$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/AAFEACF0500311F0A7E46C33C4F9AE02.roa File: AAFEACF0500311F0A7E46C33C4F9AE02.roa (raw, json) Hash identifier: Kg5Gr3/4P3sEwkP/uByHr/MaXUD2e2owmRGRXgdGcwE= Subject key identifier: 7B:A2:ED:3E:B2:08:04:1F:AF:E0:E5:37:9B:72:D1:31:B8:50:EF:00 Certificate issuer: /CN=A91E1F31/serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Certificate serial: 0189 Authority key identifier: 69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/AAFEACF0500311F0A7E46C33C4F9AE02.roa Signing time: Mon 02 Mar 2026 15:06:06 +0000 ROA not before: Mon 23 Jun 2025 07:28:33 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 147314 IP address blocks: 202.37.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 03:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1F31, serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Validity Not Before: Jun 23 07:28:33 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a5a75e-14c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:07:e1:41:ad:04:4d:17:7d:78:9a:d8:e9:d2: cc:27:77:c7:05:af:ea:52:7e:59:16:5e:d1:65:4c: 8c:8e:6f:6e:47:67:56:af:94:a8:b2:67:48:0f:b6: 0c:fb:c5:ed:e7:43:75:2e:93:66:33:af:3f:3a:df: b4:ff:64:ac:f2:a8:15:d5:18:35:7e:39:c8:03:5b: fd:5a:35:6d:e3:61:81:bb:f5:54:2d:b0:0c:f0:6a: 81:45:fb:8e:8c:22:d4:e4:f3:0c:d3:cb:87:05:55: b8:3a:e6:7b:cf:1d:7b:1a:13:57:01:96:90:c5:da: c5:1a:b2:58:0a:e1:db:b5:64:87:fe:63:bf:60:0d: 96:3f:e1:27:0a:67:20:5a:31:c1:5d:d1:4b:80:dd: 02:6f:61:92:c8:3b:17:95:3f:2d:70:2f:f1:0b:ba: e5:d9:b5:fa:b1:8d:93:b6:65:3c:76:5b:35:cc:d1: 13:c5:05:b2:a4:37:ed:33:a8:9a:7f:37:4d:9e:e8: 28:cb:48:ee:7f:1e:bd:b3:b5:f0:ba:d2:05:95:51: 32:4d:c8:fb:84:03:9d:d9:04:ad:69:8f:de:37:a2: ba:33:fb:23:c2:2f:ba:f5:f7:e1:5e:d3:b9:37:f2: 99:14:38:b0:05:c2:3a:6b:7b:a7:d1:0f:4c:f3:a4: 84:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A2:ED:3E:B2:08:04:1F:AF:E0:E5:37:9B:72:D1:31:B8:50:EF:00 X509v3 Authority Key Identifier: keyid:69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/AAFEACF0500311F0A7E46C33C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.37.47.0/24 Signature Algorithm: sha256WithRSAEncryption a4:1a:03:49:17:15:b1:9d:63:9c:b6:2b:d9:12:d6:e9:e9:db: 78:26:38:16:bc:99:76:05:4b:07:c3:f4:95:fd:f0:39:d5:b0: 14:ab:b8:6a:3c:a0:fa:86:94:f3:7a:0a:87:04:d7:3a:b0:12: 60:12:b6:7e:c6:7a:0a:2b:a9:0e:3d:56:ae:24:b6:35:a2:33: 2a:34:10:7a:cc:93:af:24:c2:24:7b:20:b9:46:d2:75:c0:21: 60:ea:9f:aa:f9:7c:72:ec:a7:ff:4a:3e:70:e4:ff:ff:64:f0: 78:1b:c4:b7:67:46:a4:4a:89:49:ef:53:c3:c5:7d:e3:e4:a9: d8:eb:eb:c7:11:4f:a7:fb:ea:83:a0:97:8f:9c:a1:58:dd:4e: e9:85:c1:e0:38:df:4f:d7:52:7f:9b:c8:30:28:e9:30:0a:1d: cf:fe:cb:e8:1c:d4:95:1b:26:6a:86:32:7e:2f:78:f6:a2:94: 9e:0b:ae:fe:1f:fc:d9:a6:6a:3e:76:ea:33:ff:8e:46:95:1b: d9:fa:97:e7:48:ab:4e:1a:75:3a:fb:79:92:20:36:31:c8:ae: 32:0f:d4:cb:37:30:65:06:97:dd:68:d1:d3:89:b9:51:b7:56: 90:fe:ea:3c:21:8c:57:a9:cb:27:bd:bf:c2:e7:0c:48:31:3d: b7:98:9e:73 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFGMzExMTAvBgNVBAUTKDY5QTMyRDczRTAzOEEzMEQ0N0FDQUNFQjgxQ0Q3MzEy QUY3NTNBQjkwHhcNMjUwNjIzMDcyODMzWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTc1ZS0xNGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1AfhQa0ETRd9eJrY6dLMJ3fHBa/qUn5ZFl7RZUyMjm9uR2dWr5SosmdID7YM +8Xt50N1LpNmM68/Ot+0/2Ss8qgV1Rg1fjnIA1v9WjVt42GBu/VULbAM8GqBRfuO jCLU5PMM08uHBVW4OuZ7zx17GhNXAZaQxdrFGrJYCuHbtWSH/mO/YA2WP+EnCmcg WjHBXdFLgN0Cb2GSyDsXlT8tcC/xC7rl2bX6sY2TtmU8dls1zNETxQWypDftM6ia fzdNnugoy0jufx69s7XwutIFlVEyTcj7hAOd2QStaY/eN6K6M/sjwi+69ffhXtO5 N/KZFDiwBcI6a3un0Q9M86SEtwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHui7T6y CAQfr+DlN5ty0TG4UO8AMB8GA1UdIwQYMBaAFGmjLXPgOKMNR6ys64HNcxKvdTq5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUYzMS9BMEY0RTBEMEUx QkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93MUhyS3pyZ2MxekVxOTFP cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhTXRjLUE0b3cxSHJLenJnYzF6RXE5MU9yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTFGMzEvQTBGNEUwRDBFMUJFMTFFRUIwNDVFQjI2QzRGOUFFMDIvQUFGRUFDRjA1 MDAzMTFGMEE3RTQ2QzMzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyiUvMA0GCSqGSIb3DQEBCwUAA4IBAQCkGgNJFxWxnWOctivZEtbp 6dt4JjgWvJl2BUsHw/SV/fA51bAUq7hqPKD6hpTzegqHBNc6sBJgErZ+xnoKK6kO PVauJLY1ojMqNBB6zJOvJMIkeyC5RtJ1wCFg6p+q+Xxy7Kf/Sj5w5P//ZPB4G8S3 Z0akSolJ71PDxX3j5KnY6+vHEU+n++qDoJePnKFY3U7phcHgON9P11J/m8gwKOkw Ch3P/svoHNSVGyZqhjJ+L3j2opSeC67+H/zZpmo+duoz/45GlRvZ+pfnSKtOGnU6 +3mSIDYxyK4yD9TLNzBlBpfdaNHTiblRt1aQ/uo8IYxXqcsnvb/C5wxIMT23mJ5z -----END CERTIFICATE-----Generated at Fri Mar 13 13:32:13 2026 by rpki-client