$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/4D336D62B53F11F09557A379C4F9AE02.roa File: 4D336D62B53F11F09557A379C4F9AE02.roa (raw, json) Hash identifier: 3PGVSrX004IWe3rW1t0BQuyAOTfpt6sQECbNNWBdQuw= Subject key identifier: 6D:74:C7:66:73:33:78:96:22:AB:08:29:A0:1C:A7:2B:D4:02:3C:D0 Certificate issuer: /CN=A91EA623/serialNumber=6CC3860DA987783A50055A51939830F7CD1C826B Certificate serial: 05C0 Authority key identifier: 6C:C3:86:0D:A9:87:78:3A:50:05:5A:51:93:98:30:F7:CD:1C:82:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/4D336D62B53F11F09557A379C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:48:24 +0000 ROA not before: Wed 28 Jan 2026 23:19:32 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 9918 IP address blocks: 202.66.206.0/24 maxlen: 24 202.66.207.0/24 maxlen: 24 202.76.86.0/24 maxlen: 24 202.80.14.0/24 maxlen: 24 202.80.15.0/24 maxlen: 24 202.88.20.0/24 maxlen: 24 202.88.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.crl rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:51:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1472 (0x5c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA623, serialNumber=6CC3860DA987783A50055A51939830F7CD1C826B Validity Not Before: Jan 28 23:19:32 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a47be8-4b24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f1:4e:95:51:f3:43:1c:62:5c:c6:5d:58:48: 4c:04:2b:1a:71:1b:19:eb:cb:3d:94:37:cd:a3:f6: 7c:5b:4b:71:c1:03:af:21:a0:ba:5f:f1:0f:da:06: 0e:55:09:e6:7f:0c:53:b4:32:a3:82:98:aa:12:3c: 4b:75:f9:59:5c:67:f6:1c:0f:59:ce:e4:2d:c4:12: e0:82:6c:7f:49:03:f1:03:b7:ca:83:6d:19:3d:82: c4:e2:32:9e:b8:3c:26:d0:11:d9:b1:96:0d:33:bd: 43:31:fe:4a:68:db:02:b5:df:a4:46:cb:9f:f4:37: 41:fe:4f:e9:9e:bc:a3:75:9f:f4:ac:8b:bc:bb:25: d3:37:b8:95:e9:a9:5b:f1:22:05:69:ba:be:ef:9b: a5:f6:20:d2:98:ea:4e:9c:bc:00:4a:de:f5:1d:1b: e4:54:51:fe:78:b7:d3:14:c9:43:6a:31:c9:1f:dc: b0:45:40:37:dd:35:aa:6c:d8:e8:12:b6:ce:91:1f: b2:a4:d6:85:9c:b0:ba:11:0f:22:ae:bc:fb:b8:9e: e0:2b:1b:b8:0e:ce:7b:e3:c9:01:b4:b9:4f:ae:c1: 45:52:c1:fd:dd:1a:d5:a1:c1:a4:ae:ab:a6:3d:2e: 9a:70:e7:77:57:a1:8c:18:83:a3:c8:82:eb:81:7f: 4d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:74:C7:66:73:33:78:96:22:AB:08:29:A0:1C:A7:2B:D4:02:3C:D0 X509v3 Authority Key Identifier: keyid:6C:C3:86:0D:A9:87:78:3A:50:05:5A:51:93:98:30:F7:CD:1C:82:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/4D336D62B53F11F09557A379C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.66.206.0/23 202.76.86.0/24 202.80.14.0/23 202.88.20.0/24 