$ rpki-client -vvf rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/61883292ADA511EDB2C68947C4F9AE02.roa File: 61883292ADA511EDB2C68947C4F9AE02.roa (raw, json) Hash identifier: tNl21coa/EGZ4GFdwnMPQbUa31C+8/iiCs/PaUbI1YA= Subject key identifier: CD:16:82:10:6D:3B:91:2E:B3:D2:EB:BF:C6:43:B3:A0:7D:9C:4E:C5 Certificate issuer: /CN=A91B834D/serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0 Certificate serial: 024D Authority key identifier: D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/61883292ADA511EDB2C68947C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:58:30 +0000 ROA not before: Wed 11 Feb 2026 02:22:06 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 133480 IP address blocks: 203.17.122.0/24 maxlen: 24 203.18.16.0/24 maxlen: 24 203.18.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 589 (0x24d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B834D, serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0 Validity Not Before: Feb 11 02:22:06 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a437f5-70a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bb:56:01:aa:5a:e0:ea:70:9a:e9:e0:d1:11: d8:5a:75:33:a5:3a:a3:7d:dd:43:77:96:b3:8d:4c: 81:a7:71:c9:f8:ef:ab:ad:03:a9:bd:cb:41:28:9e: 00:a9:75:15:53:53:94:3a:24:8c:b2:f1:a8:74:f8: 41:88:b9:e7:21:e6:0a:0e:be:c5:11:0a:75:54:a6: 60:ff:03:61:3b:61:14:ab:27:7c:14:cc:b9:fd:c5: 66:11:32:96:78:4e:85:5f:39:9a:3e:e3:87:66:e8: b5:11:a5:4b:48:d2:66:35:b7:73:da:ec:f3:78:14: 77:85:75:17:19:cb:b7:db:6d:1f:7c:a0:d1:a1:94: 3c:ba:e4:71:0c:1e:d6:8b:f8:75:f6:ff:47:0a:71: a6:36:31:cc:cb:16:17:d9:3c:bc:ce:57:cb:c3:43: 7f:db:48:f6:12:24:fd:2a:cd:12:04:66:47:3a:14: 15:3a:6a:16:dd:7c:70:73:9d:ed:41:61:7e:01:33: 16:92:c9:49:77:7b:c5:e1:ca:1f:96:12:09:ab:75: 6c:09:b3:12:2c:e0:20:10:80:4c:9f:2f:a9:e3:34: 83:28:6f:79:cf:77:41:cb:e7:a0:4a:14:4f:69:d9: 59:7f:24:85:ba:58:df:4b:c0:79:ab:a1:2e:85:11: e7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:16:82:10:6D:3B:91:2E:B3:D2:EB:BF:C6:43:B3:A0:7D:9C:4E:C5 X509v3 Authority Key Identifier: keyid:D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/61883292ADA511EDB2C68947C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.17.122.0/24 203.18.16.0/23 Signature Algorithm: sha256WithRSAEncryption a7:ce:99:fc:84:e9:7c:87:8a:0f:af:4e:a7:98:d8:11:e0:1d: 7f:56:dd:b0:21:45:a4:0a:28:a5:e8:f7:a1:5d:42:ba:d3:42: bf:91:90:00:ff:03:64:3b:89:84:1a:f2:69:21:3c:ac:48:18: 6f:96:5d:28:d3:1a:fe:d1:1a:e0:4c:cd:81:8a:de:a6:f4:0c: 8c:53:e2:4d:16:86:79:99:1f:db:18:51:a2:63:b4:82:c2:f1: 61:0a:ea:26:ce:49:f6:6e:16:df:18:0f:38:0c:9e:ec:a4:39: 7e:6e:61:3c:a6:0e:27:5a:77:8e:29:b6:39:a7:fe:0b:af:9f: 15:52:75:12:e2:e3:03:9b:be:a9:7d:b0:15:f5:d5:40:27:df: db:76:74:2b:e4:95:8a:ce:c7:8a:9f:c5:d5:cd:cc:0b:df:c5: ea:b0:1e:50:1a:2a:ee:e0:08:c9:9c:05:98:f0:14:3b:d0:ab: 77:d4:9d:bc:ac:80:4f:e0:88:fa:a6:d2:43:c3:42:c5:3f:52: 80:10:ed:1c:16:f9:10:bb:1a:55:6e:33:4f:00:a5:20:8b:1b: e2:27:b7:09:50:c3:fc:0c:f0:70:5f:71:d1:a2:f8:8d:22:b3: 34:e0:2c:35:da:5a:de:5d:b2:36:bf:f8:90:e5:fc:56:7d:65: de:69:11:3a -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgzNEQxMTAvBgNVBAUTKEQwRTU0NDA1QjAzRDNEMTIzNDU5REUwMUJCNDAwRjRE N0E4MzI5RDAwHhcNMjYwMjExMDIyMjA2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzdmNS03MGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLtWAapa4Opwmung0RHYWnUzpTqjfd1Dd5azjUyBp3HJ+O+rrQOpvctBKJ4A qXUVU1OUOiSMsvGodPhBiLnnIeYKDr7FEQp1VKZg/wNhO2EUqyd8FMy5/cVmETKW eE6FXzmaPuOHZui1EaVLSNJmNbdz2uzzeBR3hXUXGcu3220ffKDRoZQ8uuRxDB7W i/h19v9HCnGmNjHMyxYX2Ty8zlfLw0N/20j2EiT9Ks0SBGZHOhQVOmoW3Xxwc53t QWF+ATMWkslJd3vF4coflhIJq3VsCbMSLOAgEIBMny+p4zSDKG95z3dBy+egShRP adlZfySFuljfS8B5q6EuhRHn6wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFM0WghBt O5Eus9Lrv8ZDs6B9nE7FMB8GA1UdIwQYMBaAFNDlRAWwPT0SNFneAbtAD016gynQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODM0RC8zQTJDNTE5NkFE QTExMUVEQUI2REY0MkRDNEY5QUUwMi8wT1ZFQmJBOVBSSTBXZDRCdTBBUFRYcURL ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBPVkVCYkE5UFJJMFdkNEJ1MEFQVFhxREtkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjgzNEQvM0EyQzUxOTZBREExMTFFREFCNkRGNDJEQzRGOUFFMDIvNjE4ODMyOTJB REE1MTFFREIyQzY4OTQ3QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAyxF6AwQByxIQMA0GCSqGSIb3DQEBCwUAA4IBAQCnzpn8hOl8h4oP r06nmNgR4B1/Vt2wIUWkCiil6PehXUK600K/kZAA/wNkO4mEGvJpITysSBhvll0o 0xr+0RrgTM2Bit6m9AyMU+JNFoZ5mR/bGFGiY7SCwvFhCuomzkn2bhbfGA84DJ7s pDl+bmE8pg4nWneOKbY5p/4Lr58VUnUS4uMDm76pfbAV9dVAJ9/bdnQr5JWKzseK n8XVzcwL38XqsB5QGiru4AjJnAWY8BQ70Kt31J28rIBP4Ij6ptJDw0LFP1KAEO0c FvkQuxpVbjNPAKUgixviJ7cJUMP8DPBwX3HRoviNIrM04Cw12lreXbI2v/iQ5fxW fWXeaRE6 -----END CERTIFICATE-----Generated at Thu Mar 26 05:33:48 2026 by rpki-client