$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/F9A8F3561F3D11ECB2E88C32C4F9AE02.roa File: F9A8F3561F3D11ECB2E88C32C4F9AE02.roa (raw, json) Hash identifier: nMAueD71AbMo3NTxzg/tId7Satepp1btvdBVnm0IwvU= Subject key identifier: AB:15:6C:70:B1:3C:A6:F9:A5:8F:00:CF:C2:C4:A6:D4:74:4B:CB:CB Certificate issuer: /CN=A91CB765/serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2 Certificate serial: 0588 Authority key identifier: AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/F9A8F3561F3D11ECB2E88C32C4F9AE02.roa Signing time: Wed 18 Mar 2026 23:32:07 +0000 ROA not before: Wed 18 Mar 2026 23:32:07 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 141368 IP address blocks: 203.98.226.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1416 (0x588) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB765, serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2 Validity Not Before: Mar 18 23:32:07 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69bb35f7-d864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a7:ca:48:15:41:71:03:b6:c9:a0:28:ee:4f: 61:ff:85:cc:ff:a6:68:49:90:41:05:b3:7c:b9:3f: 61:29:3d:cd:40:68:3b:df:76:f8:23:dd:27:95:95: 35:dc:d0:c3:15:67:2d:c4:73:ad:46:ee:43:21:cf: 3f:82:d1:85:6f:72:56:25:aa:5f:43:2e:3f:03:58: c8:66:db:b4:70:ec:3f:47:2f:69:7b:0f:75:85:92: 28:e4:13:99:4c:d6:db:24:65:21:59:3c:cc:87:6c: a6:e7:31:29:78:fc:65:43:7a:37:f7:9c:5a:64:9d: dc:7a:4b:eb:c8:cd:67:96:a6:bc:70:9e:22:fd:4f: cc:4d:29:64:48:be:4c:4f:eb:3f:fb:ae:5b:a3:55: 7a:9c:db:15:d0:d8:8c:86:bd:be:8a:f3:80:9b:68: 15:0c:5f:52:2b:27:b4:4d:00:6f:44:06:b2:2f:f6: 9d:cf:a1:c9:42:78:c6:e3:3d:e4:c1:bb:cb:ea:ec: 4e:2d:c0:4f:3c:05:a4:fe:32:f7:e4:26:7b:f6:30: eb:ac:35:c4:c1:bb:38:07:a7:63:bb:6f:09:30:7a: 6e:72:7e:14:18:71:15:ee:a5:1a:7b:b2:d3:3b:f2: 9d:72:36:6c:f1:f0:22:58:c1:a3:6e:33:8c:f8:57: ae:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:15:6C:70:B1:3C:A6:F9:A5:8F:00:CF:C2:C4:A6:D4:74:4B:CB:CB X509v3 Authority Key Identifier: keyid:AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/F9A8F3561F3D11ECB2E88C32C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.98.226.0/23 Signature Algorithm: sha256WithRSAEncryption 86:93:fe:c6:b3:5e:07:d4:b6:d7:4a:06:9a:30:09:ab:48:a4: c8:34:25:a6:30:b1:64:46:1f:e6:a6:64:05:f7:fa:f6:8e:10: d9:6c:b0:5b:90:d7:2e:ad:18:76:93:79:6a:2a:c0:89:1c:9d: b7:5b:5f:e7:47:0b:01:83:dd:bb:44:ac:46:76:28:93:81:90: 60:29:55:36:5a:30:74:a1:ce:2c:65:04:3d:d4:95:1a:b9:c5: ae:7d:dc:17:f9:0a:0c:20:8f:be:32:98:a9:98:14:4e:8e:3b: 83:16:99:8a:ab:6d:60:a3:8d:09:79:5a:63:48:24:fc:67:b6: ec:8e:8e:b1:84:22:fd:55:6e:a3:46:a5:a2:04:46:ae:5d:60: e0:11:33:45:5c:76:e7:25:0f:68:36:e0:ad:6e:f2:70:5d:6e: d1:27:79:f9:7c:96:b4:da:89:b0:6e:41:12:3f:86:1c:3f:1e: 74:b8:c0:65:17:d7:74:16:3c:b4:aa:ea:d5:af:62:37:be:04: 83:eb:dd:52:8a:55:87:36:8f:4e:1a:31:c5:0e:0c:01:c2:9a: a4:f1:00:7c:84:d6:2f:3e:a5:bc:e3:77:e0:a2:4f:90:90:b6: 13:66:da:63:e7:4b:e0:3f:bf:95:3a:af:4a:3c:a3:f4:af:e5: 45:29:5a:14 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I3NjUxMTAvBgNVBAUTKEFERjMxMkVBNjhCN0YwNURBNjEwMTA4MEY5ODMyMkZC RDY1OTE4QjIwHhcNMjYwMzE4MjMzMjA3WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWJiMzVmNy1kODY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqfKSBVBcQO2yaAo7k9h/4XM/6ZoSZBBBbN8uT9hKT3NQGg733b4I90nlZU1 3NDDFWctxHOtRu5DIc8/gtGFb3JWJapfQy4/A1jIZtu0cOw/Ry9pew91hZIo5BOZ TNbbJGUhWTzMh2ym5zEpePxlQ3o395xaZJ3cekvryM1nlqa8cJ4i/U/MTSlkSL5M T+s/+65bo1V6nNsV0NiMhr2+ivOAm2gVDF9SKye0TQBvRAayL/adz6HJQnjG4z3k wbvL6uxOLcBPPAWk/jL35CZ79jDrrDXEwbs4B6dju28JMHpucn4UGHEV7qUae7LT O/KdcjZs8fAiWMGjbjOM+FeuZwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKsVbHCx PKb5pY8Az8LEptR0S8vLMB8GA1UdIwQYMBaAFK3zEupot/BdphAQgPmDIvvWWRiy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjc2NS9BNERERkE5NDFG M0IxMUVDQjdEQzQ1MkZDNEY5QUUwMi9yZk1TNm1pMzhGMm1FQkNBLVlNaS05WlpH TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JmTVM2bWkzOEYybUVCQ0EtWU1pLTlaWkdMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0I3NjUvQTREREZBOTQxRjNCMTFFQ0I3REM0NTJGQzRGOUFFMDIvRjlBOEYzNTYx RjNEMTFFQ0IyRTg4QzMyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBy2LiMA0GCSqGSIb3DQEBCwUAA4IBAQCGk/7Gs14H1LbXSgaaMAmr SKTINCWmMLFkRh/mpmQF9/r2jhDZbLBbkNcurRh2k3lqKsCJHJ23W1/nRwsBg927 RKxGdiiTgZBgKVU2WjB0oc4sZQQ91JUaucWufdwX+QoMII++MpipmBROjjuDFpmK q21go40JeVpjSCT8Z7bsjo6xhCL9VW6jRqWiBEauXWDgETNFXHbnJQ9oNuCtbvJw XW7RJ3n5fJa02omwbkESP4YcPx50uMBlF9d0Fjy0qurVr2I3vgSD691SilWHNo9O GjHFDgwBwpqk8QB8hNYvPqW843fgok+QkLYTZtpj50vgP7+VOq9KPKP0r+VFKVoU -----END CERTIFICATE-----Generated at Thu Mar 26 11:09:57 2026 by rpki-client