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/3ED710C68DB811E98ACC9F7EC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:47:53 +0000 ROA not before: Thu 24 Jul 2025 14:50:19 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 133376 IP address blocks: 203.209.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13944 (0x3678) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Validity Not Before: Jul 24 14:50:19 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a489d8-610f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b8:7d:c5:6d:e9:3c:51:99:77:ba:e8:0e:15: 24:a0:58:95:9f:43:3b:4e:ac:15:32:c1:cb:ed:fd: b7:02:4b:e9:b8:e5:91:bd:e4:a5:3d:98:a2:76:18: d4:b0:d6:83:50:7d:7f:77:b3:57:8e:96:f6:ce:f4: 96:b3:cb:32:37:32:b0:f4:be:aa:d2:b0:69:00:c3: 80:f8:37:93:01:39:f0:bd:ce:8f:75:72:f8:2c:43: 40:d1:b0:bf:ca:f1:df:5c:72:31:1a:c5:13:da:e7: 07:59:8c:a8:98:2e:1d:7b:1d:a2:6c:ae:2b:71:c3: ce:cc:97:b0:77:82:e6:2a:f1:08:1d:0d:80:33:0a: 3d:91:e3:60:e0:4c:c7:a6:1b:2a:61:34:25:80:cc: b7:24:81:46:71:08:47:83:38:a7:89:a7:20:26:1d: 3e:0b:55:6f:f1:40:74:27:46:c3:b5:ea:1d:73:de: 05:39:01:91:e2:b9:2a:ee:10:c1:4f:78:44:5d:8f: 11:de:1a:b3:e2:87:aa:3c:d8:3a:2d:49:98:aa:9b: f8:fa:80:43:bc:92:51:0d:76:d1:3a:e3:df:92:28: 54:bf:48:03:47:b4:34:d4:ea:04:e5:d7:df:64:a3: d1:53:4a:05:05:82:d5:08:48:7c:ff:a4:e7:1e:e0: 75:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E4:EA:C3:2C:F3:E4:95:22:51:E9:AF:2C:2C:B5:66:BF:FF:BC:1E X509v3 Authority Key Identifier: keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/3ED710C68DB811E98ACC9F7EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.209.121.0/24 Signature Algorithm: sha256WithRSAEncryption 02:c7:cb:27:01:5a:36:f8:29:16:4b:b8:ed:3c:38:8d:5a:b4: 0a:97:65:86:9a:9e:4f:d5:ea:2e:ec:82:40:5f:ad:56:fe:54: af:84:c8:ac:68:6d:1b:65:d1:f2:f2:2b:fd:07:a4:bd:7e:a4: a1:a9:e7:a9:0c:9b:6b:85:2c:d8:15:ec:fb:5e:52:79:a4:4a: 15:75:aa:ee:0d:60:b9:07:3e:6a:a2:d2:f8:60:9e:ae:c0:49: 65:66:a6:07:7a:43:56:02:a7:3e:77:a0:eb:7a:bd:84:50:f2: 2a:82:2f:8e:86:bd:f8:a3:7a:7f:54:a9:e1:4f:4f:bd:3b:7c: 04:e4:a6:37:07:26:6c:b9:9e:a4:95:44:b9:90:19:bf:3c:a8: de:cb:5b:e5:21:54:c3:d5:95:62:54:de:83:e8:44:9f:f7:aa: a2:1e:0a:ae:4a:10:b8:26:54:69:e7:23:af:30:62:65:07:1e: e4:1b:f9:ad:40:df:76:43:11:c4:a9:2e:87:e3:d1:90:87:19: 66:ce:19:89:43:a1:e4:02:3d:cd:a7:3b:e7:fa:a8:d5:55:7e: c8:5a:88:4b:b0:1f:a5:87:69:d0:63:63:98:b0:cb:77:a4:c7: 5e:a9:80:86:1d:9d:aa:2d:85:ec:79:2f:f2:61:81:d4:57:cb: ea:f0:02:0e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICNngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw OTU2QTk4MkEwHhcNMjUwNzI0MTQ1MDE5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODlkOC02MTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Lh9xW3pPFGZd7roDhUkoFiVn0M7TqwVMsHL7f23AkvpuOWRveSlPZiidhjU sNaDUH1/d7NXjpb2zvSWs8syNzKw9L6q0rBpAMOA+DeTATnwvc6PdXL4LENA0bC/ yvHfXHIxGsUT2ucHWYyomC4dex2ibK4rccPOzJewd4LmKvEIHQ2AMwo9keNg4EzH phsqYTQlgMy3JIFGcQhHgziniacgJh0+C1Vv8UB0J0bDteodc94FOQGR4rkq7hDB T3hEXY8R3hqz4oeqPNg6LUmYqpv4+oBDvJJRDXbROuPfkihUv0gDR7Q01OoE5dff ZKPRU0oFBYLVCEh8/6TnHuB1MQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDXk6sMs 8+SVIlHprywstWa//7weMB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvM0VENzEwQzY4 REI4MTFFOThBQ0M5RjdFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAy9F5MA0GCSqGSIb3DQEBCwUAA4IBAQACx8snAVo2+CkWS7jtPDiN WrQKl2WGmp5P1eou7IJAX61W/lSvhMisaG0bZdHy8iv9B6S9fqShqeepDJtrhSzY Fez7XlJ5pEoVdaruDWC5Bz5qotL4YJ6uwEllZqYHekNWAqc+d6Drer2EUPIqgi+O hr34o3p/VKnhT0+9O3wE5KY3ByZsuZ6klUS5kBm/PKjey1vlIVTD1ZViVN6D6ESf 96qiHgquShC4JlRp5yOvMGJlBx7kG/mtQN92QxHEqS6H49GQhxlmzhmJQ6HkAj3N pzvn+qjVVX7IWohLsB+lh2nQY2OYsMt3pMdeqYCGHZ2qLYXseS/yYYHUV8vq8AIO -----END CERTIFICATE-----Generated at Mon Mar 2 23:24:07 2026 by rpki-client