$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/20C4803669A011EA9055BD0EC4F9AE02.roa File: 20C4803669A011EA9055BD0EC4F9AE02.roa (raw, json) Hash identifier: cZ+rsKEwY27r1nNBdSw0EFhAO0NUVYDXLIIfTM0BpuM= Subject key identifier: F5:C5:84:ED:9B:B5:F9:9B:97:4E:27:7D:63:C8:23:94:C0:F9:4D:4A Certificate issuer: /CN=A91F0FE2/serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8 Certificate serial: 1CE3 Authority key identifier: 11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/20C4803669A011EA9055BD0EC4F9AE02.roa Signing time: Fri 10 Apr 2026 16:19:39 +0000 ROA not before: Fri 10 Apr 2026 16:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133538 IP address blocks: 101.128.4.0/22 maxlen: 24 103.9.16.0/22 maxlen: 24 202.52.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7395 (0x1ce3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FE2, serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8 Validity Not Before: Apr 10 16:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69d9231b-eee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:01:2e:03:23:a9:a2:f8:a8:8e:7d:07:21:ad: c1:a8:ac:de:85:e1:b5:a4:70:15:e8:ef:4e:38:4e: 0b:5e:98:d0:69:de:c0:b5:02:98:85:8b:b2:0f:cd: c0:9d:9d:54:0b:35:ed:54:a5:ad:af:b8:88:39:c9: 1d:06:5a:03:c8:07:25:62:66:1c:3c:c1:d3:83:97: 8e:0a:4a:20:ad:bf:e6:fa:a0:52:56:5b:14:18:29: 8d:de:9e:3f:c5:1a:98:a4:7b:d3:20:8c:69:4a:4c: d6:d8:74:9e:7d:5a:77:0b:a0:8b:9d:51:5f:bc:7d: cb:3b:9b:95:db:b9:bf:05:c2:be:5b:8f:1c:7a:94: 25:e3:26:0b:c1:88:eb:c8:b7:f7:38:71:95:00:6f: 86:2b:50:cd:ff:b9:53:01:3f:40:1b:31:68:d8:97: 94:2d:61:6b:8e:94:f9:68:fc:9c:50:e2:c5:82:1c: 16:a2:32:13:04:dd:03:10:96:23:a8:96:dc:a5:1c: ba:af:b0:d5:41:20:9f:88:9b:f5:b9:47:e6:20:1b: a2:95:14:a2:0a:8a:50:49:89:7e:a1:4c:03:d1:61: f4:2b:61:33:03:67:21:42:47:fd:84:2d:b4:b7:06: c1:fa:5b:8a:4d:a4:7f:eb:01:2c:c6:03:fb:26:fa: 61:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C5:84:ED:9B:B5:F9:9B:97:4E:27:7D:63:C8:23:94:C0:F9:4D:4A X509v3 Authority Key Identifier: keyid:11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/20C4803669A011EA9055BD0EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 101.128.4.0/22 103.9.16.0/22 202.52.46.0/24 Signature Algorithm: sha256WithRSAEncryption 08:48:79:d5:72:1e:04:44:31:1e:9b:e7:fd:58:b8:c2:bf:51: 43:53:af:d4:89:ab:04:7a:eb:fa:b4:c6:56:f3:d5:68:7e:5d: 34:e1:dd:ad:6c:b3:d3:d6:db:d5:8a:08:de:c8:0b:2b:98:c3: f3:51:16:f3:70:88:1f:93:2b:35:8c:c6:1b:65:3f:6c:4e:fe: e8:94:dd:22:13:27:02:a0:25:6a:6a:16:6e:53:9a:fe:30:ab: 15:82:a6:03:c3:2d:fb:a9:d2:43:48:d5:b5:3c:7a:cd:89:88: 60:32:21:d7:4b:f7:60:1b:20:2f:3c:16:8c:51:de:cd:ad:89: fb:0a:8f:69:a3:91:1d:59:9f:fe:87:14:35:57:94:02:4f:51: e8:b3:23:da:3c:92:f5:9e:00:9c:5a:17:48:c5:08:d2:df:0a: 1e:d7:97:88:4d:04:b7:1a:31:a5:b9:f2:dc:45:e1:96:a6:8e: 6d:4b:b5:7e:d9:65:3b:48:66:1e:d0:5a:6e:68:fd:b5:86:db: 58:1d:bf:2f:6a:90:dd:41:55:cf:f0:67:61:27:72:d0:1b:4b: b8:ed:1f:f3:26:e5:14:a6:f2:b6:cc:57:29:0c:f3:1b:cc:27: 3c:51:c7:ed:9f:3a:4b:3d:06:f3:e7:55:36:a5:fc:4e:6a:85: f8:1e:40:a3 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICHOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGRTIxMTAvBgNVBAUTKDExMUU5ODFCQUQzMDE4MzBGN0MxRTU5MENDMUFBOEI0 ODIyNjBFRDgwHhcNMjYwNDEwMTYxOTM5WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWQ5MjMxYi1lZWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmwEuAyOpoviojn0HIa3BqKzeheG1pHAV6O9OOE4LXpjQad7AtQKYhYuyD83A nZ1UCzXtVKWtr7iIOckdBloDyAclYmYcPMHTg5eOCkogrb/m+qBSVlsUGCmN3p4/ xRqYpHvTIIxpSkzW2HSefVp3C6CLnVFfvH3LO5uV27m/BcK+W48cepQl4yYLwYjr yLf3OHGVAG+GK1DN/7lTAT9AGzFo2JeULWFrjpT5aPycUOLFghwWojITBN0DEJYj qJbcpRy6r7DVQSCfiJv1uUfmIBuilRSiCopQSYl+oUwD0WH0K2EzA2chQkf9hC20 twbB+luKTaR/6wEsxgP7JvphvQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFPXFhO2b tfmbl04nfWPII5TA+U1KMB8GA1UdIwQYMBaAFBEemButMBgw98HlkMwaqLSCJg7Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZFMi8yRkY5QkIyMkU4 MzIxMUU2QkY1MTI4NDJDNEY5QUUwMi9FUjZZRzYwd0dERDN3ZVdRekJxb3RJSW1E dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VSNllHNjB3R0REM3dlV1F6QnFvdElJbUR0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjBGRTIvMkZGOUJCMjJFODMyMTFFNkJGNTEyODQyQzRGOUFFMDIvMjBDNDgwMzY2 OUEwMTFFQTkwNTVCRDBFQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCZYAEAwQCZwkQAwQAyjQuMA0GCSqGSIb3DQEBCwUAA4IBAQAISHnV ch4ERDEem+f9WLjCv1FDU6/UiasEeuv6tMZW89Vofl004d2tbLPT1tvVigjeyAsr mMPzURbzcIgfkys1jMYbZT9sTv7olN0iEycCoCVqahZuU5r+MKsVgqYDwy37qdJD SNW1PHrNiYhgMiHXS/dgGyAvPBaMUd7NrYn7Co9po5EdWZ/+hxQ1V5QCT1HosyPa PJL1ngCcWhdIxQjS3woe15eITQS3GjGlufLcReGWpo5tS7V+2WU7SGYe0FpuaP21 httYHb8vapDdQVXP8GdhJ3LQG0u47R/zJuUUpvK2zFcpDPMbzCc8UcftnzpLPQbz 51U2pfxOaoX4HkCj -----END CERTIFICATE-----Generated at Fri Apr 17 20:29:32 2026 by rpki-client