$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/418966DA032011ED84D6CA1EC4F9AE02.roa File: 418966DA032011ED84D6CA1EC4F9AE02.roa (raw, json) Hash identifier: Jhz4r7a7iCxB4QnIuBoSZs0NvgYjtq+Y2BQvYiRhg6E= Subject key identifier: 14:09:E8:90:4E:BA:45:36:6B:AA:F5:52:F1:BF:DE:36:F8:AA:DA:12 Certificate issuer: /CN=A91A5577/serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F Certificate serial: 0338 Authority key identifier: 5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/418966DA032011ED84D6CA1EC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:04:56 +0000 ROA not before: Tue 29 Apr 2025 02:36:59 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 4851 IP address blocks: 202.94.32.0/20 maxlen: 20 203.24.63.0/24 maxlen: 24 203.27.44.0/24 maxlen: 24 203.29.208.0/23 maxlen: 23 203.55.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 824 (0x338) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5577, serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F Validity Not Before: Apr 29 02:36:59 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a42b68-3c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7e:68:cf:dd:be:3e:83:d9:67:e2:0b:6b:86: d1:9a:18:8f:47:4f:f0:11:ae:50:15:f9:db:fe:80: 4a:63:1c:48:aa:83:58:fd:0c:ec:83:b5:9d:7d:e3: ff:16:31:f9:b2:92:b1:9d:db:3b:0c:ce:5b:2a:4b: 82:95:25:83:22:cf:1e:e4:f9:f5:39:f4:78:2c:6b: 63:c6:12:3b:29:54:00:c7:08:ae:2b:33:69:8e:72: 10:72:79:8d:7b:8c:d0:8e:b7:28:55:b5:06:b0:66: 57:55:31:b0:30:3f:fd:5d:9d:4c:e8:b9:69:21:ec: 59:fd:e6:6a:89:20:38:05:85:4d:16:1d:73:28:6d: 04:5f:c3:45:5f:d0:db:ec:4c:e6:b4:c9:e3:1b:1d: 2a:79:42:64:52:6a:11:22:c5:31:fd:1f:f3:73:9f: be:c5:15:54:6a:5f:e8:df:16:bd:57:52:ea:97:b4: 04:9c:a6:fc:d6:00:8c:c0:3f:62:5c:91:05:ee:af: d2:b1:74:9e:ea:9a:ec:3e:a4:eb:31:1d:d3:c7:75: 10:a8:fe:d4:03:89:ab:a4:94:f9:9d:11:b8:13:20: 39:11:24:d4:4d:6a:68:bb:57:22:d0:04:68:4a:4d: c4:2a:b7:fa:3c:aa:8f:f9:23:46:21:c3:02:8a:c0: 32:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:09:E8:90:4E:BA:45:36:6B:AA:F5:52:F1:BF:DE:36:F8:AA:DA:12 X509v3 Authority Key Identifier: keyid:5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/418966DA032011ED84D6CA1EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.94.32.0/20 203.24.63.0/24 203.27.44.0/24 203.29.208.0/23 203.55.134.0/23 Signature Algorithm: sha256WithRSAEncryption 75:54:ef:fa:1b:df:84:a2:fa:a7:cb:5f:38:bd:17:03:c8:3b: 60:27:0b:15:55:21:01:b7:71:e6:c3:38:70:eb:fe:2c:a7:7c: b6:8e:92:ae:a5:92:9d:8d:53:dd:ba:65:bf:54:26:99:7d:a3: 12:91:8c:72:9d:ac:d7:8b:e2:44:04:e4:43:f0:75:33:f5:8a: 32:c2:3c:90:75:ea:28:9e:54:65:d4:20:fd:6e:21:c7:2d:e9: 8b:6e:07:4f:55:02:12:2f:0f:29:1d:90:b6:ea:2b:15:21:3f: b3:1e:cd:cc:af:05:19:d8:74:82:49:f4:2a:75:77:82:21:5e: 9f:9b:0d:15:02:74:42:f6:53:a9:f5:4c:40:95:d8:05:98:c4: 57:42:b1:5a:7d:fd:00:10:14:a7:74:b6:63:99:30:c3:08:de: 2c:8e:39:bd:27:aa:bc:dd:aa:07:7d:75:76:bb:5c:53:fb:ef: e9:20:a6:6e:f4:13:8a:63:bf:48:3e:b4:97:ee:76:ed:8f:c6: 7f:28:71:53:dc:fd:4e:e1:7d:d8:92:0c:47:59:03:b9:64:de: f1:e0:47:be:d8:aa:55:13:92:b8:99:86:26:d1:01:e5:67:a0: fa:d9:e0:13:ac:87:92:3f:3f:03:e3:c3:37:71:6a:53:f1:e1: e8:72:ca:1f -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICAzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1NzcxMTAvBgNVBAUTKDVDMTI2MzNFNkRBNzg2MTEzMUJDQ0ZFQTFGN0I3QUJE MzUxRDIzMkYwHhcNMjUwNDI5MDIzNjU5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmI2OC0zYzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoH5oz92+PoPZZ+ILa4bRmhiPR0/wEa5QFfnb/oBKYxxIqoNY/Qzsg7WdfeP/ FjH5spKxnds7DM5bKkuClSWDIs8e5Pn1OfR4LGtjxhI7KVQAxwiuKzNpjnIQcnmN e4zQjrcoVbUGsGZXVTGwMD/9XZ1M6LlpIexZ/eZqiSA4BYVNFh1zKG0EX8NFX9Db 7EzmtMnjGx0qeUJkUmoRIsUx/R/zc5++xRVUal/o3xa9V1Lql7QEnKb81gCMwD9i XJEF7q/SsXSe6prsPqTrMR3Tx3UQqP7UA4mrpJT5nRG4EyA5ESTUTWpou1ci0ARo Sk3EKrf6PKqP+SNGIcMCisAyewIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFBQJ6JBO ukU2a6r1UvG/3jb4qtoSMB8GA1UdIwQYMBaAFFwSYz5tp4YRMbzP6h97er01HSMv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTU3Ny85MDNFNEM3ODAz MTYxMUVEOTBGODg0NEZDNEY5QUUwMi9YQkpqUG0ybmhoRXh2TV9xSDN0NnZUVWRJ eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hCSmpQbTJuaGhFeHZNX3FIM3Q2dlRVZEl5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU1NzcvOTAzRTRDNzgwMzE2MTFFRDkwRjg4NDRGQzRGOUFFMDIvNDE4OTY2REEw MzIwMTFFRDg0RDZDQTFFQzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQEyl4gAwQAyxg/AwQAyxssAwQByx3QAwQByzeGMA0GCSqGSIb3DQEB CwUAA4IBAQB1VO/6G9+Eovqny184vRcDyDtgJwsVVSEBt3Hmwzhw6/4sp3y2jpKu pZKdjVPdumW/VCaZfaMSkYxynazXi+JEBORD8HUz9YoywjyQdeoonlRl1CD9biHH LemLbgdPVQISLw8pHZC26isVIT+zHs3MrwUZ2HSCSfQqdXeCIV6fmw0VAnRC9lOp 9UxAldgFmMRXQrFaff0AEBSndLZjmTDDCN4sjjm9J6q83aoHfXV2u1xT++/pIKZu 9BOKY79IPrSX7nbtj8Z/KHFT3P1O4X3YkgxHWQO5ZN7x4Ee+2KpVE5K4mYYm0QHl Z6D62eATrIeSPz8D48M3cWpT8eHocsof -----END CERTIFICATE-----Generated at Mon Mar 2 16:25:04 2026 by rpki-client