$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/073CAA38A7C811EF92C28379C4F9AE02.roa File: 073CAA38A7C811EF92C28379C4F9AE02.roa (raw, json) Hash identifier: NUIndaatcaulOjWyNrpbRvmZbEsP5jvoX9Ee5iUIQ1Y= Subject key identifier: EA:A6:E5:41:36:5E:99:19:00:57:D9:1C:E8:84:BB:77:00:49:78:67 Certificate issuer: /CN=A91D4786/serialNumber=578C8D02AEF0B43E29FECEA1895DCC9D10663535 Certificate serial: F7 Authority key identifier: 57:8C:8D:02:AE:F0:B4:3E:29:FE:CE:A1:89:5D:CC:9D:10:66:35:35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/073CAA38A7C811EF92C28379C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:12:07 +0000 ROA not before: Sat 29 Mar 2025 07:02:38 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 4826 IP address blocks: 203.22.108.0/23 maxlen: 23 203.22.108.0/24 maxlen: 24 203.22.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4786, serialNumber=578C8D02AEF0B43E29FECEA1895DCC9D10663535 Validity Not Before: Mar 29 07:02:38 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a41f07-aada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:36:e9:16:9c:ee:50:f9:88:dc:d8:ce:56:16: 98:ef:53:a3:c1:2f:47:1b:f2:a8:f0:9e:8e:62:98: 56:90:e7:b2:c0:0b:9e:3d:1e:eb:79:ac:ad:6a:92: 7d:85:67:cd:aa:59:a8:37:d3:8b:fe:9d:2d:71:01: b4:dc:a3:1b:78:76:c0:31:bc:84:f0:9e:ab:59:8b: 55:6b:42:cf:55:00:39:d0:d5:29:d2:4f:fd:5d:b7: 29:09:67:0d:bf:b4:be:dd:62:2c:32:83:ea:2c:22: 0f:92:cd:83:78:67:fe:a0:80:5e:30:04:8f:48:41: 41:e3:09:42:06:00:20:ae:61:ce:2d:9b:71:6b:ef: 0f:6f:82:35:c2:d7:b3:1e:63:e6:79:24:c0:8b:96: db:79:81:95:63:bf:74:b6:ca:93:4a:bc:7d:75:cb: 46:2b:7f:5f:37:e7:96:21:e8:0a:23:bb:1d:3c:fc: 47:e4:df:37:4c:a2:65:a5:9c:e9:8e:88:1f:c6:c7: 55:3f:69:9c:9f:16:8d:e7:ee:5c:dd:52:e5:db:f9: 78:97:8a:cc:89:83:cd:f1:b5:9f:04:76:f0:2e:5f: 89:f5:30:d0:b1:67:7a:f4:c7:0d:2e:8f:d1:12:a0: 62:ab:4f:cd:81:48:3d:35:37:02:1b:38:9f:ae:82: db:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A6:E5:41:36:5E:99:19:00:57:D9:1C:E8:84:BB:77:00:49:78:67 X509v3 Authority Key Identifier: keyid:57:8C:8D:02:AE:F0:B4:3E:29:FE:CE:A1:89:5D:CC:9D:10:66:35:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/073CAA38A7C811EF92C28379C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.22.108.0/23 Signature Algorithm: sha256WithRSAEncryption 64:cb:0a:d6:f9:00:7c:8c:70:1f:3c:2a:3e:54:5f:24:b9:21: 