$ rpki-client -vvf rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/59A00A402C7111EFA821586AC4F9AE02.roa File: 59A00A402C7111EFA821586AC4F9AE02.roa (raw, json) Hash identifier: l3+rbubcPMHtKSMQDJv+EJ3SUoMsXD+EmSrxxE3voR8= Subject key identifier: 53:47:83:30:6B:D2:A1:A7:04:56:91:43:0C:99:C9:F8:A6:C2:9F:43 Certificate issuer: /CN=A91E37D1/serialNumber=C5BD8A50CAD5A05EFE577C49C4714E5D9ABB7FEF Certificate serial: 021C Authority key identifier: C5:BD:8A:50:CA:D5:A0:5E:FE:57:7C:49:C4:71:4E:5D:9A:BB:7F:EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/59A00A402C7111EFA821586AC4F9AE02.roa Signing time: Sun 01 Mar 2026 10:59:15 +0000 ROA not before: Fri 05 Dec 2025 01:10:49 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 131256 IP address blocks: 202.137.228.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:22:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 540 (0x21c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E37D1, serialNumber=C5BD8A50CAD5A05EFE577C49C4714E5D9ABB7FEF Validity Not Before: Dec 5 01:10:49 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a41c03-fb79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7a:7a:ca:9b:29:87:b6:f0:e3:7b:32:ae:32: 2f:a8:8d:82:80:c0:cf:9f:ba:05:a8:b6:1c:a6:dd: 85:a1:b5:28:26:81:61:46:2c:8a:8d:3e:76:d4:7b: 87:0f:02:49:f3:fe:8c:4f:ba:83:85:5e:0d:16:d4: 61:95:cc:a9:07:ed:a6:fa:c6:c3:68:ff:ea:c0:c0: 86:a8:8e:0a:43:0c:28:85:52:c9:c5:ad:56:21:d6: 0c:28:ff:a0:d2:fc:cf:6d:e0:26:f8:9f:a5:51:3d: ac:ee:e0:67:b2:13:29:d0:96:d5:78:88:7f:f7:fb: 7a:5d:73:fb:7d:c6:93:66:91:45:86:53:22:6d:98: 43:2f:d2:d6:c9:d5:e4:dd:f9:ae:b8:c6:9a:48:f2: dd:c7:bc:e2:08:ba:0a:06:bb:a9:d4:41:2a:52:79: c4:69:82:ee:d9:59:35:3f:ae:c3:41:d8:32:e8:10: 7e:24:e0:3b:06:82:9f:b4:18:41:69:4a:cd:79:e0: f5:e0:90:1a:5c:06:dc:e2:80:5e:9e:d3:e3:5a:93: e6:cc:40:0d:ef:1e:8c:53:22:31:a2:3b:a8:b1:e8: 40:e0:35:da:20:0b:c7:3b:e2:d1:57:16:3e:7e:df: 99:ef:c7:07:4c:d2:4b:51:18:ec:c8:5a:d9:fc:c5: ff:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:47:83:30:6B:D2:A1:A7:04:56:91:43:0C:99:C9:F8:A6:C2:9F:43 X509v3 Authority Key Identifier: keyid:C5:BD:8A:50:CA:D5:A0:5E:FE:57:7C:49:C4:71:4E:5D:9A:BB:7F:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/59A00A402C7111EFA821586AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.137.228.0/23 Signature Algorithm: sha256WithRSAEncryption 