$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/D8346320F7A011EE8BE8843BC4F9AE02.roa File: D8346320F7A011EE8BE8843BC4F9AE02.roa (raw, json) Hash identifier: pZOaDUH0nfBeAf7y7YbUpvrNXJh3luHM6SLLYuxsD14= Subject key identifier: 26:19:C4:67:9B:C9:91:9F:72:B3:86:D0:18:B4:AB:95:70:C4:38:FD Certificate issuer: /CN=A91A5849/serialNumber=536BF8DDCE802667378F47BD4954A90B7C7009C1 Certificate serial: 016B Authority key identifier: 53:6B:F8:DD:CE:80:26:67:37:8F:47:BD:49:54:A9:0B:7C:70:09:C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/D8346320F7A011EE8BE8843BC4F9AE02.roa Signing time: Mon 02 Mar 2026 14:14:06 +0000 ROA not before: Sat 03 May 2025 05:12:27 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 14618 IP address blocks: 202.37.173.0/24 maxlen: 24 2001:df3:aac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.crl rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5849, serialNumber=536BF8DDCE802667378F47BD4954A90B7C7009C1 Validity Not Before: May 3 05:12:27 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a59b2e-f142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:87:24:5d:79:12:c9:31:6b:14:eb:bf:cc:31: 8b:e0:72:91:9a:f2:6a:54:89:da:3d:07:a1:06:c4: 4f:24:6f:1a:a9:59:8b:a7:47:8a:16:17:20:26:4e: 77:a0:c1:92:82:15:72:2e:3c:eb:d7:f5:65:2a:f3: 90:cc:25:79:a7:0e:ee:5a:a2:12:07:29:99:4c:84: 2a:eb:fe:1d:92:30:ad:1d:e3:5c:55:45:83:bb:0a: 27:71:27:12:01:64:da:4e:1f:ee:ad:74:d6:17:40: 3b:0b:c0:be:3c:35:b4:cd:4c:7e:18:6a:9b:7c:34: 9e:8b:37:d5:fd:3d:96:0b:1f:f3:c1:e9:a6:7d:75: 84:a1:6d:1c:19:fa:9d:b4:62:79:86:86:87:df:80: e2:3d:09:a1:cd:ab:f3:17:32:07:c1:72:91:bd:26: 9a:1e:53:37:3b:a1:39:37:3d:58:60:58:37:3c:85: e2:7d:e6:c5:db:0e:5a:ec:25:7c:54:f0:48:ef:88: 51:b3:3c:e5:11:9a:4e:5c:5b:66:7c:45:d6:74:2b: 58:13:56:48:40:1b:83:79:38:7c:1c:2a:9e:37:f6: 1c:cc:f0:2f:99:9e:af:56:ee:de:fa:45:d7:6b:54: b5:7c:cf:b1:94:8e:c6:25:f8:42:0a:fc:66:4f:21: 37:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:19:C4:67:9B:C9:91:9F:72:B3:86:D0:18:B4:AB:95:70:C4:38:FD X509v3 Authority Key Identifier: keyid:53:6B:F8:DD:CE:80:26:67:37:8F:47:BD:49:54:A9:0B:7C:70:09:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/D8346320F7A011EE8BE8843BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.37.173.0/24 IPv6: 2001:df3:aac0::/48 Signature Algorithm: sha256WithRSAEncryption 55:47:91:81:97:6a:5f:02:3c:6f:0e:9c:f8:b9:4e:9e:c0:ae: 