$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/4ABCFD508D3A11F0B6F4F46FC4F9AE02.roa File: 4ABCFD508D3A11F0B6F4F46FC4F9AE02.roa (raw, json) Hash identifier: Ys6z3KTyTUcEA7nCCEeVfOAk4o97hw5MQktE+xzWfDg= Subject key identifier: 7B:89:D9:7B:94:F3:85:98:35:44:A5:E9:29:4B:B7:4F:84:18:D7:87 Certificate issuer: /CN=A9191E19/serialNumber=372081F7DBE2EF11A4411BD4E6AF86F32698CAFA Certificate serial: 015D Authority key identifier: 37:20:81:F7:DB:E2:EF:11:A4:41:1B:D4:E6:AF:86:F3:26:98:CA:FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyCB99vi7xGkQRvU5q-G8yaYyvo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/4ABCFD508D3A11F0B6F4F46FC4F9AE02.roa Signing time: Mon 02 Mar 2026 13:32:10 +0000 ROA not before: Tue 09 Sep 2025 05:04:49 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 18390 IP address blocks: 203.4.136.0/24 maxlen: 24 203.4.137.0/24 maxlen: 24 203.4.138.0/24 maxlen: 24 203.4.139.0/24 maxlen: 24 203.4.140.0/24 maxlen: 24 203.4.141.0/24 maxlen: 24 203.4.142.0/24 maxlen: 24 203.4.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.crl rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyCB99vi7xGkQRvU5q-G8yaYyvo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:12:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E19, serialNumber=372081F7DBE2EF11A4411BD4E6AF86F32698CAFA Validity Not Before: Sep 9 05:04:49 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a5915a-2779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3d:05:5f:0d:46:d1:19:c1:dd:e4:ed:45:ab: bf:d7:08:81:80:7e:42:34:dc:43:34:2e:c3:97:bc: b4:f6:23:1b:32:50:f8:4a:19:78:9f:84:bb:14:f5: 83:e7:fa:d5:a3:e3:f7:63:96:46:2b:9f:d6:94:d2: 2a:f6:b4:d8:55:27:03:cc:a7:a0:c1:9a:97:15:34: 00:da:6f:81:78:1b:40:09:52:65:b6:37:ac:87:9f: 1a:81:20:f9:d1:bb:5b:18:63:f3:99:6c:4a:7c:47: d6:8b:6a:71:5e:39:b7:59:f0:4c:5e:7b:8d:6c:22: ef:83:c7:06:9e:65:53:e3:e6:55:72:10:84:7c:d6: d5:72:36:c5:de:70:00:d2:33:09:18:d3:c5:e8:16: 1a:15:8d:2c:09:e8:c9:08:d5:ec:80:c2:a1:ec:85: 10:9c:ae:80:75:5a:76:27:90:72:49:f9:33:20:80: 71:9b:72:15:a9:cf:2f:d3:50:7d:6f:22:02:01:58: b5:3b:16:16:91:2e:f5:9e:7d:b2:f8:9b:10:3b:5e: fd:1b:49:2c:aa:61:59:c4:05:65:db:c7:48:70:de: 09:1e:93:a4:9c:15:57:f9:f9:40:28:f0:8d:60:01: fd:db:a4:5b:28:63:96:10:e6:12:4c:55:66:2a:cd: e9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:89:D9:7B:94:F3:85:98:35:44:A5:E9:29:4B:B7:4F:84:18:D7:87 X509v3 Authority Key Identifier: keyid:37:20:81:F7:DB:E2:EF:11:A4:41:1B:D4:E6:AF:86:F3:26:98:CA:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyCB99vi7xGkQRvU5q-G8yaYyvo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/4ABCFD508D3A11F0B6F4F46FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.4.136.0/21 