$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/D1A4CFBA4FBE11EF97812B80C4F9AE02.roa File: D1A4CFBA4FBE11EF97812B80C4F9AE02.roa (raw, json) Hash identifier: T3P2KbsRUwY1QGTDHbutS0f4RUowKxvv6x6nUewTBmA= Subject key identifier: D1:96:E8:83:D8:13:02:1C:CF:56:90:A1:55:BB:0E:5B:32:A6:1E:D9 Certificate issuer: /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Certificate serial: 03E8 Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/D1A4CFBA4FBE11EF97812B80C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:26:20 +0000 ROA not before: Thu 05 Jun 2025 01:08:20 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 7545 IP address blocks: 202.12.90.0/24 maxlen: 24 203.14.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:36:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1000 (0x3e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E91BC, serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Validity Not Before: Jun 5 01:08:20 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a44c8c-999c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fd:20:bb:45:07:62:3c:1f:68:1b:6f:56:94: 18:3d:ca:41:3b:00:f0:8d:2c:a3:16:15:47:39:b3: f2:1d:f7:be:65:7a:f3:21:13:89:7f:0c:24:4c:ce: 86:d7:9c:67:1b:ba:a1:c1:7b:95:b1:33:8b:b3:41: b2:ba:c1:81:75:0c:cf:d8:a9:9f:59:71:30:0c:8d: 15:ef:9c:01:a2:5d:2b:47:0c:89:93:8a:0a:00:e8: b2:f0:f5:ce:03:98:75:95:f1:af:fb:94:d5:d4:aa: 05:84:4c:f6:d6:90:fb:3e:cc:37:cd:5a:b1:19:59: 32:f1:f9:e7:26:10:36:0c:01:8d:c2:dd:8d:ae:6d: 1b:e8:e0:53:56:8b:f5:3b:66:63:69:c4:42:a5:13: 1d:68:b4:da:21:da:f4:e7:72:21:ee:8a:dd:14:39: 25:29:a9:7d:0e:e9:0e:92:a7:4a:7a:a7:18:c5:9f: dd:28:cf:6d:9f:70:fe:d7:62:87:04:41:ac:63:e7: ae:84:a8:4e:67:1d:e9:5f:9d:ad:4b:15:9c:42:ba: 2b:65:91:ef:48:af:cf:f9:6e:fe:5b:af:a6:5a:2d: 07:b3:cb:42:e2:df:8f:93:d0:b1:5e:c8:2d:05:79: 30:f8:e4:37:df:28:07:2d:d7:11:c1:2e:97:f7:2f: cc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:96:E8:83:D8:13:02:1C:CF:56:90:A1:55:BB:0E:5B:32:A6:1E:D9 X509v3 Authority Key Identifier: keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/D1A4CFBA4FBE11EF97812B80C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.12.90.0/24 203.14.156.0/23 Signature Algorithm: sha256WithRSAEncryption 32:92:7b:d8:da:64:ff:84:a0:75:89:11:0e:3e:a3:ce:e2:e5: ef:84:f2:61:2c:4d:b2:89:46:8e:7f:01:83:c2:be:c4:31:16: 18:82:fa:83:56:9b:33:b4:a6:12:7f:f5:d5:ad:1f:1b:59:9e: 4b:a8:b7:9a:a4:2b:83:fa:e4:22:58:a2:b2:f1:34:5a:c8:a5: 6d:06:26:2b:29:97:c4:55:6e:b7:c3:ad:19:27:14:5a:92:81: ae:a1:8c:85:90:fc:f8:5f:da:43:3e:f4:e8:9c:b6:ce:90:ff: 6c:1f:3f:51:88:2c:77:ef:88:86:18:fc:fd:d0:08:6e:67:25: f4:2b:bf:d8:e7:d8:c7:90:11:d3:42:fb:60:90:c6:94:72:d2: 93:b8:3b:c4:51:f7:73:a7:b1:29:af:42:02:89:61:28:3e:a4: 35:e3:1c:98:fa:f2:43:c1:87:77:f9:00:57:bf:98:80:c3:81: f4:74:d8:8f:da:7f:42:64:65:b5:af:2c:93:fe:31:40:78:48: 57:d1:df:fc:9b:4d:46:55:6c:19:7b:96:48:41:ca:33:f7:9c: 3b:cc:40:09:1e:94:ff:be:53:c4:a8:0e:a4:13:0b:87:da:d1: aa:7d:81:d8:bf:8f:42:df:c0:15:6b:a7:56:d6:18:28:2d:28: 6d:dc:b9:3c -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICA+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkxQkMxMTAvBgNVBAUTKDZENUQ1MEU4OEI5RDY1RThBRkRBMjhDMkNFQTYxNTAx MjcwMzg2MDgwHhcNMjUwNjA1MDEwODIwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGM4Yy05OTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlf0gu0UHYjwfaBtvVpQYPcpBOwDwjSyjFhVHObPyHfe+ZXrzIROJfwwkTM6G 15xnG7qhwXuVsTOLs0GyusGBdQzP2KmfWXEwDI0V75wBol0rRwyJk4oKAOiy8PXO A5h1lfGv+5TV1KoFhEz21pD7Psw3zVqxGVky8fnnJhA2DAGNwt2Nrm0b6OBTVov1 O2ZjacRCpRMdaLTaIdr053Ih7ordFDklKal9DukOkqdKeqcYxZ/dKM9tn3D+12KH BEGsY+euhKhOZx3pX52tSxWcQrorZZHvSK/P+W7+W6+mWi0Hs8tC4t+Pk9CxXsgt BXkw+OQ33ygHLdcRwS6X9y/M8QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFNGW6IPY EwIcz1aQoVW7Dlsyph7ZMB8GA1UdIwQYMBaAFG1dUOiLnWXor9oows6mFQEnA4YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTFCQy9BRTQ0RDI0QURC RTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFplaXYyaWpDenFZVkFTY0Ro Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JWMVE2SXVkWmVpdjJpakN6cVlWQVNjRGhnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTkxQkMvQUU0NEQyNEFEQkU5MTFFQzk1MTEwNTE1QzRGOUFFMDIvRDFBNENGQkE0 RkJFMTFFRjk3ODEyQjgwQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAygxaAwQByw6cMA0GCSqGSIb3DQEBCwUAA4IBAQAyknvY2mT/hKB1 iREOPqPO4uXvhPJhLE2yiUaOfwGDwr7EMRYYgvqDVpsztKYSf/XVrR8bWZ5LqLea pCuD+uQiWKKy8TRayKVtBiYrKZfEVW63w60ZJxRakoGuoYyFkPz4X9pDPvTonLbO kP9sHz9RiCx374iGGPz90AhuZyX0K7/Y59jHkBHTQvtgkMaUctKTuDvEUfdzp7Ep r0ICiWEoPqQ14xyY+vJDwYd3+QBXv5iAw4H0dNiP2n9CZGW1ryyT/jFAeEhX0d/8 m01GVWwZe5ZIQcoz95w7zEAJHpT/vlPEqA6kEwuH2tGqfYHYv49C38AVa6dW1hgo LSht3Lk8 -----END CERTIFICATE-----Generated at Mon Mar 2 04:08:50 2026 by rpki-client