$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/7634D328351411EBBF864670C4F9AE02.roa File: 7634D328351411EBBF864670C4F9AE02.roa (raw, json) Hash identifier: e9rRepgEUQCp9vSJIwP7DAt7IRy8y+BxF4pfmKiepf8= Subject key identifier: 25:23:9C:E4:9F:F2:9C:9A:63:76:A9:30:0A:A5:94:EE:DF:6C:E2:28 Certificate issuer: /CN=A91AB238/serialNumber=63FAF4D23E683E93F607630DDFFD4B1AF6333F00 Certificate serial: 0853 Authority key identifier: 63:FA:F4:D2:3E:68:3E:93:F6:07:63:0D:DF:FD:4B:1A:F6:33:3F:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/7634D328351411EBBF864670C4F9AE02.roa Signing time: Mon 02 Mar 2026 21:26:00 +0000 ROA not before: Mon 02 Mar 2026 21:26:00 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 24226 IP address blocks: 103.250.240.0/22 maxlen: 22 103.254.156.0/22 maxlen: 22 150.242.40.0/22 maxlen: 22 202.49.59.0/24 maxlen: 24 202.49.240.0/22 maxlen: 22 202.78.240.0/21 maxlen: 21 202.78.244.0/23 maxlen: 23 202.78.247.0/24 maxlen: 24 2404:130::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2131 (0x853) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB238, serialNumber=63FAF4D23E683E93F607630DDFFD4B1AF6333F00 Validity Not Before: Mar 2 21:26:00 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a60067-76d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f6:68:70:69:42:ae:65:3b:3f:0e:bd:92:70: a3:b4:31:9e:8a:4c:94:5a:e1:4d:b1:69:58:55:88: db:60:70:ef:63:8d:4f:b4:10:a5:13:4a:22:e4:f4: a7:f9:21:d2:21:f1:62:87:8a:1f:6c:03:bc:fe:4b: c9:14:59:86:b4:8b:6c:8d:d8:c3:cc:e8:ca:ad:70: 60:48:ce:97:d9:cb:94:3b:25:87:9c:64:4e:5b:5c: 3e:c5:ed:0f:67:2c:ed:a9:76:6d:6c:cb:e1:07:83: 40:5a:32:dc:d6:56:8f:44:a4:2a:da:37:4e:33:8b: 32:e7:a7:d4:a5:08:49:b0:db:98:28:d1:cf:81:0b: ec:52:65:06:2d:ea:6e:03:a4:01:51:fb:ff:4c:e5: 86:24:01:94:67:0f:cd:52:61:1b:08:fe:cc:a7:f3: 7e:77:19:18:5b:8e:58:7d:3f:66:e6:d8:e2:a6:0d: 92:ee:6f:41:6c:1f:da:3b:35:34:92:6f:cd:99:ef: 41:e6:ce:16:a9:18:ab:c9:07:c7:1a:19:9a:0d:9d: 5a:2a:c2:7a:ca:68:15:ed:ac:7a:b9:82:cd:8a:c0: 6c:cd:39:76:82:71:41:d6:fa:d6:f2:5b:33:f8:5f: da:d1:60:93:19:35:f1:83:3a:65:42:8d:e3:5f:7d: 0e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:23:9C:E4:9F:F2:9C:9A:63:76:A9:30:0A:A5:94:EE:DF:6C:E2:28 X509v3 Authority Key Identifier: keyid:63:FA:F4:D2:3E:68:3E:93:F6:07:63:0D:DF:FD:4B:1A:F6:33:3F:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/7634D328351411EBBF864670C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.250.240.0/22 103.254.156.0/22 150.242.40.0/22 202.49.59.0/24 202.49.240.0/22 202.78.240.0/21 IPv6: 2404:130::/32 