$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/459FAF10EF4811EF8F4B9284C4F9AE02.roa File: 459FAF10EF4811EF8F4B9284C4F9AE02.roa (raw, json) Hash identifier: 0e997B4s98W9vrmXx/CQ+7NLYFBxzDSnjKXadckJ3Hg= Subject key identifier: 3E:F1:0C:AD:B6:38:0A:F3:0E:A1:5E:2F:4F:C3:44:02:96:16:2B:36 Certificate issuer: /CN=A91BD3E1/serialNumber=8993938C857500280E8F5E53DC0B3E9307AED4A7 Certificate serial: C4 Authority key identifier: 89:93:93:8C:85:75:00:28:0E:8F:5E:53:DC:0B:3E:93:07:AE:D4:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/459FAF10EF4811EF8F4B9284C4F9AE02.roa Signing time: Sun 01 Mar 2026 08:05:00 +0000 ROA not before: Tue 11 Mar 2025 07:25:09 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 140211 IP address blocks: 203.28.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.crl rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD3E1, serialNumber=8993938C857500280E8F5E53DC0B3E9307AED4A7 Validity Not Before: Mar 11 07:25:09 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a3f32c-fb75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:97:4f:28:13:75:11:f8:e1:67:fd:f2:ab:bd: 1c:21:01:14:2b:c6:42:c8:8d:a9:69:8c:b2:fb:69: bc:f5:7c:e0:9f:4d:46:63:b9:22:a4:ea:0e:e2:0a: a5:9e:88:9c:63:5b:20:47:93:e2:42:13:9f:53:a5: d1:b2:e5:11:ab:4b:92:e4:17:f0:29:4a:19:ba:68: d9:8a:ca:74:74:f1:0b:16:b5:fb:45:ab:04:70:db: 66:ce:e5:b9:0a:24:19:11:39:d8:74:ae:f9:f4:50: 66:5e:f9:db:8b:10:88:de:60:c0:c5:67:6f:10:32: 76:f4:5a:07:66:bc:52:81:e5:a9:84:ec:91:b4:bc: 89:4f:6d:ba:4c:f6:7d:41:fe:99:48:73:b5:98:02: 86:3d:e3:fd:3d:a2:2a:c1:ca:82:74:60:09:ea:5d: a7:a0:d1:41:45:86:66:72:26:e5:59:d8:bd:bd:e1: 41:53:eb:89:f9:d0:32:a0:eb:d5:69:fd:11:4c:4c: 65:0a:a4:64:be:e7:4d:c1:ae:de:bd:9a:4e:92:4d: dc:03:8d:73:54:08:c8:94:ba:cc:0e:f2:e0:07:a5: 69:cf:81:66:69:b5:f3:8b:bf:ea:94:63:90:97:87: 2b:fb:16:e7:4e:fd:81:db:58:a6:50:1e:2f:b3:a9: d0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F1:0C:AD:B6:38:0A:F3:0E:A1:5E:2F:4F:C3:44:02:96:16:2B:36 X509v3 Authority Key Identifier: keyid:89:93:93:8C:85:75:00:28:0E:8F:5E:53:DC:0B:3E:93:07:AE:D4:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/459FAF10EF4811EF8F4B9284C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.28.46.0/23 Signature Algorithm: sha256WithRSAEncryption 9e:7b:20:89:e2:f6:d0:3d:3e:6c:58:b0:8d:1c:4c:e8:95:48: 