$ rpki-client -vvf rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/8093CCBA13F611EF8ED7D71EC4F9AE02.roa File: 8093CCBA13F611EF8ED7D71EC4F9AE02.roa (raw, json) Hash identifier: xPyb9jdVPxFNqu7DjwvZN/gxmMuIyOp+jROsuWdv+So= Subject key identifier: 9A:63:EC:C2:91:31:E0:E6:33:CF:2F:0D:FB:80:02:0A:5F:5B:70:E9 Certificate issuer: /CN=A91626D2/serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54 Certificate serial: 015E Authority key identifier: 6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/8093CCBA13F611EF8ED7D71EC4F9AE02.roa Signing time: Tue 03 Mar 2026 01:54:58 +0000 ROA not before: Tue 03 Mar 2026 01:54:58 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 38022 IP address blocks: 202.27.240.0/23 maxlen: 23 202.27.242.0/24 maxlen: 24 202.27.243.0/24 maxlen: 24 202.36.85.0/24 maxlen: 24 202.36.86.0/24 maxlen: 24 202.50.199.0/24 maxlen: 24 202.50.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:12:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91626D2, serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54 Validity Not Before: Mar 3 01:54:58 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a63f72-3a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b3:d9:ae:b1:3b:a1:4e:2f:7c:71:0c:95:40: 0d:dd:e4:84:11:37:90:a3:7b:6d:1e:b0:0e:eb:eb: 7c:56:0a:99:08:9a:32:7e:c6:e9:52:90:e4:cf:b5: f0:75:cd:fa:a0:e5:8a:ac:cb:77:bf:13:1d:70:88: 34:d7:76:06:43:be:fd:73:0a:7c:d4:6b:ef:98:b7: 2b:b6:5c:0e:fb:b9:6a:8f:9e:fa:57:08:64:51:ce: fc:71:21:38:92:42:de:f3:da:bc:99:42:fa:b2:89: 1c:25:37:7d:97:20:52:a2:03:00:fe:76:4e:2f:7a: 37:ab:5e:f4:ff:9b:eb:1d:81:02:50:fe:97:8e:d2: cb:6d:0b:46:3a:ce:1d:f5:9c:7c:c2:c0:a0:f0:05: 29:e9:0a:f7:59:a8:66:b2:f2:56:15:af:c6:b5:f0: 6f:7f:49:6c:2f:24:9f:b4:27:c6:cb:1d:44:f1:b4: 76:d8:3c:e6:56:5f:7e:a5:99:ae:b0:09:e0:a0:f9: 64:39:31:89:b6:43:54:98:76:11:50:9c:7b:b5:f6: 37:4f:dc:57:45:0f:79:0f:91:79:22:ae:cf:3d:d6: 28:19:73:b3:7e:4d:58:0e:65:a6:dd:0c:88:03:8e: 6c:bb:98:01:db:e1:83:06:26:23:00:06:43:16:bb: f1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:63:EC:C2:91:31:E0:E6:33:CF:2F:0D:FB:80:02:0A:5F:5B:70:E9 X509v3 Authority Key Identifier: keyid:6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/8093CCBA13F611EF8ED7D71EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.27.240.0/22 202.36.85.0-202.36.86.255 202.50.199.0/24 202.50.205.