$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/DCD41E8E98D511F0B3824663C4F9AE02.roa File: DCD41E8E98D511F0B3824663C4F9AE02.roa (raw, json) Hash identifier: 46CC9LcyzFfBkRedCj8zONrcqyJIMjuxJScGt32qKqY= Subject key identifier: 74:21:F1:96:B8:65:85:23:51:05:6E:B1:9D:26:15:B5:E2:0C:4A:05 Certificate issuer: /CN=A91DC5BE/serialNumber=ADA8AED32B15B87E611252D29D1E1D5BDE581646 Certificate serial: 3612 Authority key identifier: AD:A8:AE:D3:2B:15:B8:7E:61:12:52:D2:9D:1E:1D:5B:DE:58:16:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/DCD41E8E98D511F0B3824663C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:18:17 +0000 ROA not before: Tue 23 Sep 2025 23:34:35 +0000 ROA not after: Mon 31 Mar 2031 00:00:00 +0000 asID: 24555 IP address blocks: 220.247.144.0/20 maxlen: 21 2001:df9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.crl rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:37:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13842 (0x3612) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC5BE, serialNumber=ADA8AED32B15B87E611252D29D1E1D5BDE581646 Validity Not Before: Sep 23 23:34:35 2025 GMT Not After : Mar 31 00:00:00 2031 GMT Subject: CN=69a474d9-f335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5a:e1:ac:a7:29:e9:2d:f2:7a:55:fd:ca:1d: c3:7c:1e:3b:b0:e3:ad:6d:e5:73:c3:9c:69:65:5a: 0b:e3:d7:96:05:ff:ca:56:6d:8c:d4:c0:b2:c8:9e: 97:59:10:ed:3e:59:57:1a:43:ad:d4:c7:d4:aa:b8: 91:c7:33:38:69:d6:62:14:f4:ec:18:60:f7:42:99: ff:4b:53:85:0f:7a:72:78:6d:c3:2d:4f:15:5b:7a: 26:71:a2:d3:de:8c:f3:66:05:05:89:0b:6f:80:24: c1:d5:7a:db:c8:6f:4a:6a:14:6f:3a:33:ad:35:ed: b3:08:37:02:36:27:45:0c:3c:71:26:15:bb:2c:10: 52:00:fc:17:a4:ee:5a:3f:b1:ca:8d:5e:43:af:07: c4:94:90:f0:30:0e:df:93:f8:14:69:ff:d4:d8:44: f0:80:1f:a3:13:14:5e:a4:87:d4:a0:ec:87:46:c3: 37:7e:68:b0:06:c7:c8:71:90:cf:a4:ec:bc:c5:17: 36:d4:1a:6e:78:4e:ff:15:8b:32:d8:52:11:34:ac: 37:14:60:76:08:97:36:dc:72:15:ee:c4:ea:c2:83: c8:98:af:f5:b4:12:23:10:a9:71:e1:d6:01:77:ac: d6:3a:a6:b1:fa:2b:c3:1c:8e:03:c1:a9:09:2d:e2: 5a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:21:F1:96:B8:65:85:23:51:05:6E:B1:9D:26:15:B5:E2:0C:4A:05 X509v3 Authority Key Identifier: keyid:AD:A8:AE:D3:2B:15:B8:7E:61:12:52:D2:9D:1E:1D:5B:DE:58:16:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/DCD41E8E98D511F0B3824663C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 220.247.144.0/20 IPv6: 2001:df9::/32 Signature Algorithm: sha256WithRSAEncryption 