$ rpki-client -vvf rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/310E8C36A30A11EFB999C96CC4F9AE02.roa File: 310E8C36A30A11EFB999C96CC4F9AE02.roa (raw, json) Hash identifier: m8laUDI9Zve1KrkarzeEr1E6AJ5CS17om1cAY5y7GWU= Subject key identifier: 39:AA:37:EA:66:73:4A:D2:92:75:59:3A:06:AA:E7:A7:4F:77:CC:9D Certificate issuer: /CN=A916F7BE/serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14 Certificate serial: 0102 Authority key identifier: 0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/310E8C36A30A11EFB999C96CC4F9AE02.roa Signing time: Mon 02 Mar 2026 13:21:26 +0000 ROA not before: Fri 07 Mar 2025 06:24:04 +0000 ROA not after: Sat 01 Jul 2028 00:00:00 +0000 asID: 38058 IP address blocks: 202.91.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F7BE, serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14 Validity Not Before: Mar 7 06:24:04 2025 GMT Not After : Jul 1 00:00:00 2028 GMT Subject: CN=69a58ed6-4a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:84:3a:57:74:f4:54:96:41:5f:ff:eb:31:54: 25:98:bc:1c:ef:df:4f:91:7c:fb:ff:c7:84:80:e3: fb:72:fa:57:ae:15:ac:ca:c0:29:96:e1:ad:50:d2: d8:43:6c:82:58:e8:08:c6:da:22:4f:12:d4:4b:2f: 01:4c:ff:1e:dc:4a:11:50:c2:8e:1f:76:19:75:99: b7:8e:41:41:ba:14:1c:2e:56:5c:ef:e2:d4:4f:02: 81:90:45:08:e7:6c:ac:f6:94:fa:55:af:ba:dc:87: be:dc:cf:34:a2:f5:de:ff:e2:d1:20:70:3d:90:c7: 1d:c7:59:fe:61:82:bd:b6:09:d9:d8:8c:8b:a1:6f: b7:4d:d0:13:a4:a0:61:01:ca:ed:2f:f6:11:00:c9: 9d:c1:5c:8c:83:da:76:7e:69:b1:64:75:3f:0c:c6: 26:6a:01:b2:9b:26:31:30:f5:ff:b3:68:0e:b7:bb: 08:ba:bf:ef:58:ce:7d:e6:1e:f1:9d:30:03:3e:d8: b1:cc:e3:b1:2e:dd:f9:5f:07:fc:ac:5a:f8:89:3a: 11:2c:67:61:22:62:7b:3b:cf:c6:22:34:ac:b2:d2: d9:ee:7a:80:47:65:a3:0e:a3:26:ec:2a:bc:c6:0f: 43:f2:dc:32:2a:49:d7:eb:02:ce:a5:fb:bd:8b:fa: 93:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AA:37:EA:66:73:4A:D2:92:75:59:3A:06:AA:E7:A7:4F:77:CC:9D X509v3 Authority Key Identifier: keyid:0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/310E8C36A30A11EFB999C96CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.91.132.0/22 Signature Algorithm: sha256WithRSAEncryption 41:d2:51:b1:00:4f:4d:9e:be:bd:2f:54:f7:38:40:d9:8c:09: 8d:49:9c:50:2f:2a:43:52:d1:bf:8e:27:5b:71:43:fe:ec:64: 49:b6:b7:31:a7:a6:5e:a9:11:5a:dd:e5:bd:28:ff:74:e3:2b: 48:4a:94:00:7d:25:02:4c:41:b5:23:23:ca:ca:c0:9c:ae:5a: 3f:f3:03:b0:5c:90:c5:0d:31:30:c3:0f:27:d3:79:74:bf:f1: e5:99:8c:3e:12:ff:fd:a9:1f:81:66:b5:32:e0:db:af:7a:18: 25:22:52:00:52:d7:6c:e5:e4:86:b0:f4:af:6f:e8:db:ec:88: e2:d2:f7:e2:7c:43:38:6e:40:f1:75:47:55:f1:33:b5:7e:fe: c7:af:d7:be:e0:0e:1f:e1:0a:45:e8:20:b8:01:47:74:f1:4c: 48:7d:7f:6a:ac:f1:fe:13:33:cc:8e:b4:c1:57:66:a2:71:2a: 7e:68:74:8e:45:31:6b:ec:7f:7a:7f:3a:59:10:fb:de:50:02: d6:fc:64:73:17:81:ce:55:d6:80:16:61:a0:e4:af:d0:f3:b3: 10:2a:62:03:24:61:87:93:fc:fa:02:f1:39:d3:f8:60:06:ac: 37:48:bb:cf:f0:bd:9a:40:77:d1:ac:5c:30:11:6b:74:02:36: 73:9c:1c:51 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY3QkUxMTAvBgNVBAUTKDBGOUFBOERFNTNGMDg1RUU4NjVBMUUzREQyQTIzNDRF MjEzMEFGMTQwHhcNMjUwMzA3MDYyNDA0WhcNMjgwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGVkNi00YTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIQ6V3T0VJZBX//rMVQlmLwc799PkXz7/8eEgOP7cvpXrhWsysApluGtUNLY Q2yCWOgIxtoiTxLUSy8BTP8e3EoRUMKOH3YZdZm3jkFBuhQcLlZc7+LUTwKBkEUI 52ys9pT6Va+63Ie+3M80ovXe/+LRIHA9kMcdx1n+YYK9tgnZ2IyLoW+3TdATpKBh AcrtL/YRAMmdwVyMg9p2fmmxZHU/DMYmagGymyYxMPX/s2gOt7sIur/vWM595h7x nTADPtixzOOxLt35Xwf8rFr4iToRLGdhImJ7O8/GIjSsstLZ7nqAR2WjDqMm7Cq8 xg9D8twyKknX6wLOpfu9i/qTNwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDmqN+pm c0rSknVZOgaq56dPd8ydMB8GA1UdIwQYMBaAFA+aqN5T8IXuhloePdKiNE4hMK8U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjdCRS8wOUNFMzI2NDlD RkUxMUVGOEVFQzkwNEFDNEY5QUUwMi9ENXFvM2xQd2hlNkdXaDQ5MHFJMFRpRXdy eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1cW8zbFB3aGU2R1doNDkwcUkwVGlFd3J4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkY3QkUvMDlDRTMyNjQ5Q0ZFMTFFRjhFRUM5MDRBQzRGOUFFMDIvMzEwRThDMzZB MzBBMTFFRkI5OTlDOTZDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCyluEMA0GCSqGSIb3DQEBCwUAA4IBAQBB0lGxAE9Nnr69L1T3OEDZ jAmNSZxQLypDUtG/jidbcUP+7GRJtrcxp6ZeqRFa3eW9KP904ytISpQAfSUCTEG1 IyPKysCcrlo/8wOwXJDFDTEwww8n03l0v/HlmYw+Ev/9qR+BZrUy4NuvehglIlIA Utds5eSGsPSvb+jb7Iji0vfifEM4bkDxdUdV8TO1fv7Hr9e+4A4f4QpF6CC4AUd0 8UxIfX9qrPH+EzPMjrTBV2aicSp+aHSORTFr7H96fzpZEPveUALW/GRzF4HOVdaA FmGg5K/Q87MQKmIDJGGHk/z6AvE50/hgBqw3SLvP8L2aQHfRrFwwEWt0AjZznBxR -----END CERTIFICATE-----Generated at Thu Mar 26 09:21:56 2026 by rpki-client