6c:20:d4:99:8e:a2:12:d6:83:77:84:93:c3:37:c1:ad:5c:1c: 63:30:84:36:88:b9:78:ab:f7:30:72:43:cc:d6:9c:64:fb:7b: fa:66:5f:8f:ed:a3:5d:c8:30:61:23:a1:d4:e5:61:b1:c9:99: 2e:f0:0c:07:c3:23:e2:99:21:4d:4f:3f:0a:d3:91:84:fd:c6: b5:ce:92:c5:cc:ab:23:38:58:3c:8e:ca:55:c7:26:62:52:bb: 5d:a6:11:51:6a:ee:20:44:f5:6f:a3:f2:0c:8c:9a:9e:17:ab: ea:af:6e:b6:99:a6:94:dd:f0:cf:b9:90:b5:5e:67:77:d9:74: 48:e1:8f:dc:d0:fe:84:53:95:5b:88:9a:9e:77:71:d5:b5:88: 6c:00:68:4a:c5:25:5f:81:5b:ee:bc:65:3b:b6:a2:ed:c5:83: 0f:9c:36:96:3f:72:ac:70:39:63:24:2c:8c:67:39:9e:8f:dc: 66:86:8c:15:5f:f4:63:45:df:9a:dd:07:f7:e8:c8:30:d8:02: fa:c2:e2:f9:cc:60:66:20:21:95:61:de:04:30:63:79:0e:43: 37:81:5b:dd:5c:0d:72:49:c4:67:4c:97:34:38:a8:58:c9:de: 3b:b3:4d:23 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ3ODYxMTAvBgNVBAUTKDU3OEM4RDAyQUVGMEI0M0UyOUZFQ0VBMTg5NURDQzlE MTA2NjM1MzUwHhcNMjUwMzI5MDcwMjM4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MWYwNy1hYWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApjbpFpzuUPmI3NjOVhaY71OjwS9HG/Ko8J6OYphWkOeywAuePR7reaytapJ9 hWfNqlmoN9OL/p0tcQG03KMbeHbAMbyE8J6rWYtVa0LPVQA50NUp0k/9XbcpCWcN v7S+3WIsMoPqLCIPks2DeGf+oIBeMASPSEFB4wlCBgAgrmHOLZtxa+8Pb4I1wtez HmPmeSTAi5bbeYGVY790tsqTSrx9dctGK39fN+eWIegKI7sdPPxH5N83TKJlpZzp jogfxsdVP2mcnxaN5+5c3VLl2/l4l4rMiYPN8bWfBHbwLl+J9TDQsWd69McNLo/R EqBiq0/NgUg9NTcCGzifroLbIwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOqm5UE2 XpkZAFfZHOiEu3cASXhnMB8GA1UdIwQYMBaAFFeMjQKu8LQ+Kf7OoYldzJ0QZjU1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDc4Ni8zNDU5OEM3MEE3 QzMxMUVGQjUxMUUwNTNDNEY5QUUwMi9WNHlOQXE3d3RENHBfczZoaVYzTW5SQm1O VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Y0eU5BcTd3dEQ0cF9zNmhpVjNNblJCbU5UVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDQ3ODYvMzQ1OThDNzBBN0MzMTFFRkI1MTFFMDUzQzRGOUFFMDIvMDczQ0FBMzhB N0M4MTFFRjkyQzI4Mzc5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQByxZsMA0GCSqGSIb3DQEBCwUAA4IBAQBkywrW+QB8jHAfPCo+VF8k uSFsINSZjqIS1oN3hJPDN8GtXBxjMIQ2iLl4q/cwckPM1pxk+3v6Zl+P7aNdyDBh I6HU5WGxyZku8AwHwyPimSFNTz8K05GE/ca1zpLFzKsjOFg8jspVxyZiUrtdphFR au4gRPVvo/IMjJqeF6vqr262maaU3fDPuZC1Xmd32XRI4Y/c0P6EU5VbiJqed3HV tYhsAGhKxSVfgVvuvGU7tqLtxYMPnDaWP3KscDljJCyMZzmej9xmhowVX/RjRd+a 3Qf36Mgw2AL6wuL5zGBmICGVYd4EMGN5DkM3gVvdXA1yScRnTJc0OKhYyd47s00j -----END CERTIFICATE-----Generated at Mon Mar 2 15:32:08 2026 by rpki-client