$ rpki-client -vvf rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/1994900403CE11EAA10C6A84C4F9AE02.roa File: 1994900403CE11EAA10C6A84C4F9AE02.roa (raw, json) Hash identifier: +v702T+ecCOjmmS56vuMtDJ6RGqPmaswdGe/Ps9k7F8= Subject key identifier: 73:D8:37:D8:2A:DD:2B:24:33:13:AE:E0:25:2C:9C:2E:DE:67:5E:DF Certificate issuer: /CN=A91B37E3/serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093 Certificate serial: 0D35 Authority key identifier: A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/1994900403CE11EAA10C6A84C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:09:49 +0000 ROA not before: Thu 26 Feb 2026 18:15:45 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 55846 IP address blocks: 115.127.40.0/22 maxlen: 22 115.127.40.0/24 maxlen: 24 115.127.41.0/24 maxlen: 24 115.127.42.0/24 maxlen: 24 115.127.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3381 (0xd35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B37E3, serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093 Validity Not Before: Feb 26 18:15:45 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a472dd-8e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:59:22:3b:d2:1b:f8:73:b6:d6:36:4e:36:e8: 14:b8:40:86:fd:44:18:3a:d6:80:bf:99:e0:a4:d2: 90:75:d7:4b:f4:b6:87:dd:a3:c2:19:d9:b7:a8:95: 67:df:36:1c:36:f3:35:fb:53:01:97:b9:4b:fb:13: 0f:0c:7d:44:f4:51:c3:b3:4c:77:aa:c2:d5:72:ab: 94:f0:da:94:09:db:16:5a:05:7f:29:ac:e5:5a:55: e4:fc:f3:01:ff:24:f5:5a:5c:13:4d:bb:51:48:f1: 98:82:04:a0:ef:b9:a4:74:e1:71:46:de:cd:ed:9c: 8d:53:ad:db:7e:97:10:00:2d:18:cd:aa:88:4f:3d: 1e:85:1f:fd:a3:84:4c:45:fe:03:35:2a:9e:3d:b5: e8:a5:97:7b:94:f9:8e:e0:f4:4d:94:8b:7b:70:b2: ed:0e:3f:59:d5:e4:f8:89:1f:fb:6d:a4:64:0c:fc: 6c:67:53:af:6d:74:68:33:c6:3c:b0:f8:34:72:69: c6:53:c1:4b:5b:80:6a:7a:63:76:70:3e:3e:67:e7: e7:a1:f3:bb:0a:f4:91:f8:de:9e:54:53:73:ca:89: de:b3:01:4c:dd:ce:45:11:d9:df:1a:75:b0:c1:2f: 21:03:8c:29:e5:bb:a5:51:93:56:57:3b:a2:76:7b: e5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D8:37:D8:2A:DD:2B:24:33:13:AE:E0:25:2C:9C:2E:DE:67:5E:DF X509v3 Authority Key Identifier: keyid:A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/1994900403CE11EAA10C6A84C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 115.127.40.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:12:eb:bc:b1:b4:c0:18:51:67:f8:6d:15:a0:32:70:2c:6d: be:21:d6:1e:98:51:b8:84:01:3a:ee:52:2a:1e:d7:9f:8e:e0: 39:37:f5:63:14:89:39:13:ab:99:d8:6d:28:56:94:59:71:b2: e9:ea:ed:be:0d:d5:50:6a:b7:dd:b0:a9:e1:a1:0b:eb:93:4b: fc:7a:ea:ff:59:34:d4:6f:c9:15:65:6f:32:af:d8:43:60:14: a5:7e:6e:dc:d2:01:ce:ea:48:47:01:ee:5c:d5:d7:c7:eb:e6: 05:f8:23:b2:97:cc:60:4c:a9:90:d1:83:47:08:ba:7a:49:a8: 86:14:a9:5e:b3:91:bb:72:59:83:a9:c1:6e:7a:97:45:99:ee: 6b:72:48:e4:f2:fe:59:e7:10:93:25:0b:41:41:c9:8f:af:d9: 56:9a:2d:52:94:d2:e0:af:fd:74:ff:5b:29:82:c2:b9:c4:98: 0a:92:57:68:99:68:52:62:81:eb:e4:1e:3c:33:33:3a:51:d3: 9b:5c:0a:9e:4b:a6:75:20:bd:0a:54:92:84:02:04:b3:a8:46: e3:5a:bd:25:59:e9:1d:5d:3b:fc:20:c5:ac:61:3c:52:e9:87: e2:ef:2b:70:98:c2:4b:d9:9d:c1:35:4c:00:f2:2b:18:7d:3f: 83:75:a1:58 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM3RTMxMTAvBgNVBAUTKEE3NTcwRENGMzcyMEE4RDVBODg1NkE0QkI2NTgzRjFC QUVBRTAwOTMwHhcNMjYwMjI2MTgxNTQ1WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzJkZC04ZTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1kiO9Ib+HO21jZONugUuECG/UQYOtaAv5ngpNKQdddL9LaH3aPCGdm3qJVn 3zYcNvM1+1MBl7lL+xMPDH1E9FHDs0x3qsLVcquU8NqUCdsWWgV/KazlWlXk/PMB /yT1WlwTTbtRSPGYggSg77mkdOFxRt7N7ZyNU63bfpcQAC0YzaqITz0ehR/9o4RM Rf4DNSqePbXopZd7lPmO4PRNlIt7cLLtDj9Z1eT4iR/7baRkDPxsZ1OvbXRoM8Y8 sPg0cmnGU8FLW4BqemN2cD4+Z+fnofO7CvSR+N6eVFNzyoneswFM3c5FEdnfGnWw wS8hA4wp5bulUZNWVzuidnvlvwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHPYN9gq 3SskMxOu4CUsnC7eZ17fMB8GA1UdIwQYMBaAFKdXDc83IKjVqIVqS7ZYPxuurgCT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzdFMy8wQUZFQTdDRTAz QTAxMUVBQjRDNUQyN0NDNEY5QUUwMi9wMWNOenpjZ3FOV29oV3BMdGxnX0c2NnVB Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AxY056emNncU5Xb2hXcEx0bGdfRzY2dUFKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjM3RTMvMEFGRUE3Q0UwM0EwMTFFQUI0QzVEMjdDQzRGOUFFMDIvMTk5NDkwMDQw M0NFMTFFQUExMEM2QTg0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCc38oMA0GCSqGSIb3DQEBCwUAA4IBAQCPEuu8sbTAGFFn+G0VoDJw LG2+IdYemFG4hAE67lIqHtefjuA5N/VjFIk5E6uZ2G0oVpRZcbLp6u2+DdVQarfd sKnhoQvrk0v8eur/WTTUb8kVZW8yr9hDYBSlfm7c0gHO6khHAe5c1dfH6+YF+COy l8xgTKmQ0YNHCLp6SaiGFKles5G7clmDqcFuepdFme5rckjk8v5Z5xCTJQtBQcmP r9lWmi1SlNLgr/10/1spgsK5xJgKkldomWhSYoHr5B48MzM6UdObXAqeS6Z1IL0K VJKEAgSzqEbjWr0lWekdXTv8IMWsYTxS6Yfi7ytwmMJL2Z3BNUwA8isYfT+DdaFY -----END CERTIFICATE-----Generated at Mon Mar 2 12:41:49 2026 by rpki-client