$ rpki-client -vvf rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/4F6721CEB84B11EAB6247B7AC4F9AE02.roa File: 4F6721CEB84B11EAB6247B7AC4F9AE02.roa (raw, json) Hash identifier: rZrIOdq3ol6lcEAYXeq2DsJFaFbmt+O1xVdoQjKA9Ic= Subject key identifier: BC:A2:37:02:AD:CD:86:04:5F:60:0E:7C:9D:87:C3:4B:61:72:67:08 Certificate issuer: /CN=A91B37E3/serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093 Certificate serial: 0D32 Authority key identifier: A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/4F6721CEB84B11EAB6247B7AC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:09:46 +0000 ROA not before: Thu 26 Feb 2026 18:15:39 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 139856 IP address blocks: 115.127.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3378 (0xd32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B37E3, serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093 Validity Not Before: Feb 26 18:15:39 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a472da-1f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8f:d5:1f:79:3f:09:e2:64:5b:82:bb:38:dc: ac:ce:e9:8a:66:09:82:d1:52:90:e6:32:5e:c5:64: d4:13:64:4f:4d:39:03:70:19:2b:50:e6:c2:7e:89: f4:a4:89:43:c7:87:86:9a:91:d8:33:56:2a:36:af: 64:7d:69:b3:e0:90:70:6d:c1:43:37:9f:ec:83:3f: 78:5c:79:2a:4c:7a:1b:60:3b:c3:3c:f5:88:ad:0b: 6e:69:c1:43:af:26:a5:35:f1:b0:bf:d6:2c:c0:52: 45:94:4f:2c:f3:8f:d5:84:01:71:4f:f8:b7:d4:fd: 4d:67:12:2b:a1:29:76:4a:79:e0:88:a7:5d:93:aa: 40:d3:31:f2:8a:45:12:2b:5a:37:d9:11:1a:e7:cf: 53:c0:26:ad:d5:9c:f6:f3:71:70:01:56:db:e3:1b: 88:cb:ca:9a:e3:55:1f:00:18:cb:ff:70:0e:7f:36: 44:c6:94:a3:48:d4:a3:0c:42:0d:bf:3c:25:ed:53: a9:b2:75:d7:a8:72:3d:cd:85:6f:4f:ad:17:e4:75: 6d:39:50:c8:78:97:b0:9a:e2:a7:46:ae:83:a3:48: 8a:de:ac:27:ad:0c:c6:1b:ff:8a:bf:e5:07:37:50: dd:5b:d5:05:2f:96:79:b6:f0:9a:60:32:d8:bb:19: d9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A2:37:02:AD:CD:86:04:5F:60:0E:7C:9D:87:C3:4B:61:72:67:08 X509v3 Authority Key Identifier: keyid:A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/4F6721CEB84B11EAB6247B7AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 115.127.38.0/24 Signature Algorithm: sha256WithRSAEncryption bd:a6:72:29:63:96:61:c2:09:78:16:f9:e5:ac:72:d6:8b:24: 4e:01:a3:e7:54:f6:e2:00:13:3d:ab:11:d2:15:a1:db:3f:29: 69:6f:77:bd:c7:db:3d:57:e9:23:05:b7:75:e3:9c:56:31:31: ef:26:14:19:a5:25:bc:1f:74:a9:e2:e9:ca:67:2f:9d:2c:ae: 7e:c2:f5:9d:2e:ef:6f:38:4c:ee:fc:3b:f4:30:19:21:17:c0: cd:3b:47:a8:01:1d:2a:cd:9d:34:39:e1:df:3e:37:0b:99:cf: f2:64:4e:1c:4d:5d:ae:8f:c8:a2:c7:4a:89:82:e8:0e:0b:42: 68:9f:90:56:34:77:1c:13:a5:82:c1:82:04:59:c1:3c:ad:a1: 8e:d2:36:58:66:a2:26:60:50:30:cd:f9:23:7f:b1:c4:db:be: 35:d7:d6:32:f5:6b:0b:87:85:8b:6b:f0:9c:fc:e0:b6:e3:41: 3c:1d:5b:78:ad:31:d9:78:d3:9a:99:de:69:ad:49:e9:24:08: 9f:ad:0e:98:7c:0f:5e:91:0d:e0:ba:5c:38:4b:b7:de:47:60: 04:fd:60:eb:39:17:c2:12:ba:14:0d:ae:61:e9:34:93:c3:65: 58:b0:5f:1c:80:45:96:c9:a1:4b:ca:3d:8b:81:a2:6c:8f:a0: f3:1a:17:6d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM3RTMxMTAvBgNVBAUTKEE3NTcwRENGMzcyMEE4RDVBODg1NkE0QkI2NTgzRjFC QUVBRTAwOTMwHhcNMjYwMjI2MTgxNTM5WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzJkYS0xZjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuI/VH3k/CeJkW4K7ONyszumKZgmC0VKQ5jJexWTUE2RPTTkDcBkrUObCfon0 pIlDx4eGmpHYM1YqNq9kfWmz4JBwbcFDN5/sgz94XHkqTHobYDvDPPWIrQtuacFD ryalNfGwv9YswFJFlE8s84/VhAFxT/i31P1NZxIroSl2SnngiKddk6pA0zHyikUS K1o32REa589TwCat1Zz283FwAVbb4xuIy8qa41UfABjL/3AOfzZExpSjSNSjDEIN vzwl7VOpsnXXqHI9zYVvT60X5HVtOVDIeJewmuKnRq6Do0iK3qwnrQzGG/+Kv+UH N1DdW9UFL5Z5tvCaYDLYuxnZzQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLyiNwKt zYYEX2AOfJ2Hw0thcmcIMB8GA1UdIwQYMBaAFKdXDc83IKjVqIVqS7ZYPxuurgCT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzdFMy8wQUZFQTdDRTAz QTAxMUVBQjRDNUQyN0NDNEY5QUUwMi9wMWNOenpjZ3FOV29oV3BMdGxnX0c2NnVB Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AxY056emNncU5Xb2hXcEx0bGdfRzY2dUFKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjM3RTMvMEFGRUE3Q0UwM0EwMTFFQUI0QzVEMjdDQzRGOUFFMDIvNEY2NzIxQ0VC ODRCMTFFQUI2MjQ3QjdBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAc38mMA0GCSqGSIb3DQEBCwUAA4IBAQC9pnIpY5Zhwgl4FvnlrHLW iyROAaPnVPbiABM9qxHSFaHbPylpb3e9x9s9V+kjBbd145xWMTHvJhQZpSW8H3Sp 4unKZy+dLK5+wvWdLu9vOEzu/Dv0MBkhF8DNO0eoAR0qzZ00OeHfPjcLmc/yZE4c TV2uj8iix0qJgugOC0Jon5BWNHccE6WCwYIEWcE8raGO0jZYZqImYFAwzfkjf7HE 274119Yy9WsLh4WLa/Cc/OC240E8HVt4rTHZeNOamd5prUnpJAifrQ6YfA9ekQ3g ulw4S7feR2AE/WDrORfCEroUDa5h6TSTw2VYsF8cgEWWyaFLyj2LgaJsj6DzGhdt -----END CERTIFICATE-----Generated at Mon Mar 2 12:38:19 2026 by rpki-client