$ rpki-client -vvvf rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/2D58477CEC7A11EEBAE5E319C4F9AE02.roa File: 2D58477CEC7A11EEBAE5E319C4F9AE02.roa (raw, json) Hash identifier: IzOhcdCfxmigtoe9uHfY2qV57i1Zuy3HC6BZYjXrMuk= Subject key identifier: 1B:CD:E8:7B:4C:33:51:15:CD:10:AF:B0:15:6D:B6:EE:5F:C0:FA:89 Certificate issuer: /CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Certificate serial: 35AC Authority key identifier: B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/2D58477CEC7A11EEBAE5E319C4F9AE02.roa Signing time: Mon 26 Oct 2026 15:16:19 +0000 ROA not before: Mon 26 Oct 2026 15:16:19 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 209242 IP address blocks: 202.37.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 14:34:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13740 (0x35ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91683D2, serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Validity Not Before: Oct 26 15:16:19 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6adf6ec2-1dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:18:d5:13:8a:58:aa:82:ad:0c:da:35:bf:3f: ed:09:72:ea:7b:4a:f6:bb:9e:e2:2c:1e:f6:00:c1: 91:19:70:0f:98:a5:36:2d:c8:29:c4:b2:78:83:15: 4d:09:6a:bf:39:c1:7d:28:ec:0c:95:40:03:22:51: 1c:4c:a9:9f:4f:53:e1:a2:83:eb:80:a3:39:84:95: 79:af:f3:54:99:b3:8a:84:ac:2e:30:9d:cc:80:fe: 32:d4:02:7b:4f:f3:40:b2:37:c4:02:77:d7:9d:89: a7:a3:21:63:ea:17:0f:11:96:75:a7:88:53:f3:8c: 10:7d:ac:cf:fb:37:e8:94:46:91:77:b2:5f:b0:54: 39:88:29:a3:58:b0:4f:07:0b:52:ae:a1:93:c7:d0: ee:07:3a:2c:aa:b3:9f:de:d3:0b:9f:c9:2d:6b:60: 85:23:cb:70:8c:0f:30:3b:c8:55:5f:64:39:1f:34: 98:3e:a5:8f:ce:61:8a:01:76:ab:aa:ac:bb:ea:27: 6d:03:2c:04:76:a6:d5:fb:2e:ad:08:73:c7:02:df: 7f:04:73:97:12:2e:72:a1:ff:5e:d1:a0:6a:f1:4a: e4:8e:bc:e4:a4:63:fd:2e:30:6f:88:9d:cb:5c:37: 7b:9a:c8:52:d0:e5:f9:ae:3e:42:db:99:a0:ee:c4: 93:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CD:E8:7B:4C:33:51:15:CD:10:AF:B0:15:6D:B6:EE:5F:C0:FA:89 X509v3 Authority Key Identifier: keyid:B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/2D58477CEC7A11EEBAE5E319C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.37.197.0/24 Signature Algorithm: sha256WithRSAEncryption 94:51:52:6e:83:92:58:db:27:f9:73:79:a8:fe:ab:7a:fb:cc: b1:83:61:ba:ae:6a:15:58:4f:3f:41:c1:cd:f7:d1:61:d9:2f: da:aa:40:f5:c5:03:20:3e:42:b6:3d:82:b9:9e:07:9d:60:66: fe:17:ba:fa:3d:df:8f:68:c6:5d:c2:27:e6:49:d9:b8:13:ae: 10:35:f9:f6:07:25:81:dd:b9:d0:31:93:8c:ba:55:d1:17:52: c2:9a:b7:9e:7c:98:7c:e4:dc:98:a3:5d:37:7b:c0:8d:e3:2e: 25:d1:da:ac:26:73:45:5a:09:07:75:2b:9b:28:d4:96:e8:3e: cf:db:a7:a9:de:f4:f8:73:88:e3:32:67:33:77:a0:30:2e:9d: 3a:8e:c1:fb:7a:38:f1:9b:d7:5a:d1:54:b3:9d:16:df:b7:79: 9b:33:25:37:7f:de:f9:a2:31:6c:d7:d0:3d:27:f8:8c:a0:1a: 5c:0a:5e:16:4c:47:34:7f:84:84:d7:e4:37:13:bf:d0:e9:4a: 3a:70:fd:ab:4f:65:b1:15:10:b8:bd:71:01:9d:b4:c4:23:aa: 9a:f8:74:ac:a8:95:28:6f:40:80:ca:c3:98:86:d5:2d:21:ae: af:d9:ce:8c:d1:20:21:1b:86:03:12:cf:e4:4c:6f:f6:fe:78: 94:bf:4c:e9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICNawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgzRDIxMTAvBgNVBAUTKEIxQUNGQjg1MTQ5Qjg2QTExMDE1RDYwMTgxMEUzMTRG Njk0OEMxQ0YwHhcNMjYxMDI2MTUxNjE5WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWRmNmVjMi0xZGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAihjVE4pYqoKtDNo1vz/tCXLqe0r2u57iLB72AMGRGXAPmKU2LcgpxLJ4gxVN CWq/OcF9KOwMlUADIlEcTKmfT1PhooPrgKM5hJV5r/NUmbOKhKwuMJ3MgP4y1AJ7 T/NAsjfEAnfXnYmnoyFj6hcPEZZ1p4hT84wQfazP+zfolEaRd7JfsFQ5iCmjWLBP BwtSrqGTx9DuBzosqrOf3tMLn8kta2CFI8twjA8wO8hVX2Q5HzSYPqWPzmGKAXar qqy76idtAywEdqbV+y6tCHPHAt9/BHOXEi5yof9e0aBq8UrkjrzkpGP9LjBviJ3L XDd7mshS0OX5rj5C25mg7sSTyQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBvN6HtM M1EVzRCvsBVttu5fwPqJMB8GA1UdIwQYMBaAFLGs+4UUm4ahEBXWAYEOMU9pSMHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODNEMi8xOUM1NUY2QzFE OEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhxRVFGZFlCZ1E0eFQybEl3 YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NhejdoUlNiaHFFUUZkWUJnUTR4VDJsSXdjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjgzRDIvMTlDNTVGNkMxRDhCMTFFMjkwQzU3OEU1MDhCMDJDRDIvMkQ1ODQ3N0NF QzdBMTFFRUJBRTVFMzE5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyiXFMA0GCSqGSIb3DQEBCwUAA4IBAQCUUVJug5JY2yf5c3mo/qt6 +8yxg2G6rmoVWE8/QcHN99Fh2S/aqkD1xQMgPkK2PYK5ngedYGb+F7r6Pd+PaMZd wifmSdm4E64QNfn2ByWB3bnQMZOMulXRF1LCmreefJh85NyYo103e8CN4y4l0dqs JnNFWgkHdSubKNSW6D7P26ep3vT4c4jjMmczd6AwLp06jsH7ejjxm9da0VSznRbf t3mbMyU3f975ojFs19A9J/iMoBpcCl4WTEc0f4SE1+Q3E7/Q6Uo6cP2rT2WxFRC4 vXEBnbTEI6qa+HSsqJUob0CAysOYhtUtIa6v2c6M0SAhG4YDEs/kTG/2/niUv0zp -----END CERTIFICATE-----Generated at Tue Nov 10 14:51:16 2026 by rpki-client