$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/B2CE886C07B811F0992B401EC4F9AE02.roa File: B2CE886C07B811F0992B401EC4F9AE02.roa (raw, json) Hash identifier: 7FXMqZbBYa35QF1qyrsTfHzr5pQl21u7vKSCJZVNvWI= Subject key identifier: D3:74:D3:ED:6E:A8:A8:41:32:80:EB:A4:27:98:97:8E:9F:6B:A9:E7 Certificate issuer: /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857 Certificate serial: 617A Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/B2CE886C07B811F0992B401EC4F9AE02.roa Signing time: Thu 16 Apr 2026 20:25:36 +0000 ROA not before: Thu 16 Apr 2026 20:25:36 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 203.184.180.0/24 maxlen: 24 203.184.228.0/24 maxlen: 24 203.184.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 19:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24954 (0x617a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1323, serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857 Validity Not Before: Apr 16 20:25:36 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=69e145bf-d053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:df:63:4f:a3:75:b1:c1:19:ee:f8:34:57:4d: 13:de:89:21:e6:69:dc:25:51:df:c5:d6:27:c6:71: ad:9f:20:45:40:09:c7:d0:95:0d:8c:b7:0f:42:61: a9:36:b8:1d:ef:0b:33:b4:ee:07:8b:c2:41:0a:08: be:9d:c4:b1:b9:14:af:2d:56:85:ca:1a:a3:c5:39: 61:6f:a8:fc:e1:e2:05:4a:c8:98:6e:ed:e3:52:fa: 7d:be:d6:f2:32:a4:1c:b4:98:b8:32:88:c7:74:63: 7c:9b:15:d2:ce:85:ff:e4:ed:c8:3c:0e:0f:10:a4: 4b:5b:a5:20:4f:9a:96:cc:b5:04:6a:38:b3:ff:57: 5a:22:ee:ea:56:f1:1d:47:94:15:3f:7e:ef:50:fc: 96:9d:96:6d:6d:89:f9:fd:1c:c4:f9:b1:27:f0:0b: 25:61:ff:d8:d9:08:de:84:f2:e1:f9:1c:bf:17:59: 80:90:0d:76:3e:e9:45:4b:c9:b0:ec:f0:d6:0b:d6: c5:cf:5b:85:0f:49:0d:de:2d:b0:69:91:ba:93:a9: c8:06:9f:27:0a:f3:a1:88:75:e8:eb:95:cc:36:27: 92:b0:26:3a:0e:4a:ca:10:94:97:a7:e1:85:d7:f5: e9:3b:fc:9f:d6:07:a0:48:d1:13:a4:aa:ed:7a:fa: 3b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:74:D3:ED:6E:A8:A8:41:32:80:EB:A4:27:98:97:8E:9F:6B:A9:E7 X509v3 Authority Key Identifier: keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/B2CE886C07B811F0992B401EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.184.180.0/24 203.184.228.0/23 Signature Algorithm: sha256WithRSAEncryption 50:7a:ee:6f:65:80:8a:ed:04:ab:b5:66:cb:05:1e:4e:65:9f: cd:74:a2:f4:71:76:71:0a:9c:95:ec:7a:b3:a0:ac:de:b5:19: d5:d1:22:b8:20:73:29:de:be:bd:79:72:91:20:aa:58:ad:81: 4f:a0:bf:cc:dd:8e:41:46:2b:32:44:b2:63:fb:05:15:87:05: a8:ec:d3:3c:ce:09:1c:d8:3c:63:e3:45:b6:ad:36:97:d5:40: a4:a2:dd:45:a3:3d:e4:a9:47:90:f2:c3:36:f1:36:fd:1c:df: 40:73:30:71:43:98:40:23:50:cd:79:d1:61:33:36:25:09:09: b3:bb:3e:f3:7c:27:10:9e:8f:43:01:c5:f6:f8:f3:95:19:be: 00:72:29:dd:44:f1:21:0e:95:26:db:e2:22:c1:32:6f:08:f2: e2:ae:b1:24:8d:ac:32:05:30:90:47:f5:2e:e3:f9:05:5c:37: 77:e4:69:2c:54:5f:3b:31:36:7b:b9:79:d8:8a:b0:de:c7:5e: 96:ff:6d:1e:a4:ac:7c:cf:f5:ac:12:82:b3:76:14:3c:e6:2b: 95:f9:9e:e0:41:8a:8e:62:c4:a1:13:bd:f8:6e:74:be:f0:6b: 43:96:72:34:b9:ce:15:90:e5:01:00:ae:77:33:26:42:ee:b1: 97:27:74:5a -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICYXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEzMjMxMTAvBgNVBAUTKDQxMkE2NTExQ0ZFRENGRUNCNTU5MEM5NkM4QzM2MUUy RkVENDQ4NTcwHhcNMjYwNDE2MjAyNTM2WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWUxNDViZi1kMDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqt9jT6N1scEZ7vg0V00T3okh5mncJVHfxdYnxnGtnyBFQAnH0JUNjLcPQmGp Nrgd7wsztO4Hi8JBCgi+ncSxuRSvLVaFyhqjxTlhb6j84eIFSsiYbu3jUvp9vtby MqQctJi4MojHdGN8mxXSzoX/5O3IPA4PEKRLW6UgT5qWzLUEajiz/1daIu7qVvEd R5QVP37vUPyWnZZtbYn5/RzE+bEn8AslYf/Y2QjehPLh+Ry/F1mAkA12PulFS8mw 7PDWC9bFz1uFD0kN3i2waZG6k6nIBp8nCvOhiHXo65XMNieSsCY6DkrKEJSXp+GF 1/XpO/yf1gegSNETpKrtevo7gQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFNN00+1u qKhBMoDrpCeYl46fa6nnMB8GA1UdIwQYMBaAFEEqZRHP7c/stVkMlsjDYeL+1EhX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTMyMy8wODREODhENDk1 QjcxMUVBQkI4MjRGMUJDNEY5QUUwMi9RU3BsRWNfdHoteTFXUXlXeU1OaDR2N1VT RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FTcGxFY190ei15MVdReVd5TU5oNHY3VVNGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzEzMjMvMDg0RDg4RDQ5NUI3MTFFQUJCODI0RjFCQzRGOUFFMDIvQjJDRTg4NkMw N0I4MTFGMDk5MkI0MDFFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAy7i0AwQBy7jkMA0GCSqGSIb3DQEBCwUAA4IBAQBQeu5vZYCK7QSr tWbLBR5OZZ/NdKL0cXZxCpyV7HqzoKzetRnV0SK4IHMp3r69eXKRIKpYrYFPoL/M 3Y5BRisyRLJj+wUVhwWo7NM8zgkc2Dxj40W2rTaX1UCkot1Foz3kqUeQ8sM28Tb9 HN9AczBxQ5hAI1DNedFhMzYlCQmzuz7zfCcQno9DAcX2+POVGb4AcindRPEhDpUm 2+IiwTJvCPLirrEkjawyBTCQR/Uu4/kFXDd35GksVF87MTZ7uXnYirDex16W/20e pKx8z/WsEoKzdhQ85iuV+Z7gQYqOYsShE734bnS+8GtDlnI0uc4VkOUBAK53MyZC 7rGXJ3Ra -----END CERTIFICATE-----Generated at Sun Apr 19 09:44:15 2026 by rpki-client