$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/E243CD9C227811F1B65A16B9A4833773.roa File: E243CD9C227811F1B65A16B9A4833773.roa (raw, json) Hash identifier: S/AzEaze3DTMcHGlipjXyDifcNRIK7tT17DD9pwo8PU= Subject key identifier: 5F:F9:8C:83:B5:18:F6:D5:BB:CE:0B:01:D3:05:AF:44:48:8C:27:50 Certificate issuer: /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Certificate serial: 3569 Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/E243CD9C227811F1B65A16B9A4833773.roa Signing time: Wed 18 Mar 2026 03:16:41 +0000 ROA not before: Wed 18 Mar 2026 03:16:41 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 401783 IP address blocks: 101.0.21.0/24 maxlen: 24 101.0.22.0/24 maxlen: 24 101.0.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:08:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13673 (0x3569) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Validity Not Before: Mar 18 03:16:41 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69ba1919-b7cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:94:4d:99:3e:4f:61:6f:c7:d5:b7:6e:76:74: ee:0f:d5:e9:8c:56:1d:02:e1:6b:9f:d4:79:10:42: 6f:a8:aa:a9:00:59:c7:d1:50:e2:64:88:40:9d:31: ea:db:6b:9a:58:dc:0b:bf:63:12:1e:72:fc:8b:a8: a8:d8:ff:92:7a:fe:8f:81:ed:64:b6:be:68:54:78: 9e:b9:84:ca:46:7c:f7:0a:88:cf:20:a0:ec:2a:02: 75:31:80:bc:25:9a:40:46:55:77:55:0c:77:75:54: 44:d3:84:91:16:c3:93:41:a9:6b:20:01:12:ce:ac: 95:34:c6:34:a7:2a:96:ea:9a:90:16:eb:59:e6:f3: 11:15:ab:ea:47:c5:51:77:5a:8b:06:f8:6c:b6:c2: fa:90:03:b6:04:ff:2a:59:2b:ea:11:b4:e0:b6:0e: 47:e9:8f:9b:e7:d4:28:7a:53:61:6a:69:05:66:fd: 34:b4:b2:5b:c9:c3:99:e1:84:89:ff:e4:2a:d8:af: 27:74:b6:a0:8c:a4:46:38:9f:0a:b3:b7:ff:80:66: 83:34:f8:38:0c:2e:6b:8c:37:94:e2:2a:f0:ff:ed: 4f:ef:f5:62:bd:6e:5f:bb:90:c3:1d:54:17:18:69: a7:11:a5:c8:ce:f0:1c:23:39:70:03:b3:61:15:39: 52:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F9:8C:83:B5:18:F6:D5:BB:CE:0B:01:D3:05:AF:44:48:8C:27:50 X509v3 Authority Key Identifier: keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/E243CD9C227811F1B65A16B9A4833773.roa sbgp-ipAddrBlock: critical IPv4: 101.0.21.0-101.0.23.255 Signature Algorithm: sha256WithRSAEncryption 37:aa:30:5b:fe:e3:a8:d4:b3:3b:6a:5a:3d:d3:ff:fd:27:1b: f0:7d:d3:41:ee:f2:9e:f4:20:fb:95:24:5d:c2:9c:96:3f:25: c6:21:45:0a:02:dd:ff:29:a9:00:03:cf:9d:54:73:e3:3d:32: aa:af:21:47:94:1d:82:b3:e1:d2:4a:6b:69:0a:16:45:4b:18: c7:63:e5:ca:b1:20:ed:2f:0a:22:fc:4e:1b:df:ca:1c:30:8d: cc:24:b0:41:2b:31:70:bc:5c:4c:00:97:33:13:75:12:9f:cb: 8b:f5:d3:5d:70:6f:83:fb:77:63:93:14:80:34:42:fd:c5:29: dc:fe:dc:ed:6b:8f:e5:13:ef:cb:3f:32:39:fd:69:e6:90:fb: 5b:be:79:81:f8:d8:b3:c2:70:5e:3a:2e:ce:55:db:ef:25:7a: 26:49:dd:01:54:86:9f:e0:b5:d6:d9:73:b9:3a:b9:7a:27:e1: c2:d9:ce:d1:67:d2:fd:b5:49:87:53:9b:cb:64:66:9a:2f:ea: 62:70:0b:9f:5d:a0:5e:df:fb:9c:c4:d1:5e:3b:ba:75:ce:b2: 40:05:d7:4d:54:9b:99:1a:61:5c:98:72:ca:03:bb:be:8f:72: ce:b6:df:b6:99:2c:a0:3f:a0:10:63:b3:08:59:57:5c:7c:c9: 31:11:b8:1f -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICNWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFMDMxMTAvBgNVBAUTKEUzOUFCMUQwN0I1MERCQjlBQkUyQ0I1MUNEOUIxRTNB NUE4NTQ1MjEwHhcNMjYwMzE4MDMxNjQxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWJhMTkxOS1iN2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo5RNmT5PYW/H1bdudnTuD9XpjFYdAuFrn9R5EEJvqKqpAFnH0VDiZIhAnTHq 22uaWNwLv2MSHnL8i6io2P+Sev6Pge1ktr5oVHieuYTKRnz3CojPIKDsKgJ1MYC8 JZpARlV3VQx3dVRE04SRFsOTQalrIAESzqyVNMY0pyqW6pqQFutZ5vMRFavqR8VR d1qLBvhstsL6kAO2BP8qWSvqEbTgtg5H6Y+b59QoelNhamkFZv00tLJbycOZ4YSJ /+Qq2K8ndLagjKRGOJ8Ks7f/gGaDNPg4DC5rjDeU4irw/+1P7/VivW5fu5DDHVQX GGmnEaXIzvAcIzlwA7NhFTlSVQIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFF/5jIO1 GPbVu84LAdMFr0RIjCdQMB8GA1UdIwQYMBaAFOOasdB7UNu5q+LLUc2bHjpahUUh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEUwMy8zRjQ4RjIyNDFE QTYxMUUyOUEwNzVEOUQwOEIwMkNEMi80NXF4MEh0UTI3bXI0c3RSelpzZU9scUZS U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1cXgwSHRRMjdtcjRzdFJ6WnNlT2xxRlJTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTRFMDMvM0Y0OEYyMjQxREE2MTFFMjlBMDc1RDlEMDhCMDJDRDIvRTI0M0NEOUMy Mjc4MTFGMUI2NUExNkI5QTQ4MzM3NzMucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBABlABUDBANlABAwDQYJKoZIhvcNAQELBQADggEBADeqMFv+46jU sztqWj3T//0nG/B900Hu8p70IPuVJF3CnJY/JcYhRQoC3f8pqQADz51Uc+M9Mqqv IUeUHYKz4dJKa2kKFkVLGMdj5cqxIO0vCiL8ThvfyhwwjcwksEErMXC8XEwAlzMT dRKfy4v1011wb4P7d2OTFIA0Qv3FKdz+3O1rj+UT78s/Mjn9aeaQ+1u+eYH42LPC cF46Ls5V2+8leiZJ3QFUhp/gtdbZc7k6uXon4cLZztFn0v21SYdTm8tkZpov6mJw C59doF7f+5zE0V47unXOskAF101Um5kaYVyYcsoDu76Pcs6237aZLKA/oBBjswhZ V1x8yTERuB8= -----END CERTIFICATE-----Generated at Thu Mar 26 09:12:15 2026 by rpki-client