$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/986F0854F7C611EA8B23C30CC4F9AE02.roa File: 986F0854F7C611EA8B23C30CC4F9AE02.roa (raw, json) Hash identifier: aHXBmA0NtyR13VuTHpIm+ZaiBP/Di2n0/CwGR7lCYqI= Subject key identifier: BB:57:99:9A:5A:35:0E:CD:0D:1C:C3:A1:E3:58:5A:3B:D3:8F:6A:C1 Certificate issuer: /CN=A91D5590/serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D Certificate serial: 085D Authority key identifier: 71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/986F0854F7C611EA8B23C30CC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:51:31 +0000 ROA not before: Tue 16 Sep 2025 21:32:17 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 7473 IP address blocks: 202.189.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2141 (0x85d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5590, serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D Validity Not Before: Sep 16 21:32:17 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a45273-512b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b4:f5:cf:a6:69:79:5c:e9:d3:f5:ae:49:05: 3e:c5:30:23:e5:ee:6f:87:ab:72:9b:6b:4f:c7:9e: 73:91:29:7c:40:15:f0:36:a2:82:ab:91:e1:ee:6d: ad:97:f8:d4:96:80:49:d1:02:60:46:ca:d1:eb:da: e3:22:cd:82:22:98:23:c8:0a:db:33:d0:7a:10:e1: 16:ce:7a:2a:4c:79:82:10:a5:70:7d:55:01:70:88: dc:dd:ef:43:67:43:34:86:31:07:07:7a:5a:16:27: 9d:0c:f7:0a:2b:53:8f:b9:cb:10:5c:1c:76:75:66: 37:20:c1:fd:b2:55:55:92:1c:20:41:6f:40:70:a2: 43:6a:26:3d:05:86:55:f2:b2:50:38:76:b8:3f:e5: d9:10:70:8b:ab:d2:b6:a8:95:f3:d5:80:67:24:e2: 3a:b2:4e:45:26:41:7a:35:b7:7d:97:4e:74:8f:3d: fe:40:a9:89:99:84:17:19:b4:19:a3:7a:a9:97:fe: 48:c1:a5:90:23:ba:7e:59:93:4b:cd:05:55:f1:63: de:4a:c9:cf:48:22:c3:40:01:2c:4a:73:0b:15:af: 8c:00:0c:07:04:0e:8e:6d:16:5e:e9:0b:5c:23:c6: 70:cb:ae:db:14:c6:f0:c9:56:0c:77:9d:2b:70:ea: 14:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:57:99:9A:5A:35:0E:CD:0D:1C:C3:A1:E3:58:5A:3B:D3:8F:6A:C1 X509v3 Authority Key Identifier: keyid:71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/986F0854F7C611EA8B23C30CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.189.128.0/24 Signature Algorithm: sha256WithRSAEncryption 53:7c:28:9d:58:3f:da:25:a3:d0:62:78:a0:dd:6c:2a:34:1f: 3e:95:34:fb:27:cc:51:1a:95:12:1f:27:0d:0f:ea:e2:f8:b5: 70:50:6f:af:9a:4b:18:d0:5f:66:b6:aa:71:6f:3f:08:e1:75: 90:74:98:ab:1c:d2:12:88:23:a2:d6:49:75:b8:c7:f4:a4:b2: 06:ad:71:9b:2f:bc:81:15:2e:b6:a0:68:c0:28:38:6d:ca:3f: b7:c2:60:8d:94:69:f8:ea:88:82:5b:ff:80:ec:7f:d0:e3:5a: 36:95:22:22:e3:67:97:3c:57:46:fe:d7:f3:e1:5b:98:b5:74: df:3d:b6:e2:45:54:3d:18:f2:18:09:a3:d6:88:a2:ad:54:57: 96:20:ad:61:cf:1c:2e:33:79:97:71:a5:93:5a:d1:b9:fb:c1: 6c:68:28:ca:60:77:4a:22:bf:dd:b4:f9:0a:31:b7:97:aa:3d: 59:7a:92:55:3d:d6:a8:85:e2:ed:26:14:ff:28:05:e9:27:46: 0f:17:14:1b:dc:10:96:bd:48:8f:46:f7:8a:85:07:e4:32:5a: 06:20:b2:c4:8c:fe:79:d1:76:d5:52:00:6e:07:da:8a:1c:71: 4f:28:a1:11:dd:fe:52:6c:c0:bb:5f:5c:b0:de:69:3c:30:cd: e1:db:7f:6c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU1OTAxMTAvBgNVBAUTKDcxOTYxMzhGRDlGQzhDNzhGRTg0M0EyNTNDQjA0ODBB RENDNTdGMEQwHhcNMjUwOTE2MjEzMjE3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTI3My01MTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrT1z6ZpeVzp0/WuSQU+xTAj5e5vh6tym2tPx55zkSl8QBXwNqKCq5Hh7m2t l/jUloBJ0QJgRsrR69rjIs2CIpgjyArbM9B6EOEWznoqTHmCEKVwfVUBcIjc3e9D Z0M0hjEHB3paFiedDPcKK1OPucsQXBx2dWY3IMH9slVVkhwgQW9AcKJDaiY9BYZV 8rJQOHa4P+XZEHCLq9K2qJXz1YBnJOI6sk5FJkF6Nbd9l050jz3+QKmJmYQXGbQZ o3qpl/5IwaWQI7p+WZNLzQVV8WPeSsnPSCLDQAEsSnMLFa+MAAwHBA6ObRZe6Qtc I8Zwy67bFMbwyVYMd50rcOoUZwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLtXmZpa NQ7NDRzDoeNYWjvTj2rBMB8GA1UdIwQYMBaAFHGWE4/Z/Ix4/oQ6JTywSArcxX8N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTU5MC9BODk1MjQ5RUY3 QzUxMUVBODcxQzAwMENDNEY5QUUwMi9jWllUajluOGpIai1oRG9sUExCSUN0ekZm dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NaWVRqOW44akhqLWhEb2xQTEJJQ3R6RmZ3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDU1OTAvQTg5NTI0OUVGN0M1MTFFQTg3MUMwMDBDQzRGOUFFMDIvOTg2RjA4NTRG N0M2MTFFQThCMjNDMzBDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyr2AMA0GCSqGSIb3DQEBCwUAA4IBAQBTfCidWD/aJaPQYnig3Wwq NB8+lTT7J8xRGpUSHycND+ri+LVwUG+vmksY0F9mtqpxbz8I4XWQdJirHNISiCOi 1kl1uMf0pLIGrXGbL7yBFS62oGjAKDhtyj+3wmCNlGn46oiCW/+A7H/Q41o2lSIi 42eXPFdG/tfz4VuYtXTfPbbiRVQ9GPIYCaPWiKKtVFeWIK1hzxwuM3mXcaWTWtG5 +8FsaCjKYHdKIr/dtPkKMbeXqj1ZepJVPdaoheLtJhT/KAXpJ0YPFxQb3BCWvUiP RveKhQfkMloGILLEjP550XbVUgBuB9qKHHFPKKER3f5SbMC7X1yw3mk8MM3h239s -----END CERTIFICATE-----Generated at Mon Mar 2 07:40:42 2026 by rpki-client