$ rpki-client -vvf rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/3F5C47A0531411F0B5969F4DC4F9AE02.roa File: 3F5C47A0531411F0B5969F4DC4F9AE02.roa (raw, json) Hash identifier: 5ZhWi40cwTm+16cr2zLqWoivb7ML/fDRAm1Hc0nhbKM= Subject key identifier: FA:BC:54:9F:58:E5:BF:9C:06:9B:62:DF:FB:D2:31:62:A4:71:91:9C Certificate issuer: /CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Certificate serial: 01D6 Authority key identifier: 6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/3F5C47A0531411F0B5969F4DC4F9AE02.roa Signing time: Sat 25 Jul 2026 05:54:30 +0000 ROA not before: Sat 25 Jul 2026 05:54:30 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 2764 IP address blocks: 203.20.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A54FE, serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Validity Not Before: Jul 25 05:54:30 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a644f96-8adb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c5:68:94:bf:d8:f8:ea:f4:e4:b3:6f:fd:2c: bd:31:9a:54:17:68:24:da:e2:a0:00:ad:a8:24:a7: 62:90:f5:42:46:3e:e3:74:d0:c2:5d:ae:e2:65:fc: c1:dd:cc:bc:26:f4:0a:f8:36:37:06:fd:0a:7b:83: 17:8b:63:33:96:46:09:7d:4c:aa:63:11:10:a7:58: 19:94:72:f2:59:98:18:84:41:c2:35:bc:69:25:85: c9:dc:22:1e:b6:7f:72:e2:68:42:12:53:ef:65:46: b1:8f:03:15:0e:e0:50:43:ac:de:78:ab:aa:05:5a: d2:e2:10:6c:81:ac:a9:33:7c:62:f0:32:d7:17:54: 6e:4a:61:f3:38:ea:ba:3d:6a:11:2f:a4:22:e9:e1: 77:54:fc:6b:6d:f1:d9:8d:6a:c9:d6:46:5d:c2:fe: 50:91:4f:09:6e:64:c5:41:3e:c5:d6:c4:f6:4f:35: 0c:9a:60:fb:43:97:ef:c5:06:3d:b9:a7:80:e4:a3: 9c:d8:27:2d:a4:e3:b0:95:c7:62:10:e8:1f:74:bc: 3a:88:6d:60:5e:a9:ca:e1:28:de:fc:88:f0:cb:24: 62:8f:0d:13:3b:93:ba:db:19:6f:e3:91:81:a7:98: e4:5f:6e:16:91:e3:01:85:c2:51:9a:ef:b6:0e:00: c2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BC:54:9F:58:E5:BF:9C:06:9B:62:DF:FB:D2:31:62:A4:71:91:9C X509v3 Authority Key Identifier: keyid:6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/3F5C47A0531411F0B5969F4DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.20.114.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:c6:6e:9b:fb:b1:7d:e3:90:2a:61:0a:99:24:e3:88:61:bc: 4d:fb:5a:f0:68:72:66:57:00:85:a7:42:48:f5:41:19:f7:0e: d1:47:7f:b4:da:f7:74:1e:25:22:b0:03:14:4d:92:5f:b9:eb: 66:0a:23:20:9e:4c:b6:eb:a1:06:bf:44:c1:85:56:6c:1c:84: 7b:24:06:bd:3e:32:00:6c:a2:04:f4:c5:f7:21:37:3a:22:22: 78:2c:9f:57:f4:db:9b:5c:d0:19:00:f5:04:fc:b1:56:9e:60: 65:27:d5:14:91:11:a5:b1:9b:8e:2a:a2:77:3f:bd:5e:3c:fb: e6:e6:18:e7:6f:5f:08:01:df:e9:8e:54:5f:23:77:9c:0e:75: 28:d0:8d:cb:85:32:52:d7:52:c2:5a:23:f3:6c:78:c2:50:fe: 6f:30:98:84:71:93:f3:79:8c:15:5e:dc:94:6d:39:fd:a8:d9: c3:17:98:f2:7a:c2:d0:60:65:af:f1:10:79:51:e4:9c:5d:b1: 43:80:43:ea:8b:c0:e5:ad:e4:9f:7d:85:53:05:3e:6f:c2:de: 66:d6:99:44:50:0a:c8:bb:82:7c:ca:c5:ce:b0:ea:59:88:70: 9f:73:16:53:42:20:c1:f0:c1:28:2f:46:03:ff:26:ce:49:bb: c1:d3:5b:88 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0RkUxMTAvBgNVBAUTKDZGQzcwOTA2RkJBNkY0NTM5NDUyMDkxOTMyQzQ1RkZB NEQ4NTcyQjgwHhcNMjYwNzI1MDU1NDMwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY0NGY5Ni04YWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08VolL/Y+Or05LNv/Sy9MZpUF2gk2uKgAK2oJKdikPVCRj7jdNDCXa7iZfzB 3cy8JvQK+DY3Bv0Ke4MXi2MzlkYJfUyqYxEQp1gZlHLyWZgYhEHCNbxpJYXJ3CIe tn9y4mhCElPvZUaxjwMVDuBQQ6zeeKuqBVrS4hBsgaypM3xi8DLXF1RuSmHzOOq6 PWoRL6Qi6eF3VPxrbfHZjWrJ1kZdwv5QkU8JbmTFQT7F1sT2TzUMmmD7Q5fvxQY9 uaeA5KOc2CctpOOwlcdiEOgfdLw6iG1gXqnK4Sje/IjwyyRijw0TO5O62xlv45GB p5jkX24WkeMBhcJRmu+2DgDCRQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPq8VJ9Y 5b+cBpti3/vSMWKkcZGcMB8GA1UdIwQYMBaAFG/HCQb7pvRTlFIJGTLEX/pNhXK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTRGRS9ENjExN0RGNkY2 RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlGT1VVZ2taTXNSZi1rMkZj cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4Y0pCdnVtOUZPVVVna1pNc1JmLWsyRmNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU0RkUvRDYxMTdERjZGNkU5MTFFRUFEQkZGQjUyQzRGOUFFMDIvM0Y1QzQ3QTA1 MzE0MTFGMEI1OTY5RjREQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyxRyMA0GCSqGSIb3DQEBCwUAA4IBAQA6xm6b+7F945AqYQqZJOOI YbxN+1rwaHJmVwCFp0JI9UEZ9w7RR3+02vd0HiUisAMUTZJfuetmCiMgnky266EG v0TBhVZsHIR7JAa9PjIAbKIE9MX3ITc6IiJ4LJ9X9NubXNAZAPUE/LFWnmBlJ9UU kRGlsZuOKqJ3P71ePPvm5hjnb18IAd/pjlRfI3ecDnUo0I3LhTJS11LCWiPzbHjC UP5vMJiEcZPzeYwVXtyUbTn9qNnDF5jyesLQYGWv8RB5UeScXbFDgEPqi8DlreSf fYVTBT5vwt5m1plEUArIu4J8ysXOsOpZiHCfcxZTQiDB8MEoL0YD/ybOSbvB01uI -----END CERTIFICATE-----Generated at Mon Jul 27 09:37:25 2026 by rpki-client