$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/229F27ACFEA411EDBC673B4BC4F9AE02.roa File: 229F27ACFEA411EDBC673B4BC4F9AE02.roa (raw, json) Hash identifier: Qk1zJmgRoPNYf3XvdVSfDLRHp6uM57VNb9FsqRujDlI= Subject key identifier: 2A:34:C3:73:3A:F2:D7:5F:FF:A8:93:F8:62:68:EC:68:87:32:23:47 Certificate issuer: /CN=A91D3DAE/serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB Certificate serial: 352B Authority key identifier: 1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/229F27ACFEA411EDBC673B4BC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:21:12 +0000 ROA not before: Sat 22 Nov 2025 15:00:43 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 45254 IP address blocks: 203.153.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:42:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13611 (0x352b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3DAE, serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB Validity Not Before: Nov 22 15:00:43 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a46778-4176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:45:96:8f:bb:56:84:19:f1:4d:24:2e:96:c9: f3:47:af:66:df:a5:28:2e:1b:0a:ea:61:4c:1e:49: 48:f7:f5:de:a1:4c:78:b5:19:07:93:a0:2f:98:15: 4c:9b:51:b4:bf:6c:26:ba:90:35:d7:18:aa:a0:8a: 06:ce:d8:a2:aa:a8:65:19:27:6d:98:76:36:0d:f3: 4e:7b:21:06:f4:77:a7:8c:dd:d2:48:0b:cc:c2:ba: 12:ac:0d:57:b4:e5:1f:88:e0:bd:55:c0:3e:6d:53: 1c:b0:03:df:7a:2d:eb:ba:2e:60:34:61:27:b9:33: 23:02:1e:70:1b:b6:4d:2f:80:bc:82:50:78:4b:c0: 02:24:f8:6a:e1:ed:c1:5e:40:29:a8:82:c8:d2:2e: 64:ce:cb:c5:94:fe:c8:eb:bb:02:6e:4d:42:53:85: b2:e4:4a:13:84:02:44:39:8d:b6:70:96:da:a2:3e: d4:9d:00:37:16:5b:13:46:fe:fe:72:b8:a1:0e:71: eb:25:d5:2f:c2:09:b3:8e:f8:4f:4d:2a:ea:45:e8: fb:c4:c2:74:5a:4b:85:67:ef:81:c0:96:e2:0d:a2: 18:db:a2:82:2e:53:5f:ae:ef:4e:11:cc:e9:a9:fe: 9e:16:31:d9:bd:44:2b:04:41:75:c7:b0:e9:5e:dd: f6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:34:C3:73:3A:F2:D7:5F:FF:A8:93:F8:62:68:EC:68:87:32:23:47 X509v3 Authority Key Identifier: keyid:1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/229F27ACFEA411EDBC673B4BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.153.187.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:bc:ae:f6:39:1d:64:12:e4:dc:15:2d:0e:54:d5:ef:94:61: 4e:19:18:a1:65:19:92:a2:30:bf:c2:77:6d:56:e7:95:19:cd: ff:17:75:34:24:c1:3d:8f:1e:b7:62:94:6a:72:df:26:8b:ef: 89:45:ac:52:5a:13:da:91:c3:78:01:e5:04:8c:c7:06:5f:dd: 54:db:7a:3d:e8:2f:f9:29:ec:55:f2:22:1d:f8:f3:a1:42:2b: 25:a0:66:cb:4a:17:d5:4c:69:9f:75:30:72:21:11:a1:ac:11: 7d:97:2c:ab:c4:19:89:48:61:fc:2d:b6:06:bd:47:a4:17:f9: 31:1a:5f:bf:0f:1e:b3:40:e8:c5:b8:95:7e:48:ca:1e:dc:34: 19:92:fe:e1:75:e8:b0:60:a0:5f:f6:34:d9:38:f6:47:06:c0: 12:68:4a:e3:18:d1:55:5a:63:03:53:0d:37:ad:d3:59:99:45: fe:b0:6f:4e:0e:67:0c:6e:09:d6:5c:13:7b:01:e8:49:16:66: 5a:07:13:51:7f:55:a1:61:f3:36:1f:f2:88:3c:11:ff:e9:0e: 0b:48:eb:51:87:e6:8e:9a:03:d0:64:10:8b:c5:ec:23:34:57: c8:d6:db:24:d8:7e:7d:7f:59:28:b4:61:e3:d7:c6:cb:7a:7f: 87:c2:d4:e9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICNSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNEQUUxMTAvBgNVBAUTKDFBRUZCNTFERUM4RUIwNzk2MkE3NUU0NTlDRTIxMEE3 NDAwMTA0RkIwHhcNMjUxMTIyMTUwMDQzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Njc3OC00MTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskWWj7tWhBnxTSQulsnzR69m36UoLhsK6mFMHklI9/XeoUx4tRkHk6AvmBVM m1G0v2wmupA11xiqoIoGztiiqqhlGSdtmHY2DfNOeyEG9HenjN3SSAvMwroSrA1X tOUfiOC9VcA+bVMcsAPfei3rui5gNGEnuTMjAh5wG7ZNL4C8glB4S8ACJPhq4e3B XkApqILI0i5kzsvFlP7I67sCbk1CU4Wy5EoThAJEOY22cJbaoj7UnQA3FlsTRv7+ crihDnHrJdUvwgmzjvhPTSrqRej7xMJ0WkuFZ++BwJbiDaIY26KCLlNfru9OEczp qf6eFjHZvUQrBEF1x7DpXt32cwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCo0w3M6 8tdf/6iT+GJo7GiHMiNHMB8GA1UdIwQYMBaAFBrvtR3sjrB5YqdeRZziEKdAAQT7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0RBRS9GRUZCQ0M4RTFE OEYxMUUyQjU0QTdERUYwOEIwMkNEMi9HdS0xSGV5T3NIbGlwMTVGbk9JUXAwQUJC UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1LTFIZXlPc0hsaXAxNUZuT0lRcDBBQkJQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDNEQUUvRkVGQkNDOEUxRDhGMTFFMkI1NEE3REVGMDhCMDJDRDIvMjI5RjI3QUNG RUE0MTFFREJDNjczQjRCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAy5m7MA0GCSqGSIb3DQEBCwUAA4IBAQAqvK72OR1kEuTcFS0OVNXv lGFOGRihZRmSojC/wndtVueVGc3/F3U0JME9jx63YpRqct8mi++JRaxSWhPakcN4 AeUEjMcGX91U23o96C/5KexV8iId+POhQisloGbLShfVTGmfdTByIRGhrBF9lyyr xBmJSGH8LbYGvUekF/kxGl+/Dx6zQOjFuJV+SMoe3DQZkv7hdeiwYKBf9jTZOPZH BsASaErjGNFVWmMDUw03rdNZmUX+sG9ODmcMbgnWXBN7AehJFmZaBxNRf1WhYfM2 H/KIPBH/6Q4LSOtRh+aOmgPQZBCLxewjNFfI1tsk2H59f1kotGHj18bLen+HwtTp -----END CERTIFICATE-----Generated at Mon Mar 2 03:42:29 2026 by rpki-client