71:a2:5a:b6:88:bb:13:7d:64:83:79:ff:df:b2:39:59:c0:db: e3:d6:4b:d6:a2:9c:07:07:6f:51:31:6c:04:4e:18:e3:ed:d2: 24:bc:b6:fe:2f:69:7b:f3:fa:c1:e4:de:f0:64:e9:37:b3:a4: e2:7d:e1:ce:e4:2d:f9:f2:71:b4:67:34:8b:d2:05:f2:62:03: bc:b6:a3:ac:72:93:ed:66:ad:20:da:25:1e:2e:b6:e6:6f:ba: 67:87:1a:57:e7:5b:cc:6e:f7:77:8a:f6:11:de:07:12:35:b6: 61:fb:2b:20:5c:c8:b2:0a:30:4e:80:ab:23:fd:18:4e:03:63: 6c:16:e8:31:c1:67:80:78:a5:df:97:40:95:3e:41:cd:4f:57: 75:e8:d3:35:8f:5b:52:18:c8:3f:c4:7b:f5:65:02:51:e1:37: 9e:9f:37:34:1c:46:bc:26:17:7f:ee:7f:fe:40:74:bc:03:99: 62:5f:43:cc:13:f3:2d:9d:c8:f4:01:14:5f:98:dd:77:d8:3d: 0e:bb:d5:f9:5b:5f:ea:74:74:35:17:c5:13:11:7b:3d:68:cd: 0d:6b:27:e3:0b:a7:71:f4:6f:14:47:81:22:19:49:ab:3e:d0: fb:ce:ba:37:f4:43:36:cc:6b:25:1a:52:a8:ec:f7:5b:8d:1f: b8:7b:8f:a9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3RDExMTAvBgNVBAUTKEM1QkQ4QTUwQ0FENUEwNUVGRTU3N0M0OUM0NzE0RTVE OUFCQjdGRUYwHhcNMjUxMjA1MDExMDQ5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MWMwMy1mYjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXp6ypsph7bw43syrjIvqI2CgMDPn7oFqLYcpt2FobUoJoFhRiyKjT521HuH DwJJ8/6MT7qDhV4NFtRhlcypB+2m+sbDaP/qwMCGqI4KQwwohVLJxa1WIdYMKP+g 0vzPbeAm+J+lUT2s7uBnshMp0JbVeIh/9/t6XXP7fcaTZpFFhlMibZhDL9LWydXk 3fmuuMaaSPLdx7ziCLoKBrup1EEqUnnEaYLu2Vk1P67DQdgy6BB+JOA7BoKftBhB aUrNeeD14JAaXAbc4oBentPjWpPmzEAN7x6MUyIxojuosehA4DXaIAvHO+LRVxY+ ft+Z78cHTNJLURjsyFrZ/MX/wwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFNHgzBr 0qGnBFaRQwyZyfimwp9DMB8GA1UdIwQYMBaAFMW9ilDK1aBe/ld8ScRxTl2au3/v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzdEMS8wNUE5OEYwRUUz QjMxMUVEQjJGNERBMjhDNEY5QUUwMi94YjJLVU1yVm9GNy1WM3hKeEhGT1hacTdm LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hiMktVTXJWb0Y3LVYzeEp4SEZPWFpxN2YtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTM3RDEvMDVBOThGMEVFM0IzMTFFREIyRjREQTI4QzRGOUFFMDIvNTlBMDBBNDAy QzcxMTFFRkE4MjE1ODZBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQByonkMA0GCSqGSIb3DQEBCwUAA4IBAQBxolq2iLsTfWSDef/fsjlZ wNvj1kvWopwHB29RMWwEThjj7dIkvLb+L2l78/rB5N7wZOk3s6TifeHO5C358nG0 ZzSL0gXyYgO8tqOscpPtZq0g2iUeLrbmb7pnhxpX51vMbvd3ivYR3gcSNbZh+ysg XMiyCjBOgKsj/RhOA2NsFugxwWeAeKXfl0CVPkHNT1d16NM1j1tSGMg/xHv1ZQJR 4Teenzc0HEa8Jhd/7n/+QHS8A5liX0PME/Mtncj0ARRfmN132D0Ou9X5W1/qdHQ1 F8UTEXs9aM0NayfjC6dx9G8UR4EiGUmrPtD7zro39EM2zGslGlKo7PdbjR+4e4+p -----END CERTIFICATE-----Generated at Mon Mar 2 07:39:47 2026 by rpki-client