$ rpki-client -vvf rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/CC6220C0E02E11EEBA9D291AC4F9AE02.roa File: CC6220C0E02E11EEBA9D291AC4F9AE02.roa (raw, json) Hash identifier: NF/B7iZfQwf1Uq5EPTW6HLPKE2tbKP7FUo9Dka7/k/0= Subject key identifier: 93:BD:FB:1B:95:50:B9:99:37:B1:0C:B3:80:AD:E2:43:2F:08:32:4D Certificate issuer: /CN=A91124CD/serialNumber=B02396C1E4976DC24BB9F240F5CE556ED827FA2B Certificate serial: 0174 Authority key identifier: B0:23:96:C1:E4:97:6D:C2:4B:B9:F2:40:F5:CE:55:6E:D8:27:FA:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/CC6220C0E02E11EEBA9D291AC4F9AE02.roa Signing time: Mon 02 Mar 2026 12:54:32 +0000 ROA not before: Fri 25 Apr 2025 05:01:06 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152636 IP address blocks: 202.37.40.0/23 maxlen: 23 202.37.40.0/24 maxlen: 24 202.37.41.0/24 maxlen: 24 2001:df3:89c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.crl rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91124CD, serialNumber=B02396C1E4976DC24BB9F240F5CE556ED827FA2B Validity Not Before: Apr 25 05:01:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a58888-3817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:14:8b:ec:68:91:51:33:66:23:b8:bc:66:9b: 09:d0:3e:43:66:e7:b9:b2:bc:6c:6e:b8:99:e4:8d: 86:bf:c0:de:5f:82:96:ed:5e:cf:2c:95:b9:fe:7b: 0d:d4:03:af:d8:b6:3d:55:a4:97:90:ba:42:88:89: 8b:9b:7b:3a:e4:72:b6:f4:00:22:cd:b7:7a:36:28: 51:a8:95:18:81:6d:b9:f5:7e:fc:26:a7:c9:0d:a0: 7f:5d:96:4d:08:40:11:62:45:d2:63:9f:86:b0:9b: f3:51:de:a7:9a:f8:1a:8c:e6:9c:ae:c6:c0:e8:ae: 22:14:02:ea:c3:fb:97:8e:f3:98:f4:70:df:70:25: a5:02:b3:87:80:6a:75:c1:a2:e4:07:d4:1e:88:8b: 73:a9:11:c6:a3:dd:29:05:cd:83:87:8a:ae:bb:5b: d0:3a:23:91:2c:16:48:50:4a:9e:d8:9c:5c:20:b3: ea:10:4a:b3:e5:0a:74:ea:51:b8:ac:1f:87:c6:fd: 4a:a8:fe:70:4e:5f:e4:b8:c0:20:eb:40:93:c2:81: a5:b9:82:9c:52:6f:e7:e3:46:bd:be:fe:98:d3:d2: 67:2d:dd:ac:61:b3:26:78:aa:1b:22:4c:bf:a3:39: 03:ac:6c:42:94:39:39:fd:32:e2:be:4d:77:a6:83: 8b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:BD:FB:1B:95:50:B9:99:37:B1:0C:B3:80:AD:E2:43:2F:08:32:4D X509v3 Authority Key Identifier: keyid:B0:23:96:C1:E4:97:6D:C2:4B:B9:F2:40:F5:CE:55:6E:D8:27:FA:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/CC6220C0E02E11EEBA9D291AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.37.40.0/23 IPv6: 2001:df3:89c0::/48 Signature Algorithm: sha256WithRSAEncryption 