$ rpki-client -vvf rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/3FEFA562483D11EC82E81112C4F9AE02.roa File: 3FEFA562483D11EC82E81112C4F9AE02.roa (raw, json) Hash identifier: bRLxY+etXNXqCv4S4DMqEKntfbe88KxPJAJyBTa11rQ= Subject key identifier: DB:9C:8D:BE:71:27:B2:CA:1D:35:59:A6:42:86:86:E5:6F:8A:6F:E5 Certificate issuer: /CN=A91C65E8/serialNumber=BCDCE8B06F05962340300C9C4747B5A251A219C4 Certificate serial: 3534 Authority key identifier: BC:DC:E8:B0:6F:05:96:23:40:30:0C:9C:47:47:B5:A2:51:A2:19:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNzosG8FliNAMAycR0e1olGiGcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/3FEFA562483D11EC82E81112C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:24:00 +0000 ROA not before: Thu 30 Jan 2025 15:01:00 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 45344 IP address blocks: 210.48.216.0/24 maxlen: 24 210.48.217.0/24 maxlen: 24 210.48.218.0/24 maxlen: 24 210.48.219.0/24 maxlen: 24 210.48.220.0/24 maxlen: 24 210.48.221.0/24 maxlen: 24 210.48.222.0/24 maxlen: 24 210.48.223.0/24 maxlen: 24 2001:df0:18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.crl rsync://rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNzosG8FliNAMAycR0e1olGiGcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:56:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13620 (0x3534) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C65E8, serialNumber=BCDCE8B06F05962340300C9C4747B5A251A219C4 Validity Not Before: Jan 30 15:01:00 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a421d0-7b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fd:04:bd:e6:ec:4a:6f:98:31:92:92:73:16: aa:48:02:0e:d1:a2:0b:d4:a0:cd:7d:9d:1f:fc:d2: 39:48:e0:ae:b0:88:0d:95:c1:3b:db:e9:81:0e:8f: ce:74:48:46:f5:f9:2e:17:02:f5:1f:ed:1d:e3:73: e9:c5:df:72:02:4b:27:22:8f:79:5c:85:d5:86:ff: 8e:d7:6f:ac:31:aa:36:2f:eb:cd:cc:61:c7:89:45: d0:40:1c:e4:34:f6:a0:a0:3b:8d:87:90:7b:8e:4f: 6a:dc:b6:71:11:5d:1d:29:04:5c:be:58:ba:3a:ff: b3:76:29:bc:bf:bc:e2:03:4a:d9:51:83:8a:76:15: 6e:c6:50:95:5b:b8:a3:14:1f:c7:98:ae:32:7f:b9: ca:80:50:d5:e2:67:95:7d:a7:21:06:33:30:11:73: d9:8e:54:f3:b7:ab:e8:68:f2:1e:15:96:6d:89:8f: 4c:9f:a2:6f:21:df:89:1b:4a:87:6b:ed:54:67:78: c0:32:fc:0d:5d:74:bc:51:0e:ca:7c:e3:5b:bc:01: 3e:0c:e6:37:a1:a4:2c:ff:7c:bc:bf:d7:1f:4f:71: 32:a7:4e:cc:d7:49:f1:06:36:5c:42:f7:c9:7b:a0: 86:0c:34:d2:b6:8d:1b:f9:7b:e3:72:e7:b6:a6:17: 6a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:9C:8D:BE:71:27:B2:CA:1D:35:59:A6:42:86:86:E5:6F:8A:6F:E5 X509v3 Authority Key Identifier: keyid:BC:DC:E8:B0:6F:05:96:23:40:30:0C:9C:47:47:B5:A2:51:A2:19:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNzosG8FliNAMAycR0e1olGiGcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/3FEFA562483D11EC82E81112C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 