$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/E66070EE36F911F0B0111510C4F9AE02.roa File: E66070EE36F911F0B0111510C4F9AE02.roa (raw, json) Hash identifier: KwF38ZBP8Utf4qS1kbQsJebYoDtue89xp1vHyUdKSU0= Subject key identifier: 8D:DB:23:96:C1:F9:B1:2D:6A:98:98:DF:B2:FF:F1:18:8E:4F:F3:A6 Certificate issuer: /CN=A91CB765/serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2 Certificate serial: 0589 Authority key identifier: AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/E66070EE36F911F0B0111510C4F9AE02.roa Signing time: Wed 18 Mar 2026 23:32:09 +0000 ROA not before: Wed 18 Mar 2026 23:32:09 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 55722 IP address blocks: 203.98.224.0/19 maxlen: 20 203.98.224.0/23 maxlen: 23 2403:f600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1417 (0x589) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB765, serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2 Validity Not Before: Mar 18 23:32:09 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69bb35f9-cb0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b1:e6:e2:1f:47:51:4e:55:5b:b8:61:4a:14: be:20:87:01:9e:ae:00:4d:bd:6c:ff:ea:a7:3d:65: 27:03:c7:d6:91:75:f7:42:0c:e0:98:37:7e:9a:32: 24:d8:e4:83:a8:3a:98:a5:27:17:7e:70:d4:60:a5: 75:89:f9:33:5f:13:71:38:43:fb:4c:38:4b:2f:36: 0c:ed:54:15:91:ec:ee:15:c0:4a:06:d5:08:33:0f: e4:1e:d3:82:d1:7f:56:93:6d:17:c8:23:39:ab:30: c5:29:f8:a1:1b:da:75:3b:95:7f:28:21:1d:1e:9c: 4c:f5:80:f1:9a:23:30:6c:fc:db:a7:20:c9:12:a4: f0:c7:f6:b9:28:df:dc:cf:ec:9d:2b:13:cd:22:01: a2:06:07:ac:48:0a:60:b0:60:9d:58:97:c9:42:ec: 26:c3:a8:d5:42:89:b6:a0:46:4e:23:b1:05:0b:6f: 8f:67:49:51:3a:67:e3:99:19:1d:8a:2f:cc:9e:51: 6c:49:b8:73:fb:a2:01:04:23:ec:7c:4c:09:43:f0: 9b:e4:c0:64:51:66:4b:a0:81:77:3b:34:ef:29:58: eb:1b:10:d0:d0:bd:d9:cb:d6:c4:fd:43:e7:6e:0c: 31:86:f2:08:46:41:63:3f:49:89:e5:40:f2:70:8b: 51:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:DB:23:96:C1:F9:B1:2D:6A:98:98:DF:B2:FF:F1:18:8E:4F:F3:A6 X509v3 Authority Key Identifier: keyid:AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/E66070EE36F911F0B0111510C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.98.224.0/19 IPv6: 2403:f600::/32 Signature Algorithm: sha256WithRSAEncryption 2b:05:f4:f6:57:f6:cd:f8:b3:a7:3d:8b:f2:7a:93:96:11:de: 2e:2b:be:35:0e:0d:d7:db:3f:29:32:d2:3b:69:b6:d5:b1:c4: f1:e2:26:e4:c9:29:03:40:62:7b:87:c0:5b:92:37:fc:ba:5d: 2b:40:4d:3b:69:23:cc:ef:63:f9:22:22:dd:dc:14:2c:f7:cb: 4a:af:ea:1f:f3:d9:3a:1c:66:ae:4f:cd:5d:70:89:50:c9:62: 38:3a:ae:74:53:e9:f7:fb:3c:11:49:3a:63:17:7a:f1:87:49: 2e:2b:40:0f:76:25:a6:e8:be:aa:9d:43:eb:e1:8c:96:f8:48: 7b:24:e1:56:e8:82:e9:5b:cc:ea:88:05:87:23:45:c1:2e:c1: 5f:a2:59:40:4f:06:81:48:f7:53:c9:5a:5d:9f:82:83:77:6e: 90:d8:12:dc:f4:dd:11:2d:1a:d6:34:3a:a4:1f:b1:9c:7f:44: 98:c4:5c:7c:07:cd:16:6f:59:03:9f:77:06:47:d6:97:ec:e7: 42:6d:9e:ec:ab:c6:65:b9:5c:7a:c6:bc:24:54:6b:b9:b2:c7: 51:c9:13:6a:58:65:c2:bb:98:cb:dd:b5:de:70:2e:33:65:54: dc:33:f6:3f:95:98:12:4f:ba:b4:41:e8:71:f5:de:9e:a0:a9: b3:e3:39:a5 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I3NjUxMTAvBgNVBAUTKEFERjMxMkVBNjhCN0YwNURBNjEwMTA4MEY5ODMyMkZC RDY1OTE4QjIwHhcNMjYwMzE4MjMzMjA5WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWJiMzVmOS1jYjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoLHm4h9HUU5VW7hhShS+IIcBnq4ATb1s/+qnPWUnA8fWkXX3QgzgmDd+mjIk 2OSDqDqYpScXfnDUYKV1ifkzXxNxOEP7TDhLLzYM7VQVkezuFcBKBtUIMw/kHtOC 0X9Wk20XyCM5qzDFKfihG9p1O5V/KCEdHpxM9YDxmiMwbPzbpyDJEqTwx/a5KN/c z+ydKxPNIgGiBgesSApgsGCdWJfJQuwmw6jVQom2oEZOI7EFC2+PZ0lROmfjmRkd ii/MnlFsSbhz+6IBBCPsfEwJQ/Cb5MBkUWZLoIF3OzTvKVjrGxDQ0L3Zy9bE/UPn bgwxhvIIRkFjP0mJ5UDycItRnQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFI3bI5bB +bEtapiY37L/8RiOT/OmMB8GA1UdIwQYMBaAFK3zEupot/BdphAQgPmDIvvWWRiy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjc2NS9BNERERkE5NDFG M0IxMUVDQjdEQzQ1MkZDNEY5QUUwMi9yZk1TNm1pMzhGMm1FQkNBLVlNaS05WlpH TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JmTVM2bWkzOEYybUVCQ0EtWU1pLTlaWkdMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0I3NjUvQTREREZBOTQxRjNCMTFFQ0I3REM0NTJGQzRGOUFFMDIvRTY2MDcwRUUz NkY5MTFGMEIwMTExNTEwQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQFy2LgMA0EAgACMAcDBQAkA/YAMA0GCSqGSIb3DQEBCwUAA4IBAQAr BfT2V/bN+LOnPYvyepOWEd4uK741Dg3X2z8pMtI7abbVscTx4ibkySkDQGJ7h8Bb kjf8ul0rQE07aSPM72P5IiLd3BQs98tKr+of89k6HGauT81dcIlQyWI4Oq50U+n3 +zwRSTpjF3rxh0kuK0APdiWm6L6qnUPr4YyW+Eh7JOFW6ILpW8zqiAWHI0XBLsFf ollATwaBSPdTyVpdn4KDd26Q2BLc9N0RLRrWNDqkH7Gcf0SYxFx8B80Wb1kDn3cG R9aX7OdCbZ7sq8ZluVx6xrwkVGu5ssdRyRNqWGXCu5jL3bXecC4zZVTcM/Y/lZgS T7q0Qehx9d6eoKmz4zml -----END CERTIFICATE-----Generated at Thu Mar 26 12:39:12 2026 by rpki-client