$ rpki-client -vvf rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/3DBC186C5AD611EF85A4557BC4F9AE02.roa File: 3DBC186C5AD611EF85A4557BC4F9AE02.roa (raw, json) Hash identifier: 6uLGUsAxDCCetxCSvWggNZXKnXx2TcJW5ybw8uE9+E8= Subject key identifier: B1:E2:E2:DB:BA:53:0B:0E:52:30:72:0D:16:D4:00:9E:F3:78:6E:3F Certificate issuer: /CN=A91A395C/serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C Certificate serial: 358D Authority key identifier: 0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/3DBC186C5AD611EF85A4557BC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:38:32 +0000 ROA not before: Wed 14 Jan 2026 15:10:53 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 137527 IP address blocks: 112.137.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 14:49:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13709 (0x358d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A395C, serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C Validity Not Before: Jan 14 15:10:53 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a47998-8962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:39:04:07:7e:3b:ed:eb:91:48:01:07:27:a8: 96:36:39:63:c7:85:d4:fd:88:2e:3c:19:dc:a3:91: 04:2c:15:5e:a0:ce:cb:75:19:de:6b:f1:ff:80:60: fb:10:b3:82:2e:44:31:3d:89:1a:07:f3:cf:a3:89: 19:7b:2f:dd:6e:70:f4:d6:b8:82:08:2a:f2:8c:3f: ba:44:d2:20:50:de:3d:67:81:c8:14:f9:1b:cc:9f: f7:79:32:ab:04:1c:94:e7:55:77:d5:d2:b7:09:ce: 47:63:b2:aa:e5:a4:9d:f4:f7:9e:fb:ce:59:b6:96: 02:ab:a5:4f:0c:3f:7d:ef:1f:4e:1d:8f:80:02:08: 27:2e:2a:c8:6d:3f:85:75:76:bf:43:10:b0:f3:75: e1:ae:05:21:64:d2:2d:36:6e:63:5a:4e:06:c6:0e: 0b:f7:f1:57:19:f5:9e:82:43:32:72:c2:b5:34:3f: d9:84:fd:43:1e:53:8b:42:86:9e:ec:e3:43:b7:30: da:f2:54:a6:22:53:7b:64:d1:ee:2c:3f:76:06:60: d5:a9:fc:1c:5b:33:31:5e:02:86:cc:8c:2d:df:8c: 94:ef:88:c7:6f:3a:c7:32:44:45:04:89:c0:d5:57: 00:28:89:14:bb:31:a6:bd:04:f2:4d:fd:a7:b8:fc: 11:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E2:E2:DB:BA:53:0B:0E:52:30:72:0D:16:D4:00:9E:F3:78:6E:3F X509v3 Authority Key Identifier: keyid:0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/3DBC186C5AD611EF85A4557BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 112.137.26.0/24 Signature Algorithm: sha256WithRSAEncryption c1:ec:12:0a:72:fb:e6:f4:f3:be:eb:98:18:8f:73:48:dc:91: 30:bd:6a:65:5c:84:7b:c3:19:af:04:d8:1b:85:db:c3:e4:1a: b7:64:7a:11:ec:bd:0c:e6:78:f0:20:d2:61:63:2f:b0:0f:26: bc:d4:15:72:ac:e6:05:dd:4e:9a:01:85:08:05:dd:e5:dc:cb: 90:bc:89:d3:ba:e5:d8:be:7f:1f:2a:f8:6c:a3:8c:70:24:67: 8f:04:19:fd:ce:f4:46:7e:1c:58:81:cb:2e:70:db:a1:e5:66: ff:8b:ae:2c:77:6f:f1:20:ec:a4:64:36:70:de:59:40:bd:d4: 08:6c:f8:ae:bf:b9:d6:19:57:35:ae:85:8c:52:e9:e4:f1:5c: e7:e5:2f:c3:08:61:68:c8:89:34:cb:9e:1d:55:c5:50:ba:62: 9f:dd:dc:5f:3e:90:d5:be:f7:43:a1:b7:c2:a4:be:e4:4e:30: 4a:68:b7:02:a3:24:c5:2a:40:74:c6:1a:22:7e:10:9f:0a:3e: b0:71:e1:8f:59:ec:e5:40:52:f2:aa:e7:56:03:43:ef:14:65: 13:5e:6d:9f:a1:09:8f:fd:aa:a3:45:90:70:53:a8:f5:68:82: b9:c8:d6:e1:02:39:56:12:13:fa:3b:51:2f:bb:3f:79:c3:0e: 0c:67:96:e1 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICNY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM5NUMxMTAvBgNVBAUTKDBEOEI3MUQ4NkI1RTIwMjkzM0JDQjAyQTVCNkQ3NDA5 MkE1MkExN0MwHhcNMjYwMTE0MTUxMDUzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Nzk5OC04OTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1TkEB3477euRSAEHJ6iWNjljx4XU/YguPBnco5EELBVeoM7LdRnea/H/gGD7 ELOCLkQxPYkaB/PPo4kZey/dbnD01riCCCryjD+6RNIgUN49Z4HIFPkbzJ/3eTKr BByU51V31dK3Cc5HY7Kq5aSd9Pee+85ZtpYCq6VPDD997x9OHY+AAggnLirIbT+F dXa/QxCw83XhrgUhZNItNm5jWk4Gxg4L9/FXGfWegkMycsK1ND/ZhP1DHlOLQoae 7ONDtzDa8lSmIlN7ZNHuLD92BmDVqfwcWzMxXgKGzIwt34yU74jHbzrHMkRFBInA 1VcAKIkUuzGmvQTyTf2nuPwR/QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLHi4tu6 UwsOUjByDRbUAJ7zeG4/MB8GA1UdIwQYMBaAFA2LcdhrXiApM7ywKlttdAkqUqF8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzk1Qy9CQjM0MTdDMDFE OTYxMUUyQjhCQjgyN0YwOEIwMkNEMi9EWXR4Mkd0ZUlDa3p2TEFxVzIxMENTcFNv WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RZdHgyR3RlSUNrenZMQXFXMjEwQ1NwU29Ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTM5NUMvQkIzNDE3QzAxRDk2MTFFMkI4QkI4MjdGMDhCMDJDRDIvM0RCQzE4NkM1 QUQ2MTFFRjg1QTQ1NTdCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAcIkaMA0GCSqGSIb3DQEBCwUAA4IBAQDB7BIKcvvm9PO+65gYj3NI 3JEwvWplXIR7wxmvBNgbhdvD5Bq3ZHoR7L0M5njwINJhYy+wDya81BVyrOYF3U6a AYUIBd3l3MuQvInTuuXYvn8fKvhso4xwJGePBBn9zvRGfhxYgcsucNuh5Wb/i64s d2/xIOykZDZw3llAvdQIbPiuv7nWGVc1roWMUunk8Vzn5S/DCGFoyIk0y54dVcVQ umKf3dxfPpDVvvdDobfCpL7kTjBKaLcCoyTFKkB0xhoifhCfCj6wceGPWezlQFLy qudWA0PvFGUTXm2foQmP/aqjRZBwU6j1aIK5yNbhAjlWEhP6O1Evuz95ww4MZ5bh -----END CERTIFICATE-----Generated at Thu Mar 12 22:42:11 2026 by rpki-client