202.88.22.0/24 Signature Algorithm: sha256WithRSAEncryption 27:e1:b6:c8:27:67:13:c0:08:d5:4b:57:f7:c4:8d:1d:e3:7d: 98:21:3f:34:73:37:74:4a:18:29:9d:63:04:73:87:25:47:89: 40:58:2e:33:16:57:1e:43:66:5b:48:69:41:b3:ac:9f:5a:5a: 7a:8d:c9:88:7c:6c:b2:70:24:21:61:2a:8c:dd:ce:4d:13:b5: 21:fb:da:de:ef:93:56:0f:1c:0e:9f:c0:4d:b9:a7:14:cb:b1: 57:24:bf:fd:ed:c9:36:35:eb:57:60:42:19:7f:e7:33:57:1a: 26:03:81:11:d9:da:9c:9e:7c:4c:cf:92:1c:64:df:c0:99:6f: 7e:a9:15:a4:0c:91:87:b7:3f:15:4b:20:b9:1d:73:c5:96:16: f0:c9:20:b8:75:97:4b:9e:a8:2f:cb:1f:4e:d5:04:16:a5:bc: 29:6f:89:ba:5c:16:f3:15:2b:a8:27:67:00:03:9b:ea:91:47: 34:a5:69:85:63:ea:d7:20:18:30:99:48:a7:ed:c6:5d:ca:6b: b9:a8:d7:af:7f:a3:ab:10:10:c8:34:05:e5:75:b7:d9:73:7e: 4b:3c:83:f7:5f:dc:1e:09:f0:c6:83:21:6d:0c:41:03:08:10: d1:5b:5f:be:c6:a2:b3:d8:95:15:3e:e8:eb:02:99:2d:bb:9c: 4d:68:77:d0 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICBcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE2MjMxMTAvBgNVBAUTKDZDQzM4NjBEQTk4Nzc4M0E1MDA1NUE1MTkzOTgzMEY3 Q0QxQzgyNkIwHhcNMjYwMTI4MjMxOTMyWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2JlOC00YjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPFOlVHzQxxiXMZdWEhMBCsacRsZ68s9lDfNo/Z8W0txwQOvIaC6X/EP2gYO VQnmfwxTtDKjgpiqEjxLdflZXGf2HA9ZzuQtxBLggmx/SQPxA7fKg20ZPYLE4jKe uDwm0BHZsZYNM71DMf5KaNsCtd+kRsuf9DdB/k/pnryjdZ/0rIu8uyXTN7iV6alb 8SIFabq+75ul9iDSmOpOnLwASt71HRvkVFH+eLfTFMlDajHJH9ywRUA33TWqbNjo ErbOkR+ypNaFnLC6EQ8irrz7uJ7gKxu4Ds5748kBtLlPrsFFUsH93RrVocGkrqum PS6acOd3V6GMGIOjyILrgX9NmQIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFG10x2Zz M3iWIqsIKaAcpyvUAjzQMB8GA1UdIwQYMBaAFGzDhg2ph3g6UAVaUZOYMPfNHIJr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTYyMy9ERDZCNzUyODA2 MEMxMUVDQUY2NzUwNDNDNEY5QUUwMi9iTU9HRGFtSGVEcFFCVnBSazVndzk4MGNn bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JNT0dEYW1IZURwUUJWcFJrNWd3OTgwY2dtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUE2MjMvREQ2Qjc1MjgwNjBDMTFFQ0FGNjc1MDQzQzRGOUFFMDIvNEQzMzZENjJC NTNGMTFGMDk1NTdBMzc5QzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQBykLOAwQAykxWAwQBylAOAwQAylgUAwQAylgWMA0GCSqGSIb3DQEB CwUAA4IBAQAn4bbIJ2cTwAjVS1f3xI0d432YIT80czd0ShgpnWMEc4clR4lAWC4z FlceQ2ZbSGlBs6yfWlp6jcmIfGyycCQhYSqM3c5NE7Uh+9re75NWDxwOn8BNuacU y7FXJL/97ck2NetXYEIZf+czVxomA4ER2dqcnnxMz5IcZN/AmW9+qRWkDJGHtz8V SyC5HXPFlhbwySC4dZdLnqgvyx9O1QQWpbwpb4m6XBbzFSuoJ2cAA5vqkUc0pWmF Y+rXIBgwmUin7cZdymu5qNevf6OrEBDINAXldbfZc35LPIP3X9weCfDGgyFtDEED CBDRW1++xqKz2JUVPujrApktu5xNaHfQ -----END CERTIFICATE-----Generated at Mon Mar 2 03:50:53 2026 by rpki-client