$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/3DC1FF148C6911F08611A235C4F9AE02.roa File: 3DC1FF148C6911F08611A235C4F9AE02.roa (raw, json) Hash identifier: H7bTNR9e6JUVDLggIpGg5EM1qrYQVGxo8ckcLbi2lxE= Subject key identifier: 81:EE:99:A1:7B:18:C5:95:2C:20:52:70:1C:3B:FF:CD:46:25:B3:D4 Certificate issuer: /CN=A91CA58E/serialNumber=3F727260B09494420DD67A7304D8205D42FF3FF1 Certificate serial: 5A Authority key identifier: 3F:72:72:60:B0:94:94:42:0D:D6:7A:73:04:D8:20:5D:42:FF:3F:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3JyYLCUlEIN1npzBNggXUL_P_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/3DC1FF148C6911F08611A235C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:29:35 +0000 ROA not before: Mon 08 Sep 2025 04:06:48 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 154204 IP address blocks: 203.28.57.0/24 maxlen: 24 2001:df6:1840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.crl rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3JyYLCUlEIN1npzBNggXUL_P_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:29:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA58E, serialNumber=3F727260B09494420DD67A7304D8205D42FF3FF1 Validity Not Before: Sep 8 04:06:48 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a3dccf-478b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:70:4c:c2:57:eb:f1:72:fd:b3:34:03:fd:b6: 29:58:ad:6c:80:eb:29:fe:74:6c:d0:3a:4b:66:1e: 84:e9:08:72:35:3f:06:70:83:06:fc:66:f3:4b:60: a2:98:ec:3b:6e:4a:a3:32:ba:56:77:6d:72:50:17: 70:94:d6:f9:86:6d:32:cd:c4:9d:3c:cd:79:10:eb: 19:a2:a5:12:5d:b2:ce:af:47:1b:04:b7:38:52:f1: b4:2e:4c:79:e1:c9:7c:f3:57:c4:bb:b8:d5:1f:ac: 14:49:f7:5a:d6:52:43:47:8c:aa:9a:81:b3:d6:d9: d5:24:f5:ad:92:59:5d:4d:87:d5:19:cd:69:80:7f: 05:38:f6:46:5a:78:4f:45:5b:97:3a:b1:7a:f3:6f: 95:4e:67:d3:2c:69:b4:d6:4d:50:70:d4:b9:f0:90: dd:0a:30:d3:6b:d1:e6:48:9f:06:16:1f:94:a2:7d: 97:ab:eb:3f:b3:7b:73:e0:cd:04:62:09:aa:e1:33: 5f:10:61:d3:b1:cc:30:5c:53:d5:7b:69:2d:0b:cf: 6b:bf:64:bc:14:31:71:cc:bf:c0:34:cc:07:2a:8d: 04:fd:ae:5f:ca:b4:b7:48:85:80:15:cd:4b:3d:fe: 48:4e:ff:33:cc:b0:4c:4f:26:1e:ca:dc:e4:1c:39: a0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:EE:99:A1:7B:18:C5:95:2C:20:52:70:1C:3B:FF:CD:46:25:B3:D4 X509v3 Authority Key Identifier: keyid:3F:72:72:60:B0:94:94:42:0D:D6:7A:73:04:D8:20:5D:42:FF:3F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3JyYLCUlEIN1npzBNggXUL_P_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/3DC1FF148C6911F08611A235C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.28.57.0/24 