$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/47BFFFE029E711F18BEDC2D19E833773.roa File: 47BFFFE029E711F18BEDC2D19E833773.roa (raw, json) Hash identifier: AfMKB1U/fIo3GA9PjZ7vSGqHXA11goYnrsLqvY8NX+8= Subject key identifier: 4C:BA:51:89:E1:7B:B7:AE:6C:A6:04:32:C0:C1:BA:2B:FB:A3:D1:E4 Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Certificate serial: 2C Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/47BFFFE029E711F18BEDC2D19E833773.roa Signing time: Fri 27 Mar 2026 14:14:34 +0000 ROA not before: Fri 27 Mar 2026 14:14:34 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 37146 IP address blocks: 205.177.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 17:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Validity Not Before: Mar 27 14:14:34 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69c690ca-4cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:02:55:98:00:64:c7:2e:cc:d9:48:a8:a6:85: 38:a8:ec:8e:50:7f:02:ef:8f:e3:a7:ed:36:c7:f2: e7:87:ba:12:9f:5c:3d:8b:72:28:9f:2f:74:ee:9a: e3:50:6b:01:0b:15:e1:0e:c6:36:62:f8:37:9f:98: ff:7e:3e:75:4b:9a:5f:75:f4:a5:a1:0d:25:ba:c9: 97:c4:31:dd:08:8f:f9:bf:b4:03:f2:5d:ee:d3:17: a6:21:ce:9a:76:31:ca:5c:fd:bd:94:0a:ba:95:79: f4:fc:d7:23:bd:39:07:98:8f:1c:ae:7a:22:0e:d9: 6f:98:e4:eb:d8:bf:89:8b:74:5d:46:a4:c2:c1:ab: ae:6a:7d:ad:17:09:1c:be:a0:66:34:90:bf:82:ce: 72:94:c0:2e:94:c8:8a:a4:d1:a6:31:b3:af:50:72: c5:6c:72:81:45:0f:b8:ac:02:23:92:fe:15:ca:85: 5b:e8:4d:2a:d5:b1:01:2c:bf:d0:12:d4:36:d2:a2: be:ba:86:34:4e:74:45:53:0f:d4:7d:2d:dc:3d:93: b1:c0:40:78:35:ab:1a:ef:2f:4a:fe:d4:ee:12:86: ff:d2:1f:af:6f:5a:c4:38:b8:cc:37:7c:e0:6e:25: 30:50:9b:9f:42:6c:ef:6b:d0:e8:32:c8:f1:02:10: b1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:BA:51:89:E1:7B:B7:AE:6C:A6:04:32:C0:C1:BA:2B:FB:A3:D1:E4 X509v3 Authority Key Identifier: keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/47BFFFE029E711F18BEDC2D19E833773.roa sbgp-ipAddrBlock: critical IPv4: 205.177.177.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:30:86:2d:74:0b:0d:21:25:71:5d:37:05:b2:84:e8:d4:6d: 8e:69:c8:d4:8c:ca:07:a3:02:9b:3e:7f:0e:b8:a8:eb:12:13: dc:48:71:e2:d8:ab:34:70:13:54:fa:a5:74:a3:69:6a:a5:36: 38:61:f3:c0:56:19:7c:00:20:54:2c:57:17:d5:e9:3a:c2:40: b1:f2:ad:76:da:64:73:30:7b:7c:cd:12:c4:a6:17:c8:25:4c: 4e:ac:79:88:c7:1b:8d:a0:96:ef:ec:61:f8:cc:4e:2a:7f:4c: 43:60:0b:56:57:cf:bf:6f:ce:81:35:26:58:a9:d8:e7:bb:6a: b1:02:a0:21:7d:e0:65:c1:e7:aa:be:76:69:ea:ad:a0:32:68: ee:2d:55:fe:13:5c:5a:a1:71:61:ce:87:3c:33:48:9b:19:12: b1:a9:ac:a3:b7:f1:80:fa:9d:bd:48:48:e1:3f:3b:45:5c:d9: 80:16:b8:a6:47:42:16:ca:7e:5a:a4:eb:0e:16:46:9d:1b:eb: 17:57:ee:86:33:c4:7e:75:15:ab:06:cc:7e:87:ee:b8:9d:95: 83:a4:9a:d3:4b:47:8c:ec:e3:52:83:66:ce:a3:ae:bb:f8:80: 96:18:9b:8e:c7:d0:f8:74:2c:7b:49:47:5b:5e:92:8d:c6:54: 1d:25:68:20 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDRBOTExMC8GA1UEBRMoM0Q3QjE1QkQ3N0Q5Qjk3NEUzNzM1OERBNzU0REZFQTky OTFFNjgzQTAeFw0yNjAzMjcxNDE0MzRaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YzY5MGNhLTRjZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpAlWYAGTHLszZSKimhTio7I5QfwLvj+On7TbH8ueHuhKfXD2LciifL3TumuNQ awELFeEOxjZi+DefmP9+PnVLml919KWhDSW6yZfEMd0Ij/m/tAPyXe7TF6Yhzpp2 Mcpc/b2UCrqVefT81yO9OQeYjxyueiIO2W+Y5OvYv4mLdF1GpMLBq65qfa0XCRy+ oGY0kL+CznKUwC6UyIqk0aYxs69QcsVscoFFD7isAiOS/hXKhVvoTSrVsQEsv9AS 1DbSor66hjROdEVTD9R9Ldw9k7HAQHg1qxrvL0r+1O4Shv/SH69vWsQ4uMw3fOBu JTBQm59CbO9r0OgyyPECELGZAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUTLpRieF7 t65spgQywMG6K/uj0eQwHwYDVR0jBBgwFoAUPXsVvXfZuXTjc1jadU3+qSkeaDow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNEE5L0ZEMzcyRTRBMjk0 NTExRjFBN0FBM0VCRDg0RUU1MjhFL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFE by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUFhzVnZYZlp1WFRqYzFqYWRVMy1xU2tlYURvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDRBOS9GRDM3MkU0QTI5NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS80N0JGRkZFMDI5 RTcxMUYxOEJFREMyRDE5RTgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADNsbEwDQYJKoZIhvcNAQELBQADggEBACowhi10Cw0hJXFdNwWyhOjU bY5pyNSMygejAps+fw64qOsSE9xIceLYqzRwE1T6pXSjaWqlNjhh88BWGXwAIFQs VxfV6TrCQLHyrXbaZHMwe3zNEsSmF8glTE6seYjHG42glu/sYfjMTip/TENgC1ZX z79vzoE1Jlip2Oe7arECoCF94GXB56q+dmnqraAyaO4tVf4TXFqhcWHOhzwzSJsZ ErGprKO38YD6nb1ISOE/O0Vc2YAWuKZHQhbKflqk6w4WRp0b6xdX7oYzxH51FasG zH6H7ridlYOkmtNLR4zs41KDZs6jrrv4gJYYm47H0Ph0LHtJR1teko3GVB0laCA= -----END CERTIFICATE-----Generated at Sat Mar 28 18:55:49 2026 by rpki-client