$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/CAC3390AD30E11EB98AEFF45C4F9AE02.roa File: CAC3390AD30E11EB98AEFF45C4F9AE02.roa (raw, json) Hash identifier: rKjjHee6JIYauM+6orDTrmCs5dwV2vCzo13l1rP7xP8= Subject key identifier: 18:39:B6:84:57:92:A7:D9:F4:08:89:3C:6C:A3:A1:42:1A:84:9A:3C Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Certificate serial: 2868 Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/CAC3390AD30E11EB98AEFF45C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:39:02 +0000 ROA not before: Tue 08 Apr 2025 15:53:42 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 16625 IP address blocks: 202.138.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 15:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10344 (0x2868) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Validity Not Before: Apr 8 15:53:42 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a487c6-b338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a8:b0:dc:4b:99:92:8d:33:b4:9d:6e:e6:1c: 3a:99:9c:02:38:74:27:c0:04:2a:f9:bd:2c:c7:94: bd:0f:2e:75:2d:54:bc:9c:74:96:f4:ae:0e:95:ca: 0b:22:d6:43:ca:58:df:6b:a7:3b:1e:b2:38:f9:58: a7:31:34:37:9e:2d:4b:96:13:b1:71:18:f7:f5:fb: 3c:19:98:58:17:36:a8:a6:1c:c6:a8:6d:32:79:ef: dd:5a:c2:96:70:a0:d2:e2:c0:fe:d0:f6:c2:c5:e9: 1d:79:ec:8a:8c:6b:6d:89:25:79:85:84:4d:1a:21: 79:ed:49:2b:4a:35:b0:55:07:17:99:a1:6f:35:60: 26:10:89:b8:35:0c:ff:4d:0e:2f:92:ff:eb:79:de: b2:a3:68:bf:fb:8b:da:06:b9:ec:42:11:b2:35:5f: b2:23:9f:12:52:48:41:d9:79:3f:1b:ed:b8:b4:ad: 7f:aa:b4:e1:65:26:84:3a:ac:8f:7e:d6:af:06:8e: 51:df:a2:d0:e7:5d:65:cc:2f:f9:c0:0e:19:50:3c: 9d:68:16:6f:f4:61:c0:a6:ca:0f:15:d7:fa:dc:89: b9:1d:e4:d2:40:29:e8:3c:33:59:a4:87:71:c3:2c: d4:e5:83:de:17:a5:9e:43:62:fb:55:e1:fe:e3:e7: 2b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:39:B6:84:57:92:A7:D9:F4:08:89:3C:6C:A3:A1:42:1A:84:9A:3C X509v3 Authority Key Identifier: keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/CAC3390AD30E11EB98AEFF45C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.138.164.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:80:97:6e:0e:34:1f:34:b1:0e:44:7d:ed:eb:1c:16:ca:3e: c2:bf:61:3e:bf:59:0d:f9:96:4d:80:1c:96:51:7d:ac:41:23: fe:40:48:a3:c3:b2:6b:37:4f:f5:c0:4f:80:ef:90:c1:1c:c0: 43:9a:95:5d:cb:cf:0d:74:ba:90:9e:ec:f7:ef:ae:57:c3:3c: 78:a0:38:12:4e:97:82:a7:d0:85:77:60:be:a2:3e:1c:ed:fb: a5:49:ad:1b:89:f1:23:d7:95:57:bb:c8:4e:d1:b2:bc:73:d4: f6:bd:87:f8:13:cc:08:bd:97:d9:e4:8f:6a:d7:bc:73:fc:19: d0:55:dc:6b:95:52:b6:77:10:7d:91:1c:c0:b3:c5:2d:66:7c: 71:3a:04:8b:c4:d9:2d:b4:d5:13:34:4d:bb:fd:72:f8:12:d9: 46:ac:15:61:8e:03:ea:fc:e8:47:0d:2f:14:da:e3:5c:7e:d1: 62:84:55:b6:af:e7:d9:58:ff:b1:e0:26:91:55:6e:78:49:8d: 74:37:21:58:1b:8b:c9:5e:cf:af:79:2b:40:6b:43:0c:ac:21: f2:e0:57:82:52:e4:b9:05:61:44:73:6c:31:1a:7a:ad:51:f8: 12:ba:82:e1:a7:3d:cf:61:4c:cb:f0:48:e2:64:06:b7:05:4a: 05:81:64:7e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICKGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUyNkRCREVGMUIw NDU5MjhBQjgwHhcNMjUwNDA4MTU1MzQyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODdjNi1iMzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKiw3EuZko0ztJ1u5hw6mZwCOHQnwAQq+b0sx5S9Dy51LVS8nHSW9K4OlcoL ItZDyljfa6c7HrI4+VinMTQ3ni1LlhOxcRj39fs8GZhYFzaophzGqG0yee/dWsKW cKDS4sD+0PbCxekdeeyKjGttiSV5hYRNGiF57UkrSjWwVQcXmaFvNWAmEIm4NQz/ TQ4vkv/red6yo2i/+4vaBrnsQhGyNV+yI58SUkhB2Xk/G+24tK1/qrThZSaEOqyP ftavBo5R36LQ511lzC/5wA4ZUDydaBZv9GHApsoPFdf63Im5HeTSQCnoPDNZpIdx wyzU5YPeF6WeQ2L7VeH+4+crgwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBg5toRX kqfZ9AiJPGyjoUIahJo8MB8GA1UdIwQYMBaAFF0t0VS13OIft4bFJtve8bBFkoq4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkI3MC8yOTgzNjQ3Qzgz OEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRoLTNoc1VtMjk3eHNFV1Np cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hTM1JWTFhjNGgtM2hzVW0yOTd4c0VXU2lyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REZCNzAvMjk4MzY0N0M4MzhGMTFFNTg2RkM1ODEyQzRGOUFFMDIvQ0FDMzM5MEFE MzBFMTFFQjk4QUVGRjQ1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCyoqkMA0GCSqGSIb3DQEBCwUAA4IBAQAtgJduDjQfNLEORH3t6xwW yj7Cv2E+v1kN+ZZNgByWUX2sQSP+QEijw7JrN0/1wE+A75DBHMBDmpVdy88NdLqQ nuz3765Xwzx4oDgSTpeCp9CFd2C+oj4c7fulSa0bifEj15VXu8hO0bK8c9T2vYf4 E8wIvZfZ5I9q17xz/BnQVdxrlVK2dxB9kRzAs8UtZnxxOgSLxNkttNUTNE27/XL4 EtlGrBVhjgPq/OhHDS8U2uNcftFihFW2r+fZWP+x4CaRVW54SY10NyFYG4vJXs+v eStAa0MMrCHy4FeCUuS5BWFEc2wxGnqtUfgSuoLhpz3PYUzL8EjiZAa3BUoFgWR+ -----END CERTIFICATE-----Generated at Sun Mar 8 03:20:53 2026 by rpki-client