$ rpki-client -vvf rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/BE3E0EE00C4E11EF85EEFC1FC4F9AE02.roa File: BE3E0EE00C4E11EF85EEFC1FC4F9AE02.roa (raw, json) Hash identifier: pepfA+msf41kJfFbRbbVsbi5IxqeQp8u9HVp78l5RWY= Subject key identifier: FE:0F:6D:CC:BF:3C:22:D6:F0:9F:87:2E:2E:DC:81:CC:C8:A1:C3:BF Certificate issuer: /CN=A91993A0/serialNumber=BCB7CF4430BB98EA04851C340726E588150E139D Certificate serial: 019F Authority key identifier: BC:B7:CF:44:30:BB:98:EA:04:85:1C:34:07:26:E5:88:15:0E:13:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/BE3E0EE00C4E11EF85EEFC1FC4F9AE02.roa Signing time: Mon 02 Mar 2026 14:51:53 +0000 ROA not before: Wed 01 Oct 2025 06:01:13 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 4635 IP address blocks: 202.70.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.crl rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:09:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91993A0, serialNumber=BCB7CF4430BB98EA04851C340726E588150E139D Validity Not Before: Oct 1 06:01:13 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a5a409-c364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a4:28:49:98:74:9e:1f:87:fc:75:e8:5b:8e: 64:e6:48:c0:2d:88:94:bf:46:27:76:d2:e2:48:15: 67:c2:f0:3e:9a:7f:c2:46:8e:f9:ff:bb:28:d8:3a: 17:7e:cc:14:ea:74:0c:7c:7d:35:ae:fb:0a:0b:74: 64:f5:7a:7d:8b:ef:b7:25:9d:cf:c1:81:16:7a:cf: 2f:ab:b5:c2:93:6e:63:18:d2:8a:07:f2:da:01:24: 61:7a:52:c0:b1:a8:98:2b:42:be:bd:73:68:dc:3d: bb:4e:30:0a:50:07:ef:1e:14:5c:46:95:e1:f3:b5: ab:fe:64:9b:b5:f2:b3:f6:6a:6f:de:92:a7:20:65: fa:9e:dd:72:f0:3e:06:5b:da:e2:61:dc:48:80:9a: e8:cc:6b:39:9c:a6:bb:7a:29:b0:65:fe:e9:0b:40: 56:f2:be:7c:7c:a1:e0:49:9a:de:23:14:e0:78:8c: 9c:ae:80:eb:6e:ce:c2:f9:4c:46:d1:54:e8:10:84: 7e:63:19:66:e7:c1:e8:d1:e4:eb:cd:ec:d0:1b:5b: b9:85:16:58:65:65:aa:f5:9e:c6:eb:ea:5f:48:87: 64:65:16:86:52:c7:62:10:68:77:f9:12:9f:92:28: 90:6b:cc:28:90:13:fa:8f:e0:cb:e0:bf:27:e5:55: 0c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:0F:6D:CC:BF:3C:22:D6:F0:9F:87:2E:2E:DC:81:CC:C8:A1:C3:BF X509v3 Authority Key Identifier: keyid:BC:B7:CF:44:30:BB:98:EA:04:85:1C:34:07:26:E5:88:15:0E:13:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/BE3E0EE00C4E11EF85EEFC1FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.70.160.0/20 Signature Algorithm: sha256WithRSAEncryption 05:9b:c1:19:6c:bc:13:63:5a:82:ff:a6:f1:ae:bc:41:ea:e1: