$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/D1A4CFBA4FBE11EF97812B80C4F9AE02.roa File: D1A4CFBA4FBE11EF97812B80C4F9AE02.roa (raw, json) Hash identifier: Sg47+AxlxCK2XX0hEgjt14qUmvnvlCt8GjGyJgpeWz4= Subject key identifier: A7:C0:51:3C:FE:6F:A7:A8:04:40:0D:89:1E:B0:C4:AE:61:0B:83:2A Certificate issuer: /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Certificate serial: 03FE Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/D1A4CFBA4FBE11EF97812B80C4F9AE02.roa Signing time: Mon 02 Mar 2026 05:12:39 +0000 ROA not before: Thu 05 Jun 2025 01:08:20 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 7545 IP address blocks: 202.12.90.0/24 maxlen: 24 203.14.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 00:29:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1022 (0x3fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E91BC, serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Validity Not Before: Jun 5 01:08:20 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a51c47-c594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:32:3b:b4:bb:9a:6b:c7:6a:92:6c:29:8a:82: 25:b8:0c:27:a5:28:3d:ab:34:95:34:ef:71:67:94: f7:51:7e:09:c4:04:ec:ce:4a:d9:a4:7e:75:ea:9c: 32:31:c8:69:7c:9a:f4:80:9c:40:74:d6:25:79:f1: 01:fa:b3:c2:c0:88:d3:e3:b2:60:d2:b8:5d:cb:b1: 64:f5:79:2c:cd:46:db:a1:b3:0d:ef:93:61:bb:6a: e4:79:7c:5c:83:42:7a:01:d0:34:b4:38:8d:13:2d: ae:72:26:bc:e8:e4:65:5f:2f:e1:4f:77:0c:b5:21: b0:b0:92:2c:d9:ad:e3:ed:ec:38:85:6c:2c:be:3d: de:b0:5e:81:55:b8:65:8c:a4:81:19:4b:30:00:6b: 66:34:a6:6d:8f:7b:76:9e:75:f5:b4:38:69:79:0e: c9:9e:c8:e2:51:55:d2:72:70:9a:62:39:c5:bc:52: fb:95:f5:4b:8b:24:f0:b8:97:7c:5b:14:bd:af:2b: 4e:22:c5:00:5b:de:cd:89:e8:00:1d:50:88:65:03: ae:76:65:83:2e:e8:65:b3:41:07:06:4e:2d:e1:33: 9c:67:23:80:7f:10:f1:2f:47:0b:97:2b:2d:be:63: 6e:9d:55:7b:a5:ee:78:3a:a4:6d:03:2c:5b:26:91: 92:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C0:51:3C:FE:6F:A7:A8:04:40:0D:89:1E:B0:C4:AE:61:0B:83:2A X509v3 Authority Key Identifier: keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/D1A4CFBA4FBE11EF97812B80C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.12.90.0/24 203.14.156.0/23 Signature Algorithm: sha256WithRSAEncryption 33:8f:58:df:0b:99:c5:e8:16:94:50:34:9d:86:82:3c:99:d1: 4a:53:d8:a3:e1:41:b1:b8:3c:a2:75:fc:f3:6e:55:11:fc:a7: 45:5a:77:4c:13:77:04:6a:75:0c:78:b7:78:20:3d:3c:24:68: 64:00:ee:11:13:24:80:b7:e8:60:26:bc:1d:21:2c:d9:15:4a: 7a:0a:a7:9f:c2:43:63:e6:9a:37:25:e6:07:c2:a3:ac:b0:11: 00:14:32:7c:0f:47:b0:0c:c7:f5:04:3e:54:d0:9a:99:c9:c1: c3:94:9f:fa:78:60:78:35:2e:de:02:3c:08:8d:4c:9e:9d:b5: 54:77:3f:08:38:aa:39:83:f1:ac:34:ba:90:1d:0b:52:85:3f: f2:5d:f8:f4:8c:6e:c7:97:3f:1f:ef:a5:1f:57:5b:42:92:ab: 54:2d:86:63:33:d1:87:34:14:b5:9e:a0:6a:ca:9c:14:74:a9: f3:46:25:d5:89:29:ac:9c:6f:da:cd:97:1a:58:6c:23:0c:0e: 99:54:2d:57:20:d4:f2:62:16:a4:ad:a6:6e:e6:e3:81:4f:13: 4e:bd:87:ef:a8:26:db:92:00:37:31:81:b2:53:0c:35:b9:15: f9:43:f0:d3:27:c5:80:bb:c3:8e:36:66:f3:89:b8:e8:75:c3: 6c:70:7f:97 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICA/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkxQkMxMTAvBgNVBAUTKDZENUQ1MEU4OEI5RDY1RThBRkRBMjhDMkNFQTYxNTAx MjcwMzg2MDgwHhcNMjUwNjA1MDEwODIwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1MWM0Ny1jNTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjI7tLuaa8dqkmwpioIluAwnpSg9qzSVNO9xZ5T3UX4JxATszkrZpH516pwy MchpfJr0gJxAdNYlefEB+rPCwIjT47Jg0rhdy7Fk9XkszUbbobMN75Nhu2rkeXxc g0J6AdA0tDiNEy2ucia86ORlXy/hT3cMtSGwsJIs2a3j7ew4hWwsvj3esF6BVbhl jKSBGUswAGtmNKZtj3t2nnX1tDhpeQ7JnsjiUVXScnCaYjnFvFL7lfVLiyTwuJd8 WxS9rytOIsUAW97NiegAHVCIZQOudmWDLuhls0EHBk4t4TOcZyOAfxDxL0cLlyst vmNunVV7pe54OqRtAyxbJpGSmQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFKfAUTz+ b6eoBEANiR6wxK5hC4MqMB8GA1UdIwQYMBaAFG1dUOiLnWXor9oows6mFQEnA4YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTFCQy9BRTQ0RDI0QURC RTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFplaXYyaWpDenFZVkFTY0Ro Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JWMVE2SXVkWmVpdjJpakN6cVlWQVNjRGhnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTkxQkMvQUU0NEQyNEFEQkU5MTFFQzk1MTEwNTE1QzRGOUFFMDIvRDFBNENGQkE0 RkJFMTFFRjk3ODEyQjgwQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAygxaAwQByw6cMA0GCSqGSIb3DQEBCwUAA4IBAQAzj1jfC5nF6BaU UDSdhoI8mdFKU9ij4UGxuDyidfzzblUR/KdFWndME3cEanUMeLd4ID08JGhkAO4R EySAt+hgJrwdISzZFUp6CqefwkNj5po3JeYHwqOssBEAFDJ8D0ewDMf1BD5U0JqZ ycHDlJ/6eGB4NS7eAjwIjUyenbVUdz8IOKo5g/GsNLqQHQtShT/yXfj0jG7Hlz8f 76UfV1tCkqtULYZjM9GHNBS1nqBqypwUdKnzRiXViSmsnG/azZcaWGwjDA6ZVC1X INTyYhakraZu5uOBTxNOvYfvqCbbkgA3MYGyUww1uRX5Q/DTJ8WAu8OONmbzibjo dcNscH+X -----END CERTIFICATE-----Generated at Sat Mar 7 17:26:59 2026 by rpki-client