Signature Algorithm: sha256WithRSAEncryption 06:61:f7:16:9e:e0:2a:24:04:c1:3a:74:0d:52:d2:1d:bf:c4: 15:a8:1c:a7:f8:be:42:50:92:bd:14:d6:4f:1f:e2:df:ac:03: 0f:73:37:6e:a7:87:0e:73:d5:52:66:4e:e0:44:c4:0b:c7:cc: 1e:30:c5:4f:8f:c9:1f:01:ba:66:10:8d:53:d5:45:53:8f:cb: d3:53:e9:60:f5:47:9b:78:e2:cb:97:f6:79:a0:ec:3b:2a:33: 18:da:9a:e1:6d:82:90:24:a8:2f:af:d6:02:c0:2b:21:7e:4d: d6:bb:e3:e0:d2:7f:f8:48:ab:87:04:37:24:ef:f1:db:c5:5d: a9:8c:07:f7:ed:3d:b7:99:33:52:07:f0:e7:57:cf:f9:33:3f: 53:10:99:68:ad:2a:82:37:9e:9b:57:23:ae:2a:a1:57:e8:e3: 09:5f:4e:46:d8:9e:8c:b3:7a:31:b6:bd:72:cf:41:be:9b:7c: 17:e7:d0:e8:36:ed:e4:f9:62:db:38:fd:3d:bb:a1:b6:c0:43: 82:77:8e:50:80:84:14:32:07:47:df:77:57:d8:dc:f4:e1:f4: ee:18:19:07:f2:cc:2c:49:4d:27:e7:14:89:19:d3:6b:30:88: 5b:17:40:fe:48:4a:32:ea:53:c1:7d:a6:3b:21:3a:3c:13:e3: 15:33:80:8d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFMTkxMTAvBgNVBAUTKDM3MjA4MUY3REJFMkVGMTFBNDQxMUJENEU2QUY4NkYz MjY5OENBRkEwHhcNMjUwOTA5MDUwNDQ5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTE1YS0yNzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtj0FXw1G0RnB3eTtRau/1wiBgH5CNNxDNC7Dl7y09iMbMlD4Shl4n4S7FPWD 5/rVo+P3Y5ZGK5/WlNIq9rTYVScDzKegwZqXFTQA2m+BeBtACVJltjesh58agSD5 0btbGGPzmWxKfEfWi2pxXjm3WfBMXnuNbCLvg8cGnmVT4+ZVchCEfNbVcjbF3nAA 0jMJGNPF6BYaFY0sCejJCNXsgMKh7IUQnK6AdVp2J5BySfkzIIBxm3IVqc8v01B9 byICAVi1OxYWkS71nn2y+JsQO179G0ksqmFZxAVl28dIcN4JHpOknBVX+flAKPCN YAH926RbKGOWEOYSTFVmKs3pPwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHuJ2XuU 84WYNUSl6SlLt0+EGNeHMB8GA1UdIwQYMBaAFDcggffb4u8RpEEb1OavhvMmmMr6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUUxOS8xMEM3RjBBQTE0 MEYxMUVGOEE0QTcwMTZDNEY5QUUwMi9OeUNCOTl2aTd4R2tRUnZVNXEtRzh5YVl5 dm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055Q0I5OXZpN3hHa1FSdlU1cS1HOHlhWXl2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTFFMTkvMTBDN0YwQUExNDBGMTFFRjhBNEE3MDE2QzRGOUFFMDIvNEFCQ0ZENTA4 RDNBMTFGMEI2RjRGNDZGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDywSIMA0GCSqGSIb3DQEBCwUAA4IBAQAGYfcWnuAqJATBOnQNUtId v8QVqByn+L5CUJK9FNZPH+LfrAMPczdup4cOc9VSZk7gRMQLx8weMMVPj8kfAbpm EI1T1UVTj8vTU+lg9UebeOLLl/Z5oOw7KjMY2prhbYKQJKgvr9YCwCshfk3Wu+Pg 0n/4SKuHBDck7/HbxV2pjAf37T23mTNSB/DnV8/5Mz9TEJlorSqCN56bVyOuKqFX 6OMJX05G2J6Ms3oxtr1yz0G+m3wX59DoNu3k+WLbOP09u6G2wEOCd45QgIQUMgdH 33dX2Nz04fTuGBkH8swsSU0n5xSJGdNrMIhbF0D+SEoy6lPBfaY7ITo8E+MVM4CN -----END CERTIFICATE-----Generated at Thu Mar 26 04:18:53 2026 by rpki-client