$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/232E8BFEFEA411EDBC673B4BC4F9AE02.roa File: 232E8BFEFEA411EDBC673B4BC4F9AE02.roa (raw, json) Hash identifier: i/MqTAr3DjQbJ7pM6lK7jVjbcEbd2+i/7IX3vbbjQxw= Subject key identifier: 1D:9D:98:99:E9:F2:CB:46:3B:ED:8C:DF:0B:D8:3C:F5:92:8D:84:D6 Certificate issuer: /CN=A91D3DAE/serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB Certificate serial: 352C Authority key identifier: 1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/232E8BFEFEA411EDBC673B4BC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:21:13 +0000 ROA not before: Sat 22 Nov 2025 15:00:44 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 7654 IP address blocks: 202.57.128.0/24 maxlen: 24 202.57.130.0/24 maxlen: 24 202.57.160.0/24 maxlen: 24 202.57.176.0/22 maxlen: 22 202.57.191.0/24 maxlen: 24 2406:400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:42:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13612 (0x352c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3DAE, serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB Validity Not Before: Nov 22 15:00:44 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a46779-3558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3c:bb:d3:fb:03:eb:38:aa:9f:1e:71:85:2a: 04:f3:c6:bd:fa:6c:06:6d:5d:bc:19:c7:3d:68:f4: 85:9d:e0:2f:99:f5:e7:d7:e6:8b:e9:fd:64:66:a2: 26:16:f1:4a:e9:02:a9:c5:a2:9c:67:38:2a:ce:4f: ba:a2:ac:2e:1a:97:bc:ad:9f:79:0d:a7:c0:9f:7c: 62:2c:3c:79:ba:cc:e1:7a:f5:ba:92:82:4d:51:16: 50:37:4e:b0:cb:c7:46:c9:99:54:aa:a6:4d:cd:26: f1:90:c7:37:77:e2:ab:32:08:6e:12:ea:e3:2d:b2: e5:5d:c9:16:0c:10:6f:36:ff:e1:5b:75:e1:a3:be: c2:f4:9a:47:94:5f:5c:01:5e:3b:81:e5:83:5e:2a: c2:e3:d8:76:47:9d:5e:71:48:7c:20:85:c3:8f:ea: 1b:c5:b2:bc:22:69:fb:8a:d7:89:e1:32:d4:db:d1: 15:79:49:c4:48:63:1d:f3:05:e9:fd:34:e4:7a:12: b3:c8:74:14:7d:75:d5:65:54:a4:84:07:04:cf:70: bd:fd:cd:d7:fc:3d:1e:96:0c:04:ad:c4:f9:36:25: 34:8b:98:62:4c:97:ad:10:73:39:81:1e:03:54:41: 17:02:33:1d:b7:76:8f:96:04:95:7f:df:d7:33:c7: 7b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9D:98:99:E9:F2:CB:46:3B:ED:8C:DF:0B:D8:3C:F5:92:8D:84:D6 X509v3 Authority Key Identifier: keyid:1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/232E8BFEFEA411EDBC673B4BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.57.128.0/24 202.57.130.0/24 202.57.160.0/24 202.57.176.0/22 202.57.191.0/24 IPv6: 2406:400::/32 Signature Algorithm: sha256WithRSAEncryption 8c:8c:59:ed:59:07:d3:96:db:4d:97:fc:e0:cb:e4:c3:7f:06: