$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/543386248C5811E782F42951C4F9AE02.roa File: 543386248C5811E782F42951C4F9AE02.roa (raw, json) Hash identifier: n3uqup7GQBgv1FQz4tcE6zqiYYLPHwkPhVC8sJy/BDw= Subject key identifier: 5F:0E:48:C6:AB:CA:FB:D1:F5:92:07:19:C2:8D:14:F8:55:4A:90:F8 Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Certificate serial: 2891 Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/543386248C5811E782F42951C4F9AE02.roa Signing time: Tue 31 Mar 2026 16:19:30 +0000 ROA not before: Tue 31 Mar 2026 16:19:30 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 132206 IP address blocks: 112.206.224.0/20 maxlen: 20 112.206.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10385 (0x2891) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Validity Not Before: Mar 31 16:19:30 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69cbf412-e638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:36:44:9b:cf:66:28:c0:6f:b0:be:35:10:43: de:0b:08:bb:a8:33:cb:4e:50:96:98:84:77:e5:41: 92:80:7c:c4:ac:7e:a0:60:4e:1e:7e:9a:e5:64:ca: 2f:5f:f5:10:0a:59:e1:38:89:1b:91:60:b2:07:b7: 2e:15:57:08:f8:b4:05:e2:b3:3c:84:9b:50:f1:46: a9:81:28:33:3b:34:07:ae:12:3a:03:c9:e4:02:83: 18:e1:aa:57:cb:2c:9d:a5:15:43:dc:c9:97:5c:09: 3e:57:0e:7a:6e:ee:88:fa:5a:60:ae:82:52:3b:a8: 4f:fb:5a:0a:90:a3:53:bc:44:60:ab:55:b3:8e:0d: 94:f8:63:39:c0:6e:7c:1c:80:67:13:12:56:e8:a6: d6:24:9b:08:df:bb:fa:95:a0:08:70:21:a7:9c:b0: 2f:ab:9a:f1:7c:59:fb:30:93:11:d5:29:93:c0:0a: ee:f5:c6:d4:06:12:f9:96:92:59:fd:08:64:a3:5e: 02:53:7b:4a:d6:c9:ce:f1:0d:15:93:86:77:75:2a: 01:dc:13:b5:67:b1:8d:fb:9d:41:3d:ee:bb:30:cf: f2:bb:ba:87:3c:e9:3b:d5:ab:17:2e:12:78:b0:3d: b0:77:d6:ae:de:0f:f8:52:6f:c1:30:6d:2d:83:d1: 48:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0E:48:C6:AB:CA:FB:D1:F5:92:07:19:C2:8D:14:F8:55:4A:90:F8 X509v3 Authority Key Identifier: keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/543386248C5811E782F42951C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 112.206.224.0/20 Signature Algorithm: sha256WithRSAEncryption 1c:85:68:b4:e9:b3:65:0d:84:e3:69:dd:73:f8:ca:97:cb:76: 65:c6:0a:21:a6:7c:9c:2f:2c:07:80:25:d4:61:66:5a:86:f6: 5a:ac:bb:7f:c9:d4:34:a4:32:ad:3b:27:f9:ea:65:30:20:a1: b4:f5:02:de:0b:33:94:c5:c3:d6:03:49:c5:4f:b0:ed:67:bd: 2f:52:9e:cf:43:fd:18:7e:e1:96:7d:db:0a:34:cd:c3:61:48: 3e:ef:af:77:ba:04:d0:b6:24:a3:1c:49:b4:bc:9f:25:00:bb: 49:da:93:73:7d:f5:75:6a:c5:c8:ab:10:08:1c:2b:a8:17:e1: 3e:c4:68:c2:77:54:25:e0:d0:ab:73:c7:39:b6:62:0f:60:99: 28:16:a4:02:96:e3:85:7f:64:b6:86:db:08:0f:1b:49:d7:57: 4f:f6:b8:ed:02:dc:c5:b0:9c:82:45:ad:0e:ea:0d:b3:f8:2a: 7b:39:59:ac:b1:04:e4:a7:24:32:97:1e:59:9b:73:a6:87:c1: b1:28:21:c6:f5:81:32:e5:a5:87:ff:8e:ca:fc:01:19:fa:9c: 5e:67:dc:2b:23:92:dc:18:11:73:2b:c0:9e:a0:00:eb:14:1e: 15:b8:a3:44:45:10:91:2f:33:0e:a8:84:f3:8c:9f:1a:ba:35: 61:ea:1c:d9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICKJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUyNkRCREVGMUIw NDU5MjhBQjgwHhcNMjYwMzMxMTYxOTMwWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWNiZjQxMi1lNjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTZEm89mKMBvsL41EEPeCwi7qDPLTlCWmIR35UGSgHzErH6gYE4efprlZMov X/UQClnhOIkbkWCyB7cuFVcI+LQF4rM8hJtQ8UapgSgzOzQHrhI6A8nkAoMY4apX yyydpRVD3MmXXAk+Vw56bu6I+lpgroJSO6hP+1oKkKNTvERgq1Wzjg2U+GM5wG58 HIBnExJW6KbWJJsI37v6laAIcCGnnLAvq5rxfFn7MJMR1SmTwAru9cbUBhL5lpJZ /Qhko14CU3tK1snO8Q0Vk4Z3dSoB3BO1Z7GN+51BPe67MM/yu7qHPOk71asXLhJ4 sD2wd9au3g/4Um/BMG0tg9FIfQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFF8OSMar yvvR9ZIHGcKNFPhVSpD4MB8GA1UdIwQYMBaAFF0t0VS13OIft4bFJtve8bBFkoq4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkI3MC8yOTgzNjQ3Qzgz OEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRoLTNoc1VtMjk3eHNFV1Np cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hTM1JWTFhjNGgtM2hzVW0yOTd4c0VXU2lyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REZCNzAvMjk4MzY0N0M4MzhGMTFFNTg2RkM1ODEyQzRGOUFFMDIvNTQzMzg2MjQ4 QzU4MTFFNzgyRjQyOTUxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEcM7gMA0GCSqGSIb3DQEBCwUAA4IBAQAchWi06bNlDYTjad1z+MqX y3ZlxgohpnycLywHgCXUYWZahvZarLt/ydQ0pDKtOyf56mUwIKG09QLeCzOUxcPW A0nFT7DtZ70vUp7PQ/0YfuGWfdsKNM3DYUg+7693ugTQtiSjHEm0vJ8lALtJ2pNz ffV1asXIqxAIHCuoF+E+xGjCd1Ql4NCrc8c5tmIPYJkoFqQCluOFf2S2htsIDxtJ 11dP9rjtAtzFsJyCRa0O6g2z+Cp7OVmssQTkpyQylx5Zm3Omh8GxKCHG9YEy5aWH /47K/AEZ+pxeZ9wrI5LcGBFzK8CeoADrFB4VuKNERRCRLzMOqITzjJ8aujVh6hzZ -----END CERTIFICATE-----Generated at Fri Apr 17 15:32:38 2026 by rpki-client