$ rpki-client -vvf rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/1DB45B20C8ED11F0B740F848C4F9AE02.roa File: 1DB45B20C8ED11F0B740F848C4F9AE02.roa (raw, json) Hash identifier: S989I0Dh1VM/GqYxyKd3cTzapisk/BuvItcPdUyWkEI= Subject key identifier: 6C:D3:99:E6:78:08:E2:E3:A8:E2:B0:28:CF:00:B6:A2:19:DC:0B:B1 Certificate issuer: /CN=A91B886F/serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0 Certificate serial: 35 Authority key identifier: 32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/1DB45B20C8ED11F0B740F848C4F9AE02.roa Signing time: Sun 01 Mar 2026 05:59:32 +0000 ROA not before: Mon 24 Nov 2025 04:21:58 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 1221 IP address blocks: 203.20.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B886F, serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0 Validity Not Before: Nov 24 04:21:58 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a3d5c4-a4c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:22:8f:b4:0e:e9:0a:2c:a5:f8:2d:d3:e2:10: 01:61:1c:5a:9e:db:7b:2e:42:e2:16:1c:5a:1f:cf: 5f:4c:1f:6d:05:f7:92:75:94:6c:71:d2:5d:2e:11: 53:f9:1e:c2:14:1e:49:91:a7:d3:2f:44:9f:7a:5b: 7a:f3:98:c9:e2:57:c2:d0:e1:71:73:6c:2d:7d:3a: 5b:dd:55:dc:ec:85:71:dc:a6:2b:36:2c:1f:9e:f4: 46:dd:64:5c:ea:99:b2:b8:8e:6d:12:b7:22:e9:73: 2d:2c:5b:1b:bd:91:54:66:95:30:cb:d3:b8:40:84: be:ad:a6:65:6c:11:bc:96:6d:1a:a2:6a:d2:3e:08: 21:12:50:eb:6a:bb:17:15:f7:1c:cb:d8:09:46:20: ea:95:7b:7f:5f:d7:f7:5f:71:a4:1b:78:63:49:42: 2f:7f:4a:6c:ea:d6:0e:7e:39:81:b1:24:0a:d2:f1: 15:91:3a:07:2c:34:3a:82:ed:d3:85:93:00:ca:e1: 51:7a:e6:af:ec:ef:6b:ca:c7:46:65:b5:56:9f:4e: cb:5e:9e:27:6c:03:96:29:42:9c:70:bc:30:34:da: 8b:66:bb:07:31:af:70:d1:2c:c5:ce:90:c9:37:c5: eb:00:11:65:17:2b:de:29:c1:89:9f:db:62:1a:61: 93:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D3:99:E6:78:08:E2:E3:A8:E2:B0:28:CF:00:B6:A2:19:DC:0B:B1 X509v3 Authority Key Identifier: keyid:32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/1DB45B20C8ED11F0B740F848C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.20.43.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:63:e6:6d:62:54:ee:16:92:df:e4:b8:89:88:59:c1:43:f0: 88:18:a0:4a:ca:bf:5b:e2:b9:ad:f1:8e:c1:e2:51:b1:51:0c: 77:a2:57:97:9f:15:6f:c3:14:28:18:37:57:cd:3e:4b:09:a2: 23:92:eb:84:5c:34:8b:d4:9d:09:f5:4f:1c:69:1e:bd:23:f9: 3d:0c:2c:fb:2a:24:d4:8d:a0:32:95:a9:dd:7b:5d:1f:90:30: 58:98:11:d0:eb:99:af:09:aa:34:1e:25:62:49:9c:ce:a9:83: af:26:ff:07:3a:c5:30:d4:11:f7:c8:0c:db:81:ad:b3:7e:7d: b6:78:38:ee:03:20:13:59:f5:6c:fb:75:b0:4f:eb:96:6e:b0: e0:f2:e2:21:a4:ce:6f:50:4a:b8:b2:d1:5a:b3:22:41:43:c9: 73:16:36:5d:c5:c7:b8:68:bc:fd:57:e1:fa:1a:fd:ce:f4:7b: 70:00:06:63:0a:fb:c1:c4:3a:d7:e8:92:0b:68:b7:50:73:1c: e8:94:e9:51:dd:d2:6e:1c:2e:0e:b1:bf:0a:38:29:2b:21:27: d4:39:03:27:de:46:6d:44:ce:0f:6e:ee:94:9a:95:a7:f0:d8: a6:be:67:fb:68:5e:81:63:b9:27:b7:a0:36:1a:a5:07:d5:3a: 0c:7f:43:25 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODg2RjExMC8GA1UEBRMoMzI1MzIxOUNCNjBDN0Q5Q0ZBNkU2MzNEQkI0Q0E5NEQ2 ODM5OTJFMDAeFw0yNTExMjQwNDIxNThaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkNWM0LWE0YzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCXIo+0DukKLKX4LdPiEAFhHFqe23suQuIWHFofz19MH20F95J1lGxx0l0uEVP5 HsIUHkmRp9MvRJ96W3rzmMniV8LQ4XFzbC19OlvdVdzshXHcpis2LB+e9EbdZFzq mbK4jm0StyLpcy0sWxu9kVRmlTDL07hAhL6tpmVsEbyWbRqiatI+CCESUOtquxcV 9xzL2AlGIOqVe39f1/dfcaQbeGNJQi9/Smzq1g5+OYGxJArS8RWROgcsNDqC7dOF kwDK4VF65q/s72vKx0ZltVafTstenidsA5YpQpxwvDA02otmuwcxr3DRLMXOkMk3 xesAEWUXK94pwYmf22IaYZPVAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUbNOZ5ngI 4uOo4rAozwC2ohncC7EwHwYDVR0jBBgwFoAUMlMhnLYMfZz6bmM9u0ypTWg5kuAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4ODZGL0YxRjU2N0QwQzhF ODExRjA4NkMyNzY0RkM0RjlBRTAyL01sTWhuTFlNZlp6NmJtTTl1MHlwVFdnNWt1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWxNaG5MWU1mWno2Ym1NOXUweXBUV2c1a3VBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODg2Ri9GMUY1NjdEMEM4RTgxMUYwODZDMjc2NEZDNEY5QUUwMi8xREI0NUIyMEM4 RUQxMUYwQjc0MEY4NDhDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADLFCswDQYJKoZIhvcNAQELBQADggEBAAxj5m1iVO4Wkt/kuImIWcFD 8IgYoErKv1viua3xjsHiUbFRDHeiV5efFW/DFCgYN1fNPksJoiOS64RcNIvUnQn1 TxxpHr0j+T0MLPsqJNSNoDKVqd17XR+QMFiYEdDrma8JqjQeJWJJnM6pg68m/wc6 xTDUEffIDNuBrbN+fbZ4OO4DIBNZ9Wz7dbBP65ZusODy4iGkzm9QSriy0VqzIkFD yXMWNl3Fx7hovP1X4foa/c70e3AABmMK+8HEOtfokgtot1BzHOiU6VHd0m4cLg6x vwo4KSshJ9Q5AyfeRm1Ezg9u7pSalafw2Ka+Z/toXoFjuSe3oDYapQfVOgx/QyU= -----END CERTIFICATE-----Generated at Mon Mar 2 01:58:51 2026 by rpki-client