$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/BA23C0E440EF11F099D6761DC4F9AE02.roa File: BA23C0E440EF11F099D6761DC4F9AE02.roa (raw, json) Hash identifier: C4Pv7/ZcXpfnIfO2ZraIiYNBzqr9mEhRQSdvTyPYip4= Subject key identifier: C9:74:23:43:69:FB:5D:60:28:6F:BE:6C:83:86:00:CD:A7:4C:52:D2 Certificate issuer: /CN=A91CB4E9/serialNumber=50AE716F3D36B9BEEAE27F10068F9E36A233AB91 Certificate serial: 96 Authority key identifier: 50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/BA23C0E440EF11F099D6761DC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:32:52 +0000 ROA not before: Sat 17 Jan 2026 06:25:01 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 14618 IP address blocks: 202.49.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.crl rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 06:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB4E9, serialNumber=50AE716F3D36B9BEEAE27F10068F9E36A233AB91 Validity Not Before: Jan 17 06:25:01 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a44004-4d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7d:37:0d:f6:54:16:bf:05:39:66:46:87:97: b7:8f:2f:4a:af:bf:a1:d0:4f:0a:4c:d5:62:95:d9: 25:8e:84:0b:0e:6f:90:e8:70:00:80:08:31:1e:df: 1e:b7:ce:0c:98:59:ca:70:d4:6c:d7:56:f4:66:9d: 35:40:1d:ed:6c:ce:52:0d:d7:98:e6:ec:c1:df:df: e5:f3:64:49:12:c5:a3:7d:aa:ca:66:31:5f:cc:4a: 74:a7:eb:64:a8:ac:9d:7a:58:b3:f5:25:98:5c:5a: 02:8d:9d:84:ca:34:23:93:26:c3:c2:b0:f1:85:7b: fd:9c:08:89:69:99:e1:03:11:d4:19:18:d2:e9:ab: 6a:10:df:a8:16:99:6a:85:32:53:65:91:29:02:7f: f2:5f:26:f8:97:de:cb:83:59:1e:7f:fe:e0:42:81: 2e:7a:16:a5:df:a5:bc:d7:44:9f:cc:2f:85:8a:32: f6:5c:a2:2d:49:46:d0:f4:38:4b:83:61:7a:f9:da: 2e:bf:bc:b5:45:19:69:7a:f9:8d:41:a2:60:04:b7: c7:96:b9:a7:dd:1d:41:00:8c:08:92:1c:93:dc:a6: 28:26:ed:61:82:4b:2a:f6:33:d2:20:27:a4:23:06: 28:b4:1c:df:69:42:28:32:29:00:82:7e:1d:82:71: fc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:74:23:43:69:FB:5D:60:28:6F:BE:6C:83:86:00:CD:A7:4C:52:D2 X509v3 Authority Key Identifier: keyid:50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/BA23C0E440EF11F099D6761DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.49.204.0/24 Signature Algorithm: sha256WithRSAEncryption 31:bf:45:68:2b:e3:24:45:5e:a8:0e:ff:16:04:32:0e:49:1d: 9f:7a:fe:49:6c:e5:11:66:a6:73:db:55:52:eb:b1:a3:8d:3c: f4:27:c6:dd:4d:4e:5b:5c:35:20:42:08:50:19:6a:6a:58:8d: 1c:9f:6d:2c:f9:1a:f4:19:dd:8a:ba:06:fb:2a:82:8a:81:2f: db:e1:09:53:53:99:cd:b2:74:b0:0f:21:84:7a:e5:4a:96:e4: 69:0c:f6:0d:40:85:ea:dd:d7:01:fc:8c:50:48:f7:81:4a:1d: 75:86:57:5b:ac:f2:b9:9d:9f:e7:3f:ce:54:08:31:c7:bb:b2: 13:7b:a1:53:f4:fc:80:8b:d1:9e:b5:e7:8a:ab:16:04:c8:6b: bf:8b:88:d3:ae:6c:b7:ac:fb:1e:0b:ba:55:70:74:89:8f:47: c7:44:e7:7b:09:a2:ac:4a:48:e7:50:b5:48:aa:f1:94:b9:ee: 05:70:d2:f6:60:2f:a0:91:f9:22:66:a1:2e:b5:a3:9c:ce:a2: 7b:a6:6a:6e:4c:da:1d:33:65:e7:93:88:e2:09:be:69:3f:4e: bf:db:20:b5:53:2b:14:6c:c4:3e:03:79:54:e7:55:c6:bb:42: 3d:aa:f8:c0:73:83:0e:aa:b3:94:41:43:36:b3:2d:33:5d:f5: cd:fe:6b:ae -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I0RTkxMTAvBgNVBAUTKDUwQUU3MTZGM0QzNkI5QkVFQUUyN0YxMDA2OEY5RTM2 QTIzM0FCOTEwHhcNMjYwMTE3MDYyNTAxWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDAwNC00ZDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw303DfZUFr8FOWZGh5e3jy9Kr7+h0E8KTNVildkljoQLDm+Q6HAAgAgxHt8e t84MmFnKcNRs11b0Zp01QB3tbM5SDdeY5uzB39/l82RJEsWjfarKZjFfzEp0p+tk qKydeliz9SWYXFoCjZ2EyjQjkybDwrDxhXv9nAiJaZnhAxHUGRjS6atqEN+oFplq hTJTZZEpAn/yXyb4l97Lg1kef/7gQoEuehal36W810SfzC+FijL2XKItSUbQ9DhL g2F6+douv7y1RRlpevmNQaJgBLfHlrmn3R1BAIwIkhyT3KYoJu1hgksq9jPSICek IwYotBzfaUIoMikAgn4dgnH8HwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMl0I0Np +11gKG++bIOGAM2nTFLSMB8GA1UdIwQYMBaAFFCucW89Nrm+6uJ/EAaPnjaiM6uR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjRFOS9EMzg2MTM0NDQw RUUxMUYwOUU5MzM1MUNDNEY5QUUwMi9VSzV4YnowMnViN3E0bjhRQm8tZU5xSXpx NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VLNXhiejAydWI3cTRuOFFCby1lTnFJenE1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0I0RTkvRDM4NjEzNDQ0MEVFMTFGMDlFOTMzNTFDQzRGOUFFMDIvQkEyM0MwRTQ0 MEVGMTFGMDk5RDY3NjFEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyjHMMA0GCSqGSIb3DQEBCwUAA4IBAQAxv0VoK+MkRV6oDv8WBDIO SR2fev5JbOURZqZz21VS67GjjTz0J8bdTU5bXDUgQghQGWpqWI0cn20s+Rr0Gd2K ugb7KoKKgS/b4QlTU5nNsnSwDyGEeuVKluRpDPYNQIXq3dcB/IxQSPeBSh11hldb rPK5nZ/nP85UCDHHu7ITe6FT9PyAi9GeteeKqxYEyGu/i4jTrmy3rPseC7pVcHSJ j0fHROd7CaKsSkjnULVIqvGUue4FcNL2YC+gkfkiZqEutaOczqJ7pmpuTNodM2Xn k4jiCb5pP06/2yC1UysUbMQ+A3lU51XGu0I9qvjAc4MOqrOUQUM2sy0zXfXN/muu -----END CERTIFICATE-----Generated at Thu Mar 19 15:38:12 2026 by rpki-client