210.48.216.0/21 IPv6: 2001:df0:18::/48 Signature Algorithm: sha256WithRSAEncryption 6b:ae:22:39:58:00:e1:03:a8:9a:e1:18:96:4c:1a:a7:a8:1c: 09:c5:d7:11:2c:a5:b6:61:84:4d:91:5a:4d:f1:fe:e8:ba:87: b4:98:94:e5:8c:8d:41:01:1d:21:58:30:c9:a5:f3:9b:4a:95: ab:a4:b4:40:76:cf:37:5f:33:24:bd:2d:72:c6:c2:18:0d:4f: f4:ff:69:f0:01:5f:a3:8a:b2:88:e9:bf:0e:07:ac:6f:c8:b3: 46:23:95:51:5a:2e:0d:9a:8f:08:92:86:d2:63:d2:92:74:60: 23:35:8e:c2:78:7a:14:bc:22:36:e4:8b:5a:11:0a:76:0d:55: 42:16:68:d9:b5:19:be:80:0b:36:33:6b:ad:73:2c:4b:5c:bd: d9:94:7f:e0:7c:65:e8:fb:9b:df:06:52:f5:2b:a5:f0:09:0d: 27:0d:19:fd:06:52:be:47:ea:ab:16:ae:bd:5b:59:74:10:45: 1f:43:57:8a:b6:25:7c:bb:81:1b:82:45:ce:c8:e0:ff:d7:60: 8d:6f:e6:43:3d:20:44:d5:e8:b7:e1:dd:8a:36:a0:e3:dd:11: b0:f2:a2:6e:f4:2f:31:27:6d:dd:9a:a0:a9:33:04:f0:03:1b: 06:4e:fe:d1:7b:06:74:2f:fc:6c:1c:5c:e0:7c:50:02:c2:df: 7c:f8:d0:31 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICNTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY1RTgxMTAvBgNVBAUTKEJDRENFOEIwNkYwNTk2MjM0MDMwMEM5QzQ3NDdCNUEy NTFBMjE5QzQwHhcNMjUwMTMwMTUwMTAwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjFkMC03YjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0P0EvebsSm+YMZKScxaqSAIO0aIL1KDNfZ0f/NI5SOCusIgNlcE72+mBDo/O dEhG9fkuFwL1H+0d43Ppxd9yAksnIo95XIXVhv+O12+sMao2L+vNzGHHiUXQQBzk NPagoDuNh5B7jk9q3LZxEV0dKQRcvli6Ov+zdim8v7ziA0rZUYOKdhVuxlCVW7ij FB/HmK4yf7nKgFDV4meVfachBjMwEXPZjlTzt6voaPIeFZZtiY9Mn6JvId+JG0qH a+1UZ3jAMvwNXXS8UQ7KfONbvAE+DOY3oaQs/3y8v9cfT3Eyp07M10nxBjZcQvfJ e6CGDDTSto0b+Xvjcue2phdqcwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFNucjb5x J7LKHTVZpkKGhuVvim/lMB8GA1UdIwQYMBaAFLzc6LBvBZYjQDAMnEdHtaJRohnE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjVFOC9BMUYyM0E2NDFE OTkxMUUyOTVFQjUyODYwOEIwMkNEMi92Tnpvc0c4RmxpTkFNQXljUjBlMW9sR2lH Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZOem9zRzhGbGlOQU1BeWNSMGUxb2xHaUdjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzY1RTgvQTFGMjNBNjQxRDk5MTFFMjk1RUI1Mjg2MDhCMDJDRDIvM0ZFRkE1NjI0 ODNEMTFFQzgyRTgxMTEyQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQD0jDYMA8EAgACMAkDBwAgAQ3wABgwDQYJKoZIhvcNAQELBQADggEB AGuuIjlYAOEDqJrhGJZMGqeoHAnF1xEspbZhhE2RWk3x/ui6h7SYlOWMjUEBHSFY MMml85tKlauktEB2zzdfMyS9LXLGwhgNT/T/afABX6OKsojpvw4HrG/Is0YjlVFa Lg2ajwiShtJj0pJ0YCM1jsJ4ehS8Ijbki1oRCnYNVUIWaNm1Gb6ACzYza61zLEtc vdmUf+B8Zej7m98GUvUrpfAJDScNGf0GUr5H6qsWrr1bWXQQRR9DV4q2JXy7gRuC Rc7I4P/XYI1v5kM9IETV6Lfh3Yo2oOPdEbDyom70LzEnbd2aoKkzBPADGwZO/tF7 BnQv/GwcXOB8UALC33z40DE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:47:27 2026 by rpki-client