$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/974869042C2A11F19F1796939D833773.roa File: 974869042C2A11F19F1796939D833773.roa (raw, json) Hash identifier: rqXxFyVtS5pdY2Q7Dfm2yuygEbjXNJOU0VtSShOm5Qo= Subject key identifier: D2:42:F8:B6:AF:91:12:02:37:CC:74:A7:EF:20:F9:2D:12:CE:07:6E Certificate issuer: /CN=A91D4345/serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB Certificate serial: 0D02 Authority key identifier: E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/974869042C2A11F19F1796939D833773.roa Signing time: Mon 30 Mar 2026 11:21:26 +0000 ROA not before: Mon 30 Mar 2026 11:21:26 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 138004 IP address blocks: 202.125.64.0/24 maxlen: 24 202.125.66.0/24 maxlen: 24 202.125.67.0/24 maxlen: 24 202.125.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3330 (0xd02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4345, serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB Validity Not Before: Mar 30 11:21:26 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69ca5cb6-328c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:34:e1:ac:cc:89:25:49:17:63:25:35:0d:39: 88:26:29:01:47:30:4d:eb:c7:2b:bc:92:bd:7b:51: 66:e9:17:64:3f:35:a9:2f:f7:3e:aa:8f:41:b4:fa: 6b:53:d7:fb:2f:9e:a7:fa:6c:65:c4:fd:a2:2e:13: e0:25:f4:71:78:33:b8:5f:86:4a:1e:ef:c9:62:d5: a7:c9:a6:78:5f:a9:78:ec:e9:e0:82:f3:89:17:a8: 6b:58:12:b5:54:8a:3f:68:6d:0f:e2:1c:6f:9f:de: d3:59:1b:b1:23:41:74:70:48:fb:ca:73:41:a4:00: 3e:1f:36:10:30:92:6f:ec:8f:de:34:58:31:70:08: 1e:8c:29:82:52:88:8d:2f:12:d8:12:55:34:c9:99: ec:3a:63:b0:1f:6a:fe:f5:66:85:62:37:f2:5f:c2: f1:0a:2d:ea:26:32:f4:49:54:93:e9:a1:ef:29:26: c1:32:2a:80:db:97:a0:10:e6:55:58:a9:c5:4f:43: 6b:0c:43:ca:0c:73:99:59:6a:52:eb:b4:d3:17:8d: 92:46:ed:ba:83:7f:26:96:c5:9d:08:45:ae:7a:a9: 94:50:6a:53:7f:b9:4f:13:b7:e8:aa:7d:91:45:65: 83:f0:db:6c:cc:45:ce:e5:d6:cd:38:92:3f:21:d2: d6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:42:F8:B6:AF:91:12:02:37:CC:74:A7:EF:20:F9:2D:12:CE:07:6E X509v3 Authority Key Identifier: keyid:E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/974869042C2A11F19F1796939D833773.roa sbgp-ipAddrBlock: critical IPv4: 202.125.64.0/24 202.125.66.0/23 202.125.79.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:96:1c:3b:96:e5:53:c1:d3:c1:25:c3:7b:dc:56:da:aa:6f: 5d:82:04:31:52:e4:47:9d:5a:db:9d:c4:c6:47:90:63:f4:60: ca:06:be:fe:00:e3:87:d0:08:f6:ad:27:1e:6e:4a:a4:09:5d: 49:f1:d4:d7:90:38:a2:36:00:5e:78:1e:39:ad:5d:b6:78:41: 96:e1:f7:1f:2d:63:2d:62:08:1f:68:f5:ea:4d:a8:0f:d7:89: 47:7a:89:3a:45:56:70:e0:53:30:96:9e:fb:f5:39:03:8c:18: da:14:e8:ee:cf:36:cd:d6:99:e9:10:d4:29:9d:d3:53:9c:61: b9:7e:50:ab:06:14:e1:61:76:0c:47:a2:64:f2:df:23:37:04: 29:03:56:d0:0b:55:4b:e6:4a:ec:d4:e2:da:05:7e:88:ac:67: 03:56:13:30:3c:84:15:8f:01:78:2f:ce:ca:61:be:5e:8b:84: e7:c1:c8:92:09:4f:9a:a1:3b:8e:09:2d:48:9b:20:55:ed:70: 7f:96:e8:1a:63:91:a9:e4:74:07:47:60:14:b6:90:6e:14:e9: eb:e8:c0:50:e2:ad:5b:39:74:e8:f1:b3:9b:aa:9f:f0:1a:3c: 14:82:5c:25:2f:70:36:ea:13:cb:3a:8d:b8:ff:93:64:01:96: 82:9d:74:f8 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICDQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQzNDUxMTAvBgNVBAUTKEU1MzdEMEMzNDhGRDdEQzQ5RjVGQzNCMDA2NkEzMUM1 ODRGQUUxQUIwHhcNMjYwMzMwMTEyMTI2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWNhNWNiNi0zMjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDThrMyJJUkXYyU1DTmIJikBRzBN68crvJK9e1Fm6RdkPzWpL/c+qo9BtPpr U9f7L56n+mxlxP2iLhPgJfRxeDO4X4ZKHu/JYtWnyaZ4X6l47OnggvOJF6hrWBK1 VIo/aG0P4hxvn97TWRuxI0F0cEj7ynNBpAA+HzYQMJJv7I/eNFgxcAgejCmCUoiN LxLYElU0yZnsOmOwH2r+9WaFYjfyX8LxCi3qJjL0SVST6aHvKSbBMiqA25egEOZV WKnFT0NrDEPKDHOZWWpS67TTF42SRu26g38mlsWdCEWueqmUUGpTf7lPE7foqn2R RWWD8NtszEXO5dbNOJI/IdLWrwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFNJC+Lav kRICN8x0p+8g+S0SzgduMB8GA1UdIwQYMBaAFOU30MNI/X3En1/DsAZqMcWE+uGr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDM0NS9FQzc4Q0REQTA1 MzgxMUVBQjU4OTc2NjhDNEY5QUUwMi81VGZRdzBqOWZjU2ZYOE93Qm1veHhZVDY0 YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVUZlF3MGo5ZmNTZlg4T3dCbW94eFlUNjRhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDQzNDUvRUM3OENEREEwNTM4MTFFQUI1ODk3NjY4QzRGOUFFMDIvOTc0ODY5MDQy QzJBMTFGMTlGMTc5NjkzOUQ4MzM3NzMucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAyn1AAwQByn1CAwQAyn1PMA0GCSqGSIb3DQEBCwUAA4IBAQCNlhw7 luVTwdPBJcN73Fbaqm9dggQxUuRHnVrbncTGR5Bj9GDKBr7+AOOH0Aj2rScebkqk CV1J8dTXkDiiNgBeeB45rV22eEGW4fcfLWMtYggfaPXqTagP14lHeok6RVZw4FMw lp779TkDjBjaFOjuzzbN1pnpENQpndNTnGG5flCrBhThYXYMR6Jk8t8jNwQpA1bQ C1VL5krs1OLaBX6IrGcDVhMwPIQVjwF4L87KYb5ei4TnwciSCU+aoTuOCS1ImyBV 7XB/lugaY5Gp5HQHR2AUtpBuFOnr6MBQ4q1bOXTo8bObqp/wGjwUglwlL3A26hPL Oo24/5NkAZaCnXT4 -----END CERTIFICATE-----Generated at Sun Apr 5 21:04:16 2026 by rpki-client