$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/181D46FCEE5611F0B0ABEB00546F56BC.roa File: 181D46FCEE5611F0B0ABEB00546F56BC.roa (raw, json) Hash identifier: 0v/XMQ2d8xTna5t6oAMoofbfgmP+DjOOYOL6BBl6lZc= Subject key identifier: B1:A1:9C:7F:FF:9D:9D:A0:02:0E:07:0A:58:AB:19:8A:BE:E8:82:B8 Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Certificate serial: 3813 Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/181D46FCEE5611F0B0ABEB00546F56BC.roa Signing time: Mon 30 Mar 2026 15:10:26 +0000 ROA not before: Mon 30 Mar 2026 15:10:26 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 45192 IP address blocks: 202.125.96.0/23 maxlen: 23 203.30.127.0/24 maxlen: 24 2001:df0:a::/48 maxlen: 48 2001:df2:ee00::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 14:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14355 (0x3813) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Validity Not Before: Mar 30 15:10:26 2026 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69ca9262-8cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7e:58:c5:d0:0a:8c:6a:1d:1f:d4:af:df:dc: 3a:40:53:be:75:ba:ee:59:12:67:e7:bc:a2:18:a8: 69:3f:e0:5b:0a:d5:6a:fa:a8:e3:83:bf:7c:70:56: f6:96:2a:10:1f:03:0a:39:06:bf:21:bc:62:49:ec: 77:44:e4:1a:3c:d7:36:c8:a5:a3:f8:9a:c8:ab:42: 18:90:13:f6:60:30:3f:7a:2e:76:34:ff:8f:b1:a9: 38:ff:6b:6a:c6:4d:11:e4:03:0c:d9:20:da:12:35: d7:3b:b7:1f:98:8f:8c:c9:bf:78:8a:b1:d1:77:5f: 32:35:3c:f7:82:93:19:b9:cc:b7:85:01:25:ba:91: 85:94:17:1d:b7:06:bc:96:2a:24:23:55:ca:a2:09: e5:d1:8c:36:ad:02:5d:75:38:d2:07:3f:5d:69:36: a6:5e:08:a3:c8:44:c7:d5:7b:32:a2:a6:19:30:ae: 48:98:09:53:31:88:12:40:c8:af:01:6b:54:5a:b6: 8b:e1:ca:ba:7f:e4:90:62:c6:d9:52:8f:be:9b:3d: a4:09:6a:d7:7c:08:5a:6a:a1:0c:a9:1b:06:d0:14: ca:9b:6f:bd:d4:46:8c:5a:f5:59:86:cd:d2:11:a3: 62:4d:19:7a:34:68:1c:02:22:01:ac:b7:8b:2a:7e: 04:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A1:9C:7F:FF:9D:9D:A0:02:0E:07:0A:58:AB:19:8A:BE:E8:82:B8 X509v3 Authority Key Identifier: keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/181D46FCEE5611F0B0ABEB00546F56BC.roa sbgp-ipAddrBlock: critical IPv4: 202.125.96.0/23 203.30.127.0/24 IPv6: 2001:df0:a::/48 2001:df2:ee00::/47 Signature Algorithm: sha256WithRSAEncryption 26:b2:5a:43:6f:62:46:c7:59:89:91:95:6e:e2:82:10:10:6d: e6:5f:43:e5:e3:96:05:c1:b9:fa:65:df:48:a7:6f:ca:fe:cb: c9:12:5d:24:38:8a:32:c4:81:c0:60:f7:12:23:4e:c4:ff:b2: 7f:43:a8:14:8a:17:3b:2e:6d:f8:a0:8f:04:ae:47:8a:59:cf: 4a:12:d5:07:05:b4:5c:db:30:c9:79:ab:d5:0a:b0:4e:24:e8: 1e:87:0d:0c:86:f0:c0:ef:67:2a:2e:6f:c0:f8:61:e1:3c:7f: 8f:e6:35:19:9c:0b:2f:63:53:04:fc:2a:27:34:4b:39:fd:4d: 66:d5:62:48:80:e2:00:9e:e6:29:b9:aa:f0:a9:d6:0c:a2:e8: f9:15:95:83:3f:55:22:71:ed:b5:5b:05:96:3d:bf:21:86:2d: aa:26:25:3d:bc:d4:09:e1:8e:1c:67:6e:65:35:6d:04:d0:0f: ee:55:d0:a6:81:5a:ae:15:e4:98:0e:79:eb:b6:04:b8:82:63: b1:a6:3f:04:2d:0e:92:66:6f:a7:ae:3d:0a:5f:2f:e3:71:be: 6f:50:33:e0:a4:64:ce:d2:1e:c8:a2:23:bf:6c:5a:11:34:ac: b2:d1:5b:2c:cd:cd:33:cd:b5:f2:d1:65:78:4b:43:cc:0e:7d: ac:9d:76:1d -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICOBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3MEIxMTAvBgNVBAUTKDZEMzhDNUI0Q0Y0QkFEM0Q5ODQ4NzFBNzMyMUE5RDE2 OTYwQkUyNjgwHhcNMjYwMzMwMTUxMDI2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWNhOTI2Mi04Y2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx35YxdAKjGodH9Sv39w6QFO+dbruWRJn57yiGKhpP+BbCtVq+qjjg798cFb2 lioQHwMKOQa/IbxiSex3ROQaPNc2yKWj+JrIq0IYkBP2YDA/ei52NP+Psak4/2tq xk0R5AMM2SDaEjXXO7cfmI+Myb94irHRd18yNTz3gpMZucy3hQElupGFlBcdtwa8 liokI1XKognl0Yw2rQJddTjSBz9daTamXgijyETH1XsyoqYZMK5ImAlTMYgSQMiv AWtUWraL4cq6f+SQYsbZUo++mz2kCWrXfAhaaqEMqRsG0BTKm2+91EaMWvVZhs3S EaNiTRl6NGgcAiIBrLeLKn4E9wIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFLGhnH// nZ2gAg4HClirGYq+6IK4MB8GA1UdIwQYMBaAFG04xbTPS609mEhxpzIanRaWC+Jo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcwQi85N0FGNkRGMDFE NkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJUMllTSEduTWhxZEZwWUw0 bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JUakZ0TTlMclQyWVNIR25NaHFkRnBZTDRtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTE3MEIvOTdBRjZERjAxRDZEMTFFMkExMkQ5RUFFMDhCMDJDRDIvMTgxRDQ2RkNF RTU2MTFGMEIwQUJFQjAwNTQ2RjU2QkMucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAS BAIAATAMAwQByn1gAwQAyx5/MBgEAgACMBIDBwAgAQ3wAAoDBwEgAQ3y7gAwDQYJ KoZIhvcNAQELBQADggEBACayWkNvYkbHWYmRlW7ighAQbeZfQ+XjlgXBufpl30in b8r+y8kSXSQ4ijLEgcBg9xIjTsT/sn9DqBSKFzsubfigjwSuR4pZz0oS1QcFtFzb MMl5q9UKsE4k6B6HDQyG8MDvZyoub8D4YeE8f4/mNRmcCy9jUwT8Kic0Szn9TWbV YkiA4gCe5im5qvCp1gyi6PkVlYM/VSJx7bVbBZY9vyGGLaomJT281AnhjhxnbmU1 bQTQD+5V0KaBWq4V5JgOeeu2BLiCY7GmPwQtDpJmb6euPQpfL+Nxvm9QM+CkZM7S HsiiI79sWhE0rLLRWyzNzTPNtfLRZXhLQ8wOfayddh0= -----END CERTIFICATE-----Generated at Sun Apr 19 12:52:26 2026 by rpki-client