$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/9F8DA582EA0F11F0944A7CD7716F56BC.roa File: 9F8DA582EA0F11F0944A7CD7716F56BC.roa (raw, json) Hash identifier: 3YwwSJL/lczWD+gAqMpWstD/Bdbs+l7Ejs50rGgef0E= Subject key identifier: 4E:4C:62:00:36:0B:14:30:72:34:D8:11:9A:89:0C:9B:11:91:35:A2 Certificate issuer: /CN=A91D0853/serialNumber=E0F3CFBDFA7D074274FA749D4029CEE3588F77C3 Certificate serial: 0855 Authority key identifier: E0:F3:CF:BD:FA:7D:07:42:74:FA:74:9D:40:29:CE:E3:58:8F:77:C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/9F8DA582EA0F11F0944A7CD7716F56BC.roa Signing time: Sun 01 Mar 2026 17:35:54 +0000 ROA not before: Mon 05 Jan 2026 08:22:07 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 40676 IP address blocks: 202.91.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.crl rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Mar 2026 20:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2133 (0x855) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0853, serialNumber=E0F3CFBDFA7D074274FA749D4029CEE3588F77C3 Validity Not Before: Jan 5 08:22:07 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a478fa-2c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ab:d8:34:12:23:66:c2:2a:40:86:6a:26:a7: da:99:b8:57:0a:b4:58:86:2f:64:54:2c:c4:2d:6a: 3e:57:b1:d2:5c:2f:62:09:20:c4:37:45:9a:ba:f9: 71:2d:13:9c:61:b7:cd:25:37:d1:c1:54:90:78:e9: 63:93:0f:ae:3d:68:9a:f0:7b:89:2b:58:a4:f7:a1: ad:b6:92:02:c9:a1:18:ea:24:b4:82:f1:91:a1:63: 0a:a3:f5:79:5c:93:c9:87:1d:e7:46:c1:a3:22:56: 0b:71:e8:7b:7d:0a:3a:6c:b0:01:b7:03:c6:a0:da: 74:7e:bc:7c:f4:0c:ca:0c:67:89:b1:10:05:3a:91: 17:57:7e:6c:d5:c2:e9:79:51:5d:a2:bb:23:e0:be: 64:86:27:a6:23:23:33:38:72:eb:36:ba:88:9c:e8: 8c:cd:1b:94:17:86:ab:5d:cb:cc:a6:36:d2:55:57: 44:f8:2b:b7:6e:80:a7:f1:55:43:ff:1f:2d:85:7d: 2e:0a:60:03:57:7d:d4:e1:e8:c8:e9:1d:78:80:72: c3:9f:67:07:17:b7:1d:3e:5f:af:4a:27:ff:7a:ee: 24:df:5f:22:43:8b:7d:d2:01:9f:9e:4b:7a:61:4a: d4:16:a0:e5:7a:ea:53:2a:95:19:56:cb:80:96:a3: 66:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4C:62:00:36:0B:14:30:72:34:D8:11:9A:89:0C:9B:11:91:35:A2 X509v3 Authority Key Identifier: keyid:E0:F3:CF:BD:FA:7D:07:42:74:FA:74:9D:40:29:CE:E3:58:8F:77:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/9F8DA582EA0F11F0944A7CD7716F56BC.roa sbgp-ipAddrBlock: critical IPv4: 202.91.169.