$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/65D706B213FA11EB92A6FE61C4F9AE02.roa File: 65D706B213FA11EB92A6FE61C4F9AE02.roa (raw, json) Hash identifier: uOMbohBjqYkrJACqTf93OXW7s4M6jLEwG//Jh6twRk0= Subject key identifier: A1:7B:7E:1C:B8:88:10:E7:2B:4C:25:CE:D5:F1:B1:C5:06:38:E2:E8 Certificate issuer: /CN=A91ECC52/serialNumber=4B8567FB387BFD74076B5097700132C7AC86E620 Certificate serial: 0811 Authority key identifier: 4B:85:67:FB:38:7B:FD:74:07:6B:50:97:70:01:32:C7:AC:86:E6:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/65D706B213FA11EB92A6FE61C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:08:25 +0000 ROA not before: Tue 18 Nov 2025 20:41:57 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 10143 IP address blocks: 203.21.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.crl rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:39:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2065 (0x811) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECC52, serialNumber=4B8567FB387BFD74076B5097700132C7AC86E620 Validity Not Before: Nov 18 20:41:57 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a44859-fcb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4b:bc:82:25:82:16:8f:40:8a:25:ab:d9:17: 5b:46:36:27:fe:a1:c2:2e:9e:8c:ef:f7:4d:b9:30: b2:26:59:c5:bd:68:c1:65:e8:95:c0:39:5d:8e:94: 0a:13:eb:08:db:49:5f:db:af:33:4c:d7:70:58:42: 62:ef:f2:7e:0c:5f:70:9d:c3:2c:ae:7f:1a:bb:da: 89:f0:5a:34:f6:0d:5f:8f:2f:cc:20:23:3b:5d:f9: 22:2c:a5:d0:ba:91:57:ec:b3:4a:d0:cb:d8:4f:49: 0f:76:92:65:ef:1e:0f:d0:59:58:45:81:71:ac:4a: 99:ea:e0:8b:f3:38:7c:e0:c1:89:45:65:af:c1:a0: 1e:52:ad:73:fd:5d:07:70:e0:77:75:79:db:21:d7: 83:02:48:88:37:b6:09:38:fa:f9:48:50:b6:9d:78: 5d:c6:f4:0d:62:43:58:bf:c7:dd:a2:42:12:6a:15: ce:6a:a5:7f:1a:05:1a:73:75:81:1a:23:5a:97:cf: a4:07:41:cc:42:32:8f:aa:c0:d4:44:b4:e2:17:2f: 43:07:59:9d:13:04:4b:10:67:0a:d0:0d:b8:5f:29: ed:54:31:ee:0f:1b:07:8c:5d:fd:e1:44:b2:f8:71: 0e:8e:de:75:60:e3:74:9c:23:eb:9d:3e:08:7e:62: 74:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7B:7E:1C:B8:88:10:E7:2B:4C:25:CE:D5:F1:B1:C5:06:38:E2:E8 X509v3 Authority Key Identifier: keyid:4B:85:67:FB:38:7B:FD:74:07:6B:50:97:70:01:32:C7:AC:86:E6:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/65D706B213FA11EB92A6FE61C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.21.207.0/24 Signature Algorithm: sha256WithRSAEncryption 86:57:c9:4a:92:ef:36:62:61:78:2b:0c:d9:b3:10:46:a3:21: e8:c2:82:bb:25:3b:35:74:4b:42:50:3b:0c:a9:35:be:43:b0: b0:e4:6d:a5:ba:da:90:48:13:f7:a8:85:79:45:b5:5d:b0:15: 0d:f2:4e:47:d2:a1:22:33:5e:09:a1:27:e6:db:93:70:e3:91: 97:a4:79:4b:c1:97:6e:a4:9e:8c:b3:27:48:75:7a:00:f3:6b: 8e:57:17:98:d0:60:16:3a:a4:7e:00:bd:35:1f:e9:9a:86:97: 55:bd:9f:cd:31:80:d9:3a:42:c4:93:70:d6:6f:26:1f:e9:bb: fe:97:6c:aa:07:54:a9:d2:1f:40:f9:71:0f:e6:73:81:2b:2d: 6d:76:42:43:61:de:95:f8:ce:86:5f:09:f0:70:ef:2b:40:b9: 8d:78:a7:2a:ac:aa:2a:0a:b6:d0:52:d6:07:e1:ae:27:43:be: ef:ef:81:0b:5d:84:95:95:2b:50:82:be:8a:e7:fb:28:9f:4d: 63:fc:8e:ee:da:d2:63:07:5d:76:2f:81:23:46:e2:10:d3:4a: e3:31:3c:3c:a5:28:0b:c8:70:30:05:5d:81:ee:b0:97:ee:0c: 0f:3c:49:50:86:31:0b:1c:d3:a7:09:d9:dd:e7:f2:f4:38:6f: cf:71:c2:8e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNDNTIxMTAvBgNVBAUTKDRCODU2N0ZCMzg3QkZENzQwNzZCNTA5NzcwMDEzMkM3 QUM4NkU2MjAwHhcNMjUxMTE4MjA0MTU3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDg1OS1mY2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUu8giWCFo9AiiWr2RdbRjYn/qHCLp6M7/dNuTCyJlnFvWjBZeiVwDldjpQK E+sI20lf268zTNdwWEJi7/J+DF9wncMsrn8au9qJ8Fo09g1fjy/MICM7XfkiLKXQ upFX7LNK0MvYT0kPdpJl7x4P0FlYRYFxrEqZ6uCL8zh84MGJRWWvwaAeUq1z/V0H cOB3dXnbIdeDAkiIN7YJOPr5SFC2nXhdxvQNYkNYv8fdokISahXOaqV/GgUac3WB GiNal8+kB0HMQjKPqsDURLTiFy9DB1mdEwRLEGcK0A24XyntVDHuDxsHjF394USy +HEOjt51YON0nCPrnT4IfmJ01wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKF7fhy4 iBDnK0wlztXxscUGOOLoMB8GA1UdIwQYMBaAFEuFZ/s4e/10B2tQl3ABMseshuYg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0M1Mi82NTI4MzZFODEz OEExMUVCOTdBRUI0MjBDNEY5QUUwMi9TNFZuLXpoN19YUUhhMUNYY0FFeXg2eUc1 aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M0Vm4temg3X1hRSGExQ1hjQUV5eDZ5RzVpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUNDNTIvNjUyODM2RTgxMzhBMTFFQjk3QUVCNDIwQzRGOUFFMDIvNjVENzA2QjIx M0ZBMTFFQjkyQTZGRTYxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyxXPMA0GCSqGSIb3DQEBCwUAA4IBAQCGV8lKku82YmF4KwzZsxBG oyHowoK7JTs1dEtCUDsMqTW+Q7Cw5G2lutqQSBP3qIV5RbVdsBUN8k5H0qEiM14J oSfm25Nw45GXpHlLwZdupJ6MsydIdXoA82uOVxeY0GAWOqR+AL01H+mahpdVvZ/N MYDZOkLEk3DWbyYf6bv+l2yqB1Sp0h9A+XEP5nOBKy1tdkJDYd6V+M6GXwnwcO8r QLmNeKcqrKoqCrbQUtYH4a4nQ77v74ELXYSVlStQgr6K5/son01j/I7u2tJjB112 L4EjRuIQ00rjMTw8pSgLyHAwBV2B7rCX7gwPPElQhjELHNOnCdnd5/L0OG/PccKO -----END CERTIFICATE-----Generated at Mon Mar 2 15:51:38 2026 by rpki-client