Signature Algorithm: sha256WithRSAEncryption 16:09:ff:62:c1:4e:20:69:3a:ae:5d:66:28:0a:c9:f5:94:ed: 0f:f4:99:6d:05:f8:b5:32:1e:8a:62:42:bc:f0:63:57:15:f9: 32:88:c9:2a:be:2e:2a:57:fc:00:d0:ce:27:de:04:29:a8:44: 7e:21:ef:f3:b1:f3:2d:f8:a1:62:26:df:92:ab:3d:92:76:8d: 4a:78:a9:0d:22:9c:4e:06:e9:ed:c3:bb:04:40:73:de:91:31: 07:c2:f9:8a:d3:e4:91:2c:ef:f8:62:6a:ad:7a:e4:3f:38:69: 51:ee:df:0a:a2:49:8c:57:cd:c7:87:ef:dc:0f:58:d8:0f:c2: 68:41:43:13:55:3b:b3:bc:83:8f:3d:db:6a:de:67:8d:fc:5a: fe:32:d1:75:de:b8:58:d1:f0:da:f7:36:69:20:29:4d:3d:e0: 69:a4:10:c4:dc:f1:12:1d:73:0a:72:28:56:c6:90:13:75:ff: f1:bf:0a:1b:a9:8c:25:0c:df:58:1a:52:ec:80:a8:c8:2a:19: 79:4a:24:89:f1:5f:62:90:dc:1e:0b:0c:40:14:95:ff:2b:33: 91:ab:e9:8c:50:90:5a:6b:a2:f5:0c:97:e7:aa:ae:97:6a:c9: 9c:7a:75:9e:79:03:1f:0a:97:3a:1d:a6:3d:78:a3:82:e5:57: 57:6b:23:29 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgICCFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIyMzgxMTAvBgNVBAUTKDYzRkFGNEQyM0U2ODNFOTNGNjA3NjMwRERGRkQ0QjFB RjYzMzNGMDAwHhcNMjYwMzAyMjEyNjAwWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MDA2Ny03NmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4PZocGlCrmU7Pw69knCjtDGeikyUWuFNsWlYVYjbYHDvY41PtBClE0oi5PSn +SHSIfFih4ofbAO8/kvJFFmGtItsjdjDzOjKrXBgSM6X2cuUOyWHnGROW1w+xe0P ZyztqXZtbMvhB4NAWjLc1laPRKQq2jdOM4sy56fUpQhJsNuYKNHPgQvsUmUGLepu A6QBUfv/TOWGJAGUZw/NUmEbCP7Mp/N+dxkYW45YfT9m5tjipg2S7m9BbB/aOzU0 km/Nme9B5s4WqRiryQfHGhmaDZ1aKsJ6ymgV7ax6uYLNisBszTl2gnFB1vrW8lsz +F/a0WCTGTXxgzplQo3jX30OSwIDAQABo4ICjTCCAokwHQYDVR0OBBYEFCUjnOSf 8pyaY3apMAqllO7fbOIoMB8GA1UdIwQYMBaAFGP69NI+aD6T9gdjDd/9Sxr2Mz8A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjIzOC84QzdBMzM2OEZE RkExMUVBOTNBQUZGMEFDNEY5QUUwMi9ZX3IwMGo1b1BwUDJCMk1OM18xTEd2WXpQ d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lfcjAwajVvUHBQMkIyTU4zXzFMR3ZZelB3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUIyMzgvOEM3QTMzNjhGREZBMTFFQTkzQUFGRjBBQzRGOUFFMDIvNzYzNEQzMjgz NTE0MTFFQkJGODY0NjcwQzRGOUFFMDIucm9hMEwGCCsGAQUFBwEHAQH/BD0wOzAq BAIAATAkAwQCZ/rwAwQCZ/6cAwQClvIoAwQAyjE7AwQCyjHwAwQDyk7wMA0EAgAC MAcDBQAkBAEwMA0GCSqGSIb3DQEBCwUAA4IBAQAWCf9iwU4gaTquXWYoCsn1lO0P 9JltBfi1Mh6KYkK88GNXFfkyiMkqvi4qV/wA0M4n3gQpqER+Ie/zsfMt+KFiJt+S qz2Sdo1KeKkNIpxOBuntw7sEQHPekTEHwvmK0+SRLO/4YmqteuQ/OGlR7t8KokmM V83Hh+/cD1jYD8JoQUMTVTuzvIOPPdtq3meN/Fr+MtF13rhY0fDa9zZpIClNPeBp pBDE3PESHXMKcihWxpATdf/xvwobqYwlDN9YGlLsgKjIKhl5SiSJ8V9ikNweCwxA FJX/KzORq+mMUJBaa6L1DJfnqq6XasmcenWeeQMfCpc6HaY9eKOC5VdXayMp -----END CERTIFICATE-----Generated at Thu Mar 26 05:47:51 2026 by rpki-client