$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/1D98617687B311EFB4972044C4F9AE02.roa File: 1D98617687B311EFB4972044C4F9AE02.roa (raw, json) Hash identifier: xYBSN0t6jgjQfq0Vs3mLR1yw03FEouHpBcT56A28m1A= Subject key identifier: 89:4E:98:44:1E:25:37:58:24:25:D1:D4:C9:86:AB:8D:2E:61:78:8A Certificate issuer: /CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Certificate serial: 01FD Authority key identifier: 3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/1D98617687B311EFB4972044C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:09:43 +0000 ROA not before: Fri 19 Dec 2025 03:22:58 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 137453 IP address blocks: 203.99.144.0/24 maxlen: 24 203.99.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 509 (0x1fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE09C, serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Validity Not Before: Dec 19 03:22:58 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a456b7-f911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:43:03:af:d4:f8:fa:d6:09:55:8e:35:5b:fc: 11:d2:f8:6f:78:f7:24:43:ff:e4:b5:5f:c7:33:9e: 64:dd:db:ee:7e:b3:e5:62:87:be:79:76:d9:7e:2c: 6a:d5:85:49:0b:4a:f0:87:52:49:91:67:48:88:c6: dd:cd:86:6f:6c:d3:f8:1d:c6:3e:68:92:a4:c8:25: 47:17:24:4f:98:6d:3c:3b:21:8c:e5:e0:55:46:b2: 60:ba:46:c0:4d:bb:6d:f6:3b:de:ee:21:de:50:6b: da:6d:a4:04:f6:f5:41:f0:80:76:c3:a0:fb:6c:10: a8:73:d4:33:d9:1c:e0:73:71:17:93:f0:53:e0:e7: 4e:44:f9:2f:3f:68:f2:ce:dd:08:f9:aa:6a:25:2e: c4:2a:c6:b2:37:7e:ca:9d:2c:78:4c:46:46:1b:f9: 3b:c5:78:a6:dc:ac:68:f2:67:a7:1d:98:e0:ac:de: 62:ae:24:68:0c:fc:7d:60:21:80:7c:d9:c4:ce:39: 94:4f:a8:9a:42:62:60:9e:8c:e6:85:ca:e3:fe:c9: 6d:60:16:dd:dd:4d:95:d6:2c:d6:bf:45:04:e8:82: ae:b5:fd:97:70:2e:f0:32:8d:72:19:d9:9c:b7:f2: c0:b4:74:06:37:13:ae:90:b2:61:ad:9a:ec:c1:26: 2a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4E:98:44:1E:25:37:58:24:25:D1:D4:C9:86:AB:8D:2E:61:78:8A X509v3 Authority Key Identifier: keyid:3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/1D98617687B311EFB4972044C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.99.144.0/23 Signature Algorithm: sha256WithRSAEncryption 89:d2:a5:93:7c:e1:d8:3a:8a:53:f0:f6:7c:38:4f:4e:17:d1: 01:62:e7:08:6d:c8:bb:94:93:c9:68:c2:62:20:67:95:96:c7: ef:8b:97:78:c2:a3:a6:df:5a:8a:c1:3b:64:1c:8d:0f:a4:c1: ca:f6:e5:8c:e1:5f:3b:38:b2:c8:47:67:1f:2e:37:45:05:b9: 0d:ba:79:ce:09:5d:73:e1:d3:45:25:d5:72:10:a8:5c:23:d6: 2b:a8:65:b4:a9:24:b9:f3:ed:0d:21:b8:cb:fc:f4:eb:c7:3a: 43:f4:36:31:25:19:5e:69:98:3f:d1:08:b5:6b:97:4f:99:3d: 47:7b:28:29:7a:35:d4:66:99:11:a0:26:31:85:90:16:be:a9: b1:83:2c:69:6d:92:4b:19:63:b4:cc:49:01:58:f5:ad:32:1d: ee:f5:da:96:2f:c8:38:93:81:1e:ea:34:66:e5:2f:32:4d:d2: 91:b1:dc:65:28:01:2b:5d:f2:02:c5:61:b5:6e:cf:68:21:2f: ce:0c:de:d5:63:ed:c5:f0:a1:23:31:5a:61:4d:e9:5d:60:0f: 84:2c:b3:a7:e8:f6:c6:a9:cd:ad:db:7d:ad:28:55:e9:bd:69: f7:11:cf:0f:2f:b3:72:8a:f7:c2:12:c3:21:31:01:5e:bf:69: bf:4d:eb:e4 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwOUMxMTAvBgNVBAUTKDNDNjlCOUI2MDFEMkM5RjJBMzkxNUE2RkZCQ0EzREFE NjJFOTkyNDUwHhcNMjUxMjE5MDMyMjU4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTZiNy1mOTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EMDr9T4+tYJVY41W/wR0vhvePckQ//ktV/HM55k3dvufrPlYoe+eXbZfixq 1YVJC0rwh1JJkWdIiMbdzYZvbNP4HcY+aJKkyCVHFyRPmG08OyGM5eBVRrJgukbA Tbtt9jve7iHeUGvabaQE9vVB8IB2w6D7bBCoc9Qz2Rzgc3EXk/BT4OdORPkvP2jy zt0I+apqJS7EKsayN37KnSx4TEZGG/k7xXim3Kxo8menHZjgrN5iriRoDPx9YCGA fNnEzjmUT6iaQmJgnozmhcrj/sltYBbd3U2V1izWv0UE6IKutf2XcC7wMo1yGdmc t/LAtHQGNxOukLJhrZrswSYqYQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIlOmEQe JTdYJCXR1MmGq40uYXiKMB8GA1UdIwQYMBaAFDxpubYB0snyo5Fab/vKPa1i6ZJF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTA5Qy9FRUY3NjJDMDkw NzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lmS2prVnB2LThvOXJXTHBr a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BHbTV0Z0hTeWZLamtWcHYtOG85cldMcGtrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUUwOUMvRUVGNzYyQzA5MDc1MTFFRTg3RDI2NjgwQzRGOUFFMDIvMUQ5ODYxNzY4 N0IzMTFFRkI0OTcyMDQ0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBy2OQMA0GCSqGSIb3DQEBCwUAA4IBAQCJ0qWTfOHYOopT8PZ8OE9O F9EBYucIbci7lJPJaMJiIGeVlsfvi5d4wqOm31qKwTtkHI0PpMHK9uWM4V87OLLI R2cfLjdFBbkNunnOCV1z4dNFJdVyEKhcI9YrqGW0qSS58+0NIbjL/PTrxzpD9DYx JRleaZg/0Qi1a5dPmT1HeygpejXUZpkRoCYxhZAWvqmxgyxpbZJLGWO0zEkBWPWt Mh3u9dqWL8g4k4Ee6jRm5S8yTdKRsdxlKAErXfICxWG1bs9oIS/ODN7VY+3F8KEj MVphTeldYA+ELLOn6PbGqc2t232tKFXpvWn3Ec8PL7NyivfCEsMhMQFev2m/Tevk -----END CERTIFICATE-----Generated at Mon Mar 2 07:41:22 2026 by rpki-client