$ rpki-client -vvf rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/24C9831E83E611F0AF39BE57C4F9AE02.roa File: 24C9831E83E611F0AF39BE57C4F9AE02.roa (raw, json) Hash identifier: LsaU+0/HBMpopK0RqA0eoAaAu/VdELeTd9+UWB8c6C0= Subject key identifier: 43:CB:F4:1A:71:CB:B5:D5:F4:F8:31:BC:75:B1:60:BC:B3:15:47:23 Certificate issuer: /CN=A91B46FE/serialNumber=4ED0887BD304E04C98FBA53B9B9B02BDE4389703 Certificate serial: 61 Authority key identifier: 4E:D0:88:7B:D3:04:E0:4C:98:FB:A5:3B:9B:9B:02:BD:E4:38:97:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TtCIe9ME4EyY-6U7m5sCveQ4lwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/24C9831E83E611F0AF39BE57C4F9AE02.roa Signing time: Mon 02 Mar 2026 15:15:06 +0000 ROA not before: Thu 28 Aug 2025 08:08:13 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 154180 IP address blocks: 203.20.42.0/24 maxlen: 24 2001:df6:ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.crl rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TtCIe9ME4EyY-6U7m5sCveQ4lwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:05:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B46FE, serialNumber=4ED0887BD304E04C98FBA53B9B9B02BDE4389703 Validity Not Before: Aug 28 08:08:13 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a5a97a-56a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e0:c8:0b:2b:32:fc:95:1c:07:78:d3:2e:78: 54:b4:b6:55:49:57:63:a5:57:36:4e:26:af:38:39: 42:c9:60:0c:15:98:0e:95:9e:1f:0a:09:c2:5b:62: 1a:14:cb:60:60:33:d9:ca:49:ca:c7:d0:73:1a:0e: 1f:43:03:52:65:2a:3b:11:ae:88:55:64:a8:08:3a: 8a:da:48:50:da:ae:c1:ca:61:9d:ff:dc:16:b8:c5: 54:72:f5:99:f5:55:86:3a:b5:70:d6:ed:43:57:54: 12:61:35:a8:cc:75:6f:b9:33:c1:7a:d1:db:29:2c: 6a:80:d0:06:23:91:2b:17:cc:56:11:ab:7c:84:d5: 12:32:da:0c:88:42:94:21:48:a9:8b:c9:e9:89:48: a7:68:81:eb:41:94:2f:3c:b2:62:56:48:c8:29:a4: 39:fe:8c:64:fc:b4:76:eb:6a:f8:68:07:52:8c:30: 55:fa:48:60:88:27:bd:76:22:3b:e9:69:2f:f3:73: de:8b:88:13:aa:b4:e5:92:12:e4:78:d8:e8:8d:15: ee:a1:b3:98:99:63:ff:60:9d:24:e9:68:02:d4:c5: f6:f6:62:e2:35:4f:65:af:79:6f:5e:83:a3:ca:bd: ff:2f:e6:d0:e7:72:43:94:1c:6c:7f:d2:ff:50:33: d3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CB:F4:1A:71:CB:B5:D5:F4:F8:31:BC:75:B1:60:BC:B3:15:47:23 X509v3 Authority Key Identifier: keyid:4E:D0:88:7B:D3:04:E0:4C:98:FB:A5:3B:9B:9B:02:BD:E4:38:97:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/TtCIe9ME4EyY-6U7m5sCveQ4lwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TtCIe9ME4EyY-6U7m5sCveQ4lwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B46FE/9B656F8E83E511F09C771E4BC4F9AE02/24C9831E83E611F0AF39BE57C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.20.42.0/24 