$ rpki-client -vvf rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/9AEE04EAA30C11EFB8323D14C4F9AE02.roa File: 9AEE04EAA30C11EFB8323D14C4F9AE02.roa (raw, json) Hash identifier: iPK+TPwB+YsNmbSno8QK/8aEGZdVfS6O1fIUEsLY2Vk= Subject key identifier: 38:F4:F6:71:A0:89:20:3A:B6:87:0B:2F:DF:CD:0A:15:F7:CE:32:F6 Certificate issuer: /CN=A916F7BE/serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14 Certificate serial: 0103 Authority key identifier: 0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/9AEE04EAA30C11EFB8323D14C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:21:27 +0000 ROA not before: Fri 07 Mar 2025 06:24:06 +0000 ROA not after: Sat 01 Jul 2028 00:00:00 +0000 asID: 8075 IP address blocks: 202.91.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F7BE, serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14 Validity Not Before: Mar 7 06:24:06 2025 GMT Not After : Jul 1 00:00:00 2028 GMT Subject: CN=69a58ed7-de37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c3:da:19:bc:14:cb:29:6a:9f:b9:ab:99:00: 10:ff:a3:dd:f1:31:43:0b:16:78:53:2c:db:e5:e3: ac:f1:b8:0e:5d:4e:f4:cc:07:17:a2:1f:b2:7d:dc: a6:40:e0:94:d0:e3:ee:b0:7a:73:7e:66:c7:a0:18: 7f:b1:e1:72:61:3b:72:d7:82:0b:66:be:6d:fd:6f: 06:68:c7:98:ab:98:25:e6:f7:bf:39:a3:3d:0d:4c: b0:9e:56:fa:ae:e2:84:ea:37:a7:d2:6b:ac:4a:f9: 02:58:a3:53:5d:4f:7a:cd:b7:80:93:02:88:e2:42: 66:d3:3e:6d:00:89:a7:6e:8b:e8:50:57:be:f4:9c: 77:b8:17:e0:83:8e:ff:48:d3:17:ee:0e:75:ff:77: a2:bb:60:76:c7:d8:2b:76:23:59:03:44:99:94:aa: 58:7d:b7:34:54:df:3e:ca:fe:f6:0c:da:f6:be:50: b6:ac:a2:6f:0c:32:68:69:90:91:e5:ed:8c:3b:5b: ad:15:9e:30:a1:19:22:68:20:9f:5d:d0:a5:01:64: bf:84:1d:62:47:0d:3c:3d:a3:48:ea:99:4b:d6:be: cc:48:81:33:bc:58:47:83:0b:fd:82:db:e3:23:94: fa:a2:8b:82:98:57:d9:33:7f:46:07:71:5d:13:7a: 7d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F4:F6:71:A0:89:20:3A:B6:87:0B:2F:DF:CD:0A:15:F7:CE:32:F6 X509v3 Authority Key Identifier: keyid:0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/9AEE04EAA30C11EFB8323D14C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.91.132.0/22 Signature Algorithm: sha256WithRSAEncryption 50:82:c7:72:c2:76:e1:c8:46:38:62:e2:3c:ed:71:ba:fe:22: f8:54:6e:5b:56:d4:bb:0d:2d:0a:f6:40:b4:6a:d2:7e:a5:86: 44:64:bb:38:d0:34:ed:6b:c5:32:81:75:c6:4f:d6:d7:20:42: 63:dd:f3:b2:fa:e8:66:2f:bc:d4:58:71:3d:cf:6e:5e:4d:b2: 26:14:96:1b:3b:eb:fb:40:5e:50:96:5e:b6:e4:b7:ff:2b:9c: cb:f9:0f:e3:70:39:ce:41:07:62:28:7d:35:ef:ac:32:73:26: 2f:ff:cf:6e:ce:b8:51:3e:b8:d2:ad:08:0d:dd:bf:19:7e:58: 21:3e:66:18:2d:bd:3f:c0:ba:75:52:ec:82:34:4d:34:26:b7: a5:c6:5d:0b:27:73:a0:3e:d7:4b:4c:0e:56:57:c1:94:7b:38: 66:36:6b:f9:61:9e:ef:18:39:73:98:14:a4:b6:5c:d7:2a:d9: 5c:62:27:90:e1:1a:e4:70:cf:76:0d:a6:c8:53:38:19:3b:61: d4:9b:35:6b:8d:5b:cd:bd:6b:b7:a7:f4:f9:e7:0b:31:70:3a: 3d:ca:43:28:8e:20:e5:5b:2b:2a:9c:90:f6:45:0a:c8:65:ec: 59:c1:24:d9:5c:fc:35:68:29:c8:05:d6:49:9a:c4:86:dd:a9: 4b:77:8d:6e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY3QkUxMTAvBgNVBAUTKDBGOUFBOERFNTNGMDg1RUU4NjVBMUUzREQyQTIzNDRF MjEzMEFGMTQwHhcNMjUwMzA3MDYyNDA2WhcNMjgwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGVkNy1kZTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlsPaGbwUyylqn7mrmQAQ/6Pd8TFDCxZ4Uyzb5eOs8bgOXU70zAcXoh+yfdym QOCU0OPusHpzfmbHoBh/seFyYTty14ILZr5t/W8GaMeYq5gl5ve/OaM9DUywnlb6 ruKE6jen0musSvkCWKNTXU96zbeAkwKI4kJm0z5tAImnbovoUFe+9Jx3uBfgg47/ SNMX7g51/3eiu2B2x9grdiNZA0SZlKpYfbc0VN8+yv72DNr2vlC2rKJvDDJoaZCR 5e2MO1utFZ4woRkiaCCfXdClAWS/hB1iRw08PaNI6plL1r7MSIEzvFhHgwv9gtvj I5T6oouCmFfZM39GB3FdE3p9CQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDj09nGg iSA6tocLL9/NChX3zjL2MB8GA1UdIwQYMBaAFA+aqN5T8IXuhloePdKiNE4hMK8U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjdCRS8wOUNFMzI2NDlD RkUxMUVGOEVFQzkwNEFDNEY5QUUwMi9ENXFvM2xQd2hlNkdXaDQ5MHFJMFRpRXdy eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1cW8zbFB3aGU2R1doNDkwcUkwVGlFd3J4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkY3QkUvMDlDRTMyNjQ5Q0ZFMTFFRjhFRUM5MDRBQzRGOUFFMDIvOUFFRTA0RUFB MzBDMTFFRkI4MzIzRDE0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCyluEMA0GCSqGSIb3DQEBCwUAA4IBAQBQgsdywnbhyEY4YuI87XG6 /iL4VG5bVtS7DS0K9kC0atJ+pYZEZLs40DTta8UygXXGT9bXIEJj3fOy+uhmL7zU WHE9z25eTbImFJYbO+v7QF5Qll625Lf/K5zL+Q/jcDnOQQdiKH0176wycyYv/89u zrhRPrjSrQgN3b8ZflghPmYYLb0/wLp1UuyCNE00Jrelxl0LJ3OgPtdLTA5WV8GU ezhmNmv5YZ7vGDlzmBSktlzXKtlcYieQ4RrkcM92DabIUzgZO2HUmzVrjVvNvWu3 p/T55wsxcDo9ykMojiDlWysqnJD2RQrIZexZwSTZXPw1aCnIBdZJmsSG3alLd41u -----END CERTIFICATE-----Generated at Thu Mar 26 05:05:23 2026 by rpki-client