$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/1A0B540E3AA711EA83682876C4F9AE02.roa File: 1A0B540E3AA711EA83682876C4F9AE02.roa (raw, json) Hash identifier: j3+FqbIbEZA5ldhomHT9hdMFU4oqErbqw6qxTyWi9S0= Subject key identifier: 8A:35:81:FF:34:03:C7:A1:52:30:03:5F:1D:2D:75:C6:DC:AA:63:D3 Certificate issuer: /CN=A91BD9C2/serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE Certificate serial: 0BCB Authority key identifier: 6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/1A0B540E3AA711EA83682876C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:52:54 +0000 ROA not before: Thu 28 Aug 2025 19:40:22 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 38210 IP address blocks: 202.72.232.0/22 maxlen: 22 202.72.232.0/24 maxlen: 24 202.72.233.0/24 maxlen: 24 202.72.234.0/24 maxlen: 24 202.72.235.0/24 maxlen: 24 202.72.236.0/22 maxlen: 22 202.72.236.0/24 maxlen: 24 202.72.237.0/24 maxlen: 24 202.72.238.0/24 maxlen: 24 202.72.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:44:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3019 (0xbcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD9C2, serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE Validity Not Before: Aug 28 19:40:22 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a59636-f896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4f:53:36:5f:6f:74:e2:9d:a9:95:a9:99:2e: 12:69:92:e2:b5:a6:26:c3:e9:d5:80:9d:73:60:d0: 86:c2:23:16:e3:7f:12:6b:1d:c8:88:5e:1b:90:de: e7:40:80:0e:2f:48:a1:70:76:20:2e:f9:b7:c3:95: cd:1a:c5:64:9b:98:ab:5f:01:39:19:3e:65:c2:da: 08:38:e3:0f:52:0e:95:21:b7:a9:77:e8:05:5a:59: 42:23:75:0a:c0:f6:c1:64:da:66:40:df:2f:86:06: c1:b8:01:12:6c:c7:37:49:6d:05:f6:df:26:67:97: 8f:d1:ec:15:61:c0:dd:98:a5:56:33:fe:3d:63:4d: 69:ce:56:15:49:4c:a6:2c:9f:6c:66:10:fe:6c:7d: 46:91:7f:44:fd:b5:77:7f:d2:99:77:d0:88:43:2d: da:9e:23:db:d3:12:60:22:a1:f6:ea:80:1d:09:ba: 2f:7a:0f:79:cc:4a:b1:53:60:f1:dd:a4:5c:c2:df: bd:ab:a2:39:e6:95:16:11:02:b3:41:ca:ff:4e:e4: ae:ac:8f:be:fd:cb:ce:f6:05:f8:06:e2:89:5f:b0: 96:e1:56:4a:e2:1a:0b:e6:45:23:2d:ff:18:78:82: 41:72:0e:21:6f:1e:79:67:ac:5d:b3:cc:88:c2:9d: dd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:35:81:FF:34:03:C7:A1:52:30:03:5F:1D:2D:75:C6:DC:AA:63:D3 X509v3 Authority Key Identifier: keyid:6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/1A0B540E3AA711EA83682876C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.72.232.0/21 Signature Algorithm: sha256WithRSAEncryption b3:2c:73:d0:b8:bc:86:96:ce:1c:e5:73:f6:3b:ae:7a:0d:70: 33:4c:32:14:95:33:10:1b:80:e3:c9:02:d4:64:74:d0:bb:a9: c0:4d:1f:81:06:bf:d8:f2:be:a6:9c:f7:03:85:1a:77:65:30: 5f:c3:9c:9d:bb:78:b8:98:c5:ff:c4:a2:aa:fe:35:86:b0:c8: 91:83:97:65:3e:87:74:6c:0e:e1:37:48:e0:bb:74:a8:70:a6: 0a:92:05:bf:f6:ac:5c:25:ff:f9:3d:d2:5e:f0:71:65:73:64: e8:b9:cc:ce:5a:fd:c6:e6:fb:ec:39:b3:33:d6:5c:9b:7a:4d: f6:82:4d:48:a5:a3:32:ce:fe:9b:11:02:56:5a:30:82:9a:08: 8c:73:10:c4:4c:19:76:df:90:1f:05:d4:48:b1:d1:2d:7a:cd: fc:cf:4a:0b:d4:94:36:68:b0:9e:89:e8:92:de:2b:e9:26:e3: 7f:10:2f:ee:b6:24:ff:ff:ad:96:7a:a3:53:02:5d:61:63:fd: 7c:48:b2:2b:b0:a5:60:8f:12:4e:31:98:eb:df:66:ea:42:4a: 94:44:da:44:58:0e:0c:cf:60:69:d2:6f:9f:37:cd:d0:1b:cf: 78:25:f2:8d:ea:21:d2:f6:f7:e7:28:54:fb:e4:a0:61:c0:4c: 3e:42:dd:89 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICC8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ5QzIxMTAvBgNVBAUTKDZGOUFDMDRDRTVBQzcxQTdDMkI3QUZCMUE1NTcyN0Ex MEU1QjA2RUUwHhcNMjUwODI4MTk0MDIyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTYzNi1mODk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmk9TNl9vdOKdqZWpmS4SaZLitaYmw+nVgJ1zYNCGwiMW438Sax3IiF4bkN7n QIAOL0ihcHYgLvm3w5XNGsVkm5irXwE5GT5lwtoIOOMPUg6VIbepd+gFWllCI3UK wPbBZNpmQN8vhgbBuAESbMc3SW0F9t8mZ5eP0ewVYcDdmKVWM/49Y01pzlYVSUym LJ9sZhD+bH1GkX9E/bV3f9KZd9CIQy3aniPb0xJgIqH26oAdCboveg95zEqxU2Dx 3aRcwt+9q6I55pUWEQKzQcr/TuSurI++/cvO9gX4BuKJX7CW4VZK4hoL5kUjLf8Y eIJBcg4hbx55Z6xds8yIwp3dowIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIo1gf80 A8ehUjADXx0tdcbcqmPTMB8GA1UdIwQYMBaAFG+awEzlrHGnwrevsaVXJ6EOWwbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDlDMi9BQjBERjRGMjNB QTIxMUVBQTc5RTZBNjlDNEY5QUUwMi9iNXJBVE9Xc2NhZkN0Ni14cFZjbm9RNWJC dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I1ckFUT1dzY2FmQ3Q2LXhwVmNub1E1YkJ1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkQ5QzIvQUIwREY0RjIzQUEyMTFFQUE3OUU2QTY5QzRGOUFFMDIvMUEwQjU0MEUz QUE3MTFFQTgzNjgyODc2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDykjoMA0GCSqGSIb3DQEBCwUAA4IBAQCzLHPQuLyGls4c5XP2O656 DXAzTDIUlTMQG4DjyQLUZHTQu6nATR+BBr/Y8r6mnPcDhRp3ZTBfw5ydu3i4mMX/ xKKq/jWGsMiRg5dlPod0bA7hN0jgu3SocKYKkgW/9qxcJf/5PdJe8HFlc2TouczO Wv3G5vvsObMz1lybek32gk1IpaMyzv6bEQJWWjCCmgiMcxDETBl235AfBdRIsdEt es38z0oL1JQ2aLCeieiS3ivpJuN/EC/utiT//62WeqNTAl1hY/18SLIrsKVgjxJO MZjr32bqQkqURNpEWA4Mz2Bp0m+fN83QG894JfKN6iHS9vfnKFT75KBhwEw+Qt2J -----END CERTIFICATE-----Generated at Thu Mar 26 07:31:42 2026 by rpki-client