$ rpki-client -vvf rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/4DC07014161411F1B995070A2E3D8C67.roa File: 4DC07014161411F1B995070A2E3D8C67.roa (raw, json) Hash identifier: H0Jb9txtazlliAU6uAWUSrabDYFIpiBg6C2fr7jj4yU= Subject key identifier: 77:8B:7D:2C:DF:FD:20:7B:71:F0:33:9E:07:5B:90:12:96:90:70:B5 Certificate issuer: /CN=A91B37E3/serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093 Certificate serial: 0D38 Authority key identifier: A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/4DC07014161411F1B995070A2E3D8C67.roa Signing time: Mon 02 Mar 2026 08:46:28 +0000 ROA not before: Mon 02 Mar 2026 08:46:28 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 55531 IP address blocks: 115.127.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:46:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3384 (0xd38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B37E3, serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093 Validity Not Before: Mar 2 08:46:28 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a54e64-de16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:82:f5:f7:97:4e:21:18:25:ed:68:9c:06:70: 8e:e1:f3:8f:93:2e:27:6e:7a:13:c7:5d:df:95:95: 1a:ed:fa:21:87:5d:af:ec:a2:5b:e4:5d:63:de:bc: fe:6d:aa:c0:e3:ab:63:b1:e9:5c:ec:e3:92:ce:44: 7d:1b:55:21:3f:38:57:a6:39:63:92:59:1d:1b:2e: 33:17:92:d6:82:ed:bc:6b:b0:00:93:4f:20:4e:a0: 8b:22:18:a3:ee:8d:0e:04:d6:ac:d4:e9:31:f3:63: 71:2c:68:4d:2c:38:03:9d:71:57:90:2d:7f:5f:c2: a2:97:e3:fa:c3:76:28:0e:68:40:26:d4:a1:48:05: ca:79:0a:62:5e:2c:d9:93:7b:0f:eb:3e:54:e0:2d: be:a3:f5:65:40:b2:6f:32:1a:e1:1b:be:bf:12:34: f9:e2:2c:b1:f2:a8:39:9e:2d:cf:e0:96:5e:26:db: 3d:c3:d2:17:81:76:51:39:37:aa:f9:cd:03:e3:39: 51:12:2c:65:5c:f0:cb:81:5d:0a:01:d0:03:b7:f6: 60:bd:92:42:e9:a5:1c:c1:42:de:10:61:c0:76:fb: 7e:38:a4:b9:72:81:4c:8c:a5:8b:83:0f:61:ec:24: 02:ca:21:32:21:cb:11:45:f6:08:fd:07:96:71:6f: c1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:8B:7D:2C:DF:FD:20:7B:71:F0:33:9E:07:5B:90:12:96:90:70:B5 X509v3 Authority Key Identifier: keyid:A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/4DC07014161411F1B995070A2E3D8C67.roa sbgp-ipAddrBlock: critical IPv4: 115.127.220.0/23 Signature Algorithm: sha256WithRSAEncryption 19:f2:e8:0b:46:b1:b2:bf:21:e1:77:65:b3:8c:12:b5:e9:3f: ad:8e:9c:14:66:d2:93:6f:a5:9f:a3:ae:d4:01:31:39:f9:a0: 7e:c8:a5:e2:04:f8:34:7a:9d:3c:37:cf:c0:f4:01:82:3c:17: 98:aa:6d:0c:5f:79:9c:d8:6d:45:ff:14:4a:8a:59:67:ed:c5: 00:f4:50:d6:38:03:54:b1:2a:b6:ad:4e:06:9c:69:71:ad:92: db:cd:1f:d0:9d:ff:8f:77:66:f2:49:b6:13:ed:1a:d7:2a:69: fe:62:e6:f7:fa:92:06:08:1f:6c:3c:52:79:2a:bc:46:ee:24: cb:27:9d:c3:3e:02:65:66:dc:d3:9e:e6:7e:85:22:e0:4f:88: c5:8f:18:b4:25:e4:74:7a:0f:27:53:f3:5c:8c:c0:40:c3:85: 84:55:d5:55:a2:9a:c2:46:2a:7c:6c:29:1e:9e:41:b6:35:07: e6:3a:e4:b3:2b:99:dc:f9:33:0b:30:2d:4a:b2:33:f6:54:81: 34:f1:5d:e2:20:4c:67:eb:34:98:88:41:71:7e:40:0c:00:a2: a1:9e:2b:a3:46:b2:f6:77:aa:77:3f:d6:06:2d:ba:81:e1:5d: e1:f1:9b:a6:27:66:fd:ba:7c:1e:de:c7:5b:a8:5a:38:c5:82: 6d:dc:43:a5 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM3RTMxMTAvBgNVBAUTKEE3NTcwRENGMzcyMEE4RDVBODg1NkE0QkI2NTgzRjFC QUVBRTAwOTMwHhcNMjYwMzAyMDg0NjI4WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1NGU2NC1kZTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl4L195dOIRgl7WicBnCO4fOPky4nbnoTx13flZUa7fohh12v7KJb5F1j3rz+ barA46tjselc7OOSzkR9G1UhPzhXpjljklkdGy4zF5LWgu28a7AAk08gTqCLIhij 7o0OBNas1Okx82NxLGhNLDgDnXFXkC1/X8Kil+P6w3YoDmhAJtShSAXKeQpiXizZ k3sP6z5U4C2+o/VlQLJvMhrhG76/EjT54iyx8qg5ni3P4JZeJts9w9IXgXZROTeq +c0D4zlREixlXPDLgV0KAdADt/ZgvZJC6aUcwULeEGHAdvt+OKS5coFMjKWLgw9h 7CQCyiEyIcsRRfYI/QeWcW/BlQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHeLfSzf /SB7cfAzngdbkBKWkHC1MB8GA1UdIwQYMBaAFKdXDc83IKjVqIVqS7ZYPxuurgCT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzdFMy8wQUZFQTdDRTAz QTAxMUVBQjRDNUQyN0NDNEY5QUUwMi9wMWNOenpjZ3FOV29oV3BMdGxnX0c2NnVB Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AxY056emNncU5Xb2hXcEx0bGdfRzY2dUFKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjM3RTMvMEFGRUE3Q0UwM0EwMTFFQUI0QzVEMjdDQzRGOUFFMDIvNERDMDcwMTQx NjE0MTFGMUI5OTUwNzBBMkUzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBc3/cMA0GCSqGSIb3DQEBCwUAA4IBAQAZ8ugLRrGyvyHhd2WzjBK1 6T+tjpwUZtKTb6Wfo67UATE5+aB+yKXiBPg0ep08N8/A9AGCPBeYqm0MX3mc2G1F /xRKilln7cUA9FDWOANUsSq2rU4GnGlxrZLbzR/Qnf+Pd2bySbYT7RrXKmn+Yub3 +pIGCB9sPFJ5KrxG7iTLJ53DPgJlZtzTnuZ+hSLgT4jFjxi0JeR0eg8nU/NcjMBA w4WEVdVVoprCRip8bCkenkG2NQfmOuSzK5nc+TMLMC1KsjP2VIE08V3iIExn6zSY iEFxfkAMAKKhniujRrL2d6p3P9YGLbqB4V3h8ZumJ2b9unwe3sdbqFo4xYJt3EOl -----END CERTIFICATE-----Generated at Mon Mar 2 17:00:58 2026 by rpki-client