$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/A3E08ED6825711EFB7585B6FC4F9AE02.roa File: A3E08ED6825711EFB7585B6FC4F9AE02.roa (raw, json) Hash identifier: 2slykkHCwPvbeGF4Zx3D9JQfzEnRWOMcVvw7gilVFqk= Subject key identifier: 5C:07:BC:56:D1:E4:06:21:2F:CC:65:33:3D:CC:F2:72:84:FA:CC:6E Certificate issuer: /CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Certificate serial: 01FF Authority key identifier: 3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/A3E08ED6825711EFB7585B6FC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:09:45 +0000 ROA not before: Fri 19 Dec 2025 03:23:01 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 151987 IP address blocks: 203.99.144.0/24 maxlen: 24 2001:df3:18c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE09C, serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Validity Not Before: Dec 19 03:23:01 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a456b9-1c6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1b:eb:5c:12:c3:df:2e:c5:be:b7:58:d4:48: 64:5f:d6:52:61:59:3c:9d:81:bc:58:96:64:39:0b: 58:35:98:1e:c0:c8:c4:db:6b:78:90:16:97:f0:6e: b9:bb:16:28:85:f8:27:8d:4a:24:50:c3:0b:33:bb: f0:0d:bd:d0:4a:b6:c7:5a:07:a1:86:57:5a:32:84: 3f:96:3a:96:83:10:e0:6a:23:42:8a:fb:13:3c:e4: 1b:a7:08:b8:ab:52:16:18:6d:44:e3:33:d5:b2:fc: 28:fb:dd:f5:38:6e:88:ee:d3:52:29:95:5e:ed:43: 1e:a8:36:de:00:70:02:14:69:f6:f4:e9:e1:c2:1f: ce:46:b2:74:70:f5:bf:c1:99:18:fb:8b:16:cf:5a: f8:28:91:1b:78:a0:09:e6:a7:bc:cc:68:74:f1:48: 19:4d:b4:ac:be:95:30:ef:d3:cb:38:fb:06:d3:26: 95:44:07:b2:9f:c5:61:d0:a4:c2:e7:59:07:c3:ed: c3:77:46:78:91:87:ce:69:01:05:58:5b:45:7f:b6: bb:00:81:fa:66:76:36:fd:a4:29:4d:91:ef:25:49: 02:fc:3e:4a:4b:5b:1c:38:95:4a:cc:81:55:23:9e: 70:f6:95:78:86:25:27:b6:a8:63:18:14:5a:a6:a8: 49:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:07:BC:56:D1:E4:06:21:2F:CC:65:33:3D:CC:F2:72:84:FA:CC:6E X509v3 Authority Key Identifier: keyid:3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/A3E08ED6825711EFB7585B6FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.99.144.0/24 IPv6: 2001:df3:18c0::/48 Signature Algorithm: sha256WithRSAEncryption 32:67:5d:f0:67:25:37:19:a2:02:ee:37:65:7c:b9:01:4e:ab: fb:d4:db:04:0b:b9:96:21:a9:ea:6e:33:e0:46:13:91:30:e3: b9:4e:cb:57:2c:af:a2:b4:90:be:29:25:fd:17:9a:5d:fe:dc: 15:38:aa:36:c1:0f:c7:c4:9b:fd:f4:1b:f9:41:d5:70:6f:1f: 0b:7c:7c:73:8b:d1:85:a5:ed:ee:44:d7:42:2b:e3:40:c0:17: 5e:75:dc:b6:78:62:77:a0:7e:10:6e:e3:bb:86:7a:42:99:6b: 17:e4:54:5f:3d:dd:3e:d8:59:95:57:1a:57:21:cf:29:bf:e5: ab:8d:ff:bf:0f:2d:c9:4e:30:8b:63:a2:e9:0c:48:b7:a2:3e: 3e:af:62:0b:f5:61:4e:15:0d:f5:5e:1f:af:e4:5b:e3:7a:4c: a8:4a:69:26:99:13:dd:38:ee:6e:1a:21:7a:79:61:0d:e7:f9: 30:2a:bc:1e:16:db:71:09:da:e9:f3:97:23:ac:9c:ba:a0:ef: b4:e1:63:20:7d:df:af:68:1c:20:3b:36:b8:8b:09:1f:50:b5: 1b:d9:03:a4:80:86:13:14:c7:2d:5e:41:c1:9f:d4:a6:5e:39: 0e:87:fe:62:14:de:46:0b:8c:da:f9:54:2e:7e:60:99:ca:32: 59:0d:9b:c9 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwOUMxMTAvBgNVBAUTKDNDNjlCOUI2MDFEMkM5RjJBMzkxNUE2RkZCQ0EzREFE NjJFOTkyNDUwHhcNMjUxMjE5MDMyMzAxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTZiOS0xYzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4RvrXBLD3y7FvrdY1EhkX9ZSYVk8nYG8WJZkOQtYNZgewMjE22t4kBaX8G65 uxYohfgnjUokUMMLM7vwDb3QSrbHWgehhldaMoQ/ljqWgxDgaiNCivsTPOQbpwi4 q1IWGG1E4zPVsvwo+931OG6I7tNSKZVe7UMeqDbeAHACFGn29Onhwh/ORrJ0cPW/ wZkY+4sWz1r4KJEbeKAJ5qe8zGh08UgZTbSsvpUw79PLOPsG0yaVRAeyn8Vh0KTC 51kHw+3Dd0Z4kYfOaQEFWFtFf7a7AIH6ZnY2/aQpTZHvJUkC/D5KS1scOJVKzIFV I55w9pV4hiUntqhjGBRapqhJmQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFFwHvFbR 5AYhL8xlMz3M8nKE+sxuMB8GA1UdIwQYMBaAFDxpubYB0snyo5Fab/vKPa1i6ZJF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTA5Qy9FRUY3NjJDMDkw NzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lmS2prVnB2LThvOXJXTHBr a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BHbTV0Z0hTeWZLamtWcHYtOG85cldMcGtrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUUwOUMvRUVGNzYyQzA5MDc1MTFFRTg3RDI2NjgwQzRGOUFFMDIvQTNFMDhFRDY4 MjU3MTFFRkI3NTg1QjZGQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAy2OQMA8EAgACMAkDBwAgAQ3zGMAwDQYJKoZIhvcNAQELBQADggEB ADJnXfBnJTcZogLuN2V8uQFOq/vU2wQLuZYhqepuM+BGE5Ew47lOy1csr6K0kL4p Jf0Xml3+3BU4qjbBD8fEm/30G/lB1XBvHwt8fHOL0YWl7e5E10Ir40DAF1513LZ4 YnegfhBu47uGekKZaxfkVF893T7YWZVXGlchzym/5auN/78PLclOMItjoukMSLei Pj6vYgv1YU4VDfVeH6/kW+N6TKhKaSaZE9047m4aIXp5YQ3n+TAqvB4W23EJ2unz lyOsnLqg77ThYyB9369oHCA7NriLCR9QtRvZA6SAhhMUxy1eQcGf1KZeOQ6H/mIU 3kYLjNr5VC5+YJnKMlkNm8k= -----END CERTIFICATE-----Generated at Mon Mar 2 17:05:00 2026 by rpki-client