$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/D9BE56E2927D11EFB83ACB5CC4F9AE02.roa File: D9BE56E2927D11EFB83ACB5CC4F9AE02.roa (raw, json) Hash identifier: nelUbxnLDLGVDrJHYxOmJHcdHhK23+JstFe8bl+1cNY= Subject key identifier: 2C:52:E1:F9:71:99:F4:C9:84:D9:69:3D:E0:4E:C2:7F:F9:DB:F9:75 Certificate issuer: /CN=A91C8203/serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Certificate serial: 010E Authority key identifier: 31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/D9BE56E2927D11EFB83ACB5CC4F9AE02.roa Signing time: Mon 02 Mar 2026 14:28:00 +0000 ROA not before: Sat 13 Sep 2025 06:43:12 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 14618 IP address blocks: 202.0.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8203, serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Validity Not Before: Sep 13 06:43:12 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a59e70-90b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:11:d1:b1:5c:6d:c0:34:0b:31:cc:b7:ab:1f: a4:5b:d3:ac:82:59:b1:02:71:71:d6:45:9d:ff:41: 98:95:44:e7:ae:85:6c:ef:dc:5d:ad:98:ef:36:eb: 7f:c3:9d:ed:bc:ec:cd:69:03:ba:e8:a6:26:b8:6b: 1b:65:2a:76:b5:3a:d9:8a:ac:d6:83:8d:5e:02:1e: a1:7c:a7:f5:ac:4c:ca:91:a7:53:8d:95:ea:b7:98: 28:af:2b:97:98:b9:08:6b:75:d5:80:9f:7e:39:f8: ce:60:d7:5f:61:03:b9:86:14:39:39:ba:f2:62:b3: 5f:3b:81:51:b7:01:f3:c1:73:ce:fa:a5:28:86:1c: 27:1e:84:4e:51:2c:a8:43:de:26:b4:82:9e:c5:ab: 91:59:d8:64:55:bb:0f:06:8a:39:50:3a:cd:4c:78: 35:7f:44:74:73:a9:69:24:78:93:24:23:ae:60:0d: c5:8b:87:b4:34:96:99:33:84:0f:7b:b8:b4:80:bd: 92:70:5b:aa:4d:f8:65:0c:4b:04:a2:49:80:51:73: b5:ae:5b:62:00:af:ff:6e:ce:0c:19:ee:4a:ae:e0: 7b:ed:bb:0c:7c:a8:a6:38:e2:9e:cd:80:e0:a0:33: 6e:c1:c0:20:c7:22:00:29:44:02:1e:57:79:7e:5c: dd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:52:E1:F9:71:99:F4:C9:84:D9:69:3D:E0:4E:C2:7F:F9:DB:F9:75 X509v3 Authority Key Identifier: keyid:31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/D9BE56E2927D11EFB83ACB5CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.0.70.0/24 Signature Algorithm: sha256WithRSAEncryption 71:d8:65:54:07:44:de:e3:e2:de:39:9d:c6:53:61:45:68:79: 85:83:30:31:4e:35:8d:3d:13:71:8b:a0:70:ca:87:7d:58:83: 3b:4d:86:02:e4:f3:31:7e:a7:c4:5c:74:72:81:88:45:cf:f5: 22:d4:8d:8e:94:35:60:da:52:18:81:78:93:39:f9:9b:70:37: 89:88:d9:ac:1c:e9:44:fc:84:f0:84:2b:62:0b:9f:f2:69:44: 6b:fd:52:0d:4b:2c:e0:f4:a3:aa:a1:82:93:0f:f9:ac:79:b6: 9f:d9:d0:ee:49:82:27:16:a2:e4:9a:cd:63:9b:93:19:26:77: fe:65:63:fa:15:35:5f:4f:64:92:0f:df:42:14:70:04:37:8c: c5:91:9a:a9:2e:9e:a8:59:25:a4:2a:5d:ec:ae:a4:a5:70:26: a1:7f:0e:04:1e:04:d3:81:cf:4d:90:de:6c:e0:a1:7b:88:93: aa:e2:21:81:63:a9:97:be:71:21:8f:6d:d1:22:ab:0f:04:3a: 59:f3:c6:0d:45:23:de:7c:bc:e8:f6:0a:1f:6c:21:96:59:d0: c9:ad:49:b1:8b:17:08:1d:0c:6a:48:76:cc:75:12:a3:19:28: 7e:08:6f:89:e7:8b:bc:f5:d5:e7:40:1e:6c:70:11:ff:d7:a5: bf:ca:62:8c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgyMDMxMTAvBgNVBAUTKDMxRDIxRDVDRUU1RkFDREVGM0M4QzFDODdEMEQ3Mzkx RjlGNzNBRkYwHhcNMjUwOTEzMDY0MzEyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OWU3MC05MGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxHRsVxtwDQLMcy3qx+kW9OsglmxAnFx1kWd/0GYlUTnroVs79xdrZjvNut/ w53tvOzNaQO66KYmuGsbZSp2tTrZiqzWg41eAh6hfKf1rEzKkadTjZXqt5goryuX mLkIa3XVgJ9+OfjOYNdfYQO5hhQ5ObryYrNfO4FRtwHzwXPO+qUohhwnHoROUSyo Q94mtIKexauRWdhkVbsPBoo5UDrNTHg1f0R0c6lpJHiTJCOuYA3Fi4e0NJaZM4QP e7i0gL2ScFuqTfhlDEsEokmAUXO1rltiAK//bs4MGe5KruB77bsMfKimOOKezYDg oDNuwcAgxyIAKUQCHld5flzdBQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCxS4flx mfTJhNlpPeBOwn/52/l1MB8GA1UdIwQYMBaAFDHSHVzuX6ze88jByH0Nc5H59zr/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODIwMy9CQzUxNURBQTky N0ExMUVGQjU2NDNDNEVDNEY5QUUwMi9NZElkWE81ZnJON3p5TUhJZlExemtmbjNP djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01kSWRYTzVmck43enlNSElmUTF6a2ZuM092OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzgyMDMvQkM1MTVEQUE5MjdBMTFFRkI1NjQzQzRFQzRGOUFFMDIvRDlCRTU2RTI5 MjdEMTFFRkI4M0FDQjVDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAygBGMA0GCSqGSIb3DQEBCwUAA4IBAQBx2GVUB0Te4+LeOZ3GU2FF aHmFgzAxTjWNPRNxi6Bwyod9WIM7TYYC5PMxfqfEXHRygYhFz/Ui1I2OlDVg2lIY gXiTOfmbcDeJiNmsHOlE/ITwhCtiC5/yaURr/VINSyzg9KOqoYKTD/msebaf2dDu SYInFqLkms1jm5MZJnf+ZWP6FTVfT2SSD99CFHAEN4zFkZqpLp6oWSWkKl3srqSl cCahfw4EHgTTgc9NkN5s4KF7iJOq4iGBY6mXvnEhj23RIqsPBDpZ88YNRSPefLzo 9gofbCGWWdDJrUmxixcIHQxqSHbMdRKjGSh+CG+J54u89dXnQB5scBH/16W/ymKM -----END CERTIFICATE-----Generated at Thu Mar 26 05:05:02 2026 by rpki-client