IPv6: 2001:df6:ec0::/48 Signature Algorithm: sha256WithRSAEncryption 9a:c4:cd:35:f4:27:8d:45:4c:07:ed:5d:2e:6d:98:0d:dd:d2: 72:f6:22:16:d6:75:8c:19:67:cc:32:5a:26:32:20:41:d2:76: 7b:fe:42:14:1e:5b:9c:80:5c:ac:bc:78:26:43:dc:e7:62:dc: cd:4f:96:7f:46:ed:f2:c5:7a:c8:f5:95:82:bf:9b:88:bb:9e: cc:32:7e:26:a8:45:5d:74:bb:ec:dd:67:9f:64:97:94:a7:51: 4e:f6:c0:1e:4e:62:72:4c:fa:8e:12:e5:07:e2:62:62:9d:cd: 2e:a2:65:de:d1:f6:d7:8a:a3:b1:11:00:fc:70:3a:9b:1b:b2: b3:e1:19:a6:69:97:88:ce:47:ab:12:c9:bd:ab:81:cf:ee:9d: 92:ed:be:9f:fc:4c:19:35:56:76:ef:e3:75:1b:6d:12:3c:1d: 3f:20:49:69:2e:cd:b0:15:b7:3e:bb:66:59:91:20:26:cc:47: ef:ce:52:76:65:91:4d:41:7f:32:04:dc:67:b8:f6:fd:e9:5d: 3a:21:2b:69:a2:55:fd:d0:b2:06:50:aa:e7:d8:a3:32:03:0a: 56:bd:de:5d:8d:ae:c6:94:cb:e4:11:fb:a5:a1:5d:fa:76:97: 9d:7a:5d:e7:d1:69:2c:c8:85:cf:e8:eb:30:2a:06:1b:94:71: 1a:bd:8c:ed -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDZGRTExMC8GA1UEBRMoNEVEMDg4N0JEMzA0RTA0Qzk4RkJBNTNCOUI5QjAyQkRF NDM4OTcwMzAeFw0yNTA4MjgwODA4MTNaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTVhOTdhLTU2YTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDT4MgLKzL8lRwHeNMueFS0tlVJV2OlVzZOJq84OULJYAwVmA6Vnh8KCcJbYhoU y2BgM9nKScrH0HMaDh9DA1JlKjsRrohVZKgIOoraSFDarsHKYZ3/3Ba4xVRy9Zn1 VYY6tXDW7UNXVBJhNajMdW+5M8F60dspLGqA0AYjkSsXzFYRq3yE1RIy2gyIQpQh SKmLyemJSKdogetBlC88smJWSMgppDn+jGT8tHbravhoB1KMMFX6SGCIJ712Ijvp aS/zc96LiBOqtOWSEuR42OiNFe6hs5iZY/9gnSTpaALUxfb2YuI1T2WveW9eg6PK vf8v5tDnckOUHGx/0v9QM9MlAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQUQ8v0GnHL tdX0+DG8dbFgvLMVRyMwHwYDVR0jBBgwFoAUTtCIe9ME4EyY+6U7m5sCveQ4lwMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0NkZFLzlCNjU2RjhFODNF NTExRjA5Qzc3MUU0QkM0RjlBRTAyL1R0Q0llOU1FNEV5WS02VTdtNXNDdmVRNGx3 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVHRDSWU5TUU0RXlZLTZVN201c0N2ZVE0bHdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDZGRS85QjY1NkY4RTgzRTUxMUYwOUM3NzFFNEJDNEY5QUUwMi8yNEM5ODMxRTgz RTYxMUYwQUYzOUJFNTdDNEY5QUUwMi5yb2EwMAYIKwYBBQUHAQcBAf8EITAfMAwE AgABMAYDBADLFCowDwQCAAIwCQMHACABDfYOwDANBgkqhkiG9w0BAQsFAAOCAQEA msTNNfQnjUVMB+1dLm2YDd3ScvYiFtZ1jBlnzDJaJjIgQdJ2e/5CFB5bnIBcrLx4 JkPc52LczU+Wf0bt8sV6yPWVgr+biLuezDJ+JqhFXXS77N1nn2SXlKdRTvbAHk5i ckz6jhLlB+JiYp3NLqJl3tH214qjsREA/HA6mxuys+EZpmmXiM5HqxLJvauBz+6d ku2+n/xMGTVWdu/jdRttEjwdPyBJaS7NsBW3PrtmWZEgJsxH785SdmWRTUF/MgTc Z7j2/eldOiEraaJV/dCyBlCq59ijMgMKVr3eXY2uxpTL5BH7paFd+naXnXpd59Fp LMiFz+jrMCoGG5RxGr2M7Q== -----END CERTIFICATE-----Generated at Fri Mar 27 01:55:33 2026 by rpki-client