$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/4B82FA441A8611ECB908E939C4F9AE02.roa File: 4B82FA441A8611ECB908E939C4F9AE02.roa (raw, json) Hash identifier: uV1mWEm9Bs1DW7VnjBjbNklIBwl6dVIf/TDxxXlFI88= Subject key identifier: A8:11:B5:8F:1E:2F:99:18:91:F2:37:5E:D6:CE:88:18:9C:8A:CE:6C Certificate issuer: /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE Certificate serial: 0BF8 Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/4B82FA441A8611ECB908E939C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:00:10 +0000 ROA not before: Fri 28 Mar 2025 20:01:51 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 136552 IP address blocks: 210.24.100.0/22 maxlen: 24 2400:1700:200::/48 maxlen: 48 2400:1700:210::/48 maxlen: 48 2400:1700:211::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3064 (0xbf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A2, serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE Validity Not Before: Mar 28 20:01:51 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a4628a-17dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a6:56:3d:b7:a5:43:b1:67:48:64:8e:5f:d8: d1:09:41:a9:ce:a7:c6:18:47:c6:e5:74:97:31:c9: 87:ac:f8:39:d3:d5:88:b7:19:55:0f:22:d2:22:0b: 9d:da:7d:fd:f0:ec:b9:ed:34:a1:11:1c:0c:29:ee: cb:70:81:45:e4:67:4f:e1:8b:f5:ec:b3:45:ac:10: b2:ac:95:dc:d6:3f:26:76:df:d7:1b:95:aa:8b:3d: 07:3f:21:ec:77:10:d1:33:ac:a6:28:73:36:b3:2e: ca:5d:4b:89:da:6e:ac:8b:80:16:3c:dd:60:32:21: 88:e3:25:ce:54:7a:3b:ea:92:dd:96:34:81:a2:ee: 05:b7:b1:b9:f2:f9:c5:ec:a2:f8:19:f6:79:44:00: e2:06:06:81:38:41:77:97:ce:52:22:40:39:7d:c7: 57:69:67:d3:64:7d:78:76:7d:28:91:1b:c0:6b:98: ed:3c:4e:52:35:7e:9a:df:62:39:2f:79:e4:d8:5b: f5:7b:f7:66:95:8d:4e:f1:d2:5a:c4:37:56:da:1d: 48:15:d3:39:e2:01:2e:24:9f:5e:a1:15:8a:5b:a7: 21:dc:08:9a:63:68:f1:c0:38:38:d7:2a:ae:34:5c: 65:40:1c:48:33:bd:f4:81:05:74:41:b7:d8:5c:7f: 88:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:11:B5:8F:1E:2F:99:18:91:F2:37:5E:D6:CE:88:18:9C:8A:CE:6C X509v3 Authority Key Identifier: keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/4B82FA441A8611ECB908E939C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 210.24.100.0/22 IPv6: 2400:1700:200::/48 2400:1700:210::/47 Signature Algorithm: sha256WithRSAEncryption 5d:b7:2f:65:7f:ec:bd:53:40:ed:ee:db:55:7a:00:f9:69:bd: 8a:16:e0:27:7b:81:66:9a:e9:72:e7:fd:3e:ee:4d:7f:66:e5: d8:9e:cf:69:fa:8f:65:59:79:b4:b3:a5:27:c1:7b:19:4e:18: 4d:1e:c6:8e:f4:6a:b1:1b:4e:6f:ad:be:e9:ed:6b:e1:b9:58: 5d:5d:73:c2:32:ad:cb:dc:06:70:98:41:4e:26:a6:dd:fc:90: 16:84:5e:69:c4:ac:61:08:69:d8:0a:1f:f8:ce:19:c3:84:72: 1e:68:12:11:49:3c:40:52:7b:bf:16:23:0e:8c:2a:de:cb:32: 09:2f:47:b2:5e:00:49:09:44:c5:49:46:27:76:3f:c6:cc:8a: 21:32:3f:8e:80:d0:df:14:67:dc:9a:6d:6d:99:37:ea:74:d0: a8:0c:69:7e:a9:b1:f0:7f:78:ea:9a:b0:be:9a:f1:87:fc:47: 4a:bd:f4:60:fc:88:aa:89:1b:54:6a:d6:da:68:1b:20:a3:ad: 09:f0:0b:14:2a:e8:29:28:cf:f7:f1:34:04:9e:ea:a2:59:b7: 25:59:33:c9:14:94:05:21:10:ca:c7:8e:ee:96:23:2e:eb:78: e8:ef:a6:93:ac:4a:34:b4:92:d5:16:20:96:f9:e4:72:e1:b2: ae:2d:b5:1e -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICC/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTIxMTAvBgNVBAUTKDkyODdGNkU4MkY4RjNCQTI0RTA5RDlDNjMxNzhBNUMw QjJEQTAxREUwHhcNMjUwMzI4MjAwMTUxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjI4YS0xN2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaZWPbelQ7FnSGSOX9jRCUGpzqfGGEfG5XSXMcmHrPg509WItxlVDyLSIgud 2n398Oy57TShERwMKe7LcIFF5GdP4Yv17LNFrBCyrJXc1j8mdt/XG5Wqiz0HPyHs dxDRM6ymKHM2sy7KXUuJ2m6si4AWPN1gMiGI4yXOVHo76pLdljSBou4Ft7G58vnF 7KL4GfZ5RADiBgaBOEF3l85SIkA5fcdXaWfTZH14dn0okRvAa5jtPE5SNX6a32I5 L3nk2Fv1e/dmlY1O8dJaxDdW2h1IFdM54gEuJJ9eoRWKW6ch3AiaY2jxwDg41yqu NFxlQBxIM730gQV0QbfYXH+IiwIDAQABo4ICejCCAnYwHQYDVR0OBBYEFKgRtY8e L5kYkfI3XtbOiBicis5sMB8GA1UdIwQYMBaAFJKH9ugvjzuiTgnZxjF4pcCy2gHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMi9CNTc3M0FBQzU5 NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rb2YyNkMtUE82Sk9DZG5HTVhpbHdMTGFB ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tvZjI2Qy1QTzZKT0NkbkdNWGlsd0xMYUFkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODQ3QTIvQjU3NzNBQUM1OTQyMTFFQTkzNkZDRTQzQzRGOUFFMDIvNEI4MkZBNDQx QTg2MTFFQ0I5MDhFOTM5QzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAM BAIAATAGAwQC0hhkMBgEAgACMBIDBwAkABcAAgADBwEkABcAAhAwDQYJKoZIhvcN AQELBQADggEBAF23L2V/7L1TQO3u21V6APlpvYoW4Cd7gWaa6XLn/T7uTX9m5die z2n6j2VZebSzpSfBexlOGE0exo70arEbTm+tvunta+G5WF1dc8IyrcvcBnCYQU4m pt38kBaEXmnErGEIadgKH/jOGcOEch5oEhFJPEBSe78WIw6MKt7LMgkvR7JeAEkJ RMVJRid2P8bMiiEyP46A0N8UZ9yabW2ZN+p00KgMaX6psfB/eOqasL6a8Yf8R0q9 9GD8iKqJG1Rq1tpoGyCjrQnwCxQq6Ckoz/fxNASe6qJZtyVZM8kUlAUhEMrHju6W Iy7reOjvppOsSjS0ktUWIJb55HLhsq4ttR4= -----END CERTIFICATE-----Generated at Mon Mar 2 15:09:54 2026 by rpki-client