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:21:21:e5:60:de:5b:b0:6e:59:66:f1:d4:7a:d0:d2:d7:d8: 6c:d7:4a:0f:c3:72:f6:6f:5a:0b:1b:7e:98:a3:1e:5a:f9:89: 38:5c:52:a4:b7:e2:f1:fb:0e:b9:72:d6:a8:a0:5d:06:ae:05: 6f:8b:d7:9a:18:27:a1:08:24:2b:78:60:2c:b0:9d:94:7b:e1: c8:ab:65:72:3b:12:b2:6a:d8:b9:36:81:f1:98:58:94:7a:af: b3:d4:9f:7e:f7:df:ab:46:85:68:1c:c5:1a:83:cb:3e:32:df: 5b:14:36:ab:0e:57:0f:74:40:92:8b:0e:96:9e:5f:aa:18:72: d9:41:13:84:e5:47:0d:90:08:19:93:43:bb:28:0e:b2:9b:d1: 2a:99:b1:15:af:3f:b8:7f:f6:25:66:72:64:3d:51:df:36:d7: ee:72:51:26:46:da:2e:71:05:13:ce:46:69:96:cb:06:ad:f0: 5a:d5:e5:5f:c0:a2:2b:1f:70:46:05:68:3b:83:64:0d:fc:c8: d7:39:bc:68:34:cf:1c:e0:29:08:64:8b:a9:05:61:87:3e:25: 14:9e:97:83:f3:86:27:2f:8a:b4:21:24:a6:c1:7d:19:07:e6: 38:39:aa:7b:92:f0:cd:02:e7:6a:54:1d:cc:a8:57:f0:f0:e1: 3d:8e:5a:82 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA4NTMxMTAvBgNVBAUTKEUwRjNDRkJERkE3RDA3NDI3NEZBNzQ5RDQwMjlDRUUz NTg4Rjc3QzMwHhcNMjYwMTA1MDgyMjA3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzhmYS0yYzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKvYNBIjZsIqQIZqJqfambhXCrRYhi9kVCzELWo+V7HSXC9iCSDEN0Wauvlx LROcYbfNJTfRwVSQeOljkw+uPWia8HuJK1ik96GttpICyaEY6iS0gvGRoWMKo/V5 XJPJhx3nRsGjIlYLceh7fQo6bLABtwPGoNp0frx89AzKDGeJsRAFOpEXV35s1cLp eVFdorsj4L5khiemIyMzOHLrNrqInOiMzRuUF4arXcvMpjbSVVdE+Cu3boCn8VVD /x8thX0uCmADV33U4ejI6R14gHLDn2cHF7cdPl+vSif/eu4k318iQ4t90gGfnkt6 YUrUFqDleupTKpUZVsuAlqNmHQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFE5MYgA2 CxQwcjTYEZqJDJsRkTWiMB8GA1UdIwQYMBaAFODzz736fQdCdPp0nUApzuNYj3fD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDg1My81Qjk0MzkwRTA0 NDExMUVCOTFDNDNFNDVDNEY5QUUwMi80UFBQdmZwOUIwSjAtblNkUUNuTzQxaVBk OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRQUFB2ZnA5QjBKMC1uU2RRQ25PNDFpUGQ4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDA4NTMvNUI5NDM5MEUwNDQxMTFFQjkxQzQzRTQ1QzRGOUFFMDIvOUY4REE1ODJF QTBGMTFGMDk0NEE3Q0Q3NzE2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAylupMA0GCSqGSIb3DQEBCwUAA4IBAQBeISHlYN5bsG5ZZvHUetDS 19hs10oPw3L2b1oLG36Yox5a+Yk4XFKkt+Lx+w65ctaooF0GrgVvi9eaGCehCCQr eGAssJ2Ue+HIq2VyOxKyati5NoHxmFiUeq+z1J9+99+rRoVoHMUag8s+Mt9bFDar DlcPdECSiw6Wnl+qGHLZQROE5UcNkAgZk0O7KA6ym9EqmbEVrz+4f/YlZnJkPVHf NtfuclEmRtoucQUTzkZplssGrfBa1eVfwKIrH3BGBWg7g2QN/MjXObxoNM8c4CkI ZIupBWGHPiUUnpeD84YnL4q0ISSmwX0ZB+Y4Oap7kvDNAudqVB3MqFfw8OE9jlqC -----END CERTIFICATE-----Generated at Tue Mar 10 06:26:56 2026 by rpki-client