76:2c:51:6a:7b:09:c8:6b:16:6b:05:f0:b4:5d:7d:07:cb:56: 2e:18:d9:de:0a:dd:6a:8b:05:c4:4e:da:f4:14:e9:e4:27:b4: 14:e7:b2:61:df:52:ca:31:1d:c5:77:4e:c6:5c:50:06:20:6d: 5e:4e:28:d8:02:03:24:8d:40:fc:af:32:41:35:f3:72:d5:a4: 3a:d6:d1:ec:0e:15:d6:bc:65:23:e5:14:ad:4e:fd:29:dc:bd: 82:ca:85:5b:0f:46:43:a8:93:07:27:a1:c3:29:55:12:88:21: 2d:40:89:a6:32:78:d5:a3:be:38:13:6e:63:5f:65:f1:79:04: 00:71:7b:7b:84:a9:d8:03:5b:76:78:b7:8a:2b:ee:29:4a:0a: 2e:b6:18:37:08:7a:f3:22:51:2c:4b:29:fc:86:ae:04:f3:d7: fa:5b:cc:9e:cc:04:c2:04:bf:02:39:8e:64:e5:8a:da:45:25: db:e9:82:f6:8f:e9:1f:78:c0:0c:f5:c6:27:5d:7a:7e:85:76: 48:8f:56:06:c9:4a:8b:ed:aa:50:de:83:8f:8f:10:70:07:7a: f5:7e:f0:7a:5d:40:21:b3:71:bf:b5:d2:45:cf:13:4f:d2:d5: 6b:99:dc:85:17:af:38:3f:02:2e:4b:ec:7d:ad:9c:ab:f7:c3: 79:97:c9:89 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICNhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM1QkUxMTAvBgNVBAUTKEFEQThBRUQzMkIxNUI4N0U2MTEyNTJEMjlEMUUxRDVC REU1ODE2NDYwHhcNMjUwOTIzMjMzNDM1WhcNMzEwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzRkOS1mMzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA11rhrKcp6S3yelX9yh3DfB47sOOtbeVzw5xpZVoL49eWBf/KVm2M1MCyyJ6X WRDtPllXGkOt1MfUqriRxzM4adZiFPTsGGD3Qpn/S1OFD3pyeG3DLU8VW3omcaLT 3ozzZgUFiQtvgCTB1XrbyG9KahRvOjOtNe2zCDcCNidFDDxxJhW7LBBSAPwXpO5a P7HKjV5DrwfElJDwMA7fk/gUaf/U2ETwgB+jExRepIfUoOyHRsM3fmiwBsfIcZDP pOy8xRc21BpueE7/FYsy2FIRNKw3FGB2CJc23HIV7sTqwoPImK/1tBIjEKlx4dYB d6zWOqax+ivDHI4DwakJLeJa0QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFHQh8Za4 ZYUjUQVusZ0mFbXiDEoFMB8GA1UdIwQYMBaAFK2ortMrFbh+YRJS0p0eHVveWBZG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzVCRS9ENDAxNjE5QTFE NjkxMUUyQUZCNjRFQTcwOEIwMkNEMi9yYWl1MHlzVnVINWhFbExTblI0ZFc5NVlG a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JhaXUweXNWdUg1aEVsTFNuUjRkVzk1WUZrWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REM1QkUvRDQwMTYxOUExRDY5MTFFMkFGQjY0RUE3MDhCMDJDRDIvRENENDFFOEU5 OEQ1MTFGMEIzODI0NjYzQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQE3PeQMA0EAgACMAcDBQAgAQ35MA0GCSqGSIb3DQEBCwUAA4IBAQB2 LFFqewnIaxZrBfC0XX0Hy1YuGNneCt1qiwXETtr0FOnkJ7QU57Jh31LKMR3Fd07G XFAGIG1eTijYAgMkjUD8rzJBNfNy1aQ61tHsDhXWvGUj5RStTv0p3L2CyoVbD0ZD qJMHJ6HDKVUSiCEtQImmMnjVo744E25jX2XxeQQAcXt7hKnYA1t2eLeKK+4pSgou thg3CHrzIlEsSyn8hq4E89f6W8yezATCBL8COY5k5YraRSXb6YL2j+kfeMAM9cYn XXp+hXZIj1YGyUqL7apQ3oOPjxBwB3r1fvB6XUAhs3G/tdJFzxNP0tVrmdyFF684 PwIuS+x9rZyr98N5l8mJ -----END CERTIFICATE-----Generated at Mon Mar 2 03:43:33 2026 by rpki-client