$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/38556AC6ED7711EEA7B2AF12C4F9AE02.roa File: 38556AC6ED7711EEA7B2AF12C4F9AE02.roa (raw, json) Hash identifier: mVKVwUNodXC2dILmuSgM+YaGamOWVYaoYaJr0bNv0L4= Subject key identifier: EC:BF:C2:A4:87:7A:E5:E0:59:2B:6B:2C:A8:94:6D:AE:AC:AF:80:A5 Certificate issuer: /CN=A91CE959/serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2 Certificate serial: 0182 Authority key identifier: D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/38556AC6ED7711EEA7B2AF12C4F9AE02.roa Signing time: Sat 07 Mar 2026 04:40:03 +0000 ROA not before: Sat 07 Mar 2026 04:40:03 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 9919 IP address blocks: 202.58.21.0/24 maxlen: 24 202.58.23.0/24 maxlen: 24 202.58.24.0/24 maxlen: 24 202.58.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 04:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE959, serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2 Validity Not Before: Mar 7 04:40:03 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69abac23-61ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e9:d9:b9:c3:08:94:fa:c4:f5:7a:ef:a9:7d: 82:3a:56:db:6e:3c:60:1f:6b:65:14:74:9c:0f:85: 7d:be:58:63:80:08:5e:23:8b:59:76:78:e0:6a:09: ca:d1:49:dc:8b:2e:64:0d:02:2b:66:5e:d7:c8:12: 4d:2f:2c:40:ba:fe:29:c5:58:47:72:1d:14:03:01: f9:70:10:a2:82:cf:cb:b4:87:70:11:1a:e7:d9:14: 65:f6:3e:bc:76:5d:37:17:85:ac:59:1f:65:23:06: 36:64:fe:b6:28:1b:7f:d5:84:20:1c:a7:b6:b8:93: fa:86:4b:23:2c:2f:b0:7c:96:af:b4:2a:4f:6a:42: f1:36:d6:f6:97:c5:5b:2b:52:22:3c:3b:91:18:ea: e1:4a:e2:e8:4b:32:31:d4:c0:61:e4:ce:40:70:e2: f9:77:5e:2a:bd:79:0f:81:03:8c:8a:82:40:bf:b7: 39:46:c6:cd:1a:ab:5d:2c:a2:92:1d:d1:a7:29:c7: dc:38:a2:66:07:de:85:3f:ab:92:87:0c:77:44:2f: b4:85:07:52:40:90:2c:3c:3e:9b:b2:8b:88:7f:a5: 36:2d:99:e3:c1:19:d2:e2:de:d7:ef:6f:95:a7:dc: 7e:31:39:e0:80:09:75:3f:5a:ca:71:1b:2e:79:66: c0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:BF:C2:A4:87:7A:E5:E0:59:2B:6B:2C:A8:94:6D:AE:AC:AF:80:A5 X509v3 Authority Key Identifier: keyid:D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/38556AC6ED7711EEA7B2AF12C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.58.21.0/24 202.58.23.0-202.58.25.255 Signature Algorithm: sha256WithRSAEncryption 56:eb:00:c3:62:75:80:e3:88:b8:07:42:fb:f3:65:76:f0:30: c3:25:b6:df:ad:67:04:9c:8c:aa:a3:67:68:06:c8:27:c3:9b: b0:e1:7f:8d:5e:56:5b:1f:b7:8b:44:41:be:62:d1:b9:38:4e: 9a:37:fd:22:46:ca:66:b3:bc:17:76:2a:e4:49:d7:b3:45:91: 9a:ec:82:2c:a0:1b:a5:3d:cb:54:35:e1:e9:d6:8a:67:bc:26: 78:ca:56:07:4c:39:a4:15:e8:c0:e6:4a:a9:b2:39:16:52:f1: dd:ec:ac:85:ed:1b:1f:a4:df:f7:c6:09:0a:fa:a4:f1:be:94: 6a:b6:fd:27:e9:d5:65:a3:cc:c4:b0:5c:9b:d0:e8:23:b8:51: 29:36:43:03:0b:11:5b:33:15:bc:cf:54:04:1b:ea:21:b1:22: b1:51:8c:71:b2:47:f8:f5:1b:10:6b:8b:29:af:6d:08:b6:2f: da:a4:20:47:db:f0:ef:ea:53:ed:a4:26:8f:4e:db:b8:f1:7a: 28:ea:41:51:89:60:87:69:cb:42:29:ef:fb:76:72:27:ad:d6: 30:b5:14:dc:f8:ed:b6:28:80:b3:59:d8:a8:25:2a:50:02:67: 29:1b:9b:57:d3:9d:52:2c:87:a1:01:5b:2b:f6:4f:74:8d:d0: bb:bb:75:bf -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5NTkxMTAvBgNVBAUTKEQ2RUMyMkE3M0E1OUQyQUE5NTU5OTc0NzAyNzlDNjYy RDExMDg4RjIwHhcNMjYwMzA3MDQ0MDAzWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWFiYWMyMy02MWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+nZucMIlPrE9XrvqX2COlbbbjxgH2tlFHScD4V9vlhjgAheI4tZdnjgagnK 0Unciy5kDQIrZl7XyBJNLyxAuv4pxVhHch0UAwH5cBCigs/LtIdwERrn2RRl9j68 dl03F4WsWR9lIwY2ZP62KBt/1YQgHKe2uJP6hksjLC+wfJavtCpPakLxNtb2l8Vb K1IiPDuRGOrhSuLoSzIx1MBh5M5AcOL5d14qvXkPgQOMioJAv7c5RsbNGqtdLKKS HdGnKcfcOKJmB96FP6uShwx3RC+0hQdSQJAsPD6bsouIf6U2LZnjwRnS4t7X72+V p9x+MTnggAl1P1rKcRsueWbA/wIDAQABo4ICbjCCAmowHQYDVR0OBBYEFOy/wqSH euXgWStrLKiUba6sr4ClMB8GA1UdIwQYMBaAFNbsIqc6WdKqlVmXRwJ5xmLREIjy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTk1OS9BQTRDNzdFQ0VE NzYxMUVFQUQ4NzFBMTFDNEY5QUUwMi8xdXdpcHpwWjBxcVZXWmRIQW5uR1l0RVFp UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF1d2lwenBaMHFxVldaZEhBbm5HWXRFUWlQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0U5NTkvQUE0Qzc3RUNFRDc2MTFFRUFEODcxQTExQzRGOUFFMDIvMzg1NTZBQzZF RDc3MTFFRUE3QjJBRjEyQzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUAwQAyjoVMAwDBADKOhcDBAHKOhgwDQYJKoZIhvcNAQELBQADggEBAFbr AMNidYDjiLgHQvvzZXbwMMMltt+tZwScjKqjZ2gGyCfDm7Dhf41eVlsft4tEQb5i 0bk4Tpo3/SJGymazvBd2KuRJ17NFkZrsgiygG6U9y1Q14enWime8JnjKVgdMOaQV 6MDmSqmyORZS8d3srIXtGx+k3/fGCQr6pPG+lGq2/Sfp1WWjzMSwXJvQ6CO4USk2 QwMLEVszFbzPVAQb6iGxIrFRjHGyR/j1GxBriymvbQi2L9qkIEfb8O/qU+2kJo9O 27jxeijqQVGJYIdpy0Ip7/t2ciet1jC1FNz47bYogLNZ2KglKlACZykbm1fTnVIs h6EBWyv2T3SN0Lu7db8= -----END CERTIFICATE-----Generated at Sun Mar 8 03:16:22 2026 by rpki-client