$ rpki-client -vvf rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/1DB45B20C8ED11F0B740F848C4F9AE02.roa File: 1DB45B20C8ED11F0B740F848C4F9AE02.roa (raw, json) Hash identifier: YgMVa/NKSadZ8Pl0yQHFdoPMQfnm0r1V/gi6KwsxDA0= Subject key identifier: 22:50:12:38:EF:C0:5A:43:DB:B0:17:45:B6:5D:0D:AD:9B:BA:B3:AD Certificate issuer: /CN=A91B886F/serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0 Certificate serial: 4D Authority key identifier: 32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/1DB45B20C8ED11F0B740F848C4F9AE02.roa Signing time: Thu 09 Apr 2026 08:46:31 +0000 ROA not before: Thu 09 Apr 2026 08:46:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1221 IP address blocks: 203.20.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:58:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B886F, serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0 Validity Not Before: Apr 9 08:46:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69d76766-ab0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0b:26:5d:5c:c9:8f:35:fb:ce:3a:00:ea:a6: 26:3c:44:08:6d:29:c4:6e:16:2d:54:e4:59:16:08: 06:6f:71:78:19:d0:88:67:fb:fb:fa:de:2a:f8:36: 14:00:03:97:12:83:ea:ea:4a:43:8d:13:ec:fd:63: ce:5d:b6:cf:99:ba:f8:86:68:18:91:3f:c6:e2:f6: 2f:97:3b:dc:d7:ef:00:4c:8a:20:bf:f6:fb:4d:80: 51:0c:dd:b3:3b:f4:ef:b7:ad:f3:50:46:a3:54:8a: c5:90:d4:cb:7d:81:91:1c:83:61:c4:9a:f1:09:08: f9:b3:94:5b:60:69:19:db:56:6f:12:b2:0e:99:19: d5:70:09:2f:8e:87:a3:b6:f9:0c:91:24:23:7f:c1: 0d:d0:08:6d:20:ff:c3:c2:f3:91:b5:bd:9a:be:95: 35:21:6f:49:83:e7:a0:f0:e6:df:ad:4b:bb:2a:fe: 22:8d:49:db:ae:eb:dc:59:7f:2e:f1:65:a9:f8:8a: 02:1e:96:b9:f5:39:cd:21:95:2a:bc:16:07:ca:de: 35:45:e5:94:8c:96:dd:23:7b:ac:c1:b7:73:27:54: 82:a4:3a:50:ee:85:20:f0:0e:ff:a1:ad:f7:b1:09: 62:ce:b2:47:3c:17:44:fa:e5:21:54:54:83:12:ee: ec:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:50:12:38:EF:C0:5A:43:DB:B0:17:45:B6:5D:0D:AD:9B:BA:B3:AD X509v3 Authority Key Identifier: keyid:32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/1DB45B20C8ED11F0B740F848C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.20.43.0/24 Signature Algorithm: sha256WithRSAEncryption c7:ec:51:ae:29:23:fb:fc:1a:1e:e4:52:83:06:2d:2b:e7:ba: b1:fa:2c:a0:a0:db:4a:48:99:93:c8:aa:e8:4d:28:ba:4b:6e: 08:df:7b:b5:fc:e3:4b:43:45:42:81:0e:d3:eb:21:fa:b6:2f: fe:4e:53:af:2f:11:9a:cc:59:28:e5:0d:c5:44:5e:a6:65:3c: 55:3e:2e:b8:6d:ce:bb:e7:0c:a9:f4:92:a3:92:27:e7:a2:79: ab:1e:7a:3f:ac:02:ab:75:58:30:70:d7:6e:d7:1c:c7:a1:34: b4:f7:7f:5d:a8:d4:b9:d5:e7:51:88:b3:1b:56:09:8f:5e:fa: 07:82:93:b6:c8:5a:a5:ef:0f:9f:1b:ab:4a:60:3c:ef:df:8b: ca:c9:8f:e8:67:46:8d:d4:06:71:ff:30:e7:f6:3c:4f:93:65: 0e:26:ad:01:f3:a2:f9:fe:1c:0b:30:b1:7e:00:b9:73:d9:64: 0c:6d:a2:bf:68:eb:72:00:79:5b:ff:76:3c:3b:43:f6:9e:10: c9:e1:5b:4c:8c:3f:5f:1f:d4:c3:57:85:37:0c:7e:0a:8f:93: d4:eb:6f:54:b2:74:41:13:2f:27:fb:b7:04:a5:54:31:21:a3: 64:b3:d9:f8:8b:52:39:2e:40:6f:c8:d6:51:79:07:d7:fb:d7: 29:01:e4:45 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODg2RjExMC8GA1UEBRMoMzI1MzIxOUNCNjBDN0Q5Q0ZBNkU2MzNEQkI0Q0E5NEQ2 ODM5OTJFMDAeFw0yNjA0MDkwODQ2MzFaFw0yNzA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5ZDc2NzY2LWFiMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvCyZdXMmPNfvOOgDqpiY8RAhtKcRuFi1U5FkWCAZvcXgZ0Ihn+/v63ir4NhQA A5cSg+rqSkONE+z9Y85dts+ZuviGaBiRP8bi9i+XO9zX7wBMiiC/9vtNgFEM3bM7 9O+3rfNQRqNUisWQ1Mt9gZEcg2HEmvEJCPmzlFtgaRnbVm8Ssg6ZGdVwCS+Oh6O2 +QyRJCN/wQ3QCG0g/8PC85G1vZq+lTUhb0mD56Dw5t+tS7sq/iKNSduu69xZfy7x Zan4igIelrn1Oc0hlSq8FgfK3jVF5ZSMlt0je6zBt3MnVIKkOlDuhSDwDv+hrfex CWLOskc8F0T65SFUVIMS7uyJAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUIlASOO/A WkPbsBdFtl0NrZu6s60wHwYDVR0jBBgwFoAUMlMhnLYMfZz6bmM9u0ypTWg5kuAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4ODZGL0YxRjU2N0QwQzhF ODExRjA4NkMyNzY0RkM0RjlBRTAyL01sTWhuTFlNZlp6NmJtTTl1MHlwVFdnNWt1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWxNaG5MWU1mWno2Ym1NOXUweXBUV2c1a3VBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODg2Ri9GMUY1NjdEMEM4RTgxMUYwODZDMjc2NEZDNEY5QUUwMi8xREI0NUIyMEM4 RUQxMUYwQjc0MEY4NDhDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADLFCswDQYJKoZIhvcNAQELBQADggEBAMfsUa4pI/v8Gh7kUoMGLSvn urH6LKCg20pImZPIquhNKLpLbgjfe7X840tDRUKBDtPrIfq2L/5OU68vEZrMWSjl DcVEXqZlPFU+LrhtzrvnDKn0kqOSJ+eieaseej+sAqt1WDBw127XHMehNLT3f12o 1LnV51GIsxtWCY9e+geCk7bIWqXvD58bq0pgPO/fi8rJj+hnRo3UBnH/MOf2PE+T ZQ4mrQHzovn+HAswsX4AuXPZZAxtor9o63IAeVv/djw7Q/aeEMnhW0yMP18f1MNX hTcMfgqPk9Trb1SydEETLyf7twSlVDEho2Sz2fiLUjkuQG/I1lF5B9f71ykB5EU= -----END CERTIFICATE-----Generated at Fri Apr 17 17:35:02 2026 by rpki-client