$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/E9E555FA506211EAA2BC3E2EC4F9AE02.roa File: E9E555FA506211EAA2BC3E2EC4F9AE02.roa (raw, json) Hash identifier: 07LE9X8LH2BaI/dz0O3mbMsKmiKgclhDrz2z98RF0c0= Subject key identifier: 54:F4:95:37:6A:CE:1A:F4:C1:CC:DC:8F:B5:DF:0B:27:7A:B8:5A:28 Certificate issuer: /CN=A91CA815/serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6 Certificate serial: 3532 Authority key identifier: 2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/E9E555FA506211EAA2BC3E2EC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:31:30 +0000 ROA not before: Wed 24 Dec 2025 15:11:02 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 23883 IP address blocks: 203.170.50.0/23 maxlen: 23 2001:df0:248::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13618 (0x3532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA815, serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6 Validity Not Before: Dec 24 15:11:02 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a44dc2-5772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b4:4b:cc:1d:a7:4b:d0:bd:f4:cb:d9:c4:83: 7b:c8:18:3a:8f:5d:d5:a3:87:94:d3:6d:e5:23:f6: 2c:36:f8:41:7f:e0:d1:d8:0b:b4:c6:d0:90:cf:12: 39:9b:cc:21:f1:6e:bd:10:26:87:bf:b8:67:cd:5a: bf:a6:f4:94:62:60:e4:3e:f4:be:32:7e:02:b3:0b: 1f:83:79:fd:a3:b6:6c:74:ba:a2:61:fc:4f:b0:0f: 20:76:39:32:88:ca:a6:9d:75:12:6d:33:32:83:56: 7c:58:88:1f:ad:0e:1e:c4:01:c0:07:20:89:12:12: 25:79:99:23:a5:78:42:cf:18:2c:7d:3d:fb:1b:a1: ff:e2:51:9a:95:78:b3:6b:e3:f8:3e:80:61:2f:ad: 12:f7:a2:4a:34:ea:ff:34:e3:5f:5a:76:e4:dd:8d: a5:7b:89:69:f8:10:3d:71:9a:ee:f2:6b:bc:6b:f3: c4:4f:d9:b1:3d:63:a8:dc:d4:9f:7a:e3:f4:42:e8: 17:f8:75:ff:38:ae:08:39:92:f9:82:cc:1f:08:c0: 1f:12:ba:a7:e9:ff:53:03:f6:92:d5:3e:5f:96:a3: 24:27:8d:43:51:91:9a:84:df:29:5f:85:0c:aa:d7: 3c:13:37:5b:d1:aa:e3:15:28:ed:57:5c:1f:b3:5c: 0b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F4:95:37:6A:CE:1A:F4:C1:CC:DC:8F:B5:DF:0B:27:7A:B8:5A:28 X509v3 Authority Key Identifier: keyid:2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/E9E555FA506211EAA2BC3E2EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.170.50.0/23 IPv6: 2001:df0:248::/48 Signature Algorithm: sha256WithRSAEncryption 87:34:f4:08:57:e2:47:49:5a:60:54:f2:83:d8:d2:69:bb:5f: 39:e2:60:a1:30:16:cd:04:aa:22:dd:e2:94:05:1d:86:b2:d1: 13:ac:e1:51:88:6c:ce:b9:25:08:ae:cc:67:b1:b7:c7:82:1e: 43:93:10:74:92:5a:70:ff:9a:11:ed:26:16:b5:de:00:43:0e: 55:ab:ba:4f:9c:d4:bb:04:cf:9d:b3:be:19:19:76:5a:b8:77: c3:b9:49:4e:73:04:51:7e:6d:5c:cc:73:a9:24:db:7d:87:42: 0f:4d:73:e0:10:b1:c1:8a:4f:98:82:e1:b5:b0:43:f7:21:d4: 6d:8c:01:e8:ee:e2:2a:ed:bd:ed:30:23:8f:81:17:5c:08:fd: 78:c5:a5:9c:dc:cc:83:e9:ef:00:f3:1b:71:c6:86:0c:1d:f8: 46:d8:00:0e:ff:d6:0b:79:1b:6b:41:08:94:7c:56:60:97:36: 76:8a:b0:b0:74:15:82:1b:1a:bc:65:f7:0d:e7:b8:af:1b:bc: 0f:82:62:f2:61:3c:0d:be:75:44:97:11:cd:c8:81:27:4a:ce: 3f:c9:49:be:90:ab:11:fc:0e:c7:16:a0:5a:d9:37:59:e1:de: 09:65:46:5c:ce:46:1e:25:bc:0c:28:e9:60:74:81:0f:d5:01: 4a:c0:49:f3 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICNTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E4MTUxMTAvBgNVBAUTKDJCREQzMTUxMTE2REU5REJDNTVDRkMzRDJDREFDQTU4 RTc0QjE5RTYwHhcNMjUxMjI0MTUxMTAyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGRjMi01NzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7LRLzB2nS9C99MvZxIN7yBg6j13Vo4eU023lI/YsNvhBf+DR2Au0xtCQzxI5 m8wh8W69ECaHv7hnzVq/pvSUYmDkPvS+Mn4Cswsfg3n9o7ZsdLqiYfxPsA8gdjky iMqmnXUSbTMyg1Z8WIgfrQ4exAHAByCJEhIleZkjpXhCzxgsfT37G6H/4lGalXiz a+P4PoBhL60S96JKNOr/NONfWnbk3Y2le4lp+BA9cZru8mu8a/PET9mxPWOo3NSf euP0QugX+HX/OK4IOZL5gswfCMAfErqn6f9TA/aS1T5flqMkJ41DUZGahN8pX4UM qtc8Ezdb0arjFSjtV1wfs1wLSwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFFT0lTdq zhr0wczcj7XfCyd6uFooMB8GA1UdIwQYMBaAFCvdMVERbenbxVz8PSzayljnSxnm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTgxNS84RENEMUVBODFE OUIxMUUyOTFEMjg0ODkwOEIwMkNEMi9LOTB4VVJGdDZkdkZYUHc5TE5yS1dPZExH ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s5MHhVUkZ0NmR2RlhQdzlMTnJLV09kTEdlWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0E4MTUvOERDRDFFQTgxRDlCMTFFMjkxRDI4NDg5MDhCMDJDRDIvRTlFNTU1RkE1 MDYyMTFFQUEyQkMzRTJFQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBy6oyMA8EAgACMAkDBwAgAQ3wAkgwDQYJKoZIhvcNAQELBQADggEB AIc09AhX4kdJWmBU8oPY0mm7XzniYKEwFs0EqiLd4pQFHYay0ROs4VGIbM65JQiu zGext8eCHkOTEHSSWnD/mhHtJha13gBDDlWruk+c1LsEz52zvhkZdlq4d8O5SU5z BFF+bVzMc6kk232HQg9Nc+AQscGKT5iC4bWwQ/ch1G2MAeju4irtve0wI4+BF1wI /XjFpZzczIPp7wDzG3HGhgwd+EbYAA7/1gt5G2tBCJR8VmCXNnaKsLB0FYIbGrxl 9w3nuK8bvA+CYvJhPA2+dUSXEc3IgSdKzj/JSb6QqxH8DscWoFrZN1nh3gllRlzO Rh4lvAwo6WB0gQ/VAUrASfM= -----END CERTIFICATE-----Generated at Mon Mar 2 10:14:25 2026 by rpki-client