$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/B6D7E1547EEE11EF8B38A43BC4F9AE02.roa File: B6D7E1547EEE11EF8B38A43BC4F9AE02.roa (raw, json) Hash identifier: aRK8QB1JQ1E7tEOryxg9vqmCGo1+++BBG/tSU9uGFOQ= Subject key identifier: 20:01:60:61:74:B1:58:77:13:50:32:6C:98:3B:14:BD:E3:3C:5E:A4 Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Certificate serial: 28A0 Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/B6D7E1547EEE11EF8B38A43BC4F9AE02.roa Signing time: Tue 31 Mar 2026 16:19:57 +0000 ROA not before: Tue 31 Mar 2026 16:19:57 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 152891 IP address blocks: 203.213.202.0/24 maxlen: 24 2001:4457:5b7b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10400 (0x28a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Validity Not Before: Mar 31 16:19:57 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69cbf42d-eb7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:03:13:11:59:74:a0:db:63:0e:93:1b:4f:25: da:4a:c7:e1:38:ed:4c:4e:38:0f:2a:9b:2f:59:19: db:4a:8b:25:9a:0b:b6:6e:9b:c5:03:c5:c9:e9:ea: e0:24:da:f2:3d:7a:bc:d0:ea:d3:d1:d7:e4:b8:ae: 57:5a:5b:97:17:3a:d6:b7:7d:3c:bd:64:67:b2:18: 9a:44:c6:97:ae:af:55:42:a0:5b:1e:a5:30:ed:1c: 34:7e:b3:56:ea:1e:d0:9e:8e:38:19:3b:59:b4:0e: f6:71:75:de:20:81:17:55:f2:c2:d7:ee:65:47:55: 46:99:67:46:92:ea:70:55:72:89:1c:27:6a:f2:af: ee:c4:fc:f2:9a:26:0e:ad:b6:ac:54:e5:a9:2f:48: 1d:5f:18:3d:dc:4e:d6:86:c2:bf:25:1a:2b:a0:2b: b5:95:cf:ee:39:fa:b0:72:c5:0e:12:73:45:79:7d: 5a:bd:3e:83:47:b4:b6:fe:65:fa:15:76:39:f3:8c: 6d:28:6f:5c:6c:af:80:87:c8:5c:ff:94:99:cd:dc: 50:b1:27:51:8d:0b:e1:e3:ee:ee:27:52:3a:2b:03: 1b:8e:3f:52:44:98:ad:a4:17:05:c6:29:f2:0d:45: 0f:3b:a3:3e:06:1d:6d:c5:d9:1a:06:c5:e9:f3:90: f0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:01:60:61:74:B1:58:77:13:50:32:6C:98:3B:14:BD:E3:3C:5E:A4 X509v3 Authority Key Identifier: keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/B6D7E1547EEE11EF8B38A43BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.213.202.0/24 IPv6: 2001:4457:5b7b::/48 Signature Algorithm: sha256WithRSAEncryption 9b:f2:29:6c:43:0d:e1:f5:05:87:db:5b:24:ff:7f:d0:1d:4e: 02:6d:a9:22:61:28:21:27:87:47:d5:1a:69:86:46:3f:70:98: ec:20:19:57:b1:93:59:b5:70:f7:c0:b5:11:cd:97:0e:56:af: 4e:53:e2:a1:22:4f:f2:bf:13:9b:2a:a3:25:51:8b:b5:34:d2: 1f:ca:5e:bf:07:6d:f9:ed:8c:f6:47:9c:c4:90:d7:d5:41:99: 87:13:9f:36:2a:b1:91:d3:71:ec:20:0d:9c:98:4a:35:f8:b4: f3:98:e3:01:c3:ef:f9:c3:57:64:d4:1d:e4:7c:89:32:e1:fc: 1c:d4:d7:ca:b7:0f:37:42:d5:73:cd:2b:c0:69:b0:d2:c1:ee: 33:dc:01:f7:58:fd:71:c4:e2:e9:76:76:f9:8a:72:25:f9:ce: 97:55:35:21:a1:3c:b0:38:ec:11:4d:f3:08:f7:44:3a:16:51: b5:f4:58:08:84:fd:6b:b8:7b:7f:e2:d0:50:66:a9:a6:0f:43: ae:34:1c:71:2a:c6:48:36:c8:41:15:f9:e0:d0:c0:9b:ad:ee: b4:e3:fb:be:3e:90:8b:62:59:20:74:71:75:a5:af:06:a9:ba: 2e:52:16:d9:1c:8a:ec:7f:a8:bc:5e:9e:9e:f6:d9:71:6c:f7: c1:be:95:0a -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICKKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUyNkRCREVGMUIw NDU5MjhBQjgwHhcNMjYwMzMxMTYxOTU3WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWNiZjQyZC1lYjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqAMTEVl0oNtjDpMbTyXaSsfhOO1MTjgPKpsvWRnbSoslmgu2bpvFA8XJ6erg JNryPXq80OrT0dfkuK5XWluXFzrWt308vWRnshiaRMaXrq9VQqBbHqUw7Rw0frNW 6h7Qno44GTtZtA72cXXeIIEXVfLC1+5lR1VGmWdGkupwVXKJHCdq8q/uxPzymiYO rbasVOWpL0gdXxg93E7WhsK/JRoroCu1lc/uOfqwcsUOEnNFeX1avT6DR7S2/mX6 FXY584xtKG9cbK+Ah8hc/5SZzdxQsSdRjQvh4+7uJ1I6KwMbjj9SRJitpBcFxiny DUUPO6M+Bh1txdkaBsXp85DwWQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFCABYGF0 sVh3E1AybJg7FL3jPF6kMB8GA1UdIwQYMBaAFF0t0VS13OIft4bFJtve8bBFkoq4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkI3MC8yOTgzNjQ3Qzgz OEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRoLTNoc1VtMjk3eHNFV1Np cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hTM1JWTFhjNGgtM2hzVW0yOTd4c0VXU2lyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REZCNzAvMjk4MzY0N0M4MzhGMTFFNTg2RkM1ODEyQzRGOUFFMDIvQjZEN0UxNTQ3 RUVFMTFFRjhCMzhBNDNCQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAy9XKMA8EAgACMAkDBwAgAURXW3swDQYJKoZIhvcNAQELBQADggEB AJvyKWxDDeH1BYfbWyT/f9AdTgJtqSJhKCEnh0fVGmmGRj9wmOwgGVexk1m1cPfA tRHNlw5Wr05T4qEiT/K/E5sqoyVRi7U00h/KXr8HbfntjPZHnMSQ19VBmYcTnzYq sZHTcewgDZyYSjX4tPOY4wHD7/nDV2TUHeR8iTLh/BzU18q3DzdC1XPNK8BpsNLB 7jPcAfdY/XHE4ul2dvmKciX5zpdVNSGhPLA47BFN8wj3RDoWUbX0WAiE/Wu4e3/i 0FBmqaYPQ640HHEqxkg2yEEV+eDQwJut7rTj+74+kItiWSB0cXWlrwapui5SFtkc iux/qLxenp722XFs98G+lQo= -----END CERTIFICATE-----Generated at Fri Apr 17 19:20:02 2026 by rpki-client