$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/1C1628BE2D9E11F1B1FA5F5A88EE528E.roa File: 1C1628BE2D9E11F1B1FA5F5A88EE528E.roa (raw, json) Hash identifier: AdqbKoLvsHyKD6HghcgCeYloGvI0ehL1LADbVK02jZo= Subject key identifier: F9:1C:FC:DA:49:2D:97:54:75:C5:6D:4A:61:D3:74:0E:1B:3D:89:6A Certificate issuer: /CN=A91A9CBB/serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Certificate serial: C2 Authority key identifier: FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/1C1628BE2D9E11F1B1FA5F5A88EE528E.roa Signing time: Wed 01 Apr 2026 07:40:53 +0000 ROA not before: Wed 01 Apr 2026 07:40:53 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 4637 IP address blocks: 202.47.192.0/24 maxlen: 24 202.47.195.0/24 maxlen: 24 202.47.196.0/24 maxlen: 24 202.47.201.0/24 maxlen: 24 202.47.202.0/24 maxlen: 24 202.47.203.0/24 maxlen: 24 210.57.8.0/22 maxlen: 24 210.176.128.0/24 maxlen: 24 210.176.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CBB, serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Validity Not Before: Apr 1 07:40:53 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69cccc05-a0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c9:f9:46:93:8d:28:29:96:95:d8:e0:3d:4f: c9:76:2b:cb:88:a7:55:8c:8e:10:5a:0b:0d:a5:a8: 1e:2b:20:e1:09:8d:b7:59:34:32:23:25:d1:a7:aa: 51:cb:4f:6d:2c:cf:75:77:e9:d2:c6:77:a6:41:b6: f0:55:60:d9:3c:a7:18:13:8e:ba:3a:92:21:77:3f: e1:bb:ca:d9:ff:53:6a:95:02:b3:8d:ba:59:40:ad: 5b:a1:7e:6b:b2:97:c5:72:a5:44:bd:84:8e:eb:10: 9b:9f:8b:f0:98:53:6b:d6:51:f5:ce:40:8f:6c:a9: ff:28:e9:9e:34:12:fa:86:20:fb:b2:e2:fc:f7:a9: 99:ca:81:53:04:a9:8f:6a:65:b3:6a:e5:72:44:b4: 92:6d:91:02:91:66:4b:72:80:e9:3f:ec:99:d6:9d: c7:18:be:17:6b:12:70:f4:74:56:09:a4:73:ca:bd: 99:46:ba:8f:44:05:5b:af:2a:34:35:df:2a:4e:9b: 76:80:ec:55:a7:a1:93:38:f0:4a:45:7c:e9:ac:98: 7a:0e:49:67:e3:29:b5:e6:7d:95:a7:8c:c3:8c:22: be:a3:75:27:d5:3f:53:e3:fc:b6:ef:67:cd:89:c7: 9a:72:9e:a5:12:01:af:ec:3d:a4:5a:35:c1:31:89: 5d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1C:FC:DA:49:2D:97:54:75:C5:6D:4A:61:D3:74:0E:1B:3D:89:6A X509v3 Authority Key Identifier: keyid:FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/1C1628BE2D9E11F1B1FA5F5A88EE528E.roa sbgp-ipAddrBlock: critical IPv4: 202.47.192.0/24 202.47.195.0-202.47.196.255 202.47.201.0-202.47.203.255 210.57.8.0/22 210.176.128.0/24 210.176.142.0/24 Signature Algorithm: sha256WithRSAEncryption