fe:0d:1f:d0:7b:6e:5e:74:b2:a0:02:59:81:b7:1d:23:be:28: 9a:25:26:49:da:bf:7e:de:95:8a:a9:93:99:92:ef:14:ad:6b: d2:f1:f7:e0:c9:a0:93:0c:69:26:05:17:2a:9a:9e:ad:dd:67: a6:96:e8:92:4d:3f:2f:b0:a8:12:5d:d4:0c:e5:67:ce:8b:30: 4c:23:49:5d:e7:f0:4a:89:8f:e9:93:6e:7c:13:71:02:70:59: 5a:89:61:e5:bc:84:43:a6:8d:36:11:65:3d:03:30:65:80:fc: 8c:b3:5a:ae:2a:30:2e:ea:ce:4c:6c:e8:4f:95:f5:38:c0:9c: d0:40:ae:cd:4d:14:f2:d4:c9:c0:8f:6a:4a:31:99:27:2c:7f: c0:72:7e:41:a1:b3:38:0a:d9:5a:fc:4f:95:ba:eb:a9:a0:e9: cb:d2:0f:0e:91:c9:5b:f0:79:74:9e:d5:67:3e:e2:ab:14:ee: ac:30:91:12:a0:75:d3:2d:ff:7c:25:3a:3a:7b:53:29:5f:ca: e3:52:ec:44:00:ff:18:3c:68:71:1e:b2:5b:83:11:b3:1e:e3: fa:5e:32:1d:df:67:25:7f:fb:07:0e:1d:46:2a:18:2e:3d:de: a4:3a:af:57 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkzQTAxMTAvBgNVBAUTKEJDQjdDRjQ0MzBCQjk4RUEwNDg1MUMzNDA3MjZFNTg4 MTUwRTEzOUQwHhcNMjUxMDAxMDYwMTEzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTQwOS1jMzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzaQoSZh0nh+H/HXoW45k5kjALYiUv0YndtLiSBVnwvA+mn/CRo75/7so2DoX fswU6nQMfH01rvsKC3Rk9Xp9i++3JZ3PwYEWes8vq7XCk25jGNKKB/LaASRhelLA saiYK0K+vXNo3D27TjAKUAfvHhRcRpXh87Wr/mSbtfKz9mpv3pKnIGX6nt1y8D4G W9riYdxIgJrozGs5nKa7eimwZf7pC0BW8r58fKHgSZreIxTgeIycroDrbs7C+UxG 0VToEIR+Yxlm58Ho0eTrzezQG1u5hRZYZWWq9Z7G6+pfSIdkZRaGUsdiEGh3+RKf kiiQa8wokBP6j+DL4L8n5VUM1wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFP4Pbcy/ PCLW8J+HLi7cgczIocO/MB8GA1UdIwQYMBaAFLy3z0Qwu5jqBIUcNAcm5YgVDhOd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTNBMC9BNTk1NUU1NjBD NDUxMUVGOUU3RTA1MURDNEY5QUUwMi92TGZQUkRDN21Pb0VoUncwQnlibGlCVU9F NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZMZlBSREM3bU9vRWhSdzBCeWJsaUJVT0U1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTkzQTAvQTU5NTVFNTYwQzQ1MTFFRjlFN0UwNTFEQzRGOUFFMDIvQkUzRTBFRTAw QzRFMTFFRjg1RUVGQzFGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEykagMA0GCSqGSIb3DQEBCwUAA4IBAQAFm8EZbLwTY1qC/6bxrrxB 6uH+DR/Qe25edLKgAlmBtx0jviiaJSZJ2r9+3pWKqZOZku8UrWvS8ffgyaCTDGkm BRcqmp6t3WemluiSTT8vsKgSXdQM5WfOizBMI0ld5/BKiY/pk258E3ECcFlaiWHl vIRDpo02EWU9AzBlgPyMs1quKjAu6s5MbOhPlfU4wJzQQK7NTRTy1MnAj2pKMZkn LH/Acn5BobM4Ctla/E+VuuupoOnL0g8Okclb8Hl0ntVnPuKrFO6sMJESoHXTLf98 JTo6e1MpX8rjUuxEAP8YPGhxHrJbgxGzHuP6XjId32clf/sHDh1GKhguPd6kOq9X -----END CERTIFICATE-----Generated at Thu Mar 26 04:13:18 2026 by rpki-client