IPv6: 2001:df6:1840::/48 Signature Algorithm: sha256WithRSAEncryption 2a:db:3b:84:cc:51:a1:0f:a4:46:29:bb:36:72:cc:94:aa:4d: d4:7b:a2:47:83:f2:ae:84:7b:9c:b8:53:81:56:42:bc:b8:c2: 65:7c:cc:68:ae:ce:61:de:e1:1c:68:62:33:96:3d:a3:cd:92: ae:14:1a:d2:41:50:96:0d:32:73:c5:78:26:09:51:c8:9d:24: 51:b0:d7:b7:60:54:12:b2:ac:bf:22:59:11:75:87:85:c6:fb: d9:c2:f1:75:85:e7:ba:45:28:67:45:b5:20:2f:30:36:9a:02: ba:6a:a5:1d:5d:51:16:f2:fd:cc:f6:33:49:49:0e:dc:44:34: e5:e8:9c:9d:d5:1c:c7:cd:bf:51:50:6f:1f:92:d6:62:6d:9c: 1f:98:73:e9:ac:34:99:b5:fa:82:f5:83:d0:71:93:87:b2:f6: af:23:ec:cc:96:ec:67:42:8e:99:42:f4:09:79:13:21:63:30: 15:ed:9a:12:7a:48:df:68:17:05:d6:7f:7c:99:bb:50:3b:6e: fa:dc:1b:17:22:c7:90:0b:72:50:cc:43:c6:99:72:bb:65:bf: 0a:07:b7:f0:6c:c1:34:d1:81:78:9c:93:0c:13:32:b8:45:f3: bd:c1:51:23:44:41:76:f8:dc:dd:ac:ab:9a:5e:13:df:b3:19: 73:d3:e8:d7 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QTU4RTExMC8GA1UEBRMoM0Y3MjcyNjBCMDk0OTQ0MjBERDY3QTczMDREODIwNUQ0 MkZGM0ZGMTAeFw0yNTA5MDgwNDA2NDhaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkY2NmLTQ3OGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCocEzCV+vxcv2zNAP9tilYrWyA6yn+dGzQOktmHoTpCHI1PwZwgwb8ZvNLYKKY 7DtuSqMyulZ3bXJQF3CU1vmGbTLNxJ08zXkQ6xmipRJdss6vRxsEtzhS8bQuTHnh yXzzV8S7uNUfrBRJ91rWUkNHjKqagbPW2dUk9a2SWV1Nh9UZzWmAfwU49kZaeE9F W5c6sXrzb5VOZ9MsabTWTVBw1LnwkN0KMNNr0eZInwYWH5SifZer6z+ze3PgzQRi CarhM18QYdOxzDBcU9V7aS0Lz2u/ZLwUMXHMv8A0zAcqjQT9rl/KtLdIhYAVzUs9 /khO/zPMsExPJh7K3OQcOaBNAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQUge6ZoXsY xZUsIFJwHDv/zUYls9QwHwYDVR0jBBgwFoAUP3JyYLCUlEIN1npzBNggXUL/P/Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBNThFLzkwOERCNEM4OEM2 ODExRjBCQ0VFQjE3MUM0RjlBRTAyL1AzSnlZTENVbEVJTjFucHpCTmdnWFVMX1Bf RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUDNKeVlMQ1VsRUlOMW5wekJOZ2dYVUxfUF9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTU4RS85MDhEQjRDODhDNjgxMUYwQkNFRUIxNzFDNEY5QUUwMi8zREMxRkYxNDhD NjkxMUYwODYxMUEyMzVDNEY5QUUwMi5yb2EwMAYIKwYBBQUHAQcBAf8EITAfMAwE AgABMAYDBADLHDkwDwQCAAIwCQMHACABDfYYQDANBgkqhkiG9w0BAQsFAAOCAQEA Kts7hMxRoQ+kRim7NnLMlKpN1HuiR4PyroR7nLhTgVZCvLjCZXzMaK7OYd7hHGhi M5Y9o82SrhQa0kFQlg0yc8V4JglRyJ0kUbDXt2BUErKsvyJZEXWHhcb72cLxdYXn ukUoZ0W1IC8wNpoCumqlHV1RFvL9zPYzSUkO3EQ05eicndUcx82/UVBvH5LWYm2c H5hz6aw0mbX6gvWD0HGTh7L2ryPszJbsZ0KOmUL0CXkTIWMwFe2aEnpI32gXBdZ/ fJm7UDtu+twbFyLHkAtyUMxDxplyu2W/Cge38GzBNNGBeJyTDBMyuEXzvcFRI0RB dvjc3ayrml4T37MZc9Po1w== -----END CERTIFICATE-----Generated at Mon Mar 2 06:18:20 2026 by rpki-client