82:38:86:8d:b4:17:33:95:ba:6a:21:44:01:08:d8:cf:84:64: dc:b5:3b:d5:6c:7a:30:c5:f8:ee:81:59:d7:89:02:e5:18:e2: 5a:47:a4:58:cb:ab:21:82:a6:03:e2:dd:35:0a:1f:b8:ef:a1: 7f:01:6a:04:b5:98:48:8d:69:f5:8d:db:85:f4:7f:e2:a9:1a: 67:10:60:80:c6:c7:f2:24:c6:bf:15:15:48:e5:22:45:63:bf: 8c:4b:8a:09:9c:ee:70:0a:68:5b:2c:1a:d1:01:43:a9:f7:ad: cc:f3:02:d6:4c:55:83:99:22:0a:37:ba:28:1b:99:e3:23:d4: 48:c5:9b:f2:79:20:6f:b8:94:a2:d4:ec:b5:4a:ec:3b:48:64: 7e:80:3d:b6:00:ae:63:c8:fe:19:02:6e:e7:e5:a1:55:3c:76: 62:2d:37:7a:4a:2a:8b:b6:a9:a1:4e:0c:15:eb:19:8a:2e:4d: 79:91:12:ab:30:33:32:dc:6c:4c:4d:66:ff:38:5a:30:3d:8d: 85:68:04:79:ac:78:51:35:ac:f3:17:82:7f:68:73:a3:10:a5: a4:57:9c:13:79:34:e3:be:45:73:f8:3b:28:d1:66:e6:97:87: 92:91:0b:f9:da:8a:b2:b9:b8:dc:6b:e4:f8:bf:e1:d1:b7:33: 7e:ee:84:8e -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI0Q0QxMTAvBgNVBAUTKEIwMjM5NkMxRTQ5NzZEQzI0QkI5RjI0MEY1Q0U1NTZF RDgyN0ZBMkIwHhcNMjUwNDI1MDUwMTA2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1ODg4OC0zODE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRSL7GiRUTNmI7i8ZpsJ0D5DZue5srxsbriZ5I2Gv8DeX4KW7V7PLJW5/nsN 1AOv2LY9VaSXkLpCiImLm3s65HK29AAizbd6NihRqJUYgW259X78JqfJDaB/XZZN CEARYkXSY5+GsJvzUd6nmvgajOacrsbA6K4iFALqw/uXjvOY9HDfcCWlArOHgGp1 waLkB9QeiItzqRHGo90pBc2Dh4quu1vQOiORLBZIUEqe2JxcILPqEEqz5Qp06lG4 rB+Hxv1KqP5wTl/kuMAg60CTwoGluYKcUm/n40a9vv6Y09JnLd2sYbMmeKobIky/ ozkDrGxClDk5/TLivk13poOLNwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFJO9+xuV ULmZN7EMs4Ct4kMvCDJNMB8GA1UdIwQYMBaAFLAjlsHkl23CS7nyQPXOVW7YJ/or MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjRDRC9COTdCNzYzOEUw MkQxMUVFOUEwNDJGNUNDNEY5QUUwMi9zQ09Xd2VTWGJjSkx1ZkpBOWM1VmJ0Z24t aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NDT1d3ZVNYYmNKTHVmSkE5YzVWYnRnbi1pcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTI0Q0QvQjk3Qjc2MzhFMDJEMTFFRTlBMDQyRjVDQzRGOUFFMDIvQ0M2MjIwQzBF MDJFMTFFRUJBOUQyOTFBQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQByiUoMA8EAgACMAkDBwAgAQ3zicAwDQYJKoZIhvcNAQELBQADggEB AII4ho20FzOVumohRAEI2M+EZNy1O9VsejDF+O6BWdeJAuUY4lpHpFjLqyGCpgPi 3TUKH7jvoX8BagS1mEiNafWN24X0f+KpGmcQYIDGx/Ikxr8VFUjlIkVjv4xLigmc 7nAKaFssGtEBQ6n3rczzAtZMVYOZIgo3uigbmeMj1EjFm/J5IG+4lKLU7LVK7DtI ZH6APbYArmPI/hkCbufloVU8dmItN3pKKou2qaFODBXrGYouTXmREqswMzLcbExN Zv84WjA9jYVoBHmseFE1rPMXgn9oc6MQpaRXnBN5NOO+RXP4OyjRZuaXh5KRC/na irK5uNxr5Pi/4dG3M37uhI4= -----END CERTIFICATE-----Generated at Thu Mar 26 05:35:43 2026 by rpki-client