$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/947AB09E459C11F0BF881335C4F9AE02.roa File: 947AB09E459C11F0BF881335C4F9AE02.roa (raw, json) Hash identifier: /savhlBX8yuqhwBG9bwr+ymXN5AO8aEM3V2xkRwTRxI= Subject key identifier: B0:EB:29:94:0F:3A:47:1E:E0:45:56:C3:9A:8F:4C:F1:59:50:04:B1 Certificate issuer: /CN=A91A9CBB/serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Certificate serial: AA Authority key identifier: FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/947AB09E459C11F0BF881335C4F9AE02.roa Signing time: Sun 01 Mar 2026 08:07:04 +0000 ROA not before: Tue 10 Jun 2025 01:45:26 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 7543 IP address blocks: 202.47.192.0/24 maxlen: 24 202.47.195.0/24 maxlen: 24 202.47.196.0/24 maxlen: 24 202.47.201.0/24 maxlen: 24 202.47.202.0/24 maxlen: 24 202.47.203.0/24 maxlen: 24 210.57.8.0/22 maxlen: 24 210.176.128.0/24 maxlen: 24 210.176.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:31:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CBB, serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Validity Not Before: Jun 10 01:45:26 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a3f3a8-3a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a6:b9:e4:31:7a:2a:6c:88:ea:fe:1e:bc:39: ec:00:4c:e3:16:74:ce:02:42:26:81:be:cc:7f:16: eb:10:7a:8f:d5:df:0c:d8:82:c7:0c:04:3e:93:8a: 9c:43:67:b5:ba:8d:5d:54:c5:9f:11:3f:fb:fd:e2: 96:0a:97:e7:58:32:06:47:2c:a0:21:f3:0f:34:f3: 43:fe:ca:bb:11:c2:46:16:e3:63:b4:82:97:5b:7d: 5f:c3:f7:c9:8a:00:57:47:6f:fd:c8:9f:58:d0:66: 7e:46:10:d1:45:8f:74:55:93:1f:1f:b4:99:26:08: 27:38:55:e5:29:b0:7d:6b:d3:18:73:88:c1:fb:14: 95:05:28:ab:88:b6:cd:6b:b8:c6:65:de:bb:c6:92: ba:c4:74:0b:e0:f9:a9:43:b7:49:20:14:e5:2c:eb: ca:84:d8:cf:7c:36:2d:26:e8:df:f8:a0:c1:63:35: c8:89:de:3f:2d:98:b6:a8:21:82:ae:a1:18:36:15: 76:3f:69:90:52:c4:97:fc:23:6a:a1:c2:87:33:4f: d5:fa:ce:83:1b:c9:e9:af:55:71:e0:dc:41:b0:31: d5:66:9c:36:39:1b:07:b4:55:2a:7a:c4:cd:ff:2d: be:41:69:59:b9:df:1f:88:4f:97:b1:f6:f7:c3:e0: 36:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:EB:29:94:0F:3A:47:1E:E0:45:56:C3:9A:8F:4C:F1:59:50:04:B1 X509v3 Authority Key Identifier: keyid:FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/947AB09E459C11F0BF881335C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.47.192.0/24 202.47.195.0-202.47.196.255 202.47.201.0-202.47.203.255 210.57.8.0/22 210.176.128.0/24 210.176.142.0/24 Signature Algorithm: sha256WithRSAEncryption 