48:00:0a:f8:f9:51:c7:54:e4:d8:e8:62:e2:49:17:88:56:50: ba:8b:d2:a8:69:70:5f:bc:e0:fb:7c:bc:23:a6:a3:58:8f:39: 00:9f:60:06:d5:4c:c6:a9:e7:6f:f9:88:35:31:3d:00:0d:69: b3:c0:57:1e:b2:b6:e2:d9:31:05:c9:ab:cd:3b:c4:c2:76:de: 34:a6:fd:d8:31:07:1f:d7:f7:62:27:2c:a7:ea:72:14:47:a8: 29:0e:12:f5:6d:88:4b:76:89:e5:21:a6:e2:c7:14:2a:73:10: be:8a:3e:3b:ed:d9:d0:22:f5:7d:f7:a3:6b:98:15:6f:ab:23: f5:f9:17:24:11:a6:ea:b9:f3:b1:19:54:dc:24:8f:f8:26:ed: da:9b:c9:46:36:f6:b1:71:95:30:b3:49:58:5f:4f:4c:ac:b0: c7:40:9a:8c:45:a3:40:1e:4d:a3:a4:dd:d4:91:ce:0f:75:3e: 34:37:cc:dd:8d:d2:25:81:c9:2c:82:47:d7:71:0b:82:91:53: 0b:e4:e6:ba:37:d6:9f:f1:b3:6c:04:1a:0e:f7:34:11:84:fd: a5:96:03:f0:e1:03:d1:11:a3:11:3f:d4:6a:86:e2:f6:b3:98: 28:ae:13:4e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQzRTExMTAvBgNVBAUTKDg5OTM5MzhDODU3NTAwMjgwRThGNUU1M0RDMEIzRTkz MDdBRUQ0QTcwHhcNMjUwMzExMDcyNTA5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZjMyYy1mYjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2pdPKBN1EfjhZ/3yq70cIQEUK8ZCyI2paYyy+2m89Xzgn01GY7kipOoO4gql noicY1sgR5PiQhOfU6XRsuURq0uS5BfwKUoZumjZisp0dPELFrX7RasEcNtmzuW5 CiQZETnYdK759FBmXvnbixCI3mDAxWdvEDJ29FoHZrxSgeWphOyRtLyJT226TPZ9 Qf6ZSHO1mAKGPeP9PaIqwcqCdGAJ6l2noNFBRYZmciblWdi9veFBU+uJ+dAyoOvV af0RTExlCqRkvudNwa7evZpOkk3cA41zVAjIlLrMDvLgB6Vpz4FmabXzi7/qlGOQ l4cr+xbnTv2B21imUB4vs6nQQQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFD7xDK22 OArzDqFeL0/DRAKWFis2MB8GA1UdIwQYMBaAFImTk4yFdQAoDo9eU9wLPpMHrtSn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDNFMS83Q0YwN0JDNkVG NDcxMUVGQUY0QzQ5NjhDNEY5QUUwMi9pWk9UaklWMUFDZ09qMTVUM0FzLWt3ZXUx S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2laT1RqSVYxQUNnT2oxNVQzQXMta3dldTFLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkQzRTEvN0NGMDdCQzZFRjQ3MTFFRkFGNEM0OTY4QzRGOUFFMDIvNDU5RkFGMTBF RjQ4MTFFRjhGNEI5Mjg0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQByxwuMA0GCSqGSIb3DQEBCwUAA4IBAQCeeyCJ4vbQPT5sWLCNHEzo lUhIAAr4+VHHVOTY6GLiSReIVlC6i9KoaXBfvOD7fLwjpqNYjzkAn2AG1UzGqedv +Yg1MT0ADWmzwFcesrbi2TEFyavNO8TCdt40pv3YMQcf1/diJyyn6nIUR6gpDhL1 bYhLdonlIabixxQqcxC+ij477dnQIvV996NrmBVvqyP1+RckEabqufOxGVTcJI/4 Ju3am8lGNvaxcZUws0lYX09MrLDHQJqMRaNAHk2jpN3Ukc4PdT40N8zdjdIlgcks gkfXcQuCkVML5Oa6N9af8bNsBBoO9zQRhP2llgPw4QPREaMRP9RqhuL2s5gorhNO -----END CERTIFICATE-----Generated at Sun Mar 1 23:24:13 2026 by rpki-client