$ rpki-client -vvf rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/99C173847DA711EFBC48DB25C4F9AE02.roa File: 99C173847DA711EFBC48DB25C4F9AE02.roa (raw, json) Hash identifier: Ouh9CREf3Hlbnen95cyuHl6hFWK3B34qd2O+gqkbTkY= Subject key identifier: 3D:9E:18:08:64:DB:43:9E:7F:11:1F:84:1B:5A:36:3A:3B:0B:72:13 Certificate issuer: /CN=A91799A0/serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8 Certificate serial: 0448 Authority key identifier: 37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/99C173847DA711EFBC48DB25C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:01:56 +0000 ROA not before: Tue 23 Sep 2025 01:18:58 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 38242 IP address blocks: 202.151.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1096 (0x448) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91799A0, serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8 Validity Not Before: Sep 23 01:18:58 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a58a44-7994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4c:f8:a7:27:da:f8:a7:74:98:91:6a:90:80: 57:b5:15:28:b4:23:a6:4f:e1:4b:03:40:6b:9c:80: 51:c1:c5:d6:b7:c8:95:20:fa:89:74:07:db:8c:1c: c8:2c:01:f3:bc:b5:69:64:63:72:04:66:9b:fb:4e: da:ee:58:fe:2e:1c:84:86:41:68:59:20:eb:93:bc: 27:c5:53:9a:b3:29:2d:1e:7b:aa:00:d1:0c:e7:85: 75:a3:f3:82:d4:de:df:31:ea:83:12:28:d8:05:27: c0:ee:1d:30:31:f8:32:69:52:f6:b6:cf:af:0c:4b: ff:1e:ad:05:fb:40:73:1e:03:f5:1a:88:2e:40:2f: b8:5c:4a:ad:bc:eb:ec:f5:e9:3b:84:4b:7f:df:a4: 26:e7:50:bf:ac:37:85:28:fc:c5:5f:91:f3:7a:14: 28:82:3f:98:f3:a5:8e:56:a2:04:c2:44:8e:43:19: 67:32:5b:de:92:06:a5:2d:14:66:6e:d0:3b:93:b4: e7:fb:8d:ed:86:3e:13:a2:6d:bc:e4:1c:cb:ac:8e: 95:9e:6f:d4:66:40:ab:dd:f6:04:13:0b:cf:3a:6e: 18:5c:17:91:1d:92:af:ac:83:82:9e:67:7a:cc:18: c6:4e:3f:7e:fc:85:56:92:3a:49:85:df:f6:60:f2: 26:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9E:18:08:64:DB:43:9E:7F:11:1F:84:1B:5A:36:3A:3B:0B:72:13 X509v3 Authority Key Identifier: keyid:37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/99C173847DA711EFBC48DB25C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.151.36.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:bc:6e:e6:78:db:a5:0a:5c:a9:01:2c:e4:cc:67:69:3b:dc: d5:a6:d4:44:f8:e9:7a:4a:7f:d6:73:a2:9e:1c:5f:6e:be:e0: 48:f4:84:cf:19:aa:c7:20:66:7d:32:9d:d0:8f:81:66:97:50: 37:3d:60:fc:34:0c:09:2a:77:ce:c6:4c:89:c4:82:33:8a:32: 15:35:75:d3:58:3d:b2:88:d5:25:64:a0:37:82:28:fa:34:49: 21:6b:dd:45:c5:b9:2e:ef:81:d5:a3:0f:03:d1:28:96:06:5a: 77:0a:ab:45:41:97:26:d5:fd:c4:e3:9d:1c:32:dd:36:a1:a4: 17:ee:8f:6c:a4:bf:71:fe:b9:9a:e2:2f:40:ec:0b:c7:06:36: 14:fa:66:fe:6e:99:fd:76:f3:26:98:34:56:16:90:0e:fa:71: 46:18:a3:39:98:32:d2:7f:ea:3a:60:a8:3a:11:7b:af:74:16: 74:51:61:fa:25:0e:59:c5:7b:1c:b4:e8:af:40:13:63:6e:72: 9d:5b:53:de:1b:f7:51:1b:20:aa:8e:bb:60:65:3b:7b:a0:de: 09:3d:47:aa:15:d0:8c:4e:aa:d8:93:63:c1:42:75:61:fb:c7: 2c:44:3b:2e:cc:28:7c:5c:e5:62:4a:3b:fe:65:a7:55:8d:e9: ed:3f:15:2d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk5QTAxMTAvBgNVBAUTKDM3RTAzNTI0QjU4NDdEQkVBRDAwRkUzNzhDNDZBQkQw Q0E3MDQ1RjgwHhcNMjUwOTIzMDExODU4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGE0NC03OTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkz4pyfa+Kd0mJFqkIBXtRUotCOmT+FLA0BrnIBRwcXWt8iVIPqJdAfbjBzI LAHzvLVpZGNyBGab+07a7lj+LhyEhkFoWSDrk7wnxVOasyktHnuqANEM54V1o/OC 1N7fMeqDEijYBSfA7h0wMfgyaVL2ts+vDEv/Hq0F+0BzHgP1GoguQC+4XEqtvOvs 9ek7hEt/36Qm51C/rDeFKPzFX5HzehQogj+Y86WOVqIEwkSOQxlnMlvekgalLRRm btA7k7Tn+43thj4Tom285BzLrI6Vnm/UZkCr3fYEEwvPOm4YXBeRHZKvrIOCnmd6 zBjGTj9+/IVWkjpJhd/2YPImtQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFD2eGAhk 20OefxEfhBtaNjo7C3ITMB8GA1UdIwQYMBaAFDfgNSS1hH2+rQD+N4xGq9DKcEX4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTlBMC80MEVEQTExRTlB RTgxMUVDOTc0QjQ5MUNDNEY5QUUwMi9OLUExSkxXRWZiNnRBUDQzakVhcjBNcHdS ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04tQTFKTFdFZmI2dEFQNDNqRWFyME1wd1JmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Nzk5QTAvNDBFREExMUU5QUU4MTFFQzk3NEI0OTFDQzRGOUFFMDIvOTlDMTczODQ3 REE3MTFFRkJDNDhEQjI1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCypckMA0GCSqGSIb3DQEBCwUAA4IBAQAcvG7meNulClypASzkzGdp O9zVptRE+Ol6Sn/Wc6KeHF9uvuBI9ITPGarHIGZ9Mp3Qj4Fml1A3PWD8NAwJKnfO xkyJxIIzijIVNXXTWD2yiNUlZKA3gij6NEkha91Fxbku74HVow8D0SiWBlp3CqtF QZcm1f3E450cMt02oaQX7o9spL9x/rma4i9A7AvHBjYU+mb+bpn9dvMmmDRWFpAO +nFGGKM5mDLSf+o6YKg6EXuvdBZ0UWH6JQ5ZxXsctOivQBNjbnKdW1PeG/dRGyCq jrtgZTt7oN4JPUeqFdCMTqrYk2PBQnVh+8csRDsuzCh8XOViSjv+ZadVjentPxUt -----END CERTIFICATE-----Generated at Thu Mar 26 16:53:57 2026 by rpki-client