14:61:4c:e3:aa:b9:67:1c:e2:3d:06:bf:8b:14:22:a0:6f:b7: 3a:c2:28:1b:8f:99:11:a9:a7:ca:6d:b6:08:80:7c:1c:d1:0a: 7c:82:fc:e1:e3:cf:96:1f:ce:69:b3:77:d1:d4:88:fa:96:57: eb:71:01:65:db:fc:63:d9:8b:8f:e9:21:cf:1a:52:06:f6:1b: 54:04:5b:6e:10:74:ee:1e:38:19:75:c0:37:85:47:b7:64:7b: b9:9d:2c:80:02:33:05:2b:fb:98:0c:60:9e:13:7d:db:69:07: a9:0d:33:1a:a2:be:b7:69:1b:c6:2b:79:8e:6c:90:d8:71:e8: 73:09:3f:2d:c7:ea:46:05:01:37:12:32:7b:30:00:24:49:15: 9c:6f:f6:cd:89:6f:2b:84:56:93:e2:e4:08:30:8e:0c:28:e8: ec:18:bb:10:3a:bf:9d:6e:d3:59:35:df:06:8c:f1:78:08:d9: 1f:04:c4:50:62:a0:36:ac:5b:e7:b4:01:12:92:9d:b9:4e:26: 69:5c:23:b1:69:1a:0b:94:10:7f:50:d8:e0:af:c8:95:3b:76: b9:ed:1b:19:f7:63:98:97:75:08:95:46:1f:2f:e4:81:17:c4: b0:02:04:b8:bd:33:43:ff:f7:53:ac:d2:46:1a:59:0b:fd:44: 7c:3d:3e:29 -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlDQkIxMTAvBgNVBAUTKEZDMjRGNTM5MDc0Nzg3RUNFQUIwMEMyNDI2MDZDMkJE Njg4MTlBMEQwHhcNMjUwNjEwMDE0NTI2WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZjNhOC0zYTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoaa55DF6KmyI6v4evDnsAEzjFnTOAkImgb7MfxbrEHqP1d8M2ILHDAQ+k4qc Q2e1uo1dVMWfET/7/eKWCpfnWDIGRyygIfMPNPND/sq7EcJGFuNjtIKXW31fw/fJ igBXR2/9yJ9Y0GZ+RhDRRY90VZMfH7SZJggnOFXlKbB9a9MYc4jB+xSVBSiriLbN a7jGZd67xpK6xHQL4PmpQ7dJIBTlLOvKhNjPfDYtJujf+KDBYzXIid4/LZi2qCGC rqEYNhV2P2mQUsSX/CNqocKHM0/V+s6DG8npr1Vx4NxBsDHVZpw2ORsHtFUqesTN /y2+QWlZud8fiE+Xsfb3w+A2dwIDAQABo4ICjjCCAoowHQYDVR0OBBYEFLDrKZQP Okce4EVWw5qPTPFZUASxMB8GA1UdIwQYMBaAFPwk9TkHR4fs6rAMJCYGwr1ogZoN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUNCQi9ENTNCRDE0NjE1 QjExMUYwQTI3NzRBMDlDNEY5QUUwMi9fQ1QxT1FkSGgtenFzQXdrSmdiQ3ZXaUJt ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19DVDFPUWRIaC16cXNBd2tKZ2JDdldpQm1nMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTlDQkIvRDUzQkQxNDYxNUIxMTFGMEEyNzc0QTA5QzRGOUFFMDIvOTQ3QUIwOUU0 NTlDMTFGMEJGODgxMzM1QzRGOUFFMDIucm9hME0GCCsGAQUFBwEHAQH/BD4wPDA6 BAIAATA0AwQAyi/AMAwDBADKL8MDBADKL8QwDAMEAMovyQMEAsovyAMEAtI5CAME ANKwgAMEANKwjjANBgkqhkiG9w0BAQsFAAOCAQEAFGFM46q5ZxziPQa/ixQioG+3 OsIoG4+ZEamnym22CIB8HNEKfIL84ePPlh/OabN30dSI+pZX63EBZdv8Y9mLj+kh zxpSBvYbVARbbhB07h44GXXAN4VHt2R7uZ0sgAIzBSv7mAxgnhN922kHqQ0zGqK+ t2kbxit5jmyQ2HHocwk/LcfqRgUBNxIyezAAJEkVnG/2zYlvK4RWk+LkCDCODCjo 7Bi7EDq/nW7TWTXfBozxeAjZHwTEUGKgNqxb57QBEpKduU4maVwjsWkaC5QQf1DY 4K/IlTt2ue0bGfdjmJd1CJVGHy/kgRfEsAIEuL0zQ//3U6zSRhpZC/1EfD0+KQ== -----END CERTIFICATE-----Generated at Mon Mar 2 22:21:57 2026 by rpki-client