d2:40:0c:63:10:79:94:2e:87:a0:df:08:aa:3d:72:d9:2e:f7: d1:42:3b:e9:ec:7f:90:ba:23:8b:df:bd:0a:69:bf:68:ca:93: d4:1c:d7:85:68:99:25:2e:ef:8c:37:a9:42:a7:f6:7d:d3:30: 04:84:e4:f6:c5:50:8c:5d:97:42:cd:80:f8:a1:90:3f:36:95: 5e:4b:d3:90:d8:1a:ec:22:34:99:4d:dd:0b:58:19:6d:51:02: e5:82:95:1b:97:33:00:57:ca:90:d5:26:50:bc:81:3c:02:86: df:6a:72:fd:7d:6e:2c:f5:8d:2f:71:fc:c1:b3:3d:40:cd:0f: 25:02:33:6a:16:83:8b:e0:e5:f5:de:af:b1:63:12:da:7a:77: 9b:6d:02:0d:00:74:a5:dc:80:aa:18:34:60:16:0c:e9:7b:ba: f6:6f:33:cd:12:1a:9a:0f:fb:70:3a:fe:5d:15:94:6d:ad:6a: 7f:02:62:81:6e:4f:be:2d:22:88:96:cb:03:f0:18:e4:9c:02: ac:1e:16:c4:0a:ca:f7:41:3a:81:e3:4b:67:d7:c4:47:d8:c8: 56:25:25:b8:71:e0:14:42:34:e6:8c:46:d1:37:c4:ee:e9:8b: 45:4b:00:80:cb:a4:d3:ad:18:59:35:ab:3a:d3:7d:06:d6:14: f7:54:c2:d0 -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlDQkIxMTAvBgNVBAUTKEZDMjRGNTM5MDc0Nzg3RUNFQUIwMEMyNDI2MDZDMkJE Njg4MTlBMEQwHhcNMjYwNDAxMDc0MDUzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWNjY2MwNS1hMGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMn5RpONKCmWldjgPU/JdivLiKdVjI4QWgsNpageKyDhCY23WTQyIyXRp6pR y09tLM91d+nSxnemQbbwVWDZPKcYE466OpIhdz/hu8rZ/1NqlQKzjbpZQK1boX5r spfFcqVEvYSO6xCbn4vwmFNr1lH1zkCPbKn/KOmeNBL6hiD7suL896mZyoFTBKmP amWzauVyRLSSbZECkWZLcoDpP+yZ1p3HGL4XaxJw9HRWCaRzyr2ZRrqPRAVbryo0 Nd8qTpt2gOxVp6GTOPBKRXzprJh6Dkln4ym15n2Vp4zDjCK+o3Un1T9T4/y272fN iceacp6lEgGv7D2kWjXBMYldYwIDAQABo4ICjjCCAoowHQYDVR0OBBYEFPkc/NpJ LZdUdcVtSmHTdA4bPYlqMB8GA1UdIwQYMBaAFPwk9TkHR4fs6rAMJCYGwr1ogZoN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUNCQi9ENTNCRDE0NjE1 QjExMUYwQTI3NzRBMDlDNEY5QUUwMi9fQ1QxT1FkSGgtenFzQXdrSmdiQ3ZXaUJt ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19DVDFPUWRIaC16cXNBd2tKZ2JDdldpQm1nMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTlDQkIvRDUzQkQxNDYxNUIxMTFGMEEyNzc0QTA5QzRGOUFFMDIvMUMxNjI4QkUy RDlFMTFGMUIxRkE1RjVBODhFRTUyOEUucm9hME0GCCsGAQUFBwEHAQH/BD4wPDA6 BAIAATA0AwQAyi/AMAwDBADKL8MDBADKL8QwDAMEAMovyQMEAsovyAMEAtI5CAME ANKwgAMEANKwjjANBgkqhkiG9w0BAQsFAAOCAQEA0kAMYxB5lC6HoN8Iqj1y2S73 0UI76ex/kLoji9+9Cmm/aMqT1BzXhWiZJS7vjDepQqf2fdMwBITk9sVQjF2XQs2A +KGQPzaVXkvTkNga7CI0mU3dC1gZbVEC5YKVG5czAFfKkNUmULyBPAKG32py/X1u LPWNL3H8wbM9QM0PJQIzahaDi+Dl9d6vsWMS2np3m20CDQB0pdyAqhg0YBYM6Xu6 9m8zzRIamg/7cDr+XRWUba1qfwJigW5Pvi0iiJbLA/AY5JwCrB4WxArK90E6geNL Z9fER9jIViUluHHgFEI05oxG0TfE7umLRUsAgMuk060YWTWrOtN9BtYU91TC0A== -----END CERTIFICATE-----Generated at Mon Apr 6 09:49:17 2026 by rpki-client