$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/EC4AB04AAA5511EABCEBDE19C4F9AE02.roa File: EC4AB04AAA5511EABCEBDE19C4F9AE02.roa (raw, json) Hash identifier: PVNVIsAGF4iLu1l85ogTKaGXUTCHGrR1d4s3DuDaU/s= Subject key identifier: 0E:79:BB:3B:30:08:D8:0B:96:A0:32:06:B5:B5:AF:D1:55:B5:6B:FE Certificate issuer: /CN=A91A09BF/serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567 Certificate serial: 0C38 Authority key identifier: 78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/EC4AB04AAA5511EABCEBDE19C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:36:55 +0000 ROA not before: Thu 20 Nov 2025 18:38:51 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 45485 IP address blocks: 203.194.252.0/24 maxlen: 24 203.194.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.crl rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3128 (0xc38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A09BF, serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567 Validity Not Before: Nov 20 18:38:51 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a45d17-0f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:57:1b:7c:8e:27:3a:96:e1:69:e1:72:46:9b: aa:9f:3e:f7:bb:76:12:0a:af:76:26:59:a6:71:65: b5:7a:0e:5e:50:1e:aa:d4:49:ba:96:a3:3a:8a:57: 11:80:ac:67:83:34:64:57:49:e3:15:5d:f1:50:c0: bb:bd:f1:46:0c:22:a9:b0:ad:9a:55:7a:e2:3b:73: ba:e1:0e:61:c0:8e:85:2e:43:cf:5b:8f:59:31:58: af:3c:0a:d3:3f:28:23:a3:27:f4:c8:0d:71:c9:60: d8:f6:5e:86:26:68:6e:10:7f:53:f5:a8:a3:42:71: 22:ff:08:b5:68:9b:8e:2f:25:a2:42:03:e8:be:04: ea:4c:71:81:1b:40:a6:5b:c4:42:ce:98:eb:db:fe: 2d:3c:d6:b4:77:1e:50:e3:b4:84:db:1f:18:9f:03: 7d:52:13:c2:d2:24:eb:4d:34:cf:f6:28:fb:11:a0: 57:13:e3:73:ee:e0:98:3e:8d:04:45:4d:cc:91:f1: f9:76:ef:87:18:0a:6d:6b:bb:35:4b:9c:63:0a:d9: 4a:6a:c4:c6:5d:91:da:0f:c5:0a:f7:cc:0a:97:5c: 4e:86:2d:ab:b2:fc:c0:1b:50:03:30:0c:29:e6:e1: 45:66:fd:0c:bd:3c:ad:d6:ae:3b:89:f1:5b:a7:30: 0f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:79:BB:3B:30:08:D8:0B:96:A0:32:06:B5:B5:AF:D1:55:B5:6B:FE X509v3 Authority Key Identifier: keyid:78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/EC4AB04AAA5511EABCEBDE19C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.194.252.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:df:08:c6:ae:fd:7c:89:83:cb:f4:60:de:92:81:fd:7e:2a: 73:e7:54:6c:1d:3a:de:42:e1:46:02:57:fd:ec:12:28:98:c7: 4a:3f:99:9a:37:dd:b3:8e:f2:0f:7f:dd:f1:dd:a5:f3:b5:a7: 02:52:43:c0:a4:96:e6:06:0e:a6:ef:62:e4:a2:e1:21:b4:66: b8:ff:6a:69:75:5f:e3:bd:82:df:c6:c1:ae:ab:7b:b0:af:2a: 02:67:f7:35:5e:ba:64:e9:35:af:84:70:c7:2d:f3:5b:dd:0d: a3:36:0e:3e:7b:f1:e3:43:c6:d0:1f:48:64:13:d6:84:da:3f: d8:aa:b5:39:9c:ec:63:e6:f3:e7:72:31:a9:4d:46:96:01:06: 5c:c8:82:86:75:77:cc:d6:04:fd:b8:55:39:d6:5e:57:6b:36: ba:2c:36:e8:a4:18:7e:0d:72:c8:a6:b4:0f:3d:ed:78:76:f3: a1:df:86:52:ac:87:6b:e7:15:8c:8f:29:93:d1:d3:f9:86:ab: ca:2c:55:2c:21:5b:96:22:32:ab:5f:c1:d5:64:f5:41:cb:29: 27:1f:9f:b5:95:ff:dd:24:0c:f2:dc:dd:08:75:4b:79:39:d3: 2d:de:1c:77:78:00:82:66:33:fc:fd:0e:84:e7:f4:64:f2:3d: af:89:25:06 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA5QkYxMTAvBgNVBAUTKDc4NzBGMjQwQkM0NTE2RTM5QTlDMjU5NThDRjk3QjE5 NEJFNzY1NjcwHhcNMjUxMTIwMTgzODUxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWQxNy0wZjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFcbfI4nOpbhaeFyRpuqnz73u3YSCq92JlmmcWW1eg5eUB6q1Em6lqM6ilcR gKxngzRkV0njFV3xUMC7vfFGDCKpsK2aVXriO3O64Q5hwI6FLkPPW49ZMVivPArT Pygjoyf0yA1xyWDY9l6GJmhuEH9T9aijQnEi/wi1aJuOLyWiQgPovgTqTHGBG0Cm W8RCzpjr2/4tPNa0dx5Q47SE2x8YnwN9UhPC0iTrTTTP9ij7EaBXE+Nz7uCYPo0E RU3MkfH5du+HGApta7s1S5xjCtlKasTGXZHaD8UK98wKl1xOhi2rsvzAG1ADMAwp 5uFFZv0MvTyt1q47ifFbpzAP7wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFA55uzsw CNgLlqAyBrW1r9FVtWv+MB8GA1UdIwQYMBaAFHhw8kC8RRbjmpwllYz5exlL52Vn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDlCRi9EMTNEQTFENDJE RkMxMUVBQkMxQjZCODJDNEY5QUUwMi9lSER5UUx4RkZ1T2FuQ1dWalBsN0dVdm5a V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIRHlRTHhGRnVPYW5DV1ZqUGw3R1V2blpXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTA5QkYvRDEzREExRDQyREZDMTFFQUJDMUI2QjgyQzRGOUFFMDIvRUM0QUIwNEFB QTU1MTFFQUJDRUJERTE5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBy8L8MA0GCSqGSIb3DQEBCwUAA4IBAQCc3wjGrv18iYPL9GDekoH9 fipz51RsHTreQuFGAlf97BIomMdKP5maN92zjvIPf93x3aXztacCUkPApJbmBg6m 72LkouEhtGa4/2ppdV/jvYLfxsGuq3uwryoCZ/c1Xrpk6TWvhHDHLfNb3Q2jNg4+ e/HjQ8bQH0hkE9aE2j/YqrU5nOxj5vPncjGpTUaWAQZcyIKGdXfM1gT9uFU51l5X aza6LDbopBh+DXLIprQPPe14dvOh34ZSrIdr5xWMjymT0dP5hqvKLFUsIVuWIjKr X8HVZPVByyknH5+1lf/dJAzy3N0IdUt5OdMt3hx3eACCZjP8/Q6E5/Rk8j2viSUG -----END CERTIFICATE-----Generated at Mon Mar 2 05:43:24 2026 by rpki-client