$ rpki-client -vvf rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/4034878C531411F0B5969F4DC4F9AE02.roa File: 4034878C531411F0B5969F4DC4F9AE02.roa (raw, json) Hash identifier: HrcOu88/JBmIFobTfUt0ecLd7H5lABy3mnlURTBZl4w= Subject key identifier: DE:AF:DB:6B:46:08:0D:DD:14:AA:78:29:FB:90:4A:01:C9:F3:18:11 Certificate issuer: /CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Certificate serial: 0185 Authority key identifier: 6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/4034878C531411F0B5969F4DC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:56:28 +0000 ROA not before: Tue 03 Feb 2026 04:23:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9734 IP address blocks: 203.20.114.0/24 maxlen: 24 2001:df3:b540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A54FE, serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Validity Not Before: Feb 3 04:23:31 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a46fbc-f146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:eb:bc:56:ec:36:ef:42:13:71:bc:23:91:20: e2:c9:0b:74:4e:c4:7a:e3:a9:23:0e:57:4e:89:67: 27:6e:90:20:4b:77:e9:77:5e:4d:05:54:03:04:a4: 98:a5:39:0b:3e:f8:20:34:d0:58:ef:cb:41:77:61: 12:44:b2:2e:d3:c4:fe:45:44:7f:a4:19:ad:1a:28: 88:5a:f4:aa:18:1f:9a:34:ae:42:03:d5:ad:16:21: d0:7d:ec:46:8d:d9:17:b8:68:af:3c:35:13:74:ad: 05:57:c2:01:ef:95:36:3a:e0:e4:1f:21:c5:91:b1: c9:9d:6f:ab:86:d3:9a:06:d0:3c:0d:df:96:b6:28: 24:7c:8a:57:6d:29:dc:ff:0a:00:c0:fc:cd:3e:d5: fc:9c:d2:79:64:0e:76:25:5e:95:cb:0d:a3:c6:25: 61:09:ff:44:84:e1:89:93:f5:d2:01:c8:8d:f1:74: e4:d1:33:19:83:18:c7:3b:fb:0f:72:74:46:0b:89: 79:a9:65:d6:7b:b6:1d:01:6a:12:23:7f:d0:9e:d1: 37:d7:2c:9a:e0:cd:da:9a:a7:05:c3:44:b6:65:90: 9c:86:aa:5e:a7:29:be:07:91:d4:ed:b7:4a:42:aa: 5e:d0:3a:b9:25:6b:ef:0b:c1:c3:d2:c5:f4:82:6c: 97:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AF:DB:6B:46:08:0D:DD:14:AA:78:29:FB:90:4A:01:C9:F3:18:11 X509v3 Authority Key Identifier: keyid:6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/4034878C531411F0B5969F4DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.20.114.0/24 IPv6: 2001:df3:b540::/48 Signature Algorithm: sha256WithRSAEncryption 6b:cb:2f:3e:c7:76:e0:34:89:bb:93:74:dd:ee:4d:0a:9b:76: 86:b6:f7:86:3f:84:37:eb:38:19:4e:96:90:fb:05:1d:37:95: 67:d0:59:7d:39:9d:e9:86:33:ef:e1:db:bc:03:d9:87:98:21: 20:e8:7d:34:f7:95:08:ae:48:2a:71:01:d9:77:fc:0a:a3:39: 50:43:f5:48:8e:df:f0:67:52:48:8d:19:86:36:79:c5:fb:d7: 53:f7:d1:fb:37:f5:e7:09:21:18:75:d4:7a:dc:62:5d:d6:7b: 2a:52:1b:ad:06:6f:a7:0e:f5:8f:81:a3:b0:13:24:d1:fa:58: 06:2b:3b:aa:4c:46:cc:a1:7d:24:78:03:f0:87:a7:82:8c:a7: 2a:a9:78:f6:be:9c:29:07:7c:49:44:f1:7b:e1:db:a3:09:31: 65:b2:0c:7a:f7:50:3b:aa:1d:44:53:2e:b1:a0:b0:4b:c9:4c: ab:d8:5c:61:a2:a0:fb:22:41:3a:1f:99:ef:33:42:57:79:eb: 75:eb:3e:01:3a:2a:84:e0:0d:44:09:e5:62:24:4f:56:7e:f8: 24:ce:dd:bc:61:de:a0:07:21:cd:eb:74:7d:c7:7d:57:0a:b9: c5:86:39:0d:53:cf:94:4e:a4:3a:47:20:f2:5b:0e:8f:ee:49: 59:15:c8:e5 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0RkUxMTAvBgNVBAUTKDZGQzcwOTA2RkJBNkY0NTM5NDUyMDkxOTMyQzQ1RkZB NEQ4NTcyQjgwHhcNMjYwMjAzMDQyMzMxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmZiYy1mMTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuu8Vuw270ITcbwjkSDiyQt0TsR646kjDldOiWcnbpAgS3fpd15NBVQDBKSY pTkLPvggNNBY78tBd2ESRLIu08T+RUR/pBmtGiiIWvSqGB+aNK5CA9WtFiHQfexG jdkXuGivPDUTdK0FV8IB75U2OuDkHyHFkbHJnW+rhtOaBtA8Dd+WtigkfIpXbSnc /woAwPzNPtX8nNJ5ZA52JV6Vyw2jxiVhCf9EhOGJk/XSAciN8XTk0TMZgxjHO/sP cnRGC4l5qWXWe7YdAWoSI3/QntE31yya4M3amqcFw0S2ZZCchqpepym+B5HU7bdK Qqpe0Dq5JWvvC8HD0sX0gmyX0QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFN6v22tG CA3dFKp4KfuQSgHJ8xgRMB8GA1UdIwQYMBaAFG/HCQb7pvRTlFIJGTLEX/pNhXK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTRGRS9ENjExN0RGNkY2 RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlGT1VVZ2taTXNSZi1rMkZj cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4Y0pCdnVtOUZPVVVna1pNc1JmLWsyRmNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU0RkUvRDYxMTdERjZGNkU5MTFFRUFEQkZGQjUyQzRGOUFFMDIvNDAzNDg3OEM1 MzE0MTFGMEI1OTY5RjREQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAyxRyMA8EAgACMAkDBwAgAQ3ztUAwDQYJKoZIhvcNAQELBQADggEB AGvLLz7HduA0ibuTdN3uTQqbdoa294Y/hDfrOBlOlpD7BR03lWfQWX05nemGM+/h 27wD2YeYISDofTT3lQiuSCpxAdl3/AqjOVBD9UiO3/BnUkiNGYY2ecX711P30fs3 9ecJIRh11HrcYl3WeypSG60Gb6cO9Y+Bo7ATJNH6WAYrO6pMRsyhfSR4A/CHp4KM pyqpePa+nCkHfElE8Xvh26MJMWWyDHr3UDuqHURTLrGgsEvJTKvYXGGioPsiQTof me8zQld563XrPgE6KoTgDUQJ5WIkT1Z++CTO3bxh3qAHIc3rdH3HfVcKucWGOQ1T z5ROpDpHIPJbDo/uSVkVyOU= -----END CERTIFICATE-----Generated at Mon Mar 2 08:21:20 2026 by rpki-client