0b:cc:06:5d:ee:ab:a2:95:c8:ba:77:e0:fa:c9:fc:dc:ec:77: bd:cf:ea:4a:8d:85:e3:ae:1a:25:8d:d1:a8:c3:46:75:ed:c6: c4:91:18:8b:65:00:85:5d:3d:d6:1c:b0:a9:5f:b5:a6:28:52: 58:5c:09:78:f4:72:3f:b2:1b:a1:56:83:34:1b:59:b3:d3:d0: b2:87:1c:a3:35:b7:e6:e0:89:0b:d2:a6:03:cc:ca:2a:c3:d9: 92:ec:44:c5:9c:9b:f8:e2:88:18:c4:a3:da:ad:34:d2:7d:3d: 13:7e:50:ab:91:9b:49:c0:a1:97:81:1f:03:44:d2:74:c7:7d: b1:d4:5b:4c:00:2a:51:a0:a8:6f:38:c4:a2:76:36:91:37:c4: c1:28:b9:b0:dc:c3:b1:22:d9:f0:77:89:fa:8c:f8:3d:4d:cd: d3:e6:a7:5b:aa:f9:b1:dc:93:86:66:61:a4:6c:7b:5d:4f:6a: f8:60:84:2a:89:6b:aa:ee:6e:81:9d:4c:a5:b0:b8:d2:70:a9: 5e:63:07:f1:f4:c0:f4:11:09:6f:b0:f9:3a:a5:c7:fb:83:2b: 29:84:21:40:fe:ff:41:15:b7:28:11:5c:48:66:12:6c:0f:e5: ef:97:56:ce -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU4NDkxMTAvBgNVBAUTKDUzNkJGOEREQ0U4MDI2NjczNzhGNDdCRDQ5NTRBOTBC N0M3MDA5QzEwHhcNMjUwNTAzMDUxMjI3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OWIyZS1mMTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1IckXXkSyTFrFOu/zDGL4HKRmvJqVInaPQehBsRPJG8aqVmLp0eKFhcgJk53 oMGSghVyLjzr1/VlKvOQzCV5pw7uWqISBymZTIQq6/4dkjCtHeNcVUWDuwoncScS AWTaTh/urXTWF0A7C8C+PDW0zUx+GGqbfDSeizfV/T2WCx/zwemmfXWEoW0cGfqd tGJ5hoaH34DiPQmhzavzFzIHwXKRvSaaHlM3O6E5Nz1YYFg3PIXifebF2w5a7CV8 VPBI74hRszzlEZpOXFtmfEXWdCtYE1ZIQBuDeTh8HCqeN/YczPAvmZ6vVu7e+kXX a1S1fM+xlI7GJfhCCvxmTyE3iQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFCYZxGeb yZGfcrOG0Bi0q5VwxDj9MB8GA1UdIwQYMBaAFFNr+N3OgCZnN49HvUlUqQt8cAnB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTg0OS9EQkFEMzg0RUY3 OUUxMUVFQTQ1QUFFMkNDNEY5QUUwMi9VMnY0M2M2QUptYzNqMGU5U1ZTcEMzeHdD Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UydjQzYzZBSm1jM2owZTlTVlNwQzN4d0NjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU4NDkvREJBRDM4NEVGNzlFMTFFRUE0NUFBRTJDQzRGOUFFMDIvRDgzNDYzMjBG N0EwMTFFRThCRTg4NDNCQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAyiWtMA8EAgACMAkDBwAgAQ3zqsAwDQYJKoZIhvcNAQELBQADggEB AFVHkYGXal8CPG8OnPi5Tp7ArgvMBl3uq6KVyLp34PrJ/Nzsd73P6kqNheOuGiWN 0ajDRnXtxsSRGItlAIVdPdYcsKlftaYoUlhcCXj0cj+yG6FWgzQbWbPT0LKHHKM1 t+bgiQvSpgPMyirD2ZLsRMWcm/jiiBjEo9qtNNJ9PRN+UKuRm0nAoZeBHwNE0nTH fbHUW0wAKlGgqG84xKJ2NpE3xMEoubDcw7Ei2fB3ifqM+D1NzdPmp1uq+bHck4Zm YaRse11PavhghCqJa6ruboGdTKWwuNJwqV5jB/H0wPQRCW+w+Tqlx/uDKymEIUD+ /0EVtygRXEhmEmwP5e+XVs4= -----END CERTIFICATE-----Generated at Thu Mar 26 03:31:32 2026 by rpki-client