$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/328C9E7CDC1A11EC89244C2FC4F9AE02.roa File: 328C9E7CDC1A11EC89244C2FC4F9AE02.roa (raw, json) Hash identifier: SKfW4daROkL79U1lqA8R/sqQZ+TNV9o/ZUq25H/qMII= Subject key identifier: DB:3D:DE:BB:8E:9F:A8:AA:02:2E:79:45:7D:E1:43:35:87:96:A9:85 Certificate issuer: /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Certificate serial: 03FF Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/328C9E7CDC1A11EC89244C2FC4F9AE02.roa Signing time: Mon 02 Mar 2026 05:12:40 +0000 ROA not before: Thu 05 Jun 2025 01:08:21 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 8943 IP address blocks: 203.11.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 00:20:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1023 (0x3ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E91BC, serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Validity Not Before: Jun 5 01:08:21 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a51c48-720c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5c:22:38:07:77:53:d4:88:19:a0:87:ca:ab: d2:96:ae:de:1c:44:af:56:fc:96:db:8b:6f:7d:d7: 89:bb:57:4f:63:f8:6a:ff:cb:6b:64:d4:d3:6e:e0: 59:bf:05:29:c0:40:f1:e8:a4:99:5f:a0:ed:9e:ee: f4:d7:7b:5b:f8:db:38:8d:a3:f4:a7:96:06:30:d2: ac:1d:04:10:ea:52:80:a5:d6:30:7d:b7:df:da:2e: bf:9e:8c:9d:5a:f2:2d:e8:c7:da:73:aa:4c:ac:da: 38:1b:a5:bb:3d:eb:d2:cd:7e:d5:28:21:37:28:8f: f7:0b:d1:ea:05:93:5d:39:de:4f:49:a0:7c:9e:63: 3f:5b:a0:5d:d7:c9:35:45:e1:a7:71:4a:32:c0:36: 75:44:a9:fa:79:47:17:dd:39:88:06:43:a6:d8:c5: 23:58:18:3c:81:39:48:ae:1f:60:5d:17:19:cd:d2: 70:8c:58:a0:02:10:fb:b6:5b:0c:a1:f3:82:65:c6: 47:d6:69:87:54:c9:16:66:aa:d0:ff:a8:62:72:dc: 96:9e:e8:13:a1:15:c5:15:91:5d:b6:05:e5:a1:53: 8a:f2:5a:a4:a8:88:67:52:29:be:6d:a1:0b:9a:29: 8b:43:52:a0:dc:83:7d:55:70:e5:df:d3:80:4d:33: c2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:3D:DE:BB:8E:9F:A8:AA:02:2E:79:45:7D:E1:43:35:87:96:A9:85 X509v3 Authority Key Identifier: keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/328C9E7CDC1A11EC89244C2FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.11.114.0/24 Signature Algorithm: sha256WithRSAEncryption d5:8b:c1:76:52:61:c3:7d:8e:5e:4e:09:a6:05:15:c8:b8:c2: 6d:1a:47:01:52:3c:d2:89:9b:78:da:5c:ad:f7:82:e6:1e:df: 05:72:e6:1b:5e:b2:0d:93:8b:61:ae:40:77:91:18:92:2e:ce: e4:fd:1d:42:5e:60:eb:4a:f4:19:2e:97:c5:10:3d:b2:33:ba: 00:49:67:e2:92:13:2f:9e:27:36:02:91:7b:17:96:06:70:d4: bd:a5:f6:fc:7a:d0:23:49:15:5b:08:8e:1a:66:a4:f9:d8:53: f8:02:ec:15:38:fb:09:89:f9:b0:e2:37:7d:65:53:a3:6f:ff: db:72:c2:2f:f0:ba:83:24:49:d0:b9:cc:7d:5c:d4:9c:50:32: 35:05:f6:78:c1:f4:1b:d7:21:0d:70:6c:2d:28:47:33:85:99: 4a:66:bd:35:8b:86:63:78:8e:30:f9:0a:52:ff:85:40:03:6e: f0:fb:52:35:39:f5:42:1b:1e:f0:17:ec:a7:6d:39:5e:31:84: 7e:f3:1a:6d:b8:68:01:8b:2e:10:7e:19:b3:a4:0c:00:7b:8d: f0:07:d8:af:1a:ff:bf:93:0a:61:39:7d:1a:11:6d:8c:a3:27: ec:fe:e8:9e:b5:12:cc:9e:60:48:fd:1e:8a:79:08:b8:76:91: b1:55:c3:d0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICA/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkxQkMxMTAvBgNVBAUTKDZENUQ1MEU4OEI5RDY1RThBRkRBMjhDMkNFQTYxNTAx MjcwMzg2MDgwHhcNMjUwNjA1MDEwODIxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1MWM0OC03MjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2VwiOAd3U9SIGaCHyqvSlq7eHESvVvyW24tvfdeJu1dPY/hq/8trZNTTbuBZ vwUpwEDx6KSZX6Dtnu7013tb+Ns4jaP0p5YGMNKsHQQQ6lKApdYwfbff2i6/noyd WvIt6Mfac6pMrNo4G6W7PevSzX7VKCE3KI/3C9HqBZNdOd5PSaB8nmM/W6Bd18k1 ReGncUoywDZ1RKn6eUcX3TmIBkOm2MUjWBg8gTlIrh9gXRcZzdJwjFigAhD7tlsM ofOCZcZH1mmHVMkWZqrQ/6hictyWnugToRXFFZFdtgXloVOK8lqkqIhnUim+baEL mimLQ1Kg3IN9VXDl39OATTPCLQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNs93ruO n6iqAi55RX3hQzWHlqmFMB8GA1UdIwQYMBaAFG1dUOiLnWXor9oows6mFQEnA4YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTFCQy9BRTQ0RDI0QURC RTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFplaXYyaWpDenFZVkFTY0Ro Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JWMVE2SXVkWmVpdjJpakN6cVlWQVNjRGhnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTkxQkMvQUU0NEQyNEFEQkU5MTFFQzk1MTEwNTE1QzRGOUFFMDIvMzI4QzlFN0NE QzFBMTFFQzg5MjQ0QzJGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAywtyMA0GCSqGSIb3DQEBCwUAA4IBAQDVi8F2UmHDfY5eTgmmBRXI uMJtGkcBUjzSiZt42lyt94LmHt8FcuYbXrINk4thrkB3kRiSLs7k/R1CXmDrSvQZ LpfFED2yM7oASWfikhMvnic2ApF7F5YGcNS9pfb8etAjSRVbCI4aZqT52FP4AuwV OPsJifmw4jd9ZVOjb//bcsIv8LqDJEnQucx9XNScUDI1BfZ4wfQb1yENcGwtKEcz hZlKZr01i4ZjeI4w+QpS/4VAA27w+1I1OfVCGx7wF+ynbTleMYR+8xptuGgBiy4Q fhmzpAwAe43wB9ivGv+/kwphOX0aEW2Moyfs/uietRLMnmBI/R6KeQi4dpGxVcPQ -----END CERTIFICATE-----Generated at Fri Mar 13 18:32:35 2026 by rpki-client