a6:f9:c2:ff:e8:ca:fe:8a:c4:71:fb:bb:5d:5b:33:49:8a:fe: 89:f9:db:72:23:e6:a4:91:34:9f:79:fb:5c:81:64:2b:64:1d: 49:71:3b:40:6f:86:57:16:78:c6:40:f6:a7:32:e8:31:ca:b1: ed:87:65:c4:61:ea:e2:24:b9:19:1c:20:72:ff:d1:40:2a:c8: 40:ce:11:32:41:ae:78:8e:a7:78:e7:19:d6:d5:82:b7:e9:67: a2:ba:f7:e0:18:76:1e:18:6e:ad:68:62:f5:13:76:ba:9d:8b: ed:12:c0:aa:43:31:db:91:4e:73:a7:4a:b8:9e:9b:ee:51:4c: 15:10:38:ff:b0:4b:c0:07:60:d9:6a:f6:1e:b7:d9:2a:75:15: 77:94:98:c0:59:65:c3:f6:ce:e6:26:e1:49:81:fc:48:35:9e: c3:42:62:15:d8:12:2f:f3:bb:49:f8:6e:4f:7d:5f:ac:27:bb: 55:cf:a2:0e:81:1e:ae:e8:69:38:20:21:7b:c7:34:48:76:0b: 7c:6e:00:66:11:db:b8:8e:35:a4:a9:59:70:c1:04:18:d2:3b: 24:3b:44:3b:5a:1d:b0:ba:1a:42:7d:ad:15:a5:6a:c3:d3:d0: d4:d4:55:c8 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgICNSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNEQUUxMTAvBgNVBAUTKDFBRUZCNTFERUM4RUIwNzk2MkE3NUU0NTlDRTIxMEE3 NDAwMTA0RkIwHhcNMjUxMTIyMTUwMDQ0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Njc3OS0zNTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7zy70/sD6ziqnx5xhSoE88a9+mwGbV28Gcc9aPSFneAvmfXn1+aL6f1kZqIm FvFK6QKpxaKcZzgqzk+6oqwuGpe8rZ95DafAn3xiLDx5uszhevW6koJNURZQN06w y8dGyZlUqqZNzSbxkMc3d+KrMghuEurjLbLlXckWDBBvNv/hW3Xho77C9JpHlF9c AV47geWDXirC49h2R51ecUh8IIXDj+obxbK8Imn7iteJ4TLU29EVeUnESGMd8wXp /TTkehKzyHQUfXXVZVSkhAcEz3C9/c3X/D0elgwErcT5NiU0i5hiTJetEHM5gR4D VEEXAjMdt3aPlgSVf9/XM8d79wIDAQABo4IChzCCAoMwHQYDVR0OBBYEFB2dmJnp 8stGO+2M3wvYPPWSjYTWMB8GA1UdIwQYMBaAFBrvtR3sjrB5YqdeRZziEKdAAQT7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0RBRS9GRUZCQ0M4RTFE OEYxMUUyQjU0QTdERUYwOEIwMkNEMi9HdS0xSGV5T3NIbGlwMTVGbk9JUXAwQUJC UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1LTFIZXlPc0hsaXAxNUZuT0lRcDBBQkJQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDNEQUUvRkVGQkNDOEUxRDhGMTFFMkI1NEE3REVGMDhCMDJDRDIvMjMyRThCRkVG RUE0MTFFREJDNjczQjRCQzRGOUFFMDIucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAk BAIAATAeAwQAyjmAAwQAyjmCAwQAyjmgAwQCyjmwAwQAyjm/MA0EAgACMAcDBQAk BgQAMA0GCSqGSIb3DQEBCwUAA4IBAQCMjFntWQfTlttNl/zgy+TDfwam+cL/6Mr+ isRx+7tdWzNJiv6J+dtyI+akkTSfeftcgWQrZB1JcTtAb4ZXFnjGQPanMugxyrHt h2XEYeriJLkZHCBy/9FAKshAzhEyQa54jqd45xnW1YK36WeiuvfgGHYeGG6taGL1 E3a6nYvtEsCqQzHbkU5zp0q4npvuUUwVEDj/sEvAB2DZavYet9kqdRV3lJjAWWXD 9s7mJuFJgfxINZ7DQmIV2BIv87tJ+G5PfV+sJ7tVz6IOgR6u6Gk4ICF7xzRIdgt8 bgBmEdu4jjWkqVlwwQQY0jskO0Q7Wh2wuhpCfa0VpWrD09DU1FXI -----END CERTIFICATE-----Generated at Mon Mar 2 03:43:48 2026 by rpki-client