$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/07D143BC294811F0BE054340C4F9AE02.roa File: 07D143BC294811F0BE054340C4F9AE02.roa (raw, json) Hash identifier: vheeXG/vC/HIJ00AInyN8xWUpuBcivs+sqQSJ/QC26k= Subject key identifier: 2E:47:8A:D2:54:BD:70:14:FE:E1:2C:7C:DB:21:34:1B:4C:7E:01:7B Certificate issuer: /CN=A91B7DCB/serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875 Certificate serial: C0 Authority key identifier: 0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/07D143BC294811F0BE054340C4F9AE02.roa Signing time: Tue 07 Apr 2026 00:00:53 +0000 ROA not before: Tue 07 Apr 2026 00:00:53 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 45586 IP address blocks: 203.171.223.0/24 maxlen: 24 2001:df0:f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:47:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7DCB, serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875 Validity Not Before: Apr 7 00:00:53 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69d44935-0bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8f:29:a1:26:a1:0e:ab:c1:d4:5b:d2:91:24: 80:5f:3f:79:c6:bf:18:f3:0c:55:86:05:c4:71:11: a3:85:d0:1b:d5:b8:e5:12:46:97:1d:64:58:b5:19: 51:3c:39:0b:be:46:e5:1e:d4:44:12:de:6f:d2:46: 95:c8:5b:88:7f:82:43:36:56:9e:62:83:20:8a:72: ec:31:ca:03:63:e5:de:55:5c:16:a0:0f:bb:0d:82: 20:0d:36:5c:f7:ec:3b:77:e4:db:98:02:48:95:63: 59:45:cc:4e:47:8c:3f:6f:4f:62:3e:4a:39:d2:d3: fd:48:0f:49:5b:7f:42:9b:97:27:32:c6:bb:84:43: 6b:05:a8:af:cc:c7:67:90:16:37:2b:60:9f:b4:f4: 20:e0:14:a9:12:25:65:0f:e0:36:de:9a:3d:11:0e: 34:54:4b:7f:a8:ef:8b:01:90:41:62:6a:ec:de:94: c1:49:59:7d:a8:e7:90:e4:4c:5f:3d:4d:ee:01:cb: 6f:b8:d9:5a:7d:3b:36:fa:c2:4c:04:74:36:12:75: ad:18:aa:29:6f:36:c3:92:f9:07:af:93:3e:88:13: 63:ef:7b:46:a6:6a:49:f3:78:f0:d3:bb:2a:fe:74: 97:eb:2d:df:17:79:91:ff:89:cc:b3:c3:bb:a5:3c: d8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:47:8A:D2:54:BD:70:14:FE:E1:2C:7C:DB:21:34:1B:4C:7E:01:7B X509v3 Authority Key Identifier: keyid:0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/07D143BC294811F0BE054340C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.171.223.0/24 IPv6: 2001:df0:f0::/48 Signature Algorithm: sha256WithRSAEncryption 37:8b:5c:87:ce:f5:6e:6e:f6:2d:8d:c1:c2:98:df:c8:68:9b: 8b:3d:37:c6:2c:02:0e:13:c1:cf:ec:f6:29:a1:27:5b:f2:7a: 20:9f:02:67:54:5f:0f:df:2d:16:9e:c5:67:bb:e0:88:dd:0f: a6:33:50:ec:6e:f7:ae:95:dc:a6:01:94:63:f8:81:7d:1d:da: 3e:4e:71:2e:ab:8d:59:3d:f4:7e:b9:21:8f:ff:6f:0e:6e:8e: e5:69:2d:6d:61:4a:f4:a0:b9:26:f4:b1:10:7a:c5:e4:81:ac: df:b6:2c:77:a1:24:c8:69:8c:c2:5d:fc:fe:eb:a5:1b:95:23: fd:56:2c:a6:f0:e3:f6:49:0d:ac:d3:45:a3:4c:76:21:bf:6b: 81:27:1a:f4:70:b6:0f:a2:64:0d:58:8a:bb:a3:52:34:36:60: aa:9a:3c:7d:fe:24:3f:20:b0:e0:bb:fd:dc:3e:78:32:b1:c7: 76:35:34:54:8d:f8:2a:84:c2:c7:3a:bd:21:c8:4a:6d:10:11: d3:38:4c:68:b0:da:64:a9:8c:6e:be:bc:1a:32:4e:4e:9a:9d: b3:62:b2:fc:59:1c:66:96:2c:1a:a8:88:4f:cd:6f:c3:8d:26: f2:de:9e:1d:8c:cc:da:7d:68:99:ff:2d:3f:bf:4f:b7:c4:4b: 11:e1:db:ca -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdEQ0IxMTAvBgNVBAUTKDBBMkEzMzEyRTA4QkE5QzQxQkU3RTBGQjU4QUE2NDJD NkQwMUI4NzUwHhcNMjYwNDA3MDAwMDUzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWQ0NDkzNS0wYmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAko8poSahDqvB1FvSkSSAXz95xr8Y8wxVhgXEcRGjhdAb1bjlEkaXHWRYtRlR PDkLvkblHtREEt5v0kaVyFuIf4JDNlaeYoMginLsMcoDY+XeVVwWoA+7DYIgDTZc 9+w7d+TbmAJIlWNZRcxOR4w/b09iPko50tP9SA9JW39Cm5cnMsa7hENrBaivzMdn kBY3K2CftPQg4BSpEiVlD+A23po9EQ40VEt/qO+LAZBBYmrs3pTBSVl9qOeQ5Exf PU3uActvuNlafTs2+sJMBHQ2EnWtGKopbzbDkvkHr5M+iBNj73tGpmpJ83jw07sq /nSX6y3fF3mR/4nMs8O7pTzYmQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFC5HitJU vXAU/uEsfNshNBtMfgF7MB8GA1UdIwQYMBaAFAoqMxLgi6nEG+fg+1iqZCxtAbh1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0RDQi8wMTUwNUEzMDI5 NDUxMUYwQUUxQUJDNzRDNEY5QUUwMi9DaW96RXVDTHFjUWI1LUQ3V0twa0xHMEJ1 SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Npb3pFdUNMcWNRYjUtRDdXS3BrTEcwQnVIVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjdEQ0IvMDE1MDVBMzAyOTQ1MTFGMEFFMUFCQzc0QzRGOUFFMDIvMDdEMTQzQkMy OTQ4MTFGMEJFMDU0MzQwQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAy6vfMA8EAgACMAkDBwAgAQ3wAPAwDQYJKoZIhvcNAQELBQADggEB ADeLXIfO9W5u9i2NwcKY38hom4s9N8YsAg4Twc/s9imhJ1vyeiCfAmdUXw/fLRae xWe74IjdD6YzUOxu966V3KYBlGP4gX0d2j5OcS6rjVk99H65IY//bw5ujuVpLW1h SvSguSb0sRB6xeSBrN+2LHehJMhpjMJd/P7rpRuVI/1WLKbw4/ZJDazTRaNMdiG/ a4EnGvRwtg+iZA1YirujUjQ2YKqaPH3+JD8gsOC7/dw+eDKxx3Y1NFSN+CqEwsc6 vSHISm0QEdM4TGiw2mSpjG6+vBoyTk6anbNisvxZHGaWLBqoiE/Nb8ONJvLenh2M zNp9aJn/LT+/T7fESxHh28o= -----END CERTIFICATE-----Generated at Fri Apr 17 14:05:13 2026 by rpki-client