$ rpki-client -vvf rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/593AFF1ACA0611EEBA01A22CC4F9AE02.roa File: 593AFF1ACA0611EEBA01A22CC4F9AE02.roa (raw, json) Hash identifier: CY7sgHFLl+nOK7TpwFje8AHE3rJopUk0iaEHtQoJM00= Subject key identifier: 64:E2:9A:8E:23:F1:E9:FF:6F:23:D4:26:F0:ED:E2:8D:B1:AE:B6:33 Certificate issuer: /CN=A91953AF/serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93 Certificate serial: 0185 Authority key identifier: A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/593AFF1ACA0611EEBA01A22CC4F9AE02.roa Signing time: Sun 01 Mar 2026 10:33:02 +0000 ROA not before: Fri 09 Jan 2026 03:24:06 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 137958 IP address blocks: 202.47.178.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91953AF, serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93 Validity Not Before: Jan 9 03:24:06 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a415de-45b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:20:eb:fd:a5:4b:ec:44:1c:64:fc:c8:3b:e9: cf:f2:43:8a:ef:00:c5:6b:db:a5:d5:00:bf:ec:f3: f9:9a:33:b2:5d:1a:1e:a3:29:45:dc:9a:26:09:35: c9:07:f6:c5:1d:26:1d:fd:bb:36:c1:7a:8b:23:24: 9a:6f:7c:f0:74:12:5f:83:43:e2:57:fe:e0:12:3d: d6:9a:da:f7:ab:65:2f:56:f7:10:f9:bd:27:b8:e6: 80:07:bf:59:df:3d:91:db:dc:ad:8d:35:c2:d2:4f: 72:fb:13:9f:e1:ac:0d:1c:d4:77:f8:df:89:57:9d: 2b:29:40:70:ba:2e:f0:e1:c1:3c:c7:92:c7:67:06: d6:7d:5d:4c:7f:8c:2f:5c:62:d8:51:53:77:46:43: 15:e9:f9:31:4b:e5:8c:25:c9:1d:40:ad:2f:53:64: 69:2f:09:a7:9e:5b:73:ab:f0:08:ce:c1:e8:06:0b: f9:b5:1f:9c:bd:6f:82:e7:a8:0f:12:62:f7:e3:b2: 07:fc:ff:5b:f7:47:2e:3d:40:67:33:fe:4a:eb:74: ce:31:aa:fe:2d:98:e7:b1:ad:ca:f6:44:22:ce:f2: bd:e6:d4:07:18:d8:2f:db:e6:31:b7:fd:f3:40:e4: 1b:ec:89:03:39:4b:c0:9c:1c:20:cd:24:3d:12:4d: 2a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E2:9A:8E:23:F1:E9:FF:6F:23:D4:26:F0:ED:E2:8D:B1:AE:B6:33 X509v3 Authority Key Identifier: keyid:A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/593AFF1ACA0611EEBA01A22CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.47.178.0/23 Signature Algorithm: sha256WithRSAEncryption 45:91:3a:99:86:62:19:5d:22:91:f3:fc:0a:1a:7b:10:07:dc: a7:c1:34:c7:b6:f1:5c:f7:ad:0c:d5:18:c5:e1:0e:b3:fc:89: 66:6b:d0:61:42:3a:89:63:3b:59:ba:0a:20:05:21:92:b0:01: 8d:34:56:bb:f0:14:25:23:44:8a:39:1c:75:3a:4e:90:b6:dd: ec:8b:2a:e9:0d:d0:ca:b5:56:9c:3a:09:e3:50:17:1b:56:3b: e0:90:f3:21:f1:21:22:d4:14:73:34:8d:4f:b7:47:66:c0:b6: d7:83:a8:70:27:26:f4:12:ab:a5:50:86:0d:a6:61:0e:0b:dc: f7:08:c2:d1:fd:fc:99:08:b6:f8:30:ca:42:d7:15:c6:5a:fb: 12:81:e3:5d:0e:01:52:58:3a:eb:0a:76:ed:b0:6a:2c:34:8f: f4:a1:e8:e8:97:f1:52:ce:4c:4e:74:92:31:6b:63:a2:d3:4c: 15:74:be:97:15:16:7e:89:e4:ab:68:42:5d:09:6d:5c:79:f9: d7:c4:62:ce:25:0f:b1:87:1c:0b:af:f0:92:44:59:73:1f:b2: f7:f1:a3:f6:05:19:51:84:04:dc:6c:49:8f:01:e0:22:c1:24: 4d:72:59:ef:d8:91:0a:20:42:ff:39:17:44:f7:40:db:58:05: bd:12:36:1c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzQUYxMTAvBgNVBAUTKEE4MjRCNjYzRjNGNUEzNEY4MkVFMjI3MkE4QUVGREU0 M0I3OUJEOTMwHhcNMjYwMTA5MDMyNDA2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTVkZS00NWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlCDr/aVL7EQcZPzIO+nP8kOK7wDFa9ul1QC/7PP5mjOyXRoeoylF3JomCTXJ B/bFHSYd/bs2wXqLIySab3zwdBJfg0PiV/7gEj3Wmtr3q2UvVvcQ+b0nuOaAB79Z 3z2R29ytjTXC0k9y+xOf4awNHNR3+N+JV50rKUBwui7w4cE8x5LHZwbWfV1Mf4wv XGLYUVN3RkMV6fkxS+WMJckdQK0vU2RpLwmnnltzq/AIzsHoBgv5tR+cvW+C56gP EmL347IH/P9b90cuPUBnM/5K63TOMar+LZjnsa3K9kQizvK95tQHGNgv2+Yxt/3z QOQb7IkDOUvAnBwgzSQ9Ek0qIQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGTimo4j 8en/byPUJvDt4o2xrrYzMB8GA1UdIwQYMBaAFKgktmPz9aNPgu4icqiu/eQ7eb2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTNBRi8wNDMxNjBCMENB MDQxMUVFQkNEMDE3NzBDNEY5QUUwMi9xQ1MyWV9QMW8wLUM3aUp5cUs3OTVEdDV2 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FDUzJZX1AxbzAtQzdpSnlxSzc5NUR0NXZaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTUzQUYvMDQzMTYwQjBDQTA0MTFFRUJDRDAxNzcwQzRGOUFFMDIvNTkzQUZGMUFD QTA2MTFFRUJBMDFBMjJDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQByi+yMA0GCSqGSIb3DQEBCwUAA4IBAQBFkTqZhmIZXSKR8/wKGnsQ B9ynwTTHtvFc960M1RjF4Q6z/Ilma9BhQjqJYztZugogBSGSsAGNNFa78BQlI0SK ORx1Ok6Qtt3siyrpDdDKtVacOgnjUBcbVjvgkPMh8SEi1BRzNI1Pt0dmwLbXg6hw Jyb0EqulUIYNpmEOC9z3CMLR/fyZCLb4MMpC1xXGWvsSgeNdDgFSWDrrCnbtsGos NI/0oejol/FSzkxOdJIxa2Oi00wVdL6XFRZ+ieSraEJdCW1cefnXxGLOJQ+xhxwL r/CSRFlzH7L38aP2BRlRhATcbEmPAeAiwSRNclnv2JEKIEL/ORdE90DbWAW9EjYc -----END CERTIFICATE-----Generated at Thu Mar 26 15:58:42 2026 by rpki-client