$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/038A3E10C47C11F092370F0AC4F9AE02.roa File: 038A3E10C47C11F092370F0AC4F9AE02.roa (raw, json) Hash identifier: PE30fEqW14AO5z9GLUYe95jY8ke+Jr+zM4xGnRRJLDM= Subject key identifier: 72:8F:C2:FD:17:C1:BA:39:01:6F:FA:6C:55:05:01:59:02:21:89:8C Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Certificate serial: 070E Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/038A3E10C47C11F092370F0AC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:19:13 +0000 ROA not before: Tue 18 Nov 2025 12:42:16 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 4755 IP address blocks: 124.247.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 23:24:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1806 (0x70e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Validity Not Before: Nov 18 12:42:16 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a49131-4ab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8f:83:ad:39:02:97:ec:bb:58:78:e4:7c:0b: 90:11:c6:64:cf:47:e3:8d:30:cc:0f:f0:f9:41:76: 6a:cd:f1:4a:90:96:e3:fe:ef:00:9a:b6:c4:7c:3b: fa:36:55:d7:cc:ab:5f:37:8e:8c:ca:33:10:ae:bd: 0a:07:08:26:7e:c5:85:f7:45:6b:fb:70:aa:d3:df: 1c:45:0f:a8:b1:39:8f:91:04:6f:e3:eb:7d:77:b7: 6d:78:b2:a5:fa:67:aa:80:36:2d:10:06:1d:fd:ad: f6:51:ec:eb:f3:1d:00:5a:f4:78:16:4d:7d:d7:b0: ab:84:bc:fd:0c:a6:28:28:53:e8:48:c6:d7:10:e0: ec:b9:b6:5d:89:70:80:32:89:29:cb:1b:50:16:19: ee:94:f7:dd:a9:8f:21:45:ec:34:aa:41:f4:c0:62: 63:be:de:3c:be:dc:39:ae:e6:ce:dc:c9:25:c0:6e: 45:2c:ea:ff:09:c0:f0:ab:4a:d4:6b:91:8f:9d:e3: e8:f1:e6:4b:d7:3a:01:49:39:2a:67:e2:14:8f:3b: 42:b2:ec:18:03:4c:89:4e:00:bd:43:af:f8:d1:76: d9:ce:e5:ab:e8:55:ea:87:df:00:2c:3f:69:df:e0: bc:3e:76:5c:9a:22:87:7d:88:47:44:21:91:e3:a5: 2c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8F:C2:FD:17:C1:BA:39:01:6F:FA:6C:55:05:01:59:02:21:89:8C X509v3 Authority Key Identifier: keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/038A3E10C47C11F092370F0AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 124.247.242.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:53:aa:35:d4:30:25:7c:de:7e:6f:2f:fe:16:ea:7d:fe:45: 6a:68:56:bc:01:22:68:eb:94:ef:48:56:e1:e6:82:71:31:e9: 5f:c6:26:b9:bb:fb:85:2d:c3:86:d5:e4:ad:3c:16:f4:58:e4: 83:f9:42:eb:ac:52:8f:a4:cb:ab:95:af:78:1e:bc:a1:b2:cb: 98:72:05:81:f1:b7:84:b3:d1:73:7b:5a:ea:3f:39:55:0a:e3: be:36:90:b7:33:14:f9:a6:e0:35:10:6e:1c:04:3c:3c:38:6a: 98:78:f4:7b:e4:9b:b0:4e:f7:2c:f1:d1:f3:83:b5:b6:fa:22: 31:2f:ea:01:e7:4f:65:ba:6c:85:f9:80:1d:ab:96:e6:05:b9: 32:c7:c0:de:0b:5b:46:7c:8a:20:50:70:62:4b:dc:46:cd:96: 8b:6c:b3:06:ba:f3:d8:75:77:cb:73:d6:8a:bd:30:a8:6b:96: d7:41:1f:1a:a2:76:ed:34:6e:f6:50:4b:e5:a4:88:7c:cc:d9: 54:c3:75:c6:27:bd:80:29:26:5e:fc:42:2e:79:b3:ad:64:10: f3:cf:98:bc:a5:67:7d:15:20:a0:ed:91:26:db:04:22:92:61: a6:44:42:94:37:84:f5:96:57:96:cc:ba:9e:b9:a2:fd:fd:5c: 54:83:28:1f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3 RDc0MTQ3RjMwHhcNMjUxMTE4MTI0MjE2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTEzMS00YWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4+DrTkCl+y7WHjkfAuQEcZkz0fjjTDMD/D5QXZqzfFKkJbj/u8AmrbEfDv6 NlXXzKtfN46MyjMQrr0KBwgmfsWF90Vr+3Cq098cRQ+osTmPkQRv4+t9d7dteLKl +meqgDYtEAYd/a32Uezr8x0AWvR4Fk1917CrhLz9DKYoKFPoSMbXEODsubZdiXCA MokpyxtQFhnulPfdqY8hRew0qkH0wGJjvt48vtw5rubO3MklwG5FLOr/CcDwq0rU a5GPnePo8eZL1zoBSTkqZ+IUjztCsuwYA0yJTgC9Q6/40XbZzuWr6FXqh98ALD9p 3+C8PnZcmiKHfYhHRCGR46UsRQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHKPwv0X wbo5AW/6bFUFAVkCIYmMMB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0QzOUQvREU3RDJGOTQ0RTc2MTFFQ0E1NzIwQjc5QzRGOUFFMDIvMDM4QTNFMTBD NDdDMTFGMDkyMzcwRjBBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAfPfyMA0GCSqGSIb3DQEBCwUAA4IBAQBNU6o11DAlfN5+by/+Fup9 /kVqaFa8ASJo65TvSFbh5oJxMelfxia5u/uFLcOG1eStPBb0WOSD+ULrrFKPpMur la94HryhssuYcgWB8beEs9Fze1rqPzlVCuO+NpC3MxT5puA1EG4cBDw8OGqYePR7 5JuwTvcs8dHzg7W2+iIxL+oB509lumyF+YAdq5bmBbkyx8DeC1tGfIogUHBiS9xG zZaLbLMGuvPYdXfLc9aKvTCoa5bXQR8aonbtNG72UEvlpIh8zNlUw3XGJ72AKSZe /EIuebOtZBDzz5i8pWd9FSCg7ZEm2wQikmGmREKUN4T1lleWzLqeuaL9/VxUgygf -----END CERTIFICATE-----Generated at Sat Mar 7 11:22:24 2026 by rpki-client