$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/00FEEFF0536911EE8594503BC4F9AE02.roa File: 00FEEFF0536911EE8594503BC4F9AE02.roa (raw, json) Hash identifier: YiI4BDI+YEuyMJJzNPPm+NOvEBL4ZLRtDOzUj0P1mAQ= Subject key identifier: 8A:BB:BA:28:A5:38:1E:4C:25:E6:0B:E3:0E:1F:6D:55:EB:AE:0B:9F Certificate issuer: /CN=A91C0D37/serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2 Certificate serial: 01F6 Authority key identifier: CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/00FEEFF0536911EE8594503BC4F9AE02.roa Signing time: Mon 02 Mar 2026 13:57:01 +0000 ROA not before: Fri 09 Jan 2026 03:22:25 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 4768 IP address blocks: 202.36.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 02:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 502 (0x1f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37, serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2 Validity Not Before: Jan 9 03:22:25 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a5972c-803f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:24:5a:2b:9e:71:ee:ca:87:59:0c:74:21:7d: a8:57:69:44:52:f0:16:82:f0:99:46:a7:eb:9f:d0: 10:22:cb:78:67:eb:35:49:f8:0f:b2:0c:ae:9f:2b: 6b:57:50:16:37:7c:6b:6d:76:cd:a2:a9:a6:dc:cd: 04:8b:06:e0:d6:e3:82:0d:3d:da:8a:1d:8b:b0:36: b5:c8:2e:df:64:8d:e8:75:40:8c:4c:ef:30:9a:20: b5:03:87:ba:c9:9d:2d:4e:95:cb:e6:91:be:f0:ba: 16:6a:68:5d:0d:b4:f3:55:ab:e1:52:b3:76:f8:48: 5c:64:00:35:4d:91:2d:a8:bb:16:22:da:28:1f:48: ac:81:79:1d:b5:49:05:de:76:9b:13:bc:3f:17:d9: 37:61:b4:ab:3c:d3:ea:3c:d7:f0:1f:b8:f5:4e:e7: 20:59:c0:e6:ae:a5:a9:3d:e5:f1:99:85:77:0e:16: 0c:0a:cf:d4:87:3f:d5:0d:15:72:23:2a:fe:f6:ee: c4:f2:d4:16:00:ee:0c:59:be:af:f2:a9:3e:f9:28: 8a:aa:ee:b4:89:ec:e1:77:43:46:3e:c4:70:1b:79: f7:54:80:6b:86:08:37:72:2a:a0:75:17:3f:6f:f5: f9:e9:51:00:1b:7a:86:c3:fe:32:6a:77:af:6e:f9: 17:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BB:BA:28:A5:38:1E:4C:25:E6:0B:E3:0E:1F:6D:55:EB:AE:0B:9F X509v3 Authority Key Identifier: keyid:CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/00FEEFF0536911EE8594503BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.36.44.0/24 Signature Algorithm: sha256WithRSAEncryption 23:a2:91:ad:8f:13:af:15:ec:73:75:f7:aa:8b:d5:a2:38:1f: d8:d7:2f:21:e2:df:44:aa:2e:5f:9e:93:af:21:cb:aa:7c:35: 01:f7:4c:f4:d1:7e:9d:d4:32:0c:f7:e5:f0:94:e2:36:7e:24: 0e:52:3b:06:d1:6d:99:5f:4e:2e:98:83:4d:dc:a0:7f:c2:82: a3:1a:7e:f4:26:7a:83:ed:29:e0:38:80:d2:6a:94:b1:ac:3c: 64:41:87:0b:a6:ab:d2:10:0e:1f:e6:66:5e:59:98:6f:4f:e4: 41:8d:53:4e:bc:f0:ed:f9:66:cb:61:4f:95:72:a5:42:4a:f4: dc:72:49:00:6e:c6:03:f5:b2:b4:26:ef:5a:19:c2:7e:0a:b3: 8f:8d:f9:47:6a:3c:20:20:60:b8:3d:4f:3f:4d:a5:c4:8c:c6: d6:05:c9:8d:80:c0:75:4f:31:47:50:80:69:2d:c9:4d:0e:3a: c1:5b:72:20:c2:c6:28:31:15:f4:17:6c:f3:3c:64:52:eb:b2: a9:06:51:0c:20:cb:44:95:b3:01:14:44:d9:c2:46:f7:83:ec: 4b:49:c3:2e:29:9e:f2:88:4c:c0:09:3c:f8:00:3c:33:38:1f: 2e:c5:ab:47:67:ee:a0:c9:23:62:51:7e:fe:43:b2:c2:9f:48: 65:f3:86:4c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKENGNDFDREFGNDFDNTcwMDEyOTA2NENFRjI4NDAwM0JF RjBCOUJGQzIwHhcNMjYwMTA5MDMyMjI1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTcyYy04MDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSRaK55x7sqHWQx0IX2oV2lEUvAWgvCZRqfrn9AQIst4Z+s1SfgPsgyunytr V1AWN3xrbXbNoqmm3M0Eiwbg1uOCDT3aih2LsDa1yC7fZI3odUCMTO8wmiC1A4e6 yZ0tTpXL5pG+8LoWamhdDbTzVavhUrN2+EhcZAA1TZEtqLsWItooH0isgXkdtUkF 3nabE7w/F9k3YbSrPNPqPNfwH7j1TucgWcDmrqWpPeXxmYV3DhYMCs/Uhz/VDRVy Iyr+9u7E8tQWAO4MWb6v8qk++SiKqu60iezhd0NGPsRwG3n3VIBrhgg3ciqgdRc/ b/X56VEAG3qGw/4yanevbvkX9QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIq7uiil OB5MJeYL4w4fbVXrrgufMB8GA1UdIwQYMBaAFM9Bza9BxXABKQZM7yhAA77wub/C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wRThCQ0IzODUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNBRXBCa3p2S0VBRHZ2QzV2 OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3owSE5yMEhGY0FFcEJrenZLRUFEdnZDNXY4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzBEMzcvMEU4QkNCMzg1MzVCMTFFRTlCRjIwQTZCQzRGOUFFMDIvMDBGRUVGRjA1 MzY5MTFFRTg1OTQ1MDNCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyiQsMA0GCSqGSIb3DQEBCwUAA4IBAQAjopGtjxOvFexzdfeqi9Wi OB/Y1y8h4t9Eqi5fnpOvIcuqfDUB90z00X6d1DIM9+XwlOI2fiQOUjsG0W2ZX04u mINN3KB/woKjGn70JnqD7SngOIDSapSxrDxkQYcLpqvSEA4f5mZeWZhvT+RBjVNO vPDt+WbLYU+VcqVCSvTcckkAbsYD9bK0Ju9aGcJ+CrOPjflHajwgIGC4PU8/TaXE jMbWBcmNgMB1TzFHUIBpLclNDjrBW3IgwsYoMRX0F2zzPGRS67KpBlEMIMtElbMB FETZwkb3g+xLScMuKZ7yiEzACTz4ADwzOB8uxatHZ+6gySNiUX7+Q7LCn0hl84ZM -----END CERTIFICATE-----Generated at Fri Mar 13 09:57:25 2026 by rpki-client