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:8d:c4:06:9d:5c:3f:08:c4:f9:2d:27:f3:91:cc:2c:7a:ca: 85:78:71:4e:55:95:c7:85:94:c4:76:f2:67:90:99:b5:a9:a9: 03:0f:b3:95:fc:91:96:92:ea:c0:a7:dc:24:e9:09:1c:51:1c: 2b:14:65:f8:2d:fc:f7:38:08:9c:97:a0:52:56:f3:69:ae:ad: 1a:b1:c4:99:5d:9a:44:a3:fd:59:ea:21:a5:cf:da:c4:ad:55: 1e:c0:53:76:c7:e7:51:d5:73:69:3a:40:63:54:dd:b3:1f:65: b5:90:98:70:51:04:49:f0:3a:10:af:2f:8f:cf:b1:cc:9c:49: 12:33:75:59:83:24:52:fc:ed:fa:91:91:f8:dc:f6:91:28:64: 8a:64:c1:f6:72:56:02:a7:a9:7f:af:05:93:b7:7e:7b:23:d5: a1:f9:23:1a:88:b8:ea:20:7f:6b:b3:44:c8:ff:23:a9:1f:a6: bf:84:2e:78:dd:b9:05:fa:5c:cc:c3:aa:ef:0a:6c:ec:4e:de: e0:b6:02:f3:17:5d:4f:30:07:ee:b4:01:67:92:e9:20:b1:6a: e0:92:6f:f7:22:7e:a2:c7:a5:5e:f6:2a:69:9c:f2:48:57:db: b7:d7:a7:d4:04:bc:c1:3e:d4:b4:93:56:a7:76:da:18:81:ae: 31:48:81:ec -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI2RDIxMTAvBgNVBAUTKDZDM0I3RjFDMTMzREE5QzUxRDQ0NERBODVFNjAyQTk2 ODQ1MUZFNTQwHhcNMjYwMzAzMDE1NDU4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2M2Y3Mi0zYTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2LPZrrE7oU4vfHEMlUAN3eSEETeQo3ttHrAO6+t8VgqZCJoyfsbpUpDkz7Xw dc36oOWKrMt3vxMdcIg013YGQ779cwp81GvvmLcrtlwO+7lqj576VwhkUc78cSE4 kkLe89q8mUL6sokcJTd9lyBSogMA/nZOL3o3q170/5vrHYECUP6XjtLLbQtGOs4d 9Zx8wsCg8AUp6Qr3WahmsvJWFa/GtfBvf0lsLySftCfGyx1E8bR22DzmVl9+pZmu sAngoPlkOTGJtkNUmHYRUJx7tfY3T9xXRQ95D5F5Iq7PPdYoGXOzfk1YDmWm3QyI A45su5gB2+GDBiYjAAZDFrvxIQIDAQABo4ICejCCAnYwHQYDVR0OBBYEFJpj7MKR MeDmM88vDfuAAgpfW3DpMB8GA1UdIwQYMBaAFGw7fxwTPanFHURNqF5gKpaEUf5U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjZEMi9BRjIwODM0RTEz RjUxMUVGQTA5RDMyMUJDNEY5QUUwMi9iRHRfSEJNOXFjVWRSRTJvWG1BcWxvUlJf bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JEdF9IQk05cWNVZFJFMm9YbUFxbG9SUl9sUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjI2RDIvQUYyMDgzNEUxM0Y1MTFFRkEwOUQzMjFCQzRGOUFFMDIvODA5M0NDQkEx M0Y2MTFFRjhFRDdENzFFQzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm BAIAATAgAwQCyhvwMAwDBADKJFUDBADKJFYDBADKMscDBADKMs0wDQYJKoZIhvcN AQELBQADggEBAF2NxAadXD8IxPktJ/ORzCx6yoV4cU5VlceFlMR28meQmbWpqQMP s5X8kZaS6sCn3CTpCRxRHCsUZfgt/Pc4CJyXoFJW82murRqxxJldmkSj/VnqIaXP 2sStVR7AU3bH51HVc2k6QGNU3bMfZbWQmHBRBEnwOhCvL4/PscycSRIzdVmDJFL8 7fqRkfjc9pEoZIpkwfZyVgKnqX+vBZO3fnsj1aH5IxqIuOogf2uzRMj/I6kfpr+E LnjduQX6XMzDqu8KbOxO3uC2AvMXXU8wB+60AWeS6SCxauCSb/cifqLHpV72Kmmc 8khX27fXp9QEvME+1LSTVqd22hiBrjFIgew= -----END CERTIFICATE-----Generated at Thu Mar